last executing test programs:

11m40.031990131s ago: executing program 32 (id=2596):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x810, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x7, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080)
sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

10m42.110820559s ago: executing program 33 (id=2975):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x37, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x10, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x3, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x6, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f00000037c0))
fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x0, 0x1, 0x10000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2})
fcntl$lock(r6, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2410084c, &(0x7f00000007c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26309bde6e698d72a15ec808a86c25dc9e0411a6ccff2071d50004f617f44aaabde34a0b51a8a20596ff0aee07236d3c2349695397a29fafb15e0f55442f5174792ff725832566e121f38ede6f6bd73786f2b5dfab3c5e6f928"], 0x81, 0x14f2, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXJOksM0Jo3z+ZBz0uSTJklCQsL6X6q9fd/u+7a9/9/3/9vXnvt3Xeuybs9z3+9ac88173re65r5vseoOs3r1mxCROKfAr//kyKEiBFCDBNC3CCECIQQ5ePLx1++nk9Byj/3Iuxfq+mca70Cdi1x/3M37n/uxv3P3bj/uRv3P3fj/udu3P/cjfvPWG62fW6RG3nk3sGf/+dm/P7/v0hOmclfbyxzc8//Rgr3P3fj/udu3P/cjfufu3H/czfu//9+Nf6Ta9z/3I37z1hudq0/f+Zxbce1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaCHEv83/YcKvV7uBMcYYY4wxxhhj/9P4vNd6BYwxxhhjjDHGGPt/D4QUSmgRiDwir4gR+USsuE7EietFfnGDiIgbRby4SRQQN4uCopAoLIqIBFFUFBNGoLCCRCiKixIiKm4RJcWtIlGUEqXFbcKJMiJJ3C7KijtEOXGnKC/uEhXE3aKiqCQqiyriHlFVVBPVRQ1RU9wraonaoo6oK+4T9cT9or54QDQQD4qG4iHRSDwsGotHRBPRVDQTj4rm4jHRQjwuWopWorVoI9r+X+W/LPqIV0Rf0U+kiP5igBgoBonBYogYKoaJV8Vw8ZoYIV4XqWKkGCXeEKPFm2KMeEuMFePEePG2mCAmiklispgipoo08Y6YJt4V08V7YoaYKWaJ2WKOmCvmiffFfPGBWCA+FAvFR2KRWCyWiKUiXXwsMsQykSk+EcvFpyJLrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXXwmdoidYpfYLfaIvWKf+FzsF1+IA+JLkS2++m/mn/0P+T1BgAAJEjRoyAN5IAZiIBZiIQ7iID/khwhEIB7ioQAUgIJQEApDYUiABCgGxQABgYCgOBSHKEShJJSEREiE0lAaHDhIgiQoC3dAOSgH5aE8VIAKUBEqQSWoAlWgKlSF6lAdakJNqAW1oA7UgfvgPrgf6kN9aAANoCE0hEbQCBpDY2gCTaAZNIPm0BxaQAtoCS2hNbSGttAW2kE7aA/toSN0hE7QCTpDZ0iGZOgCXaArdIVu0A26Q3foAT2gJ/SCXvAyvAyvwCvQD2rJ/jAABsAgGARDYCgMhVdhOLwGr8HrkAojYRS8AW/AmzAGzsBYGAfjYTxUlRNhEkyGGDkV0iANpsE0mA7TYQbMhJkwG+bAXJgH82A+fAAfwIewED6Cj2AxLIalkA7pkAHLIBMyYTmchSxYASthFayGNbAa1sF6WAcbYRNshC2wBbbBNvgMPoOdsBN2w27YC3vhc/gcvoAvIBWyIRsOwkE4BIfgMByGHMiBI3AEjsJROAbH4DgchxNwEk7BSTgNp+EMnIVzcA7Ow3m4AC8mfNtsb6kNqUJepqWWeWQeGSNjZKyMlXEyTuaX+WVERmS8jJcFZAFZUBaUhWVhmSATZDFZTKJESTKUxWVxGZVRWVKWlIkyUZaWpaWTTibJJFlWlpXlZDlZXt4lK8i7ZUVZSXZwVWQVWVV2dNVlDVlT1pS1ZG1ZR9aVdWU9WU/Wl/VlA9lANpQNZSP5sGws+8MQaCovd6a5HAkt5ChoKVvJ1rKNfBOekO3kGGgvO8iO8ik5DsZCZ9nOJctnZRc5CbrK5+VkeEF2l1Ohh3xJ9pS9ZG/5suwj27u+sp+cAf3lADkbBsnBcogcKudDbXm5Y3Xk6zJVjpSj5BtyKbwpx8i35Fg5To6Xb8sJcqKcJCfLKXKqTJPvyGnyXTldvidnyJlylpwt5+QVQsj35Xz5gVwgP5QL5UdykVwsl8ilMl1+LDPkMpkpP5HL5acyS66QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2uV1+JnfInXKX3C33yL1yn/xc7pdfyAPyS5ktv5IH5V/kIfm1PCy/kTnyW3lEfiePyu/lMfmDPC5/lCfkSXlK/iRPy5/lGXlWnpO/yPPyV3lBXpSXpJdCgZJKKa0ClUflVTEqn4pV16k4db3Kr25QEXWjilc3qQLqZlVQFVKFVRGVoIqqYsooVFaRClVxVUJF1S2qpLpVJapSqrS6TTlVRiWp21VZdYcqp+5U5dVdqoK6W1VUlVRlVUXdo6qqaqq6qqFqqntVLVVb1VF11X2qnrpf1VcPqAbqQdVQPaQaqYdVY/WIaqKaqmbqUdVcPaZaqMdVS9VKtVZtVFv1hGqnnlTtVQfVUT2lOqmnVWf1jEpWz6ou6jnVVT2vuqkXVHf1ouqhXlI9VS/VW11Ul5RXfVU/laL6qwFqoBqkBqshaqgapl5Vw9VraoR6XaWqkWqUekONVm+qMeotNVaNU+PV22qCmqgmqclqipqq0tQ7app6V01X76kZaqaapWarOWquGvJHpQX/hfx3/07+iN9efZvarj5TO9ROtUvtVnvUXrVP7VP71X51QB1Q2SpbHVQH1SF1SB1Wh1WOylFH1BF1VB1Vx9QxdVwdVyfUSfWL+kmdVj+rM+qsOqt+UefVeXXhj6+B0KClVlrrQOfReXWMzqdj9XU6Tl+v8+sbdETfqOP1TbqAvlkX1IV0YV1EJ+iiupg2GrXVpENdXJfQUX2LLqlv1Ym6lC6tb9NOl9FJ+vZ/Ov9q62ur2+p2up1ur9vrjrqj7qQ76c66s07WybqL7qK76q66m+6mu+vuuofuoXvqnrq37q376D66r+6rU3SKHqAH6kF6sB6ih+ph+lU9XA/XI/QInapT9Sg9So/Wo/UYPUaP1WP1eD1eT9AT9CQ9SU/RU3SaTtPT9DQ9XU/XM/QMPUvP0nP0HD1Pz9Pz9Xy9QC/QC/VCvUgv0kv0Ep2u03WGztCZOlMv18t1ll6hV+hVepVeo9fodXqd3qA36E16k96it+gsvV1v1zv0Dr1L79J79B69T+/T+/V+fUAf0Nk6Wx/UB/UhfUgf1od1js7RR/QRfVQf1cf0MX1cH9cn9Al9Sp/Sp/VpfUaf0ef0OX1en9cX9AV9SV+6fOwLZCADHeggT5AniAligtggNogL4oL8Qf4gEkSC+CA+KBDcHBQMCgWFgyJBQlA0KBaYAAMbUBAGxYMSQTS4JSgZ3BokBqWC0sFtgQvKBEnB7UHZ4I6gXHBnUD64K6gQ3B1UDCoFlYMqwT1B1aBaUD2oEdQM7g1qBbWDOkHd4L6gXnB/UD94IGgQPBg0DB4KGgUPB42DR4ImQdOgWfBo0Dx4LGgRPB60DFoFrYM2Qdt/aX3vzxR60vU1/UyK6W8GmIFmkBlshpihZph51Qw3r5kR5nWTakaaUeYNM9q8acaYt8xYM86MN2+bCWaimWQmmylmqkkz75hp5l0z3bxnZpiZZpaZbeaYudX+OHSbBeZDs9B8ZBaZxWaJWWrSzccmwywzmeYTs9x8arLMCrPSrDKrzRqz1qwz680Gs9FsMpvNFrPVbDPbzWdmh9lpdpndZo/Za/aZz81+84U5YL402eYrc9D8xRwyX5vD5huTY741R8x35qj53hwzP5jj5kdzwpw0p8xP5rT52ZwxZ80584s5b341F8xFc8n4y4f7y2/vqFFjHsyDMRiDsRiLcRiH+TE/RjCC8RiPBbAAFsSCWBgLYwImYDEshpcREhbH4hjFKJbEkpiIiVgaS6NDh0mYhGWxLJbDclgey2MFrIAVsSJWxsp4D96D1bAa1sAaeC/ei7WxNtbFulgP62F9rI8NsAE2xIbYCBthY2yMTbAJNsNm2BybYwtsgS2xJbbG1tgW22I7bIftsT12xI7YCTthZ+yMyZiMXbALdsWu2A27YXfsjj2wB/bEntgbe2Mf7IN9sS+mYAoOwAE4CAfhEByCw3AYDsfhOAJHYCqm4igchaNxNI7BMTgWx+F4fBsn4ESchJNxCk7FNEzDaTgNp+N0nIEzcBbOwjmohRDzcD7OxwW4ABfiQlyEi3AJLsF0TMcMzMBMzMTluByzMAtX4kpcjatxLa7F9bgeN+JG3IybcStuxe24HXfgDtyFu3AP7sF9uA/34348gAcwG7PxIB7EQ3gID+NhzMEcPIJH8CgexWN4DI/jcTyBJ/AUnsLTeBrP4Bk8h+fwPP6KF/AiXkKPMVaKWHudjbPX2/z2Bhtj89m/jgvbIjbBFrXFrLEFbaG/idFam2hL2dL2NutsGZtkb/9TXNFWspVtFXuPrWqr2ep/iuvZ+219+4BtYB+0de19fxM3tA/ZRvYx29g+bpvYVraZbWOb28dsC/u4bWlb2da2je1kn7ad7TM22T5ru9jn/hRn2GV2vd1gN9pNdr/9wp6zv9ij9nt73v5q+9p+dph91Q63r9kR9nWbakf+KR5v37YT7EQ7yU62U+zUP8Wz7Gw7x8618+z7dr794E9xuv3YLrSZdpFdbJfYpb/Fl9eUaT+xy+2nNsuusCvtKrvarrFr7bp/X+squ8VutdvsPvu53WF32l12t91j9/4WX97HAfulzbZf2SP2O3vIfm0P22M2x377W3x5f8fsD/a4/dGesCftKfuTPW1/tmfs2d/2f3nvP9mL9pL1VhCQJEWaAspDeSmG8lEsXUdxdD3lpxsoQjdSPN1EBehmKkiFqDAVoQQqSsXIEJIlopCKUwmK0i1Ukm6lRCpFpek2clSGkuh2Kkt3UDm6k8rTXVSB7qaKVIkqUxW6h6pSNapONagm3Uu1qDbVobp0H9Wj+6k+PUAN6EFqSA9RI3qYGtMj1ISaUjN6lJrTY9SCHqeW1IpaUxtqS09QO3qS2lMH6khPUSd6mjrTM5RMz1IXeo660vPUjV6g7vQi9aCXqCf1ot70MvWhV6gv9aMU6k8DaCANosE0hIbSMHqVhtNrNIJep1QaSaPoDRpNb9IYeovG0jgaT2/TBJpIk2gyTaGplEbv0DR6l6bTezSDZtIsmk1zaC7No/dpPn1AC+hDuZA+okW0mJbQUkqnjymDllEmfULL6VPKohW0klbRalpDa2kdracNtJE20WbaQltpG22nz2gH7aRdtJv20F7aR5/TfvqCDtCXlE1f0UH6Cx2ir+kwfUM59C0doe/oKH1Px+gHOk4/0gk6SafoJzpNP9MZOkvn6Bc6T7/SBbpIl8iTCCGUoQp1GIR5wrxhTJgvjA2vC+PC68P84Q1hJLwxjA9vCguEN4cFw0Jh4bBImBAWDYuFJsTQhhSGYfGwRBgNbwlLhreGiWGpsHR4W+jCMmFSeHtYNrwjLBfeGZYP7worhHeHFcNK4WMPVgnvCauG1cLqYY2wZnhvWCusHdYJ64b3hfXC+8P64QNhg/DBsFz4UNgofDhsHD4SNgmbhs3CR8Pm4WNhi/DxsGXYKmwdtgnbhk+E7cInw/Zhh7Bj+FTYKXw67Bw+EyaHz4Zdwueuej0l7B8OCAeGA0PvH1BLokuj6dGPoxnRZdHM6CfR5dFPo1nRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W1R7+vmFQ6cdMppF7g8Lq+LcflcrLvOxbnrXX53g4u4G128u8kVcDe7gq6QK+yKuARX1BVzxqGzjlzoirsSLupucSXdrS7RDWz6+wGijEtybVxb19a1c0+69q6D6+ieck+5p93T7hn3jHvWdXHPua7uedfNveC6uxfdi+4l19P1cr3dy66Pe8X1df1ciktxA9wAN8gNckPcEDfMDXPD3XA3wo1wqS7VjXKj3Gg32o1xY9xYN9aNd+PdBDfBTXKT3BQ3xaW5NDfNTXPT3XQ3w81ws9wsN8fNcfPcPDffzXcL3AK3MHGhW+QWuSVuiUt36S7DZbhMl+mWu+Uuy2W5lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62ux1uh9vldrk9bo/b5/a5/W6/O+AOuGyX7Q66g+6QO+QOu29cjvvWHXHfuaPue3fM/eCOux/dCXfSnXI/udPuZ3fGnXXn3C/uvPvVXXAX3SXnXVrknci0yLuR6ZH3IjMiMyOzIrMjcyJzI/Mi70fmRz6ILIh8GFkY+SiyKLI4siSyNJIe+TiSEVkWyYx8Elke+TSSFVkRWRlZFVkdWRPxvuiO0Bf3JXzU3+JL+lt9oi/lS/vbvPNlfJK/3Zf1d/hy/k5f3t/lK/i7fUVfyVf2j/uWvpVv7dv4tv4J384/6dv7Dr6jf8p38k/7zv4Zn+yf9V38c76rf9538y/47v5F38O/5Hv6Xr63f9n38a/4vr6fT/H9/QA/0A/yg/0QP9QP86/64f41P8K/7lP9SD/Kv+FH+zf9GP+WH+vH+fH+bT/BT/ST/GQ/xU/1af4dP82/66f79/wMP9PP8rP9HD/Xz/Pv+/n+A7/Af+gX+o/8Ir/YL/FLfbr/2Gf4ZT7Tf+KX+099ll/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/zO/wO/0uv9vv8Xv9Pv+53++/8Af8lz7bf+UP+r/4Q/5rf9h/43P8t/6I/84f9d/7Y/4Hf9z/6E/4k/6U/8mf9j/7M/6sP+d/8ef9r/6Cv+gv8a+kMcYYY4z9l6irXO//d/5P/jEuGyCEuH5nkZz/WHNzwd/ng2VCp4gQ4tl+PZr+26hVKyUl5Y97s5QISiwWQkSu5OcRV+IVoqN4WiSLDqLs313fYNnrPF2lfvQuIWL/KidGXImv1L/jH9R/4qnxGRXCc/H/Sf3FQiSWuJKTT1yJr9Qv9w/qF2p3lfXn+zpNiPZ/lRMnrsRX6ieJJ8VzIvlv7mSMMcYYY4wxxn43WFbudrXn58vP5wn6Sk5ecSW+2vM5Y4wxxhhjjDHGrr0XevV+5onk5A7deMITnvDk3yfX+icTY4wxxhhj7F/tyqH/Wq+EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLvf5//Dmxa71HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//WhI9oQ==")
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x10040, &(0x7f00000006c0)=ANY=[@ANYBLOB="757466383d312c756e695f786c7990e1c669f58fa9116174653d302c6572726f72733d636f6e74696e75652c7379735f696d6d75d7535dc07e381a5c5bb3cf53817461626c652c696f636861727365743d63703836392c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c636865636b3d6e6f726d616c2c00"], 0x26, 0x349, &(0x7f0000000340)="$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")
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0xd02)

9m47.670823888s ago: executing program 34 (id=3267):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)="2484", 0x2}], 0x1}, 0x20004081)
recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1)
recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_delete(r3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff)
fcntl$setlease(r5, 0x400, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00')
syz_clone(0x28000000, 0x0, 0x13, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002600)={r6, 0x0, &(0x7f0000002580)=""/79}, 0x20)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000100c0002800500010000000000080007400000000044000e802c000180140003"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_usb_connect$midi(0x2, 0x45, &(0x7f0000000100)=ANY=[], 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r10 = syz_open_procfs(r8, &(0x7f0000000140)='pagemap\x00')
read$FUSE(r10, 0x0, 0x0)
close(r7)

9m46.188080542s ago: executing program 35 (id=3278):
unshare(0x22020400)
unshare(0x4040000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_pid(r0, &(0x7f0000000000), 0xfdef)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc0)
userfaultfd(0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x8, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f00000089c0)="$eJzs3EtvG9UXAPA7SdP3v/8IsWDXkSqkBNVWnEcFuwCteIhUUYEFK3DsieXW9kSx44SsWLBELPgmCCRWLPkMLFizQyxA7JBAnjuGhocEihOT5veTxmfu9fWZc62q0pmJHIBzaz796Yck3AhXQgizIYTrIRTnSXkU1mN4pjxmHjuScu63iYshhKshhBuj5DFnUr71ye3hrbXvX//xy68vXbj26RffTG/XwLQ9G0Lo7sTz/W6MeSvGh+V8fdguYnd1WMb4RvdROc5j3M+2igz79fG6ehFXWnF9vrPXH8XtTr0xiq32djG/04sX7A9b4zzFBx7Wd4txM9sqYrufF7F1GOs6OIz/tx32BzFPs8z3fpE+DAbjGOezgyzuZ+dRERu9QTkf8+bN7GAUh2UsLxcaeadZ1LF1nG/6v+2Ndm/vIB1mu/123kvXqrXnq7U7ldpu3swG2Wql3m3eWU0XWp3Rssogq3fXW3ne6mTVRt5dTBdajUalVksX7mZb7XovrdWqK9WlytpieXY7feX+22mnmS6M4kvt3t6g3emn2/luGj+xmC5XV15YTG/V0jc3NtPNB/fubWy+9e7dd+6/uPHay+WiP5X1XFheWl6u1JYqy7XFc7T/D8ui04WJ7R+OJZl2AQBnz7/t/2/q/4EJOLn+f/dBCCff/wf9/0Scqf53XNYE+9/zvn84Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ68WJ/NxfK2c/1859VQ5TkIIMyGEX/7CbLh4JOdsmWfub9bP/aGGr5JQZBhd41J5XA0hrJfHz/8/6W8BAAAAnlyff3Dz49itx5f5aRfEaYo3bWauvzehfEkIYW7+uwllmxm9PD2hZMW/7wvhYELZihtYlyeULN5yuzCpbP/I7JFw+bGQxDBzquUAAACn4mgncLpdCAAAAKfpo2kXwHQkYfwoc/wsuPjL+98fCF45MgIAAADOoGTaBQAAAAAnruj//f4fAAAAPNni7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7JzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31Xpxe/X7um3Obt9OntEAAAAAl2yr9aL+Z5b6X5v735tbP5t+ERFlRFyau4/i01nmqMmpXp6/OX2+elXDXUSdcHiPSXN9iYg/zfX4o+tPAQAAAD6uzXI1T7P19Gc2dEH0KS3alN/+ZsorIqKaPWRKKw95vzKF1d/vcfzPlFYvYE0zhaUlt3GutDepf+7HVbvpSVOkprz4smOR2cYOAAD0aHTW9DsLAQAAoE//hi6AYRTxvJV53AqcpKbZ3vt81gMAAADeoWLoAgAAAIDO1fP/ns7/2zv/DwAAAIaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqvdgsV/O2Obt9O3lGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAH+zs7OxVXGNsoeIKHjQi91ua2tv4kEJHvwThJBua+zWH20OthQxF2+Scy+iRxFBibf+Dz0nkEu85bCHCJ4jMzuzO/kBrj86s0k+H3jzvjsM875vFkK+814CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQGL47ieP00B7Fjfzc5t6D5bTfOtSnHq1vL6QtjaMqkz4ZXi5/iDrjcK+OZAAAADgb4qK+DyHsJBuLad9oZ/V/UlyT1vzfPzuKi3r+cN1f9EXtn7bfft19cTxQezROetMbK4P+xaOpNJ/cLGfbc397RTN78tm7lzj7QhofrL0wTLLnGX37+PF7rSycqyJbAODfuFD0eVD8PpT2vToTA+DMaJYK76L+j9v15gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQheFaeLqIoxDCQnMSp7b2Hiwf1z9a314o2tWHD9fD15N7prdIQgg3Vgb9i5XOZrbdvXf/1tJg0L9TffBKCKGu0d/Jp3/roykuDqGW5yP4f4L9ufzLnpF8TkhQ4w8lAABOpSRvaV2/k2wspuei+RD2fzhY/79eisOU9f/ux1c3y2OV6/9eZTOcfd3V25937967/+bK7aWb/Zv9T9+61Hu7d/nalSvXutm7kq43JgAAAPw3rbyV6//G/NH1//OlOExZ/3/xXe+r8lix+v9Yk0W/ujMBAAA4255/9c8/omPOR61W+HJpdfVOb3Qcf740OtaQ6j82l7dy/R/P150VAAAAUIXhWnRg/f96KQ5Trv8/8+NLP5fvGYcQzuXr/xeWPxtcr246M62KPyeue44AAADU61zeyuv/Sbb/vzHe8tAIIbzx2ijO/w3gVPV//P43P5XHKu//v1zdFGdSozN6HlnfCaHZqTsjAAAATrOn8pYW+78nG4uf/HL+w5b9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABV+ysAAP//+Cw/6Q==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2)

7m16.742249952s ago: executing program 36 (id=4003):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$inet6(0x10, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0xfff9, 0x3}, 'syz0\x00', 0x38})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xe7)
clock_gettime(0x3, &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)

7m11.12448862s ago: executing program 37 (id=4049):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
setuid(0xee01)
utimensat(r0, 0x0, 0x0, 0x0)

6m58.204690674s ago: executing program 38 (id=4125):
syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010"], 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)

6m57.04787606s ago: executing program 39 (id=4135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0xb0000, 0x0, 0x240040e0}, 0x44894)

6m47.426017549s ago: executing program 40 (id=4185):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000000)={0xf, 0xfffffffffffffffd, 0x5, 0x8ba28})
sched_setaffinity(0x0, 0xfffffffffffffdc0, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ac)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x24, {0x24, 0xa, "c2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d60900554438000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6m37.956890244s ago: executing program 41 (id=4231):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x27841e, 0x0, 0x4, 0x0, &(0x7f0000000280))
rmdir(&(0x7f0000000080)='./bus\x00')
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x900}], 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="0f699899f8a736410f0748b80ac4e21e3bb83f130f23c80f21f8350000f0000f23f8b805000000b9095800000f01d946d9fe0f0765410f79032e36440f35b983040000b84ff30000ba000000000f306547dae9", 0x53}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_emit_ethernet(0x101, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x4, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x5}, {0x3}, {0x7}, {0x9, 0x0, 0x1}], @generic="1ae3bf5b174250fe9efc5370d65611b3752018f294d0d25f4f5d99f403b1329abf1c172916ab2b93b164c5562a8a821b413bbec9bd98a92befeb8779c63ee76910eb1ad6b96af3ca35ee73812710feebd5101743a12d10075eb1cc3d73ba3c8ac7da1efea1c3cd9c3790fdb2c43d4d740255a9a0e546cd8f22dd2ed7f90b05172e03cdf9f9f69e5a50aa19fa7da417bd383d35bd02bc07f872a02c9a8f795b4c64472af828972d49b5e03df613df098981d4e8039d2f3fcc1b55e09fdd849ee918b7a4a1a21c68ef95d83145ba8ac6a9f834948748c5dd8921b350"}}}}, &(0x7f0000000580)={0x1, 0x2, [0x4ba, 0xb0e, 0xfff, 0xbd8]})
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7f, 0x202, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e461519b104962775f9527ad4d000000802d0300000000ba9be7108754536f38", [0x1ce, 0x20000001]})
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

6m25.819106391s ago: executing program 7 (id=4296):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe)
syz_socket_connect_nvme_tcp()
epoll_create(0x7)
keyctl$clear(0x3, 0xfffffffffffffffd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x0)

6m24.878924693s ago: executing program 7 (id=4302):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x5, 0x2, 0x6, 0x0, 0x2]}, &(0x7f0000000200)=0x78)
syz_open_dev$usbfs(&(0x7f0000000080), 0x80000001, 0x100)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001c0000ffe22181343feec672ce0bc842d400050011e860c875edd3aa6446c11ae2aa1e40f5297accf16c7d9d776d98e7c1bf890dd7cb892e3e2b0a66d61496e2cee3b3257dcefd5bf38faf0f91bd2933a355ac3d5e70d3fe56ea3f00b18cdda6f73642b8ecc53ce1324310f765637d85421cd2abd8"], 0x0)

6m24.513906741s ago: executing program 7 (id=4304):
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x10000)
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95fdaf3c7220a0e23db436659a8c54328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61803bd430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751e539c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b7ad193c5e5850df01aff96877d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6050041206473075eaeff2b69c2f2bf6f691c3560e068743a08e9771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece5969023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed60104002aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2252775905eeeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d3690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be47e896aecac0bc4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdcef7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05c1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e42ad33cba2661957cff0700000000000029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc310fbf1760243d51a197d3ecfd74bd625e9f496175513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d293c0e3f4f93149887271e645f50a4e57010a9b76457f6ad73231a905206bbb1b95248aed85a9df9dea64cc1fd1f06a98530000000000000045fcc1fb138fce0faec0a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b93c7f3c817688cec2d226f50edb115c2e075f3c663a4b4169bc6fd7d4fbce205f2a1ae263ae0db900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b23bac44b7371a3a0aeab3647c56f0680cd30ca260189dffed79c2cfae39d8160d3fac695b75654a4a5695b9edec673e75d97950fd4d80bdf8e2d83a3232768b1231b09ef4d995a783eb8f731523e9f6c2ee9119d567acd471bc391bd4f07600d5b04b71c1f1fd7e219b8df5123e4c529db3ce74353e8a39e2d21ce0954334951d509cdce531fb14230fa3b7331a943e7223b0ac8725a0d45a213fa249a8801959480ecdc5999c9df72debe8510d0620fce7be7086d5b72e857243f0a7883d9749b1f40936b51631e0060a0d9901d730000000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000000000000300000000000008"])
sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0xffffff28, &(0x7f0000000480)=[{&(0x7f00000000c0)="ed129a93b8cf4746fd3475756f9d20ff09390d3e9feb7567844b444a384054cd563eb0d557f2387292cb22b4c7eb7fd4348f6e6f4f2d523a3f0f303720", 0x3d}], 0x1, 0x0, 0xffffffffffffffe7}, 0x4008)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[], 0x1cb)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0)
close(r4)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)

6m21.277746365s ago: executing program 7 (id=4320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0900000001000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x10082, &(0x7f0000000000)=ANY=[@ANYBLOB="696e6c696e6563727970742c6e6f696e6c696e655f64656e7472792c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c0068f9e42d819469a61b133518a2fdff195a02ab169551ec8e5d1038e2a29605e556230ac181b672b9c209ba0802faf4390229e2a44361d033a5adc3698e6b1f9c2b84471c360f284e6d3bb4a8982de0a25c2d0fee33d7260cfe3d81617bbb6b21b8108421eede4c63c25a7028efcded0aac8a5d128166077e0012231865289f00f7906b9c1bdab7792758b5b922106ac372d3ce2b35f8f4be09093c7e96e0ebe3c6"], 0x1, 0x1059a, &(0x7f0000020c40)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000080), 0x0}, 0x20)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@nolazytime}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
newfstatat(0xffffffffffffff9c, &(0x7f000000d580)='./cgroup\x00', &(0x7f000000d5c0), 0x1000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
statx(0xffffffffffffff9c, &(0x7f0000001340)='./bus\x00', 0x0, 0x10, &(0x7f0000000b80))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="184700000102000064590e00000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x40, 0x0, 0x0, 0x1f00, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x3, 0x73347c5, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r1, 0x1, r1], &(0x7f0000000440)=[{0x0, 0x5, 0xe, 0x3}, {0x0, 0x2, 0x9, 0x33b9c336d8e898a9}, {0x3, 0x5, 0x2, 0x8}], 0x10, 0x1}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000001180)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000011c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x100ac5)
syz_clone3(&(0x7f0000000900)={0x23800900, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x10)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}])

6m19.74753777s ago: executing program 7 (id=4334):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0)

6m19.315094959s ago: executing program 7 (id=4339):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x0, 0x1, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x5, 0x6}, {0x0, 0xfffffffffffffffe, 0x400000000}, 0x10000000, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xfffffffe, 0x3c}, 0x2, @in6=@private2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r1, 0x0, 0xf5)

6m19.224872712s ago: executing program 42 (id=4339):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x0, 0x1, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x5, 0x6}, {0x0, 0xfffffffffffffffe, 0x400000000}, 0x10000000, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xfffffffe, 0x3c}, 0x2, @in6=@private2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r1, 0x0, 0xf5)

5m58.814226266s ago: executing program 1 (id=4446):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = timerfd_create(0x8, 0x80000)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc1000004)
timerfd_gettime(r3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'tunl0\x00', <r4=>0x0, 0x10, 0x40, 0x7, 0x2, {{0x16, 0x4, 0x3, 0x5, 0x58, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x42, 0x1, 0x2, [{@multicast1, 0xe000000}, {@multicast1, 0x8}, {@loopback, 0x1}, {@broadcast, 0x9b7}, {@broadcast, 0x3c2d}]}, @timestamp={0x44, 0x18, 0xe5, 0x0, 0xc, [0x1, 0x9, 0x7, 0xf3, 0x3ff]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r5=>0x0})
sendmsg$inet(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="47b2f9ce817cacc28fa57d8fe5febc9251bd2dd820dbaa17e059c8a846a70a1688754c081672a0b4e60b3f879341a3423cbf2247a45ec83828ee77351572c0257ab50b210fcbe12e5fe369a84428df99b6beb0d272a3338322c08f31e28f6484c60dfac06a3fe87494753f730a4a85d4594638a2ef87d7320dbe154f24d6f5025dec9f97371c89e3d4d8b56d10db457a650031e081f334057332", 0x9a}, {&(0x7f0000000580)="eed4e12efd133c2d870129583576e76af4ae714cc1da09a6c510a9e13fc5324fb4078fb5b5554c51aa5b3f60e8424aa0bbf543a2500eeb34d483c677696b995825ddeda3e94f6be7621b367e46de8233dc4b2ff5fa87af0dea039b25d6d9e95259ed186e289438f4389d642b890fb1245010493eae171ca68b4ebb495a1f0ee1e40d70de74fd31139a9a9f7d8d1f29a201e856245a61d0293cafdec9e94943943e40b4bf501c9401081b34e81c4c7800ba9dcd55c4b8302a643473382194ecce7bc9d4e64fe03dba1eac8fbc7d8565f5d5e53e52a0767b249a4488f7b0ed463a6e4c8081c197dbe700a29626f0011902267c9d", 0xf3}, {&(0x7f0000000680)="3e8cbc8f873bfdefce0bd8f0aa65198b070dc62d44fd5fa2f31e093b46caeee57a4d76f5cd14d19c7aeef61571b194a42052a2f3c34e42dfd353ad493231ca8d4b60ab6421be31e74d41b974c26e776bc2786023eec2dc3e7313341c3565c64c42dd126e431905b72dcc3904fff5f5d189e3fdcbaaa7d5a8796b3c9f33d33f5518d402bbbceab149fed0b95e3d0b39389201c01ff3811853170ac845bc23c95983b6f9688ea4c1c6fcc257c5fcd6889e7dbf35c7b4171f0f656f792dadc0dd58d46955aa58e62dc568c31254e47f", 0xce}, {&(0x7f0000000780)="add627c318b5b07aea8a0e1b921327011965358de88426cc0c00eb6eb49fa98cedc54e2b9337378188deb18940a3083b3ab039ca859d25168c", 0x39}], 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="e0000001640101020000000014000000000000000000000001000000bb0b0000000000001400000000000000000000000200000009000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="7f000001ffffffff000000001400000000000000000000000200000006000000000000006800000000000000000000000700000044102e5000000000000008000000184a01070be521e7d11526d129918907860000000094040100831f90000000007f000001ac1414aaffffffff0a0101007f000a010101ac14143fac1414aa00000014000000000000000000000001000000030000000000000011000000000000000000000001000000040000000000000014000000000000000000000002000000404a000000000000"], 0x138}, 0x20008095)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x802, &(0x7f0000000340)=ANY=[], 0x3, 0x1f3, &(0x7f0000000380)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x100)

5m57.278976451s ago: executing program 1 (id=4454):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r5, 0x0, 0xb)
splice(r4, 0x0, r7, 0x0, 0x80, 0x4)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$FUSE(r6, &(0x7f0000001e80)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0x0, r8, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec)

5m57.274890782s ago: executing program 1 (id=4457):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}, {0x0, [0x5f, 0x2e, 0x30]}}, &(0x7f0000001f00)=""/4096, 0x55, 0x1000, 0x3}, 0x28)
r1 = socket(0x11, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'})
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
io_destroy(0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r0, 0x20, &(0x7f00000005c0)={&(0x7f0000000340)=""/243, 0xf3, 0x0, &(0x7f00000004c0)=""/242, 0xf2}}, 0x10)
setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x800)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', <r5=>0x0})
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r5, 0x1, 0xf1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="070f", 0x2}, {&(0x7f0000001540)="11ec4e696119aed2", 0x8}], 0x2}, 0x4)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000040)={0xa, {0xa, 0x9, 0xb}}, 0xa)

5m57.254718632s ago: executing program 1 (id=4458):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000280), 0x4, 0xbaf, &(0x7f00000017c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3080401, 0x0, 0x1, 0x0, 0x0)
prctl$PR_SET_PDEATHSIG(0x8, 0xffffffffffffff01)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r1=>0x0}, &(0x7f0000000300)=0xc)
r2 = socket(0xf, 0xb, 0xff)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
setresgid(r3, 0x0, r3)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getegid()
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=r1, @ANYBLOB="00659d00ff9eb14d165d86f3ffffffffff", @ANYRES32=r3, @ANYBLOB="08000e00", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="10000000000000002000020000000000"], 0x44, 0x3)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001800ef002dbd700000000001001d00"/28], 0x1c}, 0x1, 0x11}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
personality(0xfe47fef9f5ff7379)
syz_open_dev$loop(0x0, 0x81, 0x101a00)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000280)="$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")
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0)
open(0x0, 0x66842, 0x21)
r7 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0xc000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5m57.093349575s ago: executing program 1 (id=4462):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB='E'], 0x31)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = dup2(r3, r3)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fedbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c3"], 0x2c}}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

5m56.963608398s ago: executing program 1 (id=4463):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000001640)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@rodir}, {@fat=@sys_immutable}]}, 0x81, 0x2a6, &(0x7f0000000180)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
mknod(&(0x7f0000002800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x10001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000440)={@local, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x2}, {}, {}, {0xa888, 0x88be, 0x81000000}, {0x8, 0x22eb, 0xfffffffc}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0)
syz_emit_ethernet(0x31, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf, 0x0, @opaque="cc30e06ad1b756"}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5, 0x20000000}, 0x80)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x84000001, 0x2, 0xfffefffc}})
getpriority(0xfffffffffffffffd, 0x0)
close(0x3)
syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaacc3f86dd61002724004919b470fd28d5b587c21af9000001ff0200000000000000000000000100bbc8168f7800009379663a794500023a00fc02000000000000000000000000000500000000000000000000ffff7f93e39f8589ccbb275f719941e73f089f4e5dc038dfc04411c7aba1b7b1b1b3ea1ba2e9e9f0b3ed262491ef5a617ae8"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c030000100001002dbd7000f6dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="210804000000000004001a801400030076657468305f746f5f626f6e6400000004031680e00001801000060009000000605b00007f0000000c00030007000000100000000c00030002000000a54e00000c000400ff7f0000060000002800010009000000ffffffffffff000000000000000000000000000000000000000000000000000010000600fa00000003000000100000000c00030010000000000800001000060006000000070000000300000054000d"], 0x33c}, 0x1, 0x0, 0x0, 0x20044041}, 0x40818)

5m56.961542248s ago: executing program 43 (id=4463):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000001640)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@rodir}, {@fat=@sys_immutable}]}, 0x81, 0x2a6, &(0x7f0000000180)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
mknod(&(0x7f0000002800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x10001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000440)={@local, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x2}, {}, {}, {0xa888, 0x88be, 0x81000000}, {0x8, 0x22eb, 0xfffffffc}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0)
syz_emit_ethernet(0x31, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf, 0x0, @opaque="cc30e06ad1b756"}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5, 0x20000000}, 0x80)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x84000001, 0x2, 0xfffefffc}})
getpriority(0xfffffffffffffffd, 0x0)
close(0x3)
syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaacc3f86dd61002724004919b470fd28d5b587c21af9000001ff0200000000000000000000000100bbc8168f7800009379663a794500023a00fc02000000000000000000000000000500000000000000000000ffff7f93e39f8589ccbb275f719941e73f089f4e5dc038dfc04411c7aba1b7b1b1b3ea1ba2e9e9f0b3ed262491ef5a617ae8"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c030000100001002dbd7000f6dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="210804000000000004001a801400030076657468305f746f5f626f6e6400000004031680e00001801000060009000000605b00007f0000000c00030007000000100000000c00030002000000a54e00000c000400ff7f0000060000002800010009000000ffffffffffff000000000000000000000000000000000000000000000000000010000600fa00000003000000100000000c00030010000000000800001000060006000000070000000300000054000d"], 0x33c}, 0x1, 0x0, 0x0, 0x20044041}, 0x40818)

5m40.787105777s ago: executing program 2 (id=4553):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xcf)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}}, 0x100)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0xb0, 0x3, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0xa9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x98}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x8, 0x1}}]}}}]}}]}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io(r1, &(0x7f00000018c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB=' 0W\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)

5m37.98816341s ago: executing program 2 (id=4569):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
mprotect(&(0x7f0000e40000/0x4000)=nil, 0x4000, 0x1000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00005af000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x14, &(0x7f0000000780)=[@cr4={0x1, 0x100002}], 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="84e483f1353f", 0x6}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000040)="30743e7e9fdf10e4c8f7ad376d0374715570", 0x12, 0x3b00, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)

5m36.404523197s ago: executing program 2 (id=4577):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x98}}, 0x0)

5m35.525620916s ago: executing program 2 (id=4580):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', <r0=>0x0, 0x2f, 0x0, 0x81, 0x7, 0x8, @local, @remote, 0x0, 0x40, 0x4, 0xe52e}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000e4840000002a000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000720000009500"/96], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000feffffff855998326223197f040000007b000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES8=r1], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r4 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x98)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xd6}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x84)
r6 = socket(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r6, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
sendto$inet(r6, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)
r7 = openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
getgid()
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$eJzs3Au4TtXWOPAx5pxLm8Sb5D7HHIs3uUySJJeERJIkSZJbQpIkSUhscktCEnJPcg/JLST3+y33JDmSJAkJSeb/0anPOadzTuf8zzmf7zl7/J5nPXuOvd4x3rH22Hu/a6397Pfr9gMr161SsTYzw78E//ghFQBSAKAPAGQGgAgASmQpkQVwCKTXmPqvPYn493pgyuXuQFxOMv+0Teaftsn80zaZf9om80/bZP5pm8w/bZP5C5GWbZma82rZ0u72z9z/z/D3dv7u/X+Q+///58jr/3+RQ0VGfb6uyLUd/okUmX/aJvNP22T+aZvMP22T+adtMv//chFAhb+zW+aftsn8hUjLLvf9Z9ku73a5v/+EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQNZ8MlBgB+XV/uvoQQQgghhBBCCPHvE6740yjd5WtECCGEEEIIIYQQ/0EICjQYiCAdXAEpkB4ywJWQEa6CTJAZEnA1ZIFrICtcC9kgO+SAnJALckMesEDggCGGvJAPknAd5IfroQAUhEJQGDwUgaJwAxSDG6E43AQl4GYoCbdAKSgNZaAs3Arl4DYoDxWgItwOleAOqAxV4E6oCndBNbgbqsM9UAPuhZpwH9SC+6E2PAB14EGoCw9BPXgY6kMDaAiNoPH/V/7z0BlegC7QFVKhG3SHF6EH9IRe0Bv6wEvQF16GfvAK9IcBMBBehUHwGgyG12EIDIVh8AYMhxEwEkbBaBgDY+FNGAdvwXh4GybARJgEk2EKTIVp8A5MhxkwE96FWfAezIY5MBfmwXx4HxbAQlgEH8Bi+BCWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAR7AVtsF22AE7YRfsho9hD3wCe+FT2Aef/WV+5r+ff+Yv8jsgIKBChQYNpsN0mIIpmAEzYEbMiJkwEyYwgVkwC2bFrJgNs2EOzIG5MBfmwTxISMjImBfzYhKTmB/zYwEsgIWwEHr0WBSLYjG8EYtjcSyBJbAklsRSWBpLY1ksi+WwHJbH8lgRK2IlrISVsTLeiXfiXVgNq2F1rI41sAbWxJpYC2thbayNdbAO1sW6WA/rYX2sjw2xITbGxtgEm2BTbIrNsTm2wBbYEltiK2yFrbE1tkHEttgW22E7bI/tsQN2xI74PD6PL+AL2BUrqW7YHbtjD+yBvbA39saXsC++jC/jK9gfB+BAfBVfxddwMJ7GITgUh+EwLKdG4EgchazG4Fgci+NwHI7H8TgBJ+JEnIxTcCpOw2k4HWfgDHwXZ+F7+B7OwTk4D+fjfFyAC3ERLsLFeAaX4FJchstxBa7EFbga1+BqXIfrcR1uxI24GTfjR/gRbsNtuAN34C7chR/jx/gJfoL9cR/uw/24Hw/gATyIB/EQHsLDeBiP4BE8ikfxGB7D43gCT+IJPIWn8DSewbN4Fs/hOTyPz+b6ss6ugmv7g7rIKKPSqXQqRaWoDCqDyqgyqkwqk0qohMqisqisKqvKprKpHCqHyqVyqTwqjyJFilWs8qq8KqmSKr/KrwqoAqqQKqS88qqoKqqKqWKquCquSqibVUl1iyqlSqtmvqwqq8qp5r68qqAqqoqqkrpDVVZVVBVVVVVV1VQ1VV1VVzVUDVVT3adqqW7YCx9QFydTVw3Aemog1lcNVEPVSL2Gj6gmajA2Vc1Uc/WYGopDsKVq4lupJ1VrNRLbqKfVKHxGtVNjsL16TnVQHVUn9bzqrJr6Lr/e7lSTsYfqqXqp3mo63qEuTqyyekX1VwPUQPWqmoevqcHqdTVEDVXD1BtquBqhRqpRarQao8aqN9U49ZYar95WE9RENUlNVlPUVDVNvaOmqxlqpnpXzVLvqdlqjpqr5qn56n21QC1Ui9QHarH6UC1RS9UytVytUCvVKrVarVFr1Tq1Xm1QG9UmtVltUR+prWqb2q52qJ1ql9qtPlZ71Cdqr/pU7VOfqf3qD+qA+lwdVF+oQ+pLdVh9pY6or9VR9Y06pr5Vx9UJdVJ9p06p7xOn1Rl1Vv2gzqkf1Xn1k7qgggKNWmmtjY50On2FTtHpdQZ9pQZ9lc6kM+uEvlpn0dforPpanU1n1zl0Tp1L59Z5tNWknWYd67w6n07q63R+fb0uoAvqQrqw9rqILqpv0MX0jbq4vkmX0DfrkvoWXUqX1mV0WX2rLqdv0+V1BV1R364r6Tt0ZV1F36mr6rt0NX23rq7v0TX0vbqmvk/X0vfr2voBXUc/qOvqh3Q9/bCurxvohrqRbqwf0U30o7qpbqab68d0C/24bqmf0K30k7q1fkq30U/rtvoZ3U4/q9vr53QH3VF30j/pCzroLrqrTtXddHf9ou6he+peurfuo1/SffXLup9+RffXA/RA/aoepF/Tg/XreogeqofpN/RwPUKP1KP0aD1Gj9Vv6nH6LT1ev60n6Il6kp6sp+iputcvlWb+A/lv/ZX8fj8/+2a9RX+kt+pterveoXfqXXq33q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4PqF/0N/pU/p7fVqf0Wf0D/qcPqfP//I1AINGGW2MiUw6c4VJMelNBnOlyWiuMplMZpMwV5ss5hqT1VxrspnsJofJaXKZ3CaPsYaMM2xik9fkM0lznclvrjcFTEFTyBQ23hQxRc0N/3L+7/XX2DQ2TUwT09Q0Nc1Nc9PCtDAtTUvTyrQyrU1r08a0MW1NW9POtDPtTXvTwXQwnUwn09l0Nl1MF5NqUk1386LpYXqaXqa36WNeMn1NX9PP9DP9TX8z0Aw0g8wgM9gMNkPMEDPMDDPDzXAz0ow0o81oM9aMNePMODPejDcTzAQzyUwyU8wUM81MM9PNdDPTzDSzzCwz28w2c81cM9/MNwvMArPILDKLzWKzxCw1S81ys9ysNCvNarParDVrzXqz3mw0G80Ss8VsMVvNVrPdbDc7zU6z2+w2e8wes9fsNfvMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnzDlz3pw3F8yFi6d9kYpUZCITpYvSRSlRSpQhyhBljDJGmaJMUSJKRFmiLFHW6NooW5Q9yhHljHJFuaNUsBFFLuIojvJG+aJkdF2UP7o+KhAVjApFhSMfFYmKRjdExaIbo+LRTVGJ6OaoZHRLVCoqHZWJyka3RuWi26LyUYWoYnR7VCm6I6ocVYnujKpGd0XVoruj6tE9UY3o3qhmdF9UK7o/qh09ENWJHozqRg9F9aKHo/pRg6hh1Chq/G+tH8Lp7I/6LrarTbXdbHf7ou1he9petrftY1+yfe3Ltp99xfa3A+xA+6odZF+zg+3rdogdaofZN+xwO8KOtKPsaDvGjrVv2nH2LTvevm0n2Il2kp1sp9ipdpp9x063M+xM+66dZd+zs+0cO9fOs/Pt+3aBXWgX2Q/sYvuhXWKX2mV2uV1hV9pVdrVdY9fadXa93WA32k12s91iP7Jb7Ta73e6wO+0uu9t+bPfYT+xe+6ndZz+z++0f7AH7uT1ov7CH7Jf2sP3KHrFf26P2G3vMfmuP2xP2pP3OnrLf29P2jD1rf7Dn7I/2vP3JXrDh4sn9xZd3MmQoHaWjFEqhDJSBMlJGykSZKEEJykJZKCtlpWyUjXJQDspFuSgP5aGLmJjyUl5KUpLyU34qQAWoEBUiT56KUlEqRsWoOBWnElSCSlJJKkWlqAyVoVvpVrqNbqMKVIFup9vpDrqDqlAVqkpVqRpVo+pUnWpQDapJNakW1aLaVJvqUB2qS3WpHtWj+lSfGlJDakyNqQk1oabUlJpTc2pBLagltaRW1IpaU2tqQ22oLbWldtSO2lN76kAdqBN1os7UmbpQF0qlVOpO3akH9aBe1Iv6UB/qS32pH/Wj/tSfBtJAGkSDaDANpiE0lIbRGzScRtBIGkWjaQyNpbE0jsbReBpPE2gCTaJJNIWm0DSaRtNpOs2kmTSLZtFsmk1zaS7Np/m0gBbQIlpEi2kxLaEltIyW0QpaQatoFa2hNbSO1tEG2kCbaBNtoS20lbbSdtpOO2kn7abdtIf20F7aS/toH+2n/XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYHafjdJJO0ik6RafpNJ2ls3SOfqTz9BNdoEApTkEGd6XL6K5ymVxml+LSu4txBAAX4xwup8vlcrs8zrpsLvufxeScK+AKukKusPOuiCvqbvhNXMqVdmVcWXerK+duc+V/E1d1d7lq7m5X3d3jqrg7/yyu4e51Nd1DrpZ72NV2DVwd18jVjR5y9dzDrr5r4Bq6Rq6Fe9y1dE+4Vu5J19o99Zt4gVvo1ri1bp1b7/a4T9xZ94M74r5259yProvr6vq4l1xf97Lr515x/d2A38TD3BtuuBvhRrpRbrQb85t4kpvspripbpp7x013M34Tz3fvu1lukZvt5ri5bt7P8cWeFrkP3GL3oVvilrplbrlb4Va6VW71//S63G10m9xmt9t97La6bW672+F2ul0/xxePY6/71O1zn7nD7it3wH3uDrqj7pD78uf44vEddd+4Y+5bd9ydcCfdd+6U+96ddmd+Pv6Lx/6d+8ldcMEBIyvWbDjidHwFp3B6zsBXcka+ijNxZk7w1ZyFr+GsfC1n4+ycg3NyLs7NedgysWPmmPNyPk7ydZyfr+cCXJALcWH2XISL8g1cjG/k4nwTl+CbuSTfwqW4NJfhsnwrl+PbuDxX4Ip8O1cKgStzFb6Tq/JdXI3v5up8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI8f5vrcgBtyI27Mj3ATfpSbcjNuzo9xC36cW/IT3Iqf5Nb8FLfhp7ktP8Pt+Fluz89xB+7Infh57swvcBfuyqncjbvzi9yDe3Iv7s19+CXuyy9zP36F+/MAHsiv8iB+jQfz6zyEh/IwfoOH8wgeyaN4NI/hsfwmj+O3eDy/zRN4Ik/iyTyFp/I0foen8wyeye/yLH6PZ/McnsvzeD6/zwt4IS/iD3gxf8hLeCkv4+W8glfyKl7Na3gtr+P1vIE38ibezFv4I97K23g77+CdvIt388e8hz/hvfwp7+PPeD//gQ/w53yQv+BD/CUf5q/4CH/NR/kbPsbf8nE+wSf5Oz7F3/NpPsNn+Qc+xz/yef6JL3BgiDFWsY5NHMXp4ivilDh9nCG+Ms4YXxVnijPHifjqOEt8TZw1vjbOFmePc8Q541xx7jhPbGOKXcxxHOeN88XJ+Lo4f3x9XCAuGBeKC8c+LhIXjW+Ii8U3xsXjm+IS8c1xyfiWGFJLxw/dUza+NS4X3xaXjyvEFePb40rxHXHluEp8Z1w1viuuFt8dV4/viYvH98Y14/viWvH9ce34gbhO/GBcN34orhc/HNePG8QN40Zx4/iRuEn8aNw0bhY3jx+LW8SPxy3jJ+JW8ZNx6/ip392fGneLu8cvxi/GIdytfrlOTC5ILkwuSn6QXJz8MLkkuTS5LLk8uSK5MrkquTq5Jrk2uS65PrkhuTG5Kbk5GUKVK8CjV1574yOfzl/hU3x6n8Ff6TP6q3wmn9kn/NU+i7/GZ/XX+mw+u8/hc/pcPrfP460n7zz72Of1+XzSX+fz++t9AV/QF/KFvfdFfFHfyDf2jX0T/6hv6pv55v4x/5h/3D/un/BP+Cd9a/+Ub+Of9m39M76df9Y/65/zHXxH38k/7zv7F3wX39Wn+lTf3Xf3PXwP38v38n18H9/X9/X9fD/f3/f3A/1AP8gP8oP9YD/ED/HD/DA/3A/3I/1IP9qP9mP9WD/Oj/Pj/Xg/wU/wk/wkP8VP8dP8ND/dT/cz/Uw/q8AsP9vP9nP9XD/fz/cL/AK/yC/yi/1iv8Qv8cv8Mr/Cr/Cr/Cq/xq/x6/w6v8Fv8Jv8Jr/Fb/Fb/Va/3W/3O/1Ov9vv9nv8Hr/X7/X7/D6/3+/3B/wBf9B/4Q/5L/1h/5U/4r/2R/03/pj/1h/3J/xJ/50/5b/3p/0Zf9b/4M/5H/15/5O/4IMfm3gzMS7xVmJ84u3EhMTExKTE5MSUxNTEtMQ7iemJGYmZiXcTsxLvJWYn5iTmJuYl5ifeTyxILEwsSnyQWJz4MLEksTSxLLE8sSKxMhFC7q1xyBvyhWS4LuQP14cCoWAoFAoHH4qEouGGUCzcGIqHm0KJcHMoGW4JpULpUCY8HOqHBqFhaBQah0dCk/BoaBqahebhsdAiPB5ahidCq/BkaB2eCm3C06FteCa0C8+G9uG50CF0DJ3C86FzeCF0CV1DaugWuocXQ4/QM/QKvUOf8FLoG14O/cIroX8YEAaGV8Og8FoYHF4PQ8LQMCy8EYaHEWFkGBVGhzFhbHgzjAtvhfHh7TAhTAyTwuQwJUwN08I7YXqYEWaGd8Os8F6YHeaEuWFemB/eDwvCwrAofBAWhw/DkrA0LAvLw4qwMqwKq8OasDasC+vDhrAxbAqbw5bwUdgatoXtYUfYGXaF3eHjsCd8EvaGT8O+8FnYH/4QDoTPw8HwRTgUvgyHw1fhSPg6HA3fhGPh23A8nAgnw3fhVPg+nA5nwtnwQzgXfgznw0/hgvzPmhBCCCHEP0T/zv5uf+Vz6QDg10ui7gBw1bach/6y5oZsf1z3VLlaJADgya7tH/h1q1QpNTX1l8cu0RDlmwMAiT+v/2u8FJrD49AKmkGxv9pfT9XxHP9O/eTNABn+JCcFLsWX6t/4N+o/8tiwBSXjs1n+Tv05AAXyXcpJD5fiS/WL/4362Zv8Tv/pPx8L0PRPcjLCpfhS/aLwKDwFrf7skUIIIYQQQgghxB/1VGXa/u3rT/0/1+e5zKWcK+BS/HvX50IIIYQQQgghhLj8nunY6YlHWrVq1vYfW+Avf5f+57JkIYv/nkX6X350/q/08x9aXM7fSkIIIYQQQoj/hEsn/Ze7EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIu3633g7sct9jEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcTl9v8CAAD//5aUMno=")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00')
creat(&(0x7f0000000140)='./file0\x00', 0x4d)
write$binfmt_script(r7, &(0x7f0000000040), 0x4)
ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000000))
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IRQFD(r8, 0x4020ae76, 0x0)

5m35.36572938s ago: executing program 2 (id=4583):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000001cc0)=""/4096, 0x52, 0x2fe)

5m35.218605033s ago: executing program 2 (id=4584):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRES64, @ANYRESHEX], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000b43ce7754be70200000000000000d9bc72aec5d29db7e363ea577f", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x48)
socket$inet6(0xa, 0x5, 0x8c)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
unshare(0x22020600)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x8, 0x12, 0x0, 0xffffd000)
close(0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

5m35.217968153s ago: executing program 44 (id=4584):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRES64, @ANYRESHEX], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000b43ce7754be70200000000000000d9bc72aec5d29db7e363ea577f", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x48)
socket$inet6(0xa, 0x5, 0x8c)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
unshare(0x22020600)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x8, 0x12, 0x0, 0xffffd000)
close(0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

5m25.644182362s ago: executing program 6 (id=4622):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e31, @empty=0xfdfdffff}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@nobarrier}, {@nodiscard}, {@nodiscard}, {@inlinecrypt}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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")
setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000001c00), 0x12)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r7, 0x2007ffc)
sendfile(r7, r7, 0x0, 0x2000000000006)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x2c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)

5m24.735954302s ago: executing program 6 (id=4626):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
eventfd2(0x8, 0x80801)
r0 = getpid()
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"})

5m23.044134621s ago: executing program 6 (id=4635):
r0 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b6, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x8001, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7, 0x100009, 0xc, 0x32d, 0x3, 0x17f, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pK    \x00'}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)

5m22.732190947s ago: executing program 6 (id=4637):
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
writev(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
getgroups(0x1, &(0x7f0000000740)=[0x0])
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0/file1/file0\x00', 0x1031040, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB="2c726f6f746d6f64653d30303030050030303030303030303030303130307365725f69643d0000000000", @ANYRES8=r2, @ANYBLOB=',grou', @ANYRES64=0x0, @ANYRES32=r0], 0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x1, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x47)
sendfile(r4, r5, 0x0, 0xb)
sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000904ffd177d36313b946560100000000000000000000001000000003c000000fc0000000000000000000000000000005b0000000000000000b4000000000000020000"], 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)

5m19.735223796s ago: executing program 6 (id=4644):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/55, 0x0, 0xeeee8000})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x4200, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000002c0)={@hyper})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b40)={0x1, 0x0, [{0x1000, 0x6b, &(0x7f0000000140)=""/107}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x4008af04, &(0x7f0000000040))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@typedef={0x2}, @func_proto, @func={0x1, 0x0, 0x0, 0xc, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x50}, 0x20)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x4e24, @multicast1}}}, 0x88)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
fdatasync(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x20, 0x83a4}, {0x6, 0x80}]}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r3, 0x4a8e)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
signalfd4(r1, &(0x7f0000000200)={[0x3]}, 0x8, 0x80000)

5m18.643051811s ago: executing program 6 (id=4651):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fedbdf2500000000", @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c00028006000100000000000800", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)

5m18.642703651s ago: executing program 45 (id=4651):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fedbdf2500000000", @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c00028006000100000000000800", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)

41.822958868s ago: executing program 0 (id=5977):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001200576d10000000a1ffffff070009"], 0x20}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
syz_usb_connect$cdc_ncm(0x1, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100102000008000000000000000303010902710002010540040904000001020d00000624060001e905240009000d240f010900000008000700db06241406001207240a300b01060624070d060007241401000008090581032000400402090401"], 0x0)

38.622697181s ago: executing program 0 (id=5990):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4aa, &(0x7f0000000000)={[{@data_journal}, {@grpjquota, 0x22}, {@data_journal}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000884, &(0x7f0000000240)=ANY=[@ANYBLOB='codepage=1251,nonumtail=0,shortname=win95,shortname=win95,shortname=lower,utf8=0,shortname=winnt,uni_xlate=0,iocharset=macceltic,nonumtail=0,iocharset=iso8859-5,nonumtail=0,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x28d, &(0x7f0000000e40)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x148, 0x65, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x11c, 0x2, [@TCA_BPF_ACT={0x118, 0x1, [@m_xt={0x40, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x15, 0x6, "7ae65bbd9e6185275dcb6fe60c580a75e9"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xd4, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x81, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x24004081}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002180)={{0xf, 0x8, 0x3, 0x291, 0x290, 0x3, 0x2b7}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x81b)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000003c0), 0x4)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
setuid(0xee01)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x0, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x4009, 0xfffffff6, 0x7fb, 0x1, 0x2, 0x2, 0x80000001, 0x91, 0x7ff, 0x4, 0xa98, 0x8, 0x6, 0x40, 0x3, 0xfd}})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}})

37.511019586s ago: executing program 0 (id=5994):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e31, @empty=0xfdfdffff}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@nobarrier}, {@nodiscard}, {@nodiscard}, {@inlinecrypt}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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")
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x80)
r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000001c00), 0x12)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r8, 0x2007ffc)
sendfile(r8, r8, 0x0, 0x2000000000006)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x2c, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)

36.334656423s ago: executing program 0 (id=6000):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0xffffffff, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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")
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00')
write$cgroup_int(r2, &(0x7f0000000000)=0x1, 0x12)
read$FUSE(r2, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xb9235000)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r2}, 0xc)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa090000"], 0x610)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000a00006110020000000000dc050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2f)
signalfd4(r2, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0)

35.400884265s ago: executing program 0 (id=6004):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008"], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4)
socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000003380)=[{{&(0x7f0000000400)=@ax25={{0x3, @bcast}, [@netrom, @null, @remote, @bcast, @netrom, @null, @bcast, @bcast]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/185, 0xb9}], 0x1, &(0x7f0000000680)=""/246, 0xf6}, 0x1000}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000780)=""/29, 0x1d}, {&(0x7f00000007c0)=""/240, 0xf0}, {&(0x7f00000008c0)=""/251, 0xfb}, {&(0x7f0000000a00)=""/53, 0x35}, {&(0x7f0000000a40)=""/188, 0xbc}, {&(0x7f0000000b00)=""/177, 0xb1}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x7}, 0x8000}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002f40)=""/84, 0x54}, {&(0x7f0000002fc0)=""/243, 0xf3}], 0x2}, 0x6}], 0x3, 0x10000, &(0x7f00000034c0)={0x0, 0x3938700})
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

35.279293437s ago: executing program 0 (id=6006):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffde8, 0x2, {{0x1, 0x9, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0xe, 0x3, 0x9, {0xa2d9, 0x204, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xbab60}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SUPERVISION_ADDR={0xa}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
request_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffe)
r6 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
write(r6, &(0x7f0000000080)="08008edf773c8000", 0xfd)
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e23, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='wg1\x00', 0xfffffffffffffffe, 0x3, 0x9})

35.278917107s ago: executing program 46 (id=6006):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffde8, 0x2, {{0x1, 0x9, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0xe, 0x3, 0x9, {0xa2d9, 0x204, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xbab60}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SUPERVISION_ADDR={0xa}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
request_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffe)
r6 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
write(r6, &(0x7f0000000080)="08008edf773c8000", 0xfd)
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e23, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='wg1\x00', 0xfffffffffffffffe, 0x3, 0x9})

8.903881317s ago: executing program 5 (id=6106):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002200)='./binderfs/binder-control\x00', 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000700)=[@nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18}, @out_dx={0x6a, 0x28, {0x8171, 0x7, 0xfff}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x66, 0x5, 0x101, 0x2}}, @out_dx={0x6a, 0x28, {0xf28a, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x1a, 0x2, 0x3ff, 0x4b15}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4802, 0x2, 0x9, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xca, 0x4, 0x100000000}}, @nested_amd_stgi={0x17e, 0x10}, @out_dx={0x6a, 0x28, {0xeae1, 0x2, 0x5}}, @cpuid={0x64, 0x18, {0x7, 0xfffffffa}}, @nested_load_syzos={0x136, 0x48, {0x1, 0x1000, [@out_dx={0x6a, 0x28, {0x7991, 0x4, 0x6}}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7, 0xe}}, @wr_crn={0x67, 0x20, {0x8, 0x9}}, @out_dx={0x6a, 0x28, {0x9de4, 0x3, 0xffffffff80000001}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x0, 0x300}}, @uexit={0x0, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x6, 0x24}}], 0x338})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000a80)=@svm={0x0, 0x1, 0x1080, {0x5000}, {"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"}})
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x6)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdc000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f779420000baa00066b86b4266ef66b2ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b801000000c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x55)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0xe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x88, 0x29, 0x4, 0x0, 0x0, 0xfffffff5, 0x7f, 0xff, 0xff, 0x58, '\x00', 0x0, 0xfffffffffffffffe})
syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000002c0)={{0x12, 0x1, 0x301, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x10, 0xcf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x0, 0xdd, {0x7, 0x25, 0x1, 0xc, 0x91, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x9, 0x4, {0x7, 0x25, 0x1, 0xc, 0xe, 0x2}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.660303551s ago: executing program 5 (id=6123):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000001100007910480000000000620040600c0000009500000000000000db74589d4b38cc1b6ac380649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd9338831294abf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da68c6e8b542006d8f6f39c4422d6fba70000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000280)={0x1, 0x9, 0xfffffff7, 0x6}, 0x10)
mmap(&(0x7f0000a85000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x4ac0c000)
socket(0x10, 0x3, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@random={'user.', 'rfdno'}, 0x0, 0x0)

5.657602561s ago: executing program 9 (id=6124):
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbba5bb00000000000086dd607694af00082f000000cb41040000ff0200000000000000000008000000010000883e00089078000000000000000000"], 0x0)

5.549667673s ago: executing program 4 (id=6126):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
close(r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000400)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x7)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10)

5.505901214s ago: executing program 4 (id=6127):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000001100007910480000000000620040600c0000009500000000000000db74589d4b38cc1b6ac380649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd9338831294abf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da68c6e8b542006d8f6f39c4422d6fba70000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000280)={0x1, 0x9, 0xfffffff7, 0x6}, 0x10)
mmap(&(0x7f0000a85000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x4ac0c000)
r4 = socket(0x10, 0x3, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@random={'user.', 'rfdno'}, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1002040, &(0x7f0000000040)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}], [{@smackfsdef={'smackfsdef', 0x3d, 'barrier'}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
accept$nfc_llcp(r0, &(0x7f0000000540), &(0x7f0000000480)=0x60)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f00000003c0)}, 0x10)

5.505258045s ago: executing program 9 (id=6128):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffde8, 0x2, {{0x1, 0x9, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0xe, 0x3, 0x9, {0xa2d9, 0x204, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xbab60}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SUPERVISION_ADDR={0xa}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
request_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffe)
r6 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
write(r6, &(0x7f0000000080)="08008edf773c8000", 0xfd)
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e23, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='wg1\x00', 0xfffffffffffffffe, 0x3, 0x9})

4.559981656s ago: executing program 5 (id=6129):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x24, 0x28, 0x68, 0x0, 0x22, 0x4, 0x0, @rand_addr=0x64010101, @local}, "eb2c50e32de1a11117627eea1732f655daa13710"}}}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000280), 0x0}, 0x20)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x6)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
shutdown(r5, 0x1)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0)

4.511033537s ago: executing program 3 (id=6130):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000680)={0x4, 0x1}) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) (async)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async)
read$msr(r0, &(0x7f0000000480)=""/190, 0xbe)

4.507373817s ago: executing program 8 (id=6131):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d9, 0x1, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
getdents(r1, &(0x7f00000001c0)=""/4098, 0x1002)
r2 = userfaultfd(0x80803)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x0, 0xb, 0x148, 0x168, 0x148, 0x240, 0x240, 0x240, 0x240, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x11, 0x0, 0x74}, 0x2e8, 0x100, 0x168, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc]}}, @common=@set={{0x40}, {{0x4, [0x1, 0x0, 0x2, 0x4, 0x3, 0x7], 0x4, 0x9963b34a06fe5c33}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010100, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)

4.457939589s ago: executing program 8 (id=6132):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f00000037c0)={0x9, 0x9, 0x0, 0x4})
prlimit64(r0, 0x5, &(0x7f0000000180)={0x6, 0xfffffffffffffffa}, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000002100)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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")
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x60000001})
write$uinput_user_dev(r3, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080))
rmdir(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.276429533s ago: executing program 5 (id=6133):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e31, @empty=0xfdfdffff}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@nobarrier}, {@nodiscard}, {@nodiscard}, {@inlinecrypt}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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")
setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000001c00), 0x12)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r7, 0x2007ffc)
sendfile(r7, r7, 0x0, 0x2000000000006)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)

4.100304217s ago: executing program 8 (id=6134):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e31, @empty=0xfdfdffff}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@nobarrier}, {@nodiscard}, {@nodiscard}, {@inlinecrypt}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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")
setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000001c00), 0x12)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r7, 0x2007ffc)
sendfile(r7, r7, 0x0, 0x2000000000006)

3.787850614s ago: executing program 3 (id=6135):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x7}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noquota}, {@dioread_lock}, {@noblock_validity}, {@nojournal_checksum}]}, 0x3, 0x48c, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000380)={[{@dots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@fat=@usefree}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {}, {@nodots}, {@fat=@nfs}, {@nodots}, {@fat=@showexec}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@nodots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf25040000003400098008000200ffffffff080002001e1c0000080001006d0000000800020001000000080002000700000008000200080000005400068008000100090000003d00040067636d28616573290000000000e8000000000000000000000000000015000000e3c9ad80003b2653c98dccbb465e710c0f09072cc300000004000519040005002400078008000200090000000800020003000000080001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
unshare(0x24020400)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r6 = socket(0xa, 0x1, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="18050000080000000000000007040000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="00005b3c0400000800bd58e023a51be7ff8400071a74ab8505a180000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_int(r6, 0x29, 0x1f, 0x0, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)

3.265989076s ago: executing program 5 (id=6136):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000030000000000"])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r8, 0x0, 0x0, 0x1001f0)
fallocate(r7, 0x8, 0x2000, 0x8000)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0xef)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

3.183907158s ago: executing program 3 (id=6137):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x80000000}, [@generic={0x6b, 0x1, 0x1, 0x32}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.06163613s ago: executing program 3 (id=6138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001fc0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000ac0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6d05009bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d362160000a217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78992da864879bc3edcc66c487cb9d74b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00000000000000000000009d9ce9f44b7249be5eae8c65b8bd64df90b5a8853231b2c2d2e434d6a967808383880ec7b4537ede2cff75f6ee58f15d95cbb5889bc0a19d9fad2613f7de1938e5e97a569e8b2f29d618350e06bad6a6554da63865bd2c122d0b567f48f89ef9b374c36553509f5f4f0c5ff92f62f3158da0af29e08d7e74", @ANYRES16=r0], 0x5, 0x558b, &(0x7f00000079c0)="$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")
write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x67, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x29, 0xf, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}}, 0x46)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000631124000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="8500f0ff6c0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80)
accept(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10)
syz_emit_ethernet(0x83, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1686dd6a010000004d1100fe8000000000000052554853000000aaff0200000000000000000000000000014e214e20004d90"], 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0))
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r4=>0x0}, 0x6)
ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f00000001c0))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4)

2.538981552s ago: executing program 4 (id=6139):
syz_usb_connect$midi(0x5, 0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100144be00103512138240000102030109025e000101a140030904000004010300010905098211399df7a50f11e63910ff0308060a0425010009050b0c400003190309"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x5, &(0x7f0000000480)={0x0, 0x17, 0x2, @thr={&(0x7f0000000380)="aebfffefc12134df40ba69d364ee09", &(0x7f00000003c0)="124bec47a8579016629b818768cf744e657151815dbe39fe10369ccee28ddc13737cb593d258eb6a9d924a1eedf9191de01bc46c9ee4119731cbaec0f86fdd1f204d8bf71c027adfb9569e6d6d57ad6b9f6997fa62ad13ebca4de5218283d24b82eff524c937a9c479c6d76e9e5dc506198836fedc7e4368b35a4212fd34daf02f5b4f29042bf968fb171a1232a06df346e5eb451a1829648af29b6616b967282fcdbda253de33091173361875ef112c12689fb65c22a20cbcda08"}}, &(0x7f00000004c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24535}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}]}, 0x48}}, 0x0)
syz_usb_connect$uac2(0x1, 0xef, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000ff3e1315084000012203010902dd000301002008080b02000105200909040000000101200009240100000538000309240602030900050010240201030601f8040000000001750207240603010b0007240c0b100d8308240a0304020806090401000001022000090401ae0101022000090501090800070aff0825018103060100090402000001022000090402012402020700cf0007090c240201190440fa5805af1d0e24020104010d02c8d2cce08b280624020102c10b240201d203fa4054b62f1024010509020400000000120f000028090582092000a503020825014114067986"], &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xf, 0xf9, 0x9, 0x10, 0xd}, 0x1c, &(0x7f00000001c0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "63f90254e7825205ca478da8e5b8a388"}]}, 0x3, [{0x94, &(0x7f0000000200)=@string={0x94, 0x3, "215ed92732119d656c2a5681d1bdd41ce9715ebf662383d2a981870a4c8768ed8482e09b0469fe2acddc7473458a20bc69cbb31eaaaf894a0e9b94caf456c0fcb5ae61c20dd3bedab2ba2cf14f4f20e34faf84efc405f8dd50ac0547dc83e4b837d60100826c5cd06e45a852ff7d31dd773e2d8ab49ee9448221f12be74c9ac83aefd61cf4fc71c45956cf84bee4696eb490"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44a}}]})
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000500)=0x8)

1.997170614s ago: executing program 9 (id=6140):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d9, 0x1, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
getdents(r1, 0x0, 0x0)
r2 = userfaultfd(0x80803)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x0, 0xb, 0x148, 0x168, 0x148, 0x240, 0x240, 0x240, 0x240, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x11, 0x0, 0x74}, 0x2e8, 0x100, 0x168, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc]}}, @common=@set={{0x40}, {{0x4, [0x1, 0x0, 0x2, 0x4, 0x3, 0x7], 0x4, 0x9963b34a06fe5c33}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010100, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)

1.960634405s ago: executing program 9 (id=6141):
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff6)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$eJzs3c9rHNcdAPDvzGplyVYruxRTm5YKerChWD9cU7c92b7UB0Nd6kMpPVi1JFd4ZQtLhto1RIYcHEgghFxD8CX/QO7B5OpbCCS55RxwQnDIwQneMLM78rI/pEXW7srezwdGevNmdt/77tPbebOjtxPA0JrKfqQRRyLichIx2bBtImobp+r7Pfn27pVsSaJa/cc3SST1vGL/Z/XfB7IfScRYRHxyLuIXpdZy127fuTZfqda8FjGzvrI6s3b7zonllfmri1cXr8+d/NOp07N/njs1tytxFnGdv/C3X7/1+n//uPRp5UQSZ+JS+f8L0RTHbpmKqXhWD7ExfyQiTmeJNq/Ly6YIIRlwPdiZUv3vsRwRh2MySrFvc9tkLL850MoBPVUtRVSBIZVs9v/yYCsC9FkxDijO7XtxHryXjZyNiKePIlriH6l9NhJj+bnR/idJfp5UyM53D+5C+VkZP949+l62RIfPIUZ2oZxONu5FxK/atX+S1+1g/ilOFn8aacPjsvRsRIzWX4t0h+VPNa33+++vOf6/j3SOv7EdsnjP1H9n+ee2L+p+u8xBxw/AcHp4tn4g38jWnh//s5FhMf6JNuOfiTbHrp0Y9PHv8dnaAbx1/FMc78fyz8jTpnFYNua52P4py80ZX75x/p1O5TeO/7IlK78YC/bD43sRR5viv58P5pLN9k/atH+2y+Uuy/jrZ1+f77Rt0PFXH0Qca3v+8/yKVpaaWV9ZLfKark/OLC1XFmdrP9uW8dGjf3/QqfxBx5+1f3SIf6v2z/JWuyzjw4sPVjptm9g2/vSr0eRSnhqt5/xvfn395lzEaHKhvktD/snNB7Z9eyr2KZ4ji//479r3/y3izxt6o8v4V/957Ukt1XqVtOv2b3lXyT2rdlmHTrL4F3bY/m93Wcb3/7r1m6as8SKxVfzjrU+VdPuaAwAAAAAAwDBK82uwSTq9mU7T6enaHN5fxv60cmNt/fdLN25dX4g4nv8/ZDktrnRP1taTbH2u/v+wxfrJpvU/RMShiHi3NJ6vT1+5UVkYdPAAAAAAAAAAAAAAAAAAAACwRxyoz/8v7lP9Xak2/78r64d7XDug53p5gzlgb9P/YXjl/b+bO7j+p/d1AfrL8R+Gl/4Pw0v/h+Gl/8Pwau7/3g9geOjvMLz0fxhe+j8AAAAAvJIO/fbhF0lEbPxlPF8yo/Vt5YHWDOi1xj4+1tUjpnpWF6C/uuvzLUq7XQ+g/zYv/Xcz/R94pXR1jv+0/uWAva8OMABJu8x8cFDduvM/bPtIAAAAAAAAAAAAAKAHjh0x/x+GVRofD7oKwIC8wER+3wEALzlf/Q/Dyzk+sN0s/o7fE2b+PwAAAAAAAAAAAAD0zUS+JOl0/RagE5Gm09MRP4uIg1FOlpYri7MR8fOI+LxU3petzw260gAAAAAAAAAAAAAAAAAAAPCKWbt959p8pbJ4szHxQ0tOjxPF3cW62blDnV8kUdwFtZ8hd5uIpP+FjkfEXoi9N4mRhpwkYiNr+T1RsZtrsSeqkebVGOCbEgAAAAAAAAAAAAAAAAAADKmGucftHX2/zzUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP57fv//nSeSbZ5n0DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+nnwIAAP///jAzVw==")

1.911421147s ago: executing program 8 (id=6142):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d9, 0x1, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
getdents(r1, &(0x7f00000001c0)=""/4098, 0x1002)
r2 = userfaultfd(0x80803)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x0, 0xb, 0x148, 0x168, 0x148, 0x240, 0x240, 0x240, 0x240, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x11, 0x0, 0x74}, 0x2e8, 0x100, 0x168, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc]}}, @common=@set={{0x40}, {{0x4, [0x1, 0x0, 0x2, 0x4, 0x3, 0x7], 0x4, 0x9963b34a06fe5c33}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010100, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)

1.72858008s ago: executing program 5 (id=6143):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x127)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3", 0xb1}, {&(0x7f00000003c0)="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", 0x5ab}], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}, &(0x7f0000000380)=0x40)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x3})
r2 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
unlinkat(r2, 0x0, 0x200)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x400c6314}], 0x0, 0x0, 0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000f40)=ANY=[@ANYBLOB="18080000000000000000000000000012851000000c00000018000000", @ANYRES32, @ANYBLOB="00000000180000006600000000000000180000000000000000000000000000009500000000000000360a020016000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000950000000000000074cfbd1194447a14b9fcee25ce5e54c0d248cddc5868b70e6bf39d77544e85e257648548d43eaf62d153e790d702a74cace8bd708715b237b3a0faf02f842711efd09c9f9b23e9a0a14c82f6d2d9d0da4027"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x1b8, 0x31, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x1300}, [{0x1a4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x98, 0x17, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x3}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x0, 0x0, 0x7f}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xffe0}}]}, {0x23, 0x6, "03f85751a43a55dff02f87354c46d2d35f20289a0782141af3974b172bb165"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xb8, 0x1c, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff2, 0x9, 0x10000000, 0x888}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfff, 0x0, 0x1, 0x9, 0x100}, 0x3}}]}, {0x44, 0x6, "98e205c7db5bc7cd70482e873d61032e25a2d8919e4c68f5adbebe0b923457fd608f6eb5e885f1f74ba74562b39978f355a37c887168f2ddbbd7cef6a884400f"}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffdd9, 0x8, {0x1, 0x1}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)

1.666949972s ago: executing program 3 (id=6144):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
epoll_create1(0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f00000037c0)={0x9, 0x9, 0x0, 0x4})
prlimit64(r0, 0x5, &(0x7f0000000180)={0x6, 0xfffffffffffffffa}, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000002100)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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")
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x60000001})
write$uinput_user_dev(r3, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
rmdir(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.666307052s ago: executing program 4 (id=6145):
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x4)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r3, 0x1e, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r4, 0x4)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

1.522584065s ago: executing program 8 (id=6146):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e31, @empty=0xfdfdffff}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@nobarrier}, {@nodiscard}, {@nodiscard}, {@inlinecrypt}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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")
setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r2 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x80)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000001c00), 0x12)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r5, 0x2007ffc)
sendfile(r5, r5, 0x0, 0x2000000000006)

1.521902075s ago: executing program 9 (id=6147):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e31, @empty=0xfdfdffff}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@nobarrier}, {@nodiscard}, {@nodiscard}, {@inlinecrypt}]}, 0x81, 0xbe0, &(0x7f0000000440)="$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")
setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000001c00), 0x12)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r7, 0x2007ffc)
sendfile(r7, r7, 0x0, 0x2000000000006)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)

1.337559809s ago: executing program 8 (id=6148):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x80000000}, [@generic={0x6b, 0x1, 0x1, 0x32}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

985.578767ms ago: executing program 4 (id=6149):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f00000037c0)={0x9, 0x9, 0x0, 0x4})
prlimit64(r0, 0x5, &(0x7f0000000180)={0x6, 0xfffffffffffffffa}, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000002100)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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")
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x60000001})
write$uinput_user_dev(r3, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080))
rmdir(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

228.805345ms ago: executing program 9 (id=6150):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffde8, 0x2, {{0x1, 0x9, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0xe, 0x3, 0x9, {0xa2d9, 0x204, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xbab60}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SUPERVISION_ADDR={0xa}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
request_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffe)
r6 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
write(r6, &(0x7f0000000080)="08008edf773c8000", 0xfd)
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e23, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='wg1\x00', 0xfffffffffffffffe, 0x3, 0x9})

4.6288ms ago: executing program 3 (id=6151):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x0, 0xb}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2f}, &(0x7f00000004c0)={0x20, 0x1, 0xb8, "e95e93f401b778fa89ce41dfa64859a9aced1fb14fdbb8b22d321703a87a1840387d1e84f73e71aa252fedda7622b7fa40fd911f0bddb051eea2f6524f6d5a41de68f0b065ec4dc43ffaefcad1b69b14ca7b8c13b897343f04e78207e8b421c31944701a4098c22015100a7e418719823a58e7e68d3ef24bac7dc3a4a9e99a7aaaadd0ec0c33098084d55205dd1fde89bba82f26c585d261dbd728b4bad5f6a9ae52b797fbe9c22318fe74ce6ffa9cd88615a29b756b5bbf"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x5}})

0s ago: executing program 4 (id=6152):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x815)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x4, 0x1000, &(0x7f000000b000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
connect$bt_rfcomm(r5, 0x0, 0x17)
pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000)
write(r4, &(0x7f0000000340), 0x11000)
writev(r4, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1)
r6 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r6, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d00000024000000040000000100000000000000", @ANYRES32=r7], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f0000000080), 0x0}, 0x20)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

tinue. Quota mode: none.
[ 1082.413071][  T310] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1082.437326][T17903] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[ 1082.448584][T17903] EXT4-fs (loop8): Cannot change journaled quota options when quota turned on
[ 1082.458183][  T310] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1082.469086][  T310] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0
[ 1082.489009][T17912] loop5: detected capacity change from 0 to 40427
[ 1082.503168][T17912] F2FS-fs (loop5): invalid crc value
[ 1082.518182][T17912] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1082.553034][T17915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=17915 comm=syz.4.5411
[ 1082.560767][T14225] EXT4-fs error (device loop8): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1082.581426][T14225] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1082.589711][T17912] F2FS-fs (loop5): Start checkpoint disabled!
[ 1082.598042][T14225] EXT4-fs error (device loop8): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1082.611465][    T6] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0
[ 1082.619164][    T6] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0
[ 1082.629008][    T6] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0
[ 1082.630035][T17912] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1082.636963][    T6] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0
[ 1082.652774][    T6] playstation 0003:054C:0DF2.004A: unknown main item tag 0x0
[ 1082.661378][    T6] playstation 0003:054C:0DF2.004A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[ 1082.675045][T17912] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5410'.
[ 1082.684288][T17912] netlink: 'syz.5.5410': attribute type 3 has an invalid length.
[ 1082.692371][T17912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5410'.
[ 1082.744603][  T310] attempt to access beyond end of device
[ 1082.744603][  T310] loop5: rw=2049, want=40976, limit=40427
[ 1083.058604][    T6] playstation 0003:054C:0DF2.004A: Invalid reportID received, expected 32 got 144
[ 1083.087598][    T6] playstation 0003:054C:0DF2.004A: Failed to retrieve DualSense firmware info: -22
[ 1083.108130][    T6] playstation 0003:054C:0DF2.004A: Failed to get firmware info from DualSense
[ 1083.127964][    T6] playstation 0003:054C:0DF2.004A: Failed to create dualsense.
[ 1083.146456][    T6] playstation: probe of 0003:054C:0DF2.004A failed with error -22
[ 1083.214719][T17931] loop0: detected capacity change from 0 to 128
[ 1083.276353][T17931] input: syz1 as /devices/virtual/input/input48
[ 1083.437566][    T6] usb 1-1: USB disconnect, device number 43
[ 1083.819098][T17942] loop8: detected capacity change from 0 to 512
[ 1083.861298][T17942] EXT4-fs (loop8): Ignoring removed orlov option
[ 1083.874233][T17942] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1083.886707][T17942] EXT4-fs (loop8): 1 truncate cleaned up
[ 1083.892475][T17942] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1083.924147][  T987] usb 6-1: new low-speed USB device number 51 using dummy_hcd
[ 1084.160632][T17945] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5419'.
[ 1084.330238][  T987] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1084.340476][  T987] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1084.565299][ T1658] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1084.628366][    T6] usb 4-1: USB disconnect, device number 43
[ 1084.690657][T17955] loop8: detected capacity change from 0 to 1024
[ 1084.728974][T17955] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 2: comm syz.8.5423: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1084.743579][T17955] Quota error (device loop8): qtree_write_dquot: dquota write failed
[ 1084.751734][T17955] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 48: comm syz.8.5423: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1084.766704][T17955] Quota error (device loop8): v2_write_file_info: Can't write info structure
[ 1084.772422][T17953] loop3: detected capacity change from 0 to 40427
[ 1084.775649][T17955] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.5423: Failed to acquire dquot type 0
[ 1084.796374][T17955] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1084.800680][T17953] F2FS-fs (loop3): invalid crc value
[ 1084.811626][T17955] EXT4-fs error (device loop8): ext4_evict_inode:285: inode #11: comm syz.8.5423: mark_inode_dirty error
[ 1084.812536][T17953] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1084.823186][T17955] EXT4-fs warning (device loop8): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1084.839916][T17955] EXT4-fs (loop8): 1 orphan inode deleted
[ 1084.845761][ T1658] usb 1-1: Using ep0 maxpacket: 32
[ 1084.851899][T17955] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1084.858525][T17953] F2FS-fs (loop3): Start checkpoint disabled!
[ 1084.883111][T17953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1084.887706][   T45] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1084.905118][   T45] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1084.905985][T17955] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[ 1084.921050][   T45] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1084.924914][T17955] EXT4-fs (loop8): Cannot change journaled quota options when quota turned on
[ 1084.946017][T17953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5424'.
[ 1084.955830][T17953] netlink: 'syz.3.5424': attribute type 3 has an invalid length.
[ 1084.964273][T17953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5424'.
[ 1084.988123][ T1658] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1084.992936][   T45] attempt to access beyond end of device
[ 1084.992936][   T45] loop3: rw=2049, want=40976, limit=40427
[ 1084.999559][ T1658] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1085.021155][ T1658] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1085.031679][ T1658] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1085.045108][ T1658] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1085.051799][ T1658] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1085.061022][ T1658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.069788][ T1658] usb 1-1: config 0 descriptor??
[ 1085.075077][T14225] EXT4-fs error (device loop8): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1085.088601][T14225] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1085.099341][T14225] EXT4-fs error (device loop8): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1085.138949][   T30] audit: type=1326 audit(2000000983.296:24966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17963 comm="syz.3.5428" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9104e9e59 code=0x7ffc0000
[ 1085.164383][   T30] audit: type=1326 audit(2000000983.296:24967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17963 comm="syz.3.5428" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9104e9e59 code=0x7ffc0000
[ 1085.190441][   T30] audit: type=1326 audit(2000000983.296:24968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17963 comm="syz.3.5428" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9104e9e59 code=0x7ffc0000
[ 1085.226743][   T30] audit: type=1326 audit(2000000983.296:24969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17963 comm="syz.3.5428" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9104e9e59 code=0x7ffc0000
[ 1085.252254][   T30] audit: type=1326 audit(2000000983.296:24970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17963 comm="syz.3.5428" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9104e9e59 code=0x7ffc0000
[ 1085.277819][   T30] audit: type=1326 audit(2000000983.296:24971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17963 comm="syz.3.5428" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9104e9e59 code=0x7ffc0000
[ 1085.303777][   T30] audit: type=1326 audit(2000000983.296:24972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17963 comm="syz.3.5428" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9104e9e59 code=0x7ffc0000
[ 1085.392041][T17972] loop3: detected capacity change from 0 to 128
[ 1085.477082][T17972] input: syz1 as /devices/virtual/input/input49
[ 1085.667333][ T1658] hid-generic 0003:1B1C:0C10.004B: unknown main item tag 0x0
[ 1085.674917][ T1658] hid-generic 0003:1B1C:0C10.004B: unknown main item tag 0x0
[ 1085.698065][ T1658] hid-generic 0003:1B1C:0C10.004B: unknown main item tag 0x0
[ 1085.705625][ T1658] hid-generic 0003:1B1C:0C10.004B: unknown main item tag 0x0
[ 1085.714014][ T1658] hid-generic 0003:1B1C:0C10.004B: unknown main item tag 0x0
[ 1085.740974][ T1658] hid-generic 0003:1B1C:0C10.004B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0
[ 1085.887611][  T634] usb 1-1: USB disconnect, device number 44
[ 1086.025084][T17981] loop8: detected capacity change from 0 to 4096
[ 1086.055039][T17981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1086.063729][T17981] System zones: 0-5
[ 1086.068625][T17981] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1086.188275][T17985] loop3: detected capacity change from 0 to 1024
[ 1086.612683][T17992] device bridge_slave_1 left promiscuous mode
[ 1086.619147][T17992] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.627343][T17992] device bridge_slave_0 left promiscuous mode
[ 1086.633643][T17992] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1086.905675][    T6] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1086.944283][  T987] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1086.957308][T18000] loop3: detected capacity change from 0 to 1024
[ 1086.964078][  T987] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1086.991260][  T987] usb 6-1: can't set config #1, error -71
[ 1086.999552][  T987] usb 6-1: USB disconnect, device number 51
[ 1087.035610][T18000] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5437: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1087.077971][T18000] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5437: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1087.111410][T18000] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5437: Failed to acquire dquot type 0
[ 1087.161797][T18000] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1087.182878][T18000] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5437: mark_inode_dirty error
[ 1087.194458][T18000] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1087.205475][T18000] EXT4-fs (loop3): 1 orphan inode deleted
[ 1087.211579][T18000] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1087.234633][   T45] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1087.253967][T18000] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1087.255788][    T6] usb 1-1: device descriptor read/64, error -71
[ 1087.292123][T18000] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1087.301487][   T45] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1087.428524][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1087.466369][T18011] loop8: detected capacity change from 0 to 40427
[ 1087.473256][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1087.502348][T18011] F2FS-fs (loop8): invalid crc value
[ 1087.510638][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1087.523415][T18011] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1087.562858][T18011] F2FS-fs (loop8): Start checkpoint disabled!
[ 1087.569671][T18011] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1087.587741][T15611] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1087.613921][T18015] loop3: detected capacity change from 0 to 256
[ 1087.631633][T18015] exfat: Deprecated parameter 'namecase'
[ 1087.707127][    T6] usb 1-1: device descriptor read/64, error -71
[ 1087.737567][T18017] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5438'.
[ 1087.749653][T18015] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[ 1087.761954][T18017] netlink: 'syz.8.5438': attribute type 3 has an invalid length.
[ 1087.769683][T18017] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5438'.
[ 1087.791283][T18015] FAULT_INJECTION: forcing a failure.
[ 1087.791283][T18015] name failslab, interval 1, probability 0, space 0, times 0
[ 1087.805182][T18015] CPU: 1 PID: 18015 Comm: syz.3.5441 Tainted: G        W         syzkaller #0
[ 1087.814584][T18015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1087.824748][T18015] Call Trace:
[ 1087.828117][T18015]  <TASK>
[ 1087.831315][T18015]  __dump_stack+0x21/0x30
[ 1087.836024][T18015]  dump_stack_lvl+0x110/0x170
[ 1087.840706][T18015]  ? show_regs_print_info+0x20/0x20
[ 1087.846104][T18015]  dump_stack+0x15/0x20
[ 1087.850276][T18015]  should_fail+0x3ab/0x500
[ 1087.854811][T18015]  __should_failslab+0xa4/0xe0
[ 1087.859854][T18015]  should_failslab+0x9/0x20
[ 1087.864369][T18015]  slab_pre_alloc_hook+0x39/0xd0
[ 1087.869332][T18015]  ? getname_flags+0xba/0x510
[ 1087.874214][T18015]  kmem_cache_alloc+0x44/0x260
[ 1087.878993][T18015]  getname_flags+0xba/0x510
[ 1087.883592][T18015]  ? debug_smp_processor_id+0x17/0x20
[ 1087.889060][T18015]  __x64_sys_rename+0x5f/0x90
[ 1087.893748][T18015]  x64_sys_call+0x680/0x9a0
[ 1087.898433][T18015]  do_syscall_64+0x4c/0xa0
[ 1087.903171][T18015]  ? clear_bhb_loop+0x50/0xa0
[ 1087.907859][T18015]  ? clear_bhb_loop+0x50/0xa0
[ 1087.912631][T18015]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1087.918544][T18015] RIP: 0033:0x7fb9104e9e59
[ 1087.923054][T18015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1087.942788][T18015] RSP: 002b:00007fb90ef43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 1087.951206][T18015] RAX: ffffffffffffffda RBX: 00007fb910771fa0 RCX: 00007fb9104e9e59
[ 1087.959188][T18015] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000200
[ 1087.967544][T18015] RBP: 00007fb90ef43090 R08: 0000000000000000 R09: 0000000000000000
[ 1087.974231][T15611] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1087.975847][T18015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1087.975863][T18015] R13: 00007fb910772038 R14: 00007fb910771fa0 R15: 00007ffd65394e98
[ 1087.984068][T15611] usb 6-1: config 0 has no interface number 0
[ 1087.992286][T18015]  </TASK>
[ 1088.010087][    T6] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1088.018000][T15611] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1088.028451][T15611] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1088.037939][T15611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.051592][T15611] usb 6-1: config 0 descriptor??
[ 1088.092691][T15611] usbhid 6-1:0.1: couldn't find an input interrupt endpoint
[ 1088.479847][T18025] loop3: detected capacity change from 0 to 128
[ 1088.772063][T12857] attempt to access beyond end of device
[ 1088.772063][T12857] loop8: rw=2049, want=40976, limit=40427
[ 1088.787211][T18025] attempt to access beyond end of device
[ 1088.787211][T18025] loop3: rw=2049, want=1041, limit=128
[ 1088.941781][T18029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=18029 comm=syz.8.5445
[ 1089.027337][T18029] loop8: detected capacity change from 0 to 40427
[ 1089.089395][T18029] F2FS-fs (loop8): invalid crc value
[ 1089.095865][T18029] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1089.102346][    T6] usb 1-1: device descriptor read/64, error -71
[ 1089.125732][T18029] F2FS-fs (loop8): Start checkpoint disabled!
[ 1089.132862][T18029] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1089.172711][T12857] attempt to access beyond end of device
[ 1089.172711][T12857] loop8: rw=2049, want=45104, limit=40427
[ 1089.258747][T18036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=18036 comm=syz.8.5447
[ 1089.359435][T18036] F2FS-fs (loop8): invalid crc value
[ 1089.366414][T18036] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1089.404422][T18036] F2FS-fs (loop8): Start checkpoint disabled!
[ 1089.411485][T18036] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1089.497252][  T311] attempt to access beyond end of device
[ 1089.497252][  T311] loop8: rw=2049, want=45104, limit=40427
[ 1089.523641][    T6] usb 1-1: device descriptor read/64, error -71
[ 1089.652668][    T6] usb usb1-port1: attempt power cycle
[ 1089.738554][T18055] EXT4-fs (loop3): Ignoring removed orlov option
[ 1089.750741][T18055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1089.785190][T18055] EXT4-fs (loop3): 1 truncate cleaned up
[ 1089.791750][T18055] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1090.166095][T18067] set_capacity_and_notify: 5 callbacks suppressed
[ 1090.166124][T18067] loop8: detected capacity change from 0 to 128
[ 1090.284475][T18067] attempt to access beyond end of device
[ 1090.284475][T18067] loop8: rw=2049, want=1041, limit=128
[ 1090.323749][T18067] attempt to access beyond end of device
[ 1090.323749][T18067] loop8: rw=524288, want=369, limit=128
[ 1090.437419][  T987] usb 6-1: USB disconnect, device number 52
[ 1090.530273][T18073] loop8: detected capacity change from 0 to 128
[ 1090.850092][T18075] loop5: detected capacity change from 0 to 128
[ 1091.500559][    T6] usb 1-1: new low-speed USB device number 48 using dummy_hcd
[ 1091.906665][    T6] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1092.846990][T16072] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1092.866376][    T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1092.975918][T18085] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1092.986246][T18085] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1093.037632][T18105] loop5: detected capacity change from 0 to 4096
[ 1093.084987][T18105] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1093.115925][T18105] System zones: 0-5
[ 1093.135491][T16072] usb 9-1: device descriptor read/64, error -71
[ 1093.136473][T18105] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1093.179464][T18108] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1093.187785][T18108] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1093.936953][T16072] usb 9-1: device descriptor read/64, error -71
[ 1094.013704][T18120] overlayfs: failed to clone upperpath
[ 1094.038544][T18122] loop3: detected capacity change from 0 to 128
[ 1094.225495][T16072] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1094.321163][T18129] loop0: detected capacity change from 0 to 128
[ 1094.370871][T18129] attempt to access beyond end of device
[ 1094.370871][T18129] loop0: rw=2049, want=1041, limit=128
[ 1094.396498][    T6] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1094.405653][    T6] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1094.412661][T18126] loop3: detected capacity change from 0 to 40427
[ 1094.429056][    T6] usb 1-1: can't set config #1, error -71
[ 1094.438535][    T6] usb 1-1: USB disconnect, device number 48
[ 1094.448377][T18126] F2FS-fs (loop3): invalid crc value
[ 1094.472197][T18126] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1094.517829][T18126] F2FS-fs (loop3): Start checkpoint disabled!
[ 1094.524806][T16072] usb 9-1: device descriptor read/64, error -71
[ 1094.531385][T18126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1094.567801][T18126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5475'.
[ 1094.573986][T18131] loop0: detected capacity change from 0 to 40427
[ 1094.576989][T18126] netlink: 'syz.3.5475': attribute type 3 has an invalid length.
[ 1094.591688][T18126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5475'.
[ 1094.593771][T18131] F2FS-fs (loop0): fault_injection options not supported
[ 1094.609874][T18131] F2FS-fs (loop0): fault_type options not supported
[ 1094.617918][T18131] F2FS-fs (loop0): invalid crc value
[ 1094.625611][T18131] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1094.628159][   T45] attempt to access beyond end of device
[ 1094.628159][   T45] loop3: rw=2049, want=40976, limit=40427
[ 1094.664386][T18131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1094.759080][T18141] loop3: detected capacity change from 0 to 1024
[ 1094.929414][T18142] attempt to access beyond end of device
[ 1094.929414][T18142] loop0: rw=2049, want=47072, limit=40427
[ 1094.952395][T18142] attempt to access beyond end of device
[ 1094.952395][T18142] loop0: rw=0, want=47072, limit=40427
[ 1095.187307][T16072] usb 9-1: device descriptor read/64, error -71
[ 1095.251984][T18141] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5479: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1095.411132][T16072] usb usb9-port1: attempt power cycle
[ 1095.485483][T18141] __quota_error: 34 callbacks suppressed
[ 1095.485503][T18141] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1095.500383][T18141] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5479: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1095.515086][T18141] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1095.524431][T18141] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5479: Failed to acquire dquot type 0
[ 1095.615269][T18141] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1095.625610][T18141] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5479: mark_inode_dirty error
[ 1095.638318][T18141] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1095.650369][T18141] EXT4-fs (loop3): 1 orphan inode deleted
[ 1095.656861][T18141] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1095.680659][   T45] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1095.796037][   T45] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1095.805191][T15352] attempt to access beyond end of device
[ 1095.805191][T15352] loop0: rw=2049, want=47080, limit=40427
[ 1095.845637][T18141] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1095.879128][   T45] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1095.906313][T18141] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1096.034459][T18156] loop8: detected capacity change from 0 to 4096
[ 1096.081836][T18156] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1096.103832][T18156] System zones: 0-5
[ 1096.120528][T18156] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1096.201354][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1096.215058][T18160] loop5: detected capacity change from 0 to 4096
[ 1096.224434][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1096.236004][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1096.249365][T18160] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1096.266080][T18160] System zones: 0-5
[ 1096.271237][T18160] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1096.476716][T18171] loop0: detected capacity change from 0 to 128
[ 1096.764513][  T634] usb 4-1: new low-speed USB device number 44 using dummy_hcd
[ 1096.799483][T18173] loop8: detected capacity change from 0 to 40427
[ 1096.835497][T18173] F2FS-fs (loop8): fault_injection options not supported
[ 1096.837880][T18171] attempt to access beyond end of device
[ 1096.837880][T18171] loop0: rw=2049, want=1041, limit=128
[ 1096.854712][T18173] F2FS-fs (loop8): fault_type options not supported
[ 1096.868293][T18173] F2FS-fs (loop8): invalid crc value
[ 1096.881384][T18173] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1096.923141][T18173] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1097.107165][T18180] loop5: detected capacity change from 0 to 40427
[ 1097.134886][T18180] F2FS-fs (loop5): invalid crc value
[ 1097.650527][T18186] attempt to access beyond end of device
[ 1097.650527][T18186] loop8: rw=2049, want=47072, limit=40427
[ 1097.694684][T18186] attempt to access beyond end of device
[ 1097.694684][T18186] loop8: rw=0, want=47072, limit=40427
[ 1099.899423][T14225] attempt to access beyond end of device
[ 1099.899423][T14225] loop8: rw=2049, want=47080, limit=40427
[ 1099.921296][T18180] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1099.976825][T18180] F2FS-fs (loop5): Start checkpoint disabled!
[ 1099.995425][  T634] usb 4-1: device descriptor read/all, error -71
[ 1100.005852][T18199] loop0: detected capacity change from 0 to 1024
[ 1100.009709][T18180] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1100.040406][T18199] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.5496: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1100.055956][T18199] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1100.064367][T18199] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.5496: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1100.092465][T18199] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1100.101337][T18199] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.5496: Failed to acquire dquot type 0
[ 1100.264252][T18199] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1100.297757][T18180] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5489'.
[ 1100.322141][T18199] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.5496: mark_inode_dirty error
[ 1100.338513][T18205] loop8: detected capacity change from 0 to 512
[ 1100.345473][T18180] netlink: 'syz.5.5489': attribute type 3 has an invalid length.
[ 1100.391482][  T634] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1100.425103][T18205] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.5493: missing EA_INODE flag
[ 1100.441135][T18199] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1100.456421][T18180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5489'.
[ 1100.467326][T18205] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.5493: error while reading EA inode 2 err=-117
[ 1100.480588][T18199] EXT4-fs (loop0): 1 orphan inode deleted
[ 1100.489797][T18199] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1100.515997][  T311] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1100.554776][T18205] EXT4-fs (loop8): 1 orphan inode deleted
[ 1100.605438][T18205] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1100.629744][  T311] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1100.660122][   T45] attempt to access beyond end of device
[ 1100.660122][   T45] loop5: rw=2049, want=40976, limit=40427
[ 1100.673883][  T311] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0
[ 1100.754739][  T634] usb 4-1: device descriptor read/64, error -71
[ 1100.823403][T18199] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[ 1100.833805][T18199] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on
[ 1100.923676][T18209] loop8: detected capacity change from 0 to 4096
[ 1100.970567][T15352] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1100.984048][T18209] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1100.992866][T18209] System zones: 0-5
[ 1101.027272][T15352] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1101.028736][T18209] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1101.037109][T15352] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1101.940857][  T634] usb 4-1: device descriptor read/64, error -71
[ 1101.953235][T18226] loop0: detected capacity change from 0 to 128
[ 1102.074563][  T634] usb usb4-port1: attempt power cycle
[ 1102.114540][T18226] attempt to access beyond end of device
[ 1102.114540][T18226] loop0: rw=2049, want=1041, limit=128
[ 1102.208038][T15611] usb 6-1: new low-speed USB device number 53 using dummy_hcd
[ 1102.296913][T18238] loop8: detected capacity change from 0 to 4096
[ 1102.348286][T18238] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1102.355122][T18238] EXT4-fs (loop8): Ignoring removed orlov option
[ 1102.577782][T18238] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1102.685343][  T634] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1102.806433][T15611] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1102.827488][T15611] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1102.833905][T18250] overlayfs: failed to resolve './file0': -2
[ 1102.903062][  T634] usb 4-1: device descriptor read/8, error -71
[ 1103.032088][T18256] loop0: detected capacity change from 0 to 4096
[ 1103.063412][T18256] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1103.082775][T18256] System zones: 0-5
[ 1103.088351][T18256] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1103.148407][  T634] usb 4-1: device descriptor read/8, error -71
[ 1103.159036][ T7784] usb 9-1: new full-speed USB device number 31 using dummy_hcd
[ 1104.409566][ T7784] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1104.441779][T18278] loop3: detected capacity change from 0 to 128
[ 1104.469932][ T7784] usb 9-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1104.479670][ T7784] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1104.495446][ T7784] usb 9-1: config 0 descriptor??
[ 1105.101986][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x1
[ 1105.127613][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x5
[ 1105.215251][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x6
[ 1105.367576][   T45] attempt to access beyond end of device
[ 1105.367576][   T45] loop3: rw=1, want=1041, limit=128
[ 1105.387991][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x0
[ 1105.412949][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x0
[ 1105.430662][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x0
[ 1105.443671][T18292] loop5: detected capacity change from 0 to 1024
[ 1105.488695][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x0
[ 1105.497119][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x0
[ 1105.505619][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x0
[ 1105.515372][ T7784] logitech-djreceiver 0003:046D:C52F.004C: unknown main item tag 0x0
[ 1105.520240][T18292] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 2: comm syz.5.5522: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1105.539360][T18292] Quota error (device loop5): qtree_write_dquot: dquota write failed
[ 1105.547511][T18292] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 48: comm syz.5.5522: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1105.562048][T15611] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1105.571404][T18292] Quota error (device loop5): v2_write_file_info: Can't write info structure
[ 1105.581099][T15611] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1105.581408][T18292] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.5522: Failed to acquire dquot type 0
[ 1105.601181][T18292] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1105.611411][T15611] usb 6-1: can't set config #1, error -71
[ 1105.611887][T18292] EXT4-fs error (device loop5): ext4_evict_inode:285: inode #11: comm syz.5.5522: mark_inode_dirty error
[ 1105.623325][T15611] usb 6-1: USB disconnect, device number 53
[ 1105.629586][T18292] EXT4-fs warning (device loop5): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1105.645202][T18292] EXT4-fs (loop5): 1 orphan inode deleted
[ 1105.651175][T18292] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1105.681386][   T45] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1105.696540][   T45] Quota error (device loop5): remove_tree: Can't read quota data block 1
[ 1105.700457][T18292] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option
[ 1105.713607][   T45] EXT4-fs error (device loop5): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1105.715976][T18292] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on
[ 1105.788953][T15113] EXT4-fs error (device loop5): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1105.802332][T15113] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1105.812214][T15113] EXT4-fs error (device loop5): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1105.969454][T16072] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1105.977284][  T634] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1106.397494][T16072] usb 4-1: Using ep0 maxpacket: 32
[ 1106.474039][  T987] usb 9-1: USB disconnect, device number 31
[ 1106.514497][  T634] usb 1-1: device descriptor read/64, error -71
[ 1106.557273][T16072] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1106.567672][T16072] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1106.600095][T16072] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1106.610376][T16072] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1106.892299][T18316] loop8: detected capacity change from 0 to 4096
[ 1106.907902][T16072] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1106.924572][T16072] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1106.925509][T18316] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1106.942268][T16072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1106.951161][T18316] System zones: 0-5
[ 1106.955574][T16072] usb 4-1: config 0 descriptor??
[ 1106.958283][T18316] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1107.241103][  T634] usb 1-1: device descriptor read/64, error -71
[ 1107.412082][ T7784] usb 6-1: new low-speed USB device number 54 using dummy_hcd
[ 1107.467140][T16072] hid-generic 0003:1B1C:0C10.004D: unknown main item tag 0x0
[ 1107.474799][T16072] hid-generic 0003:1B1C:0C10.004D: unknown main item tag 0x0
[ 1107.482553][T16072] hid-generic 0003:1B1C:0C10.004D: unknown main item tag 0x0
[ 1107.490482][T16072] hid-generic 0003:1B1C:0C10.004D: unknown main item tag 0x0
[ 1107.498258][T16072] hid-generic 0003:1B1C:0C10.004D: unknown main item tag 0x0
[ 1107.506880][T16072] hid-generic 0003:1B1C:0C10.004D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1107.529628][  T634] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1107.682260][  T987] usb 4-1: USB disconnect, device number 48
[ 1107.818182][ T7784] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1107.829479][  T634] usb 1-1: device descriptor read/64, error -71
[ 1107.838803][ T7784] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1108.234968][T18338] loop3: detected capacity change from 0 to 1024
[ 1108.256308][  T634] usb 1-1: device descriptor read/64, error -71
[ 1108.384951][  T634] usb usb1-port1: attempt power cycle
[ 1108.468200][T18338] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5537: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1108.526209][T18338] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1108.571545][T18338] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5537: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1108.646916][T18338] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1108.720878][T18338] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5537: Failed to acquire dquot type 0
[ 1108.822726][  T634] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1108.891299][T18338] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1108.947461][T18338] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5537: mark_inode_dirty error
[ 1109.160417][T18338] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1109.209703][T18338] EXT4-fs (loop3): 1 orphan inode deleted
[ 1109.215616][T18338] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1109.238238][ T1517] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1109.248304][T18350] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1109.263148][ T1517] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1109.271959][T18350] SELinux: failed to load policy
[ 1109.276678][T18338] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1109.294492][T18338] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1109.295775][T18348] loop0: detected capacity change from 0 to 4096
[ 1109.303981][ T1517] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0
[ 1109.332886][T18348] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1109.339795][T18348] EXT4-fs (loop0): Ignoring removed orlov option
[ 1109.358004][T18348] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1109.389018][  T634] usb 1-1: device not accepting address 51, error -71
[ 1109.522523][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1109.535961][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1109.545746][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1109.617899][T18357] overlayfs: failed to resolve './file0': -2
[ 1110.224523][T18368] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5545'.
[ 1110.368283][T18372] loop3: detected capacity change from 0 to 128
[ 1110.425732][ T7784] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1110.435709][ T7784] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1110.457929][  T634] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[ 1110.473188][T18372] input: syz1 as /devices/virtual/input/input52
[ 1110.575500][ T7784] usb 6-1: can't set config #1, error -71
[ 1110.583263][ T7784] usb 6-1: USB disconnect, device number 54
[ 1110.692754][T15611] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1110.692761][  T634] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1110.692791][  T634] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1110.737959][  T634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.760489][  T634] usb 1-1: config 0 descriptor??
[ 1110.949305][T15611] usb 9-1: Using ep0 maxpacket: 32
[ 1111.077568][T15611] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.088368][T15611] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1111.099583][T15611] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1111.109657][T15611] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1111.123059][T15611] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1111.129852][T15611] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1111.139257][T15611] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.151448][T15611] usb 9-1: config 0 descriptor??
[ 1111.214501][T18383] loop3: detected capacity change from 0 to 128
[ 1111.237964][ T7784] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1111.292323][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x1
[ 1111.300665][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x5
[ 1111.308903][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x6
[ 1111.317648][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x0
[ 1111.325906][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x0
[ 1111.334269][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x0
[ 1111.342370][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x0
[ 1111.350576][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x0
[ 1111.358800][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x0
[ 1111.367233][  T634] logitech-djreceiver 0003:046D:C52F.004E: unknown main item tag 0x0
[ 1111.373516][T18383] attempt to access beyond end of device
[ 1111.373516][T18383] loop3: rw=2049, want=1041, limit=128
[ 1111.391341][T18383] attempt to access beyond end of device
[ 1111.391341][T18383] loop3: rw=524288, want=369, limit=128
[ 1111.558255][ T7784] usb 6-1: device descriptor read/64, error -71
[ 1111.605306][T18394] loop3: detected capacity change from 0 to 512
[ 1111.634724][T18394] EXT4-fs (loop3): Ignoring removed orlov option
[ 1111.662634][T18394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1111.676266][T15611] hid-generic 0003:1B1C:0C10.004F: unknown main item tag 0x0
[ 1111.683905][T15611] hid-generic 0003:1B1C:0C10.004F: unknown main item tag 0x0
[ 1111.702610][T15611] hid-generic 0003:1B1C:0C10.004F: unknown main item tag 0x0
[ 1111.718589][T15611] hid-generic 0003:1B1C:0C10.004F: unknown main item tag 0x0
[ 1111.727611][T18394] EXT4-fs (loop3): 1 truncate cleaned up
[ 1111.733694][T15611] hid-generic 0003:1B1C:0C10.004F: unknown main item tag 0x0
[ 1111.750599][T18394] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1111.769632][T15611] hid-generic 0003:1B1C:0C10.004F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0
[ 1111.911360][T15611] usb 9-1: USB disconnect, device number 32
[ 1112.017971][ T7784] usb 6-1: device descriptor read/64, error -71
[ 1112.306378][ T7784] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1112.594664][ T1658] usb 1-1: USB disconnect, device number 52
[ 1112.699219][ T7784] usb 6-1: device descriptor read/64, error -71
[ 1112.765820][T15611] usb 9-1: new low-speed USB device number 33 using dummy_hcd
[ 1112.786562][T18412] loop0: detected capacity change from 0 to 4096
[ 1112.807209][T18412] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1112.815832][T18412] System zones: 0-5
[ 1112.821023][T18412] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1113.567229][ T7784] usb 6-1: device descriptor read/64, error -71
[ 1113.663500][T15611] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1113.682634][T15611] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1113.695705][ T7784] usb usb6-port1: attempt power cycle
[ 1114.165720][ T7784] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1114.191680][T18428] loop0: detected capacity change from 0 to 128
[ 1114.379561][ T7784] usb 6-1: device descriptor read/8, error -71
[ 1114.557202][T18432] loop5: detected capacity change from 0 to 4096
[ 1114.791421][T18432] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1114.799935][T18432] System zones: 0-5
[ 1114.804665][T18432] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1114.817585][ T7784] usb 6-1: device descriptor read/8, error -71
[ 1115.061512][T18442] loop0: detected capacity change from 0 to 4096
[ 1115.085610][T18442] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1115.092567][T18442] EXT4-fs (loop0): Ignoring removed orlov option
[ 1115.112078][T18442] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1115.189010][T18446] loop3: detected capacity change from 0 to 512
[ 1115.358481][T18446] EXT4-fs (loop3): Ignoring removed orlov option
[ 1115.384594][T18446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1115.432186][T18451] overlayfs: failed to resolve './file0': -2
[ 1115.465269][T18446] EXT4-fs (loop3): 1 truncate cleaned up
[ 1115.501632][T18446] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1115.952098][T18456] loop5: detected capacity change from 0 to 512
[ 1116.035717][   T26] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[ 1116.047043][T18456] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.5572: missing EA_INODE flag
[ 1116.066922][T18456] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.5572: error while reading EA inode 2 err=-117
[ 1116.089203][T15611] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1116.098743][T18456] EXT4-fs (loop5): 1 orphan inode deleted
[ 1116.106986][T18456] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1116.122087][T15611] usb 9-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1116.164001][T15611] usb 9-1: can't set config #1, error -71
[ 1116.175478][T15611] usb 9-1: USB disconnect, device number 33
[ 1116.325168][T18463] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1116.338183][T18463] SELinux: failed to load policy
[ 1116.452535][   T26] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1116.459649][   T26] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1116.469398][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.485263][   T26] usb 1-1: config 0 descriptor??
[ 1116.635076][T18467] loop3: detected capacity change from 0 to 4096
[ 1116.721710][T18467] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1116.730333][T18467] System zones: 0-5
[ 1116.735136][T18467] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1117.162121][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x1
[ 1117.176725][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x5
[ 1117.185248][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x6
[ 1117.193918][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x0
[ 1117.202593][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x0
[ 1117.205622][T18471] loop8: detected capacity change from 0 to 40427
[ 1117.210796][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x0
[ 1117.232875][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x0
[ 1117.241133][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x0
[ 1117.250783][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x0
[ 1117.259975][   T26] logitech-djreceiver 0003:046D:C52F.0050: unknown main item tag 0x0
[ 1117.284759][T18478] loop5: detected capacity change from 0 to 128
[ 1117.500624][T18471] F2FS-fs (loop8): fault_injection options not supported
[ 1117.515560][T18471] F2FS-fs (loop8): fault_type options not supported
[ 1117.654183][T18471] F2FS-fs (loop8): invalid crc value
[ 1117.680962][T18471] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1117.806704][T18471] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1118.160319][T18490] attempt to access beyond end of device
[ 1118.160319][T18490] loop8: rw=2049, want=47072, limit=40427
[ 1118.210663][T18490] attempt to access beyond end of device
[ 1118.210663][T18490] loop8: rw=0, want=47072, limit=40427
[ 1119.393886][ T7020] usb 1-1: USB disconnect, device number 53
[ 1119.628159][T14225] attempt to access beyond end of device
[ 1119.628159][T14225] loop8: rw=2049, want=47080, limit=40427
[ 1119.691573][T18494] loop3: detected capacity change from 0 to 40427
[ 1119.707920][T18494] F2FS-fs (loop3): invalid crc value
[ 1119.865632][   T26] usb 6-1: new low-speed USB device number 59 using dummy_hcd
[ 1119.996869][T18494] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1120.248966][T18494] F2FS-fs (loop3): Start checkpoint disabled!
[ 1120.314968][T18494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1120.353108][   T26] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1120.553451][   T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1120.616906][T18513] loop8: detected capacity change from 0 to 4096
[ 1120.631007][T18494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5580'.
[ 1120.660473][T18494] netlink: 'syz.3.5580': attribute type 3 has an invalid length.
[ 1120.673814][T18494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5580'.
[ 1120.733611][T12857] attempt to access beyond end of device
[ 1120.733611][T12857] loop3: rw=2049, want=40976, limit=40427
[ 1120.770079][T18513] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1120.778348][T18513] System zones: 0-5
[ 1120.802424][T18513] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1121.599351][T18527] loop3: detected capacity change from 0 to 1024
[ 1121.898522][T18529] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1122.023640][T18529] SELinux: failed to load policy
[ 1122.497044][T18543] loop0: detected capacity change from 0 to 128
[ 1122.536272][T18545] loop3: detected capacity change from 0 to 4096
[ 1122.566425][T18545] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1122.573297][T18545] EXT4-fs (loop3): Ignoring removed orlov option
[ 1122.582301][T18545] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1122.789452][   T26] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1122.795168][T18552] loop5: detected capacity change from 0 to 512
[ 1122.808050][   T26] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1122.842853][   T26] usb 6-1: can't set config #1, error -71
[ 1122.863645][   T26] usb 6-1: USB disconnect, device number 59
[ 1122.880422][T18554] overlayfs: failed to resolve './file1': -2
[ 1122.880869][T18552] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.5598: missing EA_INODE flag
[ 1122.921944][T18552] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.5598: error while reading EA inode 2 err=-117
[ 1122.935462][T18552] EXT4-fs (loop5): 1 orphan inode deleted
[ 1122.941348][T18552] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1123.110030][ T7784] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1123.216834][  T634] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[ 1123.559742][T18557] loop5: detected capacity change from 0 to 40427
[ 1123.584708][ T7784] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1123.593305][ T7784] usb 9-1: config 0 has no interface number 0
[ 1123.599621][ T7784] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1123.610726][ T7784] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1123.620782][ T7784] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1123.630008][ T7784] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.639207][ T7784] usb 9-1: config 0 descriptor??
[ 1123.651985][T18557] F2FS-fs (loop5): invalid crc value
[ 1123.659606][T18557] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1123.676422][  T634] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1123.683864][  T634] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1123.721968][  T634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.865992][  T634] usb 4-1: config 0 descriptor??
[ 1123.874816][T18557] F2FS-fs (loop5): Start checkpoint disabled!
[ 1123.890314][T18557] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1123.957136][T18557] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5600'.
[ 1123.975479][T18557] netlink: 'syz.5.5600': attribute type 3 has an invalid length.
[ 1123.994154][T18557] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5600'.
[ 1124.046763][T18564] loop0: detected capacity change from 0 to 40427
[ 1124.054045][T12857] attempt to access beyond end of device
[ 1124.054045][T12857] loop5: rw=2049, want=40976, limit=40427
[ 1124.076746][T18564] F2FS-fs (loop0): fault_injection options not supported
[ 1124.097977][T18564] F2FS-fs (loop0): fault_type options not supported
[ 1124.113298][T18564] F2FS-fs (loop0): invalid crc value
[ 1124.120201][T18564] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1124.165567][T18564] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1124.179648][ T7784] prodikeys 0003:041E:2801.0051: unknown main item tag 0x0
[ 1124.193632][ T7784] prodikeys 0003:041E:2801.0051: item fetching failed at offset 1/7
[ 1124.202166][ T7784] prodikeys 0003:041E:2801.0051: hid parse failed
[ 1124.208700][ T7784] prodikeys: probe of 0003:041E:2801.0051 failed with error -22
[ 1124.894301][T18578] attempt to access beyond end of device
[ 1124.894301][T18578] loop0: rw=2049, want=47072, limit=40427
[ 1124.941286][T18578] attempt to access beyond end of device
[ 1124.941286][T18578] loop0: rw=0, want=47072, limit=40427
[ 1127.214818][    T6] usb 9-1: USB disconnect, device number 34
[ 1127.243351][T15352] attempt to access beyond end of device
[ 1127.243351][T15352] loop0: rw=2049, want=47080, limit=40427
[ 1127.349704][T18584] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1127.359034][T18584] SELinux: failed to load policy
[ 1127.373728][  T634] usbhid 4-1:0.0: can't add hid device: -71
[ 1127.380498][  T634] usbhid: probe of 4-1:0.0 failed with error -71
[ 1127.388797][  T634] usb 4-1: USB disconnect, device number 49
[ 1127.476537][T18590] loop8: detected capacity change from 0 to 1024
[ 1128.666122][  T634] usb 4-1: new low-speed USB device number 50 using dummy_hcd
[ 1128.873811][T18610] loop0: detected capacity change from 0 to 512
[ 1129.147831][  T634] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1129.165246][T18610] EXT4-fs (loop0): Ignoring removed orlov option
[ 1129.185654][  T634] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1129.258992][T18610] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1129.465555][T18610] EXT4-fs (loop0): 1 truncate cleaned up
[ 1129.507226][T18610] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1129.643266][T18602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5614'.
[ 1129.737769][T18602] netlink: 'syz.4.5614': attribute type 3 has an invalid length.
[ 1129.745622][T18602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5614'.
[ 1129.852785][    T6] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1130.191058][T18622] overlayfs: failed to resolve './file1': -2
[ 1131.084963][T18625] loop3: detected capacity change from 0 to 1024
[ 1131.113791][  T634] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1131.134104][  T634] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1131.188586][  T634] usb 4-1: can't set config #1, error -71
[ 1131.207454][  T634] usb 4-1: USB disconnect, device number 50
[ 1131.222169][T18625] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5620: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1131.263395][T18625] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1131.271514][T18625] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5620: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1131.286316][    T6] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1131.294427][    T6] usb 6-1: config 0 has no interface number 0
[ 1131.316761][    T6] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1131.324006][T18625] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1131.336957][T18625] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5620: Failed to acquire dquot type 0
[ 1131.348903][T18625] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1131.358562][T18625] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5620: mark_inode_dirty error
[ 1131.368525][    T6] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1131.370871][T18625] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1131.390606][T18625] EXT4-fs (loop3): 1 orphan inode deleted
[ 1131.399993][    T6] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1131.401252][T18625] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1131.423614][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1131.431836][  T311] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1131.467498][    T6] usb 6-1: config 0 descriptor??
[ 1131.519271][  T311] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1131.537393][  T311] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0
[ 1131.549790][T18625] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1131.567929][T18625] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1131.854357][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1131.881120][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1131.901119][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1131.968236][T18644] loop8: detected capacity change from 0 to 40427
[ 1131.980501][    T6] prodikeys 0003:041E:2801.0052: unknown main item tag 0x0
[ 1131.987941][    T6] prodikeys 0003:041E:2801.0052: item fetching failed at offset 1/7
[ 1132.006688][    T6] prodikeys 0003:041E:2801.0052: hid parse failed
[ 1132.014472][    T6] prodikeys: probe of 0003:041E:2801.0052 failed with error -22
[ 1132.025512][T18644] F2FS-fs (loop8): invalid crc value
[ 1132.066635][T18644] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1132.093922][T18644] F2FS-fs (loop8): Start checkpoint disabled!
[ 1132.101002][T18644] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1132.135178][  T310] attempt to access beyond end of device
[ 1132.135178][  T310] loop8: rw=2049, want=40984, limit=40427
[ 1132.222241][T18650] loop3: detected capacity change from 0 to 1024
[ 1132.590575][  T634] usb 6-1: USB disconnect, device number 60
[ 1133.193177][T18662] loop8: detected capacity change from 0 to 4096
[ 1133.221523][T18664] loop5: detected capacity change from 0 to 4096
[ 1133.284867][T18662] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1133.304039][T18662] System zones: 0-5
[ 1133.309285][T18664] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1133.316657][T18664] EXT4-fs (loop5): Ignoring removed orlov option
[ 1133.324730][T18662] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1133.360285][T18664] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1133.443791][ T7784] usb 4-1: new low-speed USB device number 51 using dummy_hcd
[ 1134.171258][T18667] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1134.179729][T18667] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1134.276178][T18672] overlayfs: failed to resolve './file1': -2
[ 1136.157619][ T7784] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1136.170117][ T7784] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1136.521162][ T7784] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1136.588635][ T7784] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1136.798980][ T7784] usb 4-1: can't set config #1, error -71
[ 1136.878101][ T7784] usb 4-1: USB disconnect, device number 51
[ 1137.131360][ T1658] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[ 1137.539196][T18699] loop8: detected capacity change from 0 to 512
[ 1137.667660][T18702] loop5: detected capacity change from 0 to 1024
[ 1137.675752][ T7784] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1137.858308][T18699] EXT4-fs (loop8): Ignoring removed orlov option
[ 1138.027763][ T7784] usb 4-1: Using ep0 maxpacket: 32
[ 1138.609320][T18699] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1138.626139][ T7784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.647416][ T7784] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1138.690029][ T7784] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1138.720875][T18699] EXT4-fs (loop8): 1 truncate cleaned up
[ 1138.726754][ T7784] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1138.756227][T18699] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1138.785388][ T7784] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1138.792698][ T7784] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1138.827373][ T7784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.869062][ T7784] usb 4-1: config 0 descriptor??
[ 1138.970978][T18714] loop5: detected capacity change from 0 to 4096
[ 1139.043214][T18714] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1139.088666][T18714] System zones: 0-5
[ 1139.106945][T18714] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1139.146873][T18719] loop0: detected capacity change from 0 to 4096
[ 1139.246051][T18719] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1139.289730][T18719] System zones: 0-5
[ 1139.313804][T18719] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1139.504065][ T7784] hid-generic 0003:1B1C:0C10.0053: unknown main item tag 0x0
[ 1139.513713][ T7784] hid-generic 0003:1B1C:0C10.0053: unknown main item tag 0x0
[ 1139.523879][ T7784] hid-generic 0003:1B1C:0C10.0053: unknown main item tag 0x0
[ 1139.531381][ T7784] hid-generic 0003:1B1C:0C10.0053: unknown main item tag 0x0
[ 1139.597226][ T7784] hid-generic 0003:1B1C:0C10.0053: unknown main item tag 0x0
[ 1139.606289][ T7784] hid-generic 0003:1B1C:0C10.0053: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1139.778378][ T7784] usb 4-1: USB disconnect, device number 52
[ 1140.486561][T18743] loop8: detected capacity change from 0 to 512
[ 1140.503849][T18741] loop3: detected capacity change from 0 to 4096
[ 1140.525331][T18741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1140.557075][T18741] System zones: 0-5
[ 1140.565948][T18741] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1140.569805][T18738] loop5: detected capacity change from 0 to 40427
[ 1140.614756][T18743] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.5653: missing EA_INODE flag
[ 1140.631815][T18738] F2FS-fs (loop5): invalid crc value
[ 1140.644950][T18738] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1140.652715][T18743] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.5653: error while reading EA inode 2 err=-117
[ 1140.694261][T18743] EXT4-fs (loop8): 1 orphan inode deleted
[ 1140.708001][T18743] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1140.731924][T18738] F2FS-fs (loop5): Start checkpoint disabled!
[ 1140.753108][T18738] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1140.980404][T18738] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5651'.
[ 1140.998263][T18738] netlink: 'syz.5.5651': attribute type 3 has an invalid length.
[ 1141.007420][T18738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5651'.
[ 1141.072952][T12857] attempt to access beyond end of device
[ 1141.072952][T12857] loop5: rw=2049, want=40976, limit=40427
[ 1141.297534][   T26] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1141.436465][T15611] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1141.682293][   T26] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.700406][   T26] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1141.730694][   T26] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1141.831959][T15611] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1141.844167][T15611] usb 1-1: config 0 has no interface number 0
[ 1141.857467][T15611] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1141.868893][T15611] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1141.879446][T15611] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1141.889460][T15611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.907257][T15611] usb 1-1: config 0 descriptor??
[ 1141.982395][   T26] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1141.993615][   T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.001914][   T26] usb 9-1: Product: syz
[ 1142.006770][   T26] usb 9-1: Manufacturer: syz
[ 1142.011642][   T26] usb 9-1: SerialNumber: syz
[ 1142.020819][   T26] usb 9-1: config 0 descriptor??
[ 1142.102288][   T26] dm9601: probe of 9-1:0.0 failed with error -22
[ 1142.494370][ T1658] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1142.554160][T18782] loop5: detected capacity change from 0 to 512
[ 1142.570031][T15611] prodikeys 0003:041E:2801.0054: unknown main item tag 0x0
[ 1142.579481][T15611] prodikeys 0003:041E:2801.0054: item fetching failed at offset 1/7
[ 1142.588142][T15611] prodikeys 0003:041E:2801.0054: hid parse failed
[ 1142.594768][T15611] prodikeys: probe of 0003:041E:2801.0054 failed with error -22
[ 1142.610972][T18782] EXT4-fs (loop5): Ignoring removed orlov option
[ 1142.617516][T18782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1142.631144][T18782] EXT4-fs (loop5): 1 truncate cleaned up
[ 1142.636930][T18782] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1142.750820][ T1658] usb 4-1: Using ep0 maxpacket: 32
[ 1142.797005][   T26] usb 1-1: USB disconnect, device number 54
[ 1142.900497][ T1658] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1142.910871][ T1658] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1142.943168][ T1658] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1142.953453][ T1658] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1142.975229][ T1658] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1142.982135][ T1658] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1143.007387][ T1658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.016675][ T1658] usb 4-1: config 0 descriptor??
[ 1143.372821][T18790] loop0: detected capacity change from 0 to 4096
[ 1143.447649][T18790] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1143.455889][T18790] System zones: 0-5
[ 1143.461004][T18790] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1143.581877][ T1658] hid-generic 0003:1B1C:0C10.0055: unknown main item tag 0x0
[ 1143.593531][ T1658] hid-generic 0003:1B1C:0C10.0055: unknown main item tag 0x0
[ 1143.601351][ T1658] hid-generic 0003:1B1C:0C10.0055: unknown main item tag 0x0
[ 1143.609263][ T1658] hid-generic 0003:1B1C:0C10.0055: unknown main item tag 0x0
[ 1143.617074][ T1658] hid-generic 0003:1B1C:0C10.0055: unknown main item tag 0x0
[ 1144.290131][ T1658] hid-generic 0003:1B1C:0C10.0055: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1144.596189][   T26] usb 9-1: USB disconnect, device number 35
[ 1144.784940][ T1658] usb 4-1: USB disconnect, device number 53
[ 1144.804922][T18793] loop5: detected capacity change from 0 to 40427
[ 1144.834677][T18793] F2FS-fs (loop5): fault_injection options not supported
[ 1144.864237][T18793] F2FS-fs (loop5): fault_type options not supported
[ 1144.882061][T18793] F2FS-fs (loop5): invalid crc value
[ 1144.897618][T18805] fido_id[18805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1144.923656][T18793] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1144.951061][T18809] loop8: detected capacity change from 0 to 4096
[ 1145.029555][T18809] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1145.037719][T18793] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1145.048443][T18809] System zones: 0-5
[ 1145.059157][T18809] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1145.250130][   T45] device bridge_slave_1 left promiscuous mode
[ 1146.477997][T18820] attempt to access beyond end of device
[ 1146.477997][T18820] loop5: rw=2049, want=47072, limit=40427
[ 1146.499510][T18820] attempt to access beyond end of device
[ 1146.499510][T18820] loop5: rw=0, want=47072, limit=40427
[ 1146.889729][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1146.944231][   T45] device bridge_slave_0 left promiscuous mode
[ 1146.955032][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1146.970330][   T45] device veth1_macvtap left promiscuous mode
[ 1147.010189][   T45] device veth0_vlan left promiscuous mode
[ 1147.028124][T18827] loop0: detected capacity change from 0 to 4096
[ 1147.050621][T15113] attempt to access beyond end of device
[ 1147.050621][T15113] loop5: rw=2049, want=47080, limit=40427
[ 1147.307689][T18827] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1147.710329][T18827] System zones: 0-5
[ 1147.892424][T18827] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1148.230429][T18840] loop5: detected capacity change from 0 to 4096
[ 1148.276322][T18840] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1148.283178][T18840] EXT4-fs (loop5): Ignoring removed orlov option
[ 1148.302810][T18840] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1148.617545][   T26] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1148.831190][ T3279] usb 6-1: new full-speed USB device number 62 using dummy_hcd
[ 1148.928032][T18852] loop0: detected capacity change from 0 to 40427
[ 1148.955577][T18852] F2FS-fs (loop0): invalid crc value
[ 1148.977752][T18852] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1149.013071][   T26] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1149.063947][   T26] usb 4-1: config 0 has no interface number 0
[ 1149.072715][   T26] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1149.088019][   T26] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1149.098730][T18852] F2FS-fs (loop0): Start checkpoint disabled!
[ 1149.106207][   T26] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1149.116622][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1149.127161][T18852] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1149.137540][   T26] usb 4-1: config 0 descriptor??
[ 1149.215986][ T3279] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1149.222748][ T3279] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1149.232539][   T45] attempt to access beyond end of device
[ 1149.232539][   T45] loop0: rw=2049, want=40984, limit=40427
[ 1149.258700][ T3279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1149.280220][ T3279] usb 6-1: config 0 descriptor??
[ 1149.702309][T18862] loop0: detected capacity change from 0 to 1024
[ 1149.800088][   T26] usbhid 4-1:0.1: can't add hid device: -71
[ 1149.864774][   T26] usbhid: probe of 4-1:0.1 failed with error -71
[ 1150.047817][   T26] usb 4-1: USB disconnect, device number 54
[ 1150.408723][T18866] loop3: detected capacity change from 0 to 1024
[ 1150.479164][T18866] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5682: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1150.493538][T18866] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1150.502105][T18866] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5682: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1150.517405][T18866] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1150.526843][T18866] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5682: Failed to acquire dquot type 0
[ 1150.539119][T18866] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1150.548857][T18866] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5682: mark_inode_dirty error
[ 1150.561995][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x1
[ 1150.562266][T18866] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1150.570453][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x5
[ 1150.580473][T18866] EXT4-fs (loop3): 1 orphan inode deleted
[ 1150.589110][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x6
[ 1150.596320][T18866] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1150.603048][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x0
[ 1150.634589][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x0
[ 1150.643006][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x0
[ 1150.653324][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x0
[ 1150.658542][T18866] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1150.669040][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x0
[ 1150.672234][T18866] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1150.680865][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x0
[ 1150.680890][ T3279] logitech-djreceiver 0003:046D:C52F.0056: unknown main item tag 0x0
[ 1150.693000][ T5549] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1150.714340][T18872] loop0: detected capacity change from 0 to 512
[ 1150.727892][ T5549] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1150.741400][ T5549] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:10: Failed to release dquot type 0
[ 1150.745787][T18872] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.5684: missing EA_INODE flag
[ 1150.766276][T18872] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.5684: error while reading EA inode 2 err=-117
[ 1150.779010][T18872] EXT4-fs (loop0): 1 orphan inode deleted
[ 1150.785015][T18872] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1150.830815][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1150.844436][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1150.858333][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1150.980979][T18883] loop3: detected capacity change from 0 to 4096
[ 1150.991936][T18878] loop0: detected capacity change from 0 to 40427
[ 1151.003542][T18878] F2FS-fs (loop0): invalid crc value
[ 1151.009987][T18878] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1151.032983][T18883] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1151.044992][T18883] System zones: 0-5
[ 1151.049858][T18883] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1151.059583][T18878] F2FS-fs (loop0): Start checkpoint disabled!
[ 1151.090458][T18878] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1151.125633][T18878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5687'.
[ 1151.135802][T18878] netlink: 'syz.0.5687': attribute type 3 has an invalid length.
[ 1151.143934][T18878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5687'.
[ 1151.185481][ T5549] attempt to access beyond end of device
[ 1151.185481][ T5549] loop0: rw=2049, want=40976, limit=40427
[ 1151.952952][    T6] usb 6-1: USB disconnect, device number 62
[ 1152.055523][T18906] loop0: detected capacity change from 0 to 512
[ 1152.126479][T18910] loop8: detected capacity change from 0 to 1024
[ 1152.170589][T18913] loop3: detected capacity change from 0 to 512
[ 1152.177592][T18910] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 2: comm syz.8.5697: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1152.375291][T18910] Quota error (device loop8): qtree_write_dquot: dquota write failed
[ 1152.406370][T18906] EXT4-fs (loop0): Ignoring removed orlov option
[ 1152.420796][T18910] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 48: comm syz.8.5697: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1152.439298][T18913] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.5695: missing EA_INODE flag
[ 1152.459421][T18906] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1152.474323][T18913] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.5695: error while reading EA inode 2 err=-117
[ 1152.490267][T18910] Quota error (device loop8): v2_write_file_info: Can't write info structure
[ 1152.519578][T18913] EXT4-fs (loop3): 1 orphan inode deleted
[ 1152.531117][T18910] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.5697: Failed to acquire dquot type 0
[ 1152.554554][T18913] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1152.570445][T18906] EXT4-fs (loop0): 1 truncate cleaned up
[ 1152.577121][T18910] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1152.621461][T18906] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1152.640645][T18910] EXT4-fs error (device loop8): ext4_evict_inode:285: inode #11: comm syz.8.5697: mark_inode_dirty error
[ 1152.655320][T18910] EXT4-fs warning (device loop8): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1152.681194][T18910] EXT4-fs (loop8): 1 orphan inode deleted
[ 1152.687145][T18910] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1152.710506][ T5549] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1152.743291][ T5549] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1152.768532][ T5549] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:10: Failed to release dquot type 0
[ 1152.786085][T18910] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[ 1152.806460][T18910] EXT4-fs (loop8): Cannot change journaled quota options when quota turned on
[ 1152.957129][T14225] EXT4-fs error (device loop8): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1152.999186][T14225] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1153.020735][T14225] EXT4-fs error (device loop8): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1153.056394][T18928] loop3: detected capacity change from 0 to 40427
[ 1153.073738][T18928] F2FS-fs (loop3): invalid crc value
[ 1153.082937][T18928] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1153.116317][  T634] usb 6-1: new low-speed USB device number 63 using dummy_hcd
[ 1153.157479][T18928] F2FS-fs (loop3): Start checkpoint disabled!
[ 1153.174621][T18928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1153.233859][T18928] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5701'.
[ 1153.243376][T18928] netlink: 'syz.3.5701': attribute type 3 has an invalid length.
[ 1153.251314][T18928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5701'.
[ 1153.305378][T12857] attempt to access beyond end of device
[ 1153.305378][T12857] loop3: rw=2049, want=40976, limit=40427
[ 1153.394212][   T26] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1153.543809][  T634] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1153.565137][  T634] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1153.578699][T18941] loop3: detected capacity change from 0 to 4096
[ 1153.676138][T18941] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1153.684588][T18941] System zones: 0-5
[ 1153.689398][T18941] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1153.728741][T18944] loop0: detected capacity change from 0 to 4096
[ 1153.736707][T18944] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1153.743690][T18944] EXT4-fs (loop0): Ignoring removed orlov option
[ 1153.778125][T18944] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1153.853734][   T26] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1153.864872][   T26] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1153.875053][   T26] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1154.152997][   T26] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1154.162443][   T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1154.170769][   T26] usb 9-1: Product: syz
[ 1154.175264][   T26] usb 9-1: Manufacturer: syz
[ 1154.180213][   T26] usb 9-1: SerialNumber: syz
[ 1154.186077][   T26] usb 9-1: config 0 descriptor??
[ 1154.206392][T18932] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1154.228334][   T26] dm9601: probe of 9-1:0.0 failed with error -22
[ 1154.430683][ T7020] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[ 1154.734825][T18960] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.5711: missing EA_INODE flag
[ 1154.747443][T18960] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.5711: error while reading EA inode 2 err=-117
[ 1154.760475][T18960] EXT4-fs (loop3): 1 orphan inode deleted
[ 1154.766552][T18960] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1154.869032][ T7020] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1154.876144][ T7020] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1154.885710][ T7020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.900135][ T7020] usb 1-1: config 0 descriptor??
[ 1155.354582][T18972] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5714: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1155.369144][T18972] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1155.377311][T18972] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5714: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1155.391918][T18972] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1155.400996][T18972] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5714: Failed to acquire dquot type 0
[ 1155.412541][T18972] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1155.422248][T18972] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5714: mark_inode_dirty error
[ 1155.434071][T18972] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1155.444607][T18972] EXT4-fs (loop3): 1 orphan inode deleted
[ 1155.450702][T18972] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1155.483298][  T310] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1155.487232][T18972] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1155.502297][  T310] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1155.516788][  T310] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0
[ 1155.529272][T18972] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1155.554120][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x1
[ 1155.562792][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x5
[ 1155.571359][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x6
[ 1155.579720][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x0
[ 1155.587956][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x0
[ 1155.596332][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x0
[ 1155.604852][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x0
[ 1155.613384][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x0
[ 1155.614533][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1155.621550][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x0
[ 1155.621576][ T7020] logitech-djreceiver 0003:046D:C52F.0057: unknown main item tag 0x0
[ 1155.652386][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1155.662345][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1155.911559][T18977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5716'.
[ 1155.921416][T18977] netlink: 'syz.4.5716': attribute type 3 has an invalid length.
[ 1155.929279][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5716'.
[ 1155.990856][ T3279] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1156.029501][T18981] set_capacity_and_notify: 2 callbacks suppressed
[ 1156.029519][T18981] loop5: detected capacity change from 0 to 4096
[ 1156.051390][T18981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1156.064170][T18981] System zones: 0-5
[ 1156.069936][T18981] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1156.096344][  T634] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1156.161600][  T634] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1156.195729][  T634] usb 6-1: can't set config #1, error -71
[ 1156.202717][  T634] usb 6-1: USB disconnect, device number 63
[ 1156.464389][ T3279] usb 4-1: Using ep0 maxpacket: 32
[ 1156.474743][ T1658] usb 9-1: USB disconnect, device number 36
[ 1156.589416][ T3279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1156.600207][ T3279] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1156.611465][ T3279] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1156.622027][ T3279] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1156.635665][ T3279] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1157.065832][ T7020] usb 1-1: USB disconnect, device number 55
[ 1157.080252][ T3279] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1157.100185][ T3279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.126684][ T3279] usb 4-1: config 0 descriptor??
[ 1157.273329][ T1658] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1157.323514][T19003] loop5: detected capacity change from 0 to 4096
[ 1157.570039][T19003] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1157.585537][T19003] System zones: 0-5
[ 1157.596512][T19003] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1158.066883][ T3279] hid-generic 0003:1B1C:0C10.0058: unknown main item tag 0x0
[ 1158.074330][ T3279] hid-generic 0003:1B1C:0C10.0058: unknown main item tag 0x0
[ 1158.082462][ T3279] hid-generic 0003:1B1C:0C10.0058: unknown main item tag 0x0
[ 1158.090307][ T3279] hid-generic 0003:1B1C:0C10.0058: unknown main item tag 0x0
[ 1158.098702][ T3279] hid-generic 0003:1B1C:0C10.0058: unknown main item tag 0x0
[ 1158.110095][ T3279] hid-generic 0003:1B1C:0C10.0058: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1158.130929][T19016] loop5: detected capacity change from 0 to 1024
[ 1158.212953][T19021] loop0: detected capacity change from 0 to 128
[ 1158.259718][T19021] input: syz1 as /devices/virtual/input/input53
[ 1158.395205][ T7020] usb 4-1: USB disconnect, device number 55
[ 1158.403328][T19016] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 2: comm syz.5.5725: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1158.448994][T19016] Quota error (device loop5): qtree_write_dquot: dquota write failed
[ 1158.461815][T19016] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 48: comm syz.5.5725: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1158.463929][T19017] fido_id[19017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1158.489546][T19016] Quota error (device loop5): v2_write_file_info: Can't write info structure
[ 1158.490710][ T1658] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1158.507313][T19016] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.5725: Failed to acquire dquot type 0
[ 1158.507699][ T1658] usb 9-1: config 0 has no interface number 0
[ 1158.525803][ T1658] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1158.527052][T19016] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1158.539403][ T1658] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1158.557078][ T1658] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1158.563288][T19016] EXT4-fs error (device loop5): ext4_evict_inode:285: inode #11: comm syz.5.5725: mark_inode_dirty error
[ 1158.566784][ T1658] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.567869][ T1658] usb 9-1: config 0 descriptor??
[ 1158.580938][T19016] EXT4-fs warning (device loop5): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1158.603104][T19016] EXT4-fs (loop5): 1 orphan inode deleted
[ 1158.608988][T19016] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1158.632188][T12857] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1158.646555][T12857] Quota error (device loop5): remove_tree: Can't read quota data block 1
[ 1158.655087][T12857] EXT4-fs error (device loop5): ext4_release_dquot:6263: comm kworker/u4:8: Failed to release dquot type 0
[ 1158.705925][T19016] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option
[ 1158.716678][T19016] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on
[ 1158.799966][T15113] EXT4-fs error (device loop5): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1158.814149][T15113] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1158.817491][T19023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5728'.
[ 1158.823995][T15113] EXT4-fs error (device loop5): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1158.832708][T19023] netlink: 'syz.4.5728': attribute type 3 has an invalid length.
[ 1158.852539][T19023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5728'.
[ 1159.098955][T19029] loop3: detected capacity change from 0 to 40427
[ 1159.121589][T19029] F2FS-fs (loop3): invalid crc value
[ 1159.169789][ T1658] usbhid 9-1:0.1: can't add hid device: -71
[ 1159.178023][ T1658] usbhid: probe of 9-1:0.1 failed with error -71
[ 1159.185985][ T3279] usb 6-1: new low-speed USB device number 64 using dummy_hcd
[ 1159.219162][ T1658] usb 9-1: USB disconnect, device number 37
[ 1159.227096][T19034] loop0: detected capacity change from 0 to 4096
[ 1159.259333][T19034] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1159.268712][T19034] System zones: 0-5
[ 1159.276788][T19029] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1159.330871][T19029] F2FS-fs (loop3): Start checkpoint disabled!
[ 1159.338189][T19029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1159.390678][T19034] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1159.420083][T12857] attempt to access beyond end of device
[ 1159.420083][T12857] loop3: rw=2049, want=40992, limit=40427
[ 1159.923369][ T3279] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1159.934106][ T3279] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1161.387207][T19060] loop8: detected capacity change from 0 to 1024
[ 1161.474483][T19060] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 2: comm syz.8.5739: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1161.515928][T19060] Quota error (device loop8): qtree_write_dquot: dquota write failed
[ 1161.541628][T19060] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 48: comm syz.8.5739: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1161.563606][T19060] Quota error (device loop8): v2_write_file_info: Can't write info structure
[ 1161.578515][T19060] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.5739: Failed to acquire dquot type 0
[ 1161.595178][T19060] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1161.611731][T19060] EXT4-fs error (device loop8): ext4_evict_inode:285: inode #11: comm syz.8.5739: mark_inode_dirty error
[ 1161.623298][T19060] EXT4-fs warning (device loop8): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1161.634159][T19060] EXT4-fs (loop8): 1 orphan inode deleted
[ 1161.640072][T19060] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1161.675927][   T45] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1161.722216][   T45] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1161.740992][T19060] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[ 1161.744416][T19067] loop0: detected capacity change from 0 to 4096
[ 1161.753091][T19060] EXT4-fs (loop8): Cannot change journaled quota options when quota turned on
[ 1161.758497][   T45] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1161.805354][T19067] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1161.818275][T19067] System zones: 0-5
[ 1161.828432][T19067] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1161.857558][T15611] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1161.965898][T14225] EXT4-fs error (device loop8): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1161.982941][T14225] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1161.994091][T14225] EXT4-fs error (device loop8): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1162.353883][T15611] usb 4-1: Using ep0 maxpacket: 32
[ 1162.390634][T19081] loop8: detected capacity change from 0 to 128
[ 1162.436954][T19081] input: syz1 as /devices/virtual/input/input54
[ 1162.490823][ T3279] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1162.500799][ T3279] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1162.534492][ T3279] usb 6-1: can't set config #1, error -71
[ 1162.545099][ T3279] usb 6-1: USB disconnect, device number 64
[ 1162.564556][T19084] loop5: detected capacity change from 0 to 4096
[ 1162.637706][T15611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1162.659019][T15611] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1162.681942][T19084] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1162.691228][T15611] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1162.701061][T19084] System zones: 0-5
[ 1162.712508][T15611] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1162.733742][T15611] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1162.734150][T19084] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1162.751205][T15611] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1162.770499][T15611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1162.779807][T15611] usb 4-1: config 0 descriptor??
[ 1162.931568][T19087] loop8: detected capacity change from 0 to 40427
[ 1163.204023][T19087] F2FS-fs (loop8): fault_injection options not supported
[ 1163.211698][T19087] F2FS-fs (loop8): fault_type options not supported
[ 1163.229276][T19087] F2FS-fs (loop8): invalid crc value
[ 1163.237406][T19087] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1163.275244][T19087] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1163.397661][T15611] hid-generic 0003:1B1C:0C10.0059: unknown main item tag 0x0
[ 1163.405532][T15611] hid-generic 0003:1B1C:0C10.0059: unknown main item tag 0x0
[ 1163.413044][T15611] hid-generic 0003:1B1C:0C10.0059: unknown main item tag 0x0
[ 1163.420876][T15611] hid-generic 0003:1B1C:0C10.0059: unknown main item tag 0x0
[ 1163.481810][T15611] hid-generic 0003:1B1C:0C10.0059: unknown main item tag 0x0
[ 1163.491327][T15611] hid-generic 0003:1B1C:0C10.0059: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1163.515133][T19096] attempt to access beyond end of device
[ 1163.515133][T19096] loop8: rw=2049, want=47072, limit=40427
[ 1163.529208][T19096] attempt to access beyond end of device
[ 1163.529208][T19096] loop8: rw=0, want=47072, limit=40427
[ 1163.641031][T15611] usb 4-1: USB disconnect, device number 56
[ 1163.687524][T19097] fido_id[19097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1163.948193][T14225] attempt to access beyond end of device
[ 1163.948193][T14225] loop8: rw=2049, want=47080, limit=40427
[ 1164.139132][T19103] loop8: detected capacity change from 0 to 4096
[ 1164.793792][T16072] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1165.012062][T19113] loop3: detected capacity change from 0 to 1024
[ 1165.021252][T19103] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1165.036018][T19103] System zones: 0-5
[ 1165.057774][T19103] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1165.453770][T19113] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5752: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1165.475164][T19113] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1165.576541][T19113] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5752: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1165.605533][T19113] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1165.866221][T19113] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5752: Failed to acquire dquot type 0
[ 1166.010671][T19113] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1166.020481][T16072] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1166.033514][T16072] usb 1-1: config 0 has no interface number 0
[ 1166.046037][T19113] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5752: mark_inode_dirty error
[ 1166.057528][T16072] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1166.080913][T19113] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1166.094432][T16072] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1166.113635][T19113] EXT4-fs (loop3): 1 orphan inode deleted
[ 1166.121758][T16072] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1166.122131][T19113] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1166.146454][T16072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.210147][T19113] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1166.239276][   T45] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1166.258648][T16072] usb 1-1: config 0 descriptor??
[ 1166.260186][T19113] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1166.264031][   T45] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1166.281247][   T45] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1166.677143][T16072] usbhid 1-1:0.1: can't add hid device: -71
[ 1166.688970][T16072] usbhid: probe of 1-1:0.1 failed with error -71
[ 1166.842916][T16072] usb 1-1: USB disconnect, device number 56
[ 1167.156849][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1167.182062][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1167.200828][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1167.268002][T19141] loop5: detected capacity change from 0 to 4096
[ 1167.305867][  T634] usb 9-1: new low-speed USB device number 38 using dummy_hcd
[ 1167.361156][T19141] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1167.369826][T19141] System zones: 0-5
[ 1167.375008][T19141] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1167.405953][T16072] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1169.938162][T19157] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5763'.
[ 1169.966306][T19155] loop8: detected capacity change from 0 to 4096
[ 1170.098468][T19162] loop3: detected capacity change from 0 to 4096
[ 1170.246095][ T7020] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1170.262399][T19155] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1170.268422][T19162] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1170.279067][T19162] System zones: 0-5
[ 1170.283759][T19162] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1170.285482][T19155] System zones: 0-5
[ 1170.326096][T19155] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1170.449090][  T634] usb 9-1: device not accepting address 38, error -71
[ 1170.688941][T16072] usb 1-1: device not accepting address 57, error -71
[ 1170.989034][ T7020] usb 6-1: Using ep0 maxpacket: 32
[ 1171.095388][T19180] loop8: detected capacity change from 0 to 4096
[ 1171.148533][T19180] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1171.160330][T19180] System zones: 0-5
[ 1171.166370][ T7020] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1171.176639][T19178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5767'.
[ 1171.176634][ T7020] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1171.176662][ T7020] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1171.185670][T19178] netlink: 'syz.4.5767': attribute type 3 has an invalid length.
[ 1171.197114][ T7020] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1171.221343][T19180] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1171.229622][ T7020] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1171.251070][T19178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5767'.
[ 1171.256808][ T7020] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1171.275428][ T7020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1171.284579][ T7020] usb 6-1: config 0 descriptor??
[ 1171.388700][T16072] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1171.598649][T19193] 9pnet: Insufficient options for proto=fd
[ 1171.857540][ T7020] hid-generic 0003:1B1C:0C10.005A: unknown main item tag 0x0
[ 1171.913318][T16072] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1171.951674][T16072] usb 1-1: config 0 has no interface number 0
[ 1171.960453][ T7020] hid-generic 0003:1B1C:0C10.005A: unknown main item tag 0x0
[ 1172.021744][T16072] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1172.046262][ T7020] hid-generic 0003:1B1C:0C10.005A: unknown main item tag 0x0
[ 1172.131981][ T7020] hid-generic 0003:1B1C:0C10.005A: unknown main item tag 0x0
[ 1172.159207][T16072] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1172.273511][ T7020] hid-generic 0003:1B1C:0C10.005A: unknown main item tag 0x0
[ 1172.299761][T19197] loop8: detected capacity change from 0 to 4096
[ 1172.307393][T16072] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1172.322477][ T7020] hid-generic 0003:1B1C:0C10.005A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0
[ 1172.338793][T19197] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1172.345964][T19197] EXT4-fs (loop8): Ignoring removed orlov option
[ 1172.373908][T19197] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1172.457941][T16072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1172.476186][T16072] usb 1-1: config 0 descriptor??
[ 1172.492651][ T7020] usb 6-1: USB disconnect, device number 65
[ 1172.529842][T19201] fido_id[19201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1172.752947][T19206] loop5: detected capacity change from 0 to 4096
[ 1172.779988][T19206] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1172.790180][T19206] System zones: 0-5
[ 1172.797516][T19206] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1172.960300][ T7784] usb 9-1: new full-speed USB device number 40 using dummy_hcd
[ 1173.088935][T16072] usbhid 1-1:0.1: can't add hid device: -71
[ 1173.097550][T16072] usbhid: probe of 1-1:0.1 failed with error -71
[ 1173.193968][T16072] usb 1-1: USB disconnect, device number 58
[ 1173.280899][T15611] usb 4-1: new low-speed USB device number 57 using dummy_hcd
[ 1173.377134][ T7784] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1173.385677][ T7784] usb 9-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1173.394959][ T7784] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.452181][ T7784] usb 9-1: config 0 descriptor??
[ 1173.463179][T19219] loop5: detected capacity change from 0 to 512
[ 1173.794925][T19219] EXT4-fs (loop5): Ignoring removed orlov option
[ 1173.809056][T19219] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1173.823043][T19223] loop0: detected capacity change from 0 to 4096
[ 1173.852151][T19223] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1173.860954][T19223] System zones: 0-5
[ 1173.865351][T19219] EXT4-fs (loop5): 1 truncate cleaned up
[ 1173.865846][T19223] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1173.875830][T19219] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1173.911427][T15611] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1173.922651][T15611] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1174.247906][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x1
[ 1174.264953][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x5
[ 1174.278587][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x6
[ 1174.287079][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0
[ 1174.295179][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0
[ 1174.304060][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0
[ 1174.312551][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0
[ 1174.321259][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0
[ 1174.350775][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0
[ 1174.359273][ T7784] logitech-djreceiver 0003:046D:C52F.005B: unknown main item tag 0x0
[ 1174.992467][T19235] loop5: detected capacity change from 0 to 4096
[ 1175.059223][T19235] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1175.067625][T19235] System zones: 0-5
[ 1175.072409][T19235] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1175.235813][T19239] loop0: detected capacity change from 0 to 1024
[ 1176.216366][ T7020] usb 9-1: USB disconnect, device number 40
[ 1176.294097][T19244] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5785'.
[ 1176.493413][T19248] loop0: detected capacity change from 0 to 4096
[ 1176.508113][T15611] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1176.517329][T15611] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1176.585792][T19251] 9pnet: Insufficient options for proto=fd
[ 1176.717010][T19248] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1176.748478][T19248] System zones: 0-5
[ 1176.800172][T19248] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1177.811880][T15611] usb 4-1: can't set config #1, error -71
[ 1177.823319][T15611] usb 4-1: USB disconnect, device number 57
[ 1177.862498][T19261] loop5: detected capacity change from 0 to 512
[ 1177.878116][T19262] loop0: detected capacity change from 0 to 4096
[ 1177.887932][T19252] loop8: detected capacity change from 0 to 40427
[ 1177.908084][T19252] F2FS-fs (loop8): fault_injection options not supported
[ 1177.915402][T19252] F2FS-fs (loop8): fault_type options not supported
[ 1177.925917][T19252] F2FS-fs (loop8): invalid crc value
[ 1177.944445][T19252] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1177.955320][T19262] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1177.980455][T19262] System zones: 0-5
[ 1177.983902][T19261] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.5782: missing EA_INODE flag
[ 1177.992123][T19262] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1177.996622][T19261] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.5782: error while reading EA inode 2 err=-117
[ 1178.017724][T19252] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1178.063316][T19261] EXT4-fs (loop5): 1 orphan inode deleted
[ 1178.069327][T19261] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1178.239220][T15611] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1178.684969][T19275] attempt to access beyond end of device
[ 1178.684969][T19275] loop8: rw=2049, want=47072, limit=40427
[ 1178.732796][T19275] attempt to access beyond end of device
[ 1178.732796][T19275] loop8: rw=0, want=47072, limit=40427
[ 1180.535571][T14225] attempt to access beyond end of device
[ 1180.535571][T14225] loop8: rw=2049, want=47080, limit=40427
[ 1180.545570][T19278] loop5: detected capacity change from 0 to 4096
[ 1180.585140][T19278] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1180.593580][T19278] System zones: 0-5
[ 1180.602310][T19278] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1180.623471][T19280] loop3: detected capacity change from 0 to 4096
[ 1180.682489][T19283] loop0: detected capacity change from 0 to 4096
[ 1180.714054][T19280] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1180.738158][T19283] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1180.739611][T19280] System zones: 0-5
[ 1180.751491][T19283] System zones: 0-5
[ 1180.760871][T19280] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1180.791455][T19283] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1182.186715][T19306] loop0: detected capacity change from 0 to 512
[ 1182.375887][T19306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.5801: missing EA_INODE flag
[ 1182.404920][T19306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.5801: error while reading EA inode 2 err=-117
[ 1182.465734][T19312] 9pnet: Insufficient options for proto=fd
[ 1182.477140][T19306] EXT4-fs (loop0): 1 orphan inode deleted
[ 1182.530189][T19306] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[ 1184.437504][T19326] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5804'.
[ 1184.501884][T19328] loop0: detected capacity change from 0 to 1024
[ 1184.663588][T19328] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.5805: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1184.699699][T19328] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1184.721114][T19328] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.5805: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1184.789531][T19328] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1184.811060][T19328] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.5805: Failed to acquire dquot type 0
[ 1184.836075][T19325] loop3: detected capacity change from 0 to 40427
[ 1184.867002][T19332] loop5: detected capacity change from 0 to 4096
[ 1184.867051][T19328] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1184.889563][T19328] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.5805: mark_inode_dirty error
[ 1184.895284][T19303] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1184.909862][T19328] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1184.909892][T19303] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1184.928770][T19328] EXT4-fs (loop0): 1 orphan inode deleted
[ 1184.928797][T19328] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1184.941487][T19332] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1184.963862][T12857] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1184.964305][T19332] EXT4-fs (loop5): Ignoring removed orlov option
[ 1184.979608][T19325] F2FS-fs (loop3): invalid crc value
[ 1184.998430][T19332] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1185.103192][T19328] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[ 1185.114719][T12857] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1185.115452][T19325] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1185.125077][T19328] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on
[ 1185.162385][T12857] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:8: Failed to release dquot type 0
[ 1185.271855][T19325] F2FS-fs (loop3): Start checkpoint disabled!
[ 1185.288187][T19325] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1185.617003][T19345] loop8: detected capacity change from 0 to 4096
[ 1185.637909][T19325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5798'.
[ 1185.671139][T19325] netlink: 'syz.3.5798': attribute type 3 has an invalid length.
[ 1185.699421][T19345] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1185.708754][ T1658] usb 6-1: new full-speed USB device number 66 using dummy_hcd
[ 1185.753941][T19325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5798'.
[ 1185.769367][T19345] System zones: 0-5
[ 1185.811491][T19345] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1185.821687][T15352] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1185.835390][ T1517] attempt to access beyond end of device
[ 1185.835390][ T1517] loop3: rw=2049, want=40976, limit=40427
[ 1185.892841][T15352] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1185.906998][T15352] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1186.627839][ T1658] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1186.638477][ T1658] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1186.662721][ T1658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.672060][ T1658] usb 6-1: config 0 descriptor??
[ 1187.056609][ T3279] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1187.135838][T19364] loop8: detected capacity change from 0 to 128
[ 1187.230560][T19364] input: syz1 as /devices/virtual/input/input55
[ 1187.345642][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x1
[ 1187.353909][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x5
[ 1187.362249][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x6
[ 1187.370711][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x0
[ 1187.384370][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x0
[ 1187.392741][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x0
[ 1187.400890][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x0
[ 1187.409116][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x0
[ 1187.417250][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x0
[ 1187.425747][ T1658] logitech-djreceiver 0003:046D:C52F.005C: unknown main item tag 0x0
[ 1187.434318][T19362] loop0: detected capacity change from 0 to 40427
[ 1187.484546][T19362] F2FS-fs (loop0): invalid crc value
[ 1187.507872][T19362] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1187.536620][ T3279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1187.552223][ T3279] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1187.576458][T19362] F2FS-fs (loop0): Start checkpoint disabled!
[ 1187.592291][T19362] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1187.642041][T19362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5813'.
[ 1187.651206][T19362] netlink: 'syz.0.5813': attribute type 3 has an invalid length.
[ 1187.659110][T19362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5813'.
[ 1187.747570][ T5549] attempt to access beyond end of device
[ 1187.747570][ T5549] loop0: rw=2049, want=40976, limit=40427
[ 1188.550020][T19374] loop8: detected capacity change from 0 to 4096
[ 1188.601584][T19374] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1188.610170][T19374] System zones: 0-5
[ 1188.615267][T19374] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1188.658196][ T3279] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1188.679329][ T3279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.708971][ T3279] usb 4-1: Product: syz
[ 1188.721187][ T3279] usb 4-1: Manufacturer: syz
[ 1188.762758][ T3279] usb 4-1: SerialNumber: syz
[ 1188.772150][T19384] loop0: detected capacity change from 0 to 1024
[ 1188.783333][ T3279] usb 4-1: config 0 descriptor??
[ 1188.789824][ T1658] usb 6-1: USB disconnect, device number 66
[ 1188.807824][T19354] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1189.107946][T19384] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.5820: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1189.116217][ T3279] dm9601: probe of 4-1:0.0 failed with error -22
[ 1189.129731][T19384] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1189.141279][T19384] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.5820: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1189.156040][T19384] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1189.160233][T19389] loop5: detected capacity change from 0 to 4096
[ 1189.165296][T19384] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.5820: Failed to acquire dquot type 0
[ 1189.185518][T19384] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1189.198519][T19389] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1189.207137][T19384] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.5820: mark_inode_dirty error
[ 1189.210220][T19389] System zones: 0-5
[ 1189.229545][T19389] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1189.250986][T19384] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1189.264696][T19384] EXT4-fs (loop0): 1 orphan inode deleted
[ 1189.273842][T19384] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1189.296531][ T1517] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1189.317028][T19384] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[ 1189.333164][T19384] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on
[ 1189.344443][ T1517] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1189.361757][ T1517] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0
[ 1189.808384][T15352] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1189.835754][T15352] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1189.852956][T15352] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1190.083917][T19397] loop8: detected capacity change from 0 to 40427
[ 1190.104332][T19397] F2FS-fs (loop8): invalid crc value
[ 1190.120250][T19397] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1190.194591][T19397] F2FS-fs (loop8): Start checkpoint disabled!
[ 1190.225137][T19397] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1190.248073][T19399] loop0: detected capacity change from 0 to 40427
[ 1190.287525][T19399] F2FS-fs (loop0): fault_injection options not supported
[ 1190.302511][T19407] loop5: detected capacity change from 0 to 4096
[ 1190.304471][T19399] F2FS-fs (loop0): fault_type options not supported
[ 1190.316814][T19399] F2FS-fs (loop0): invalid crc value
[ 1190.324404][T19399] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1190.333329][T19407] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1190.341886][T19407] System zones: 0-5
[ 1190.346831][T19407] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1190.375662][T19412] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5821'.
[ 1190.385226][T19412] netlink: 'syz.8.5821': attribute type 3 has an invalid length.
[ 1190.394191][T19412] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5821'.
[ 1190.402312][T19399] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1190.439632][ T3279] usb 4-1: USB disconnect, device number 59
[ 1190.478755][T19415] loop3: detected capacity change from 0 to 4096
[ 1190.524116][T19415] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1190.532883][T19415] System zones: 0-5
[ 1190.542161][T19415] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1192.844282][T19419] attempt to access beyond end of device
[ 1192.844282][T19419] loop0: rw=2049, want=47072, limit=40427
[ 1192.881945][T19419] attempt to access beyond end of device
[ 1192.881945][T19419] loop0: rw=0, want=47072, limit=40427
[ 1193.619210][T12857] attempt to access beyond end of device
[ 1193.619210][T12857] loop8: rw=2049, want=40976, limit=40427
[ 1193.786810][T15352] attempt to access beyond end of device
[ 1193.786810][T15352] loop0: rw=2049, want=47080, limit=40427
[ 1193.858189][T19429] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1193.877812][T19429] SELinux: failed to load policy
[ 1194.061556][T19441] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5832'.
[ 1194.481998][T16072] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1194.567403][T19438] loop3: detected capacity change from 0 to 40427
[ 1194.586634][T19438] F2FS-fs (loop3): fault_injection options not supported
[ 1194.595075][T19438] F2FS-fs (loop3): fault_type options not supported
[ 1194.615548][T19438] F2FS-fs (loop3): invalid crc value
[ 1194.627383][T19438] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1194.686778][T19438] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1194.824636][T16072] usb 9-1: Using ep0 maxpacket: 32
[ 1194.876523][T19450] loop0: detected capacity change from 0 to 1024
[ 1195.047816][T19451] attempt to access beyond end of device
[ 1195.047816][T19451] loop3: rw=2049, want=47072, limit=40427
[ 1195.071952][T19451] attempt to access beyond end of device
[ 1195.071952][T19451] loop3: rw=0, want=47072, limit=40427
[ 1195.529532][T16072] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1195.841478][T16072] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1195.876462][T19450] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.5835: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1195.893256][T16072] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1195.903797][T19450] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1195.904684][T16072] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1195.913178][T13453] attempt to access beyond end of device
[ 1195.913178][T13453] loop3: rw=2049, want=47080, limit=40427
[ 1195.925247][T19450] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.5835: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1195.957013][T16072] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1195.968728][T16072] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1195.978067][T19450] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1195.978310][T16072] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.996096][T19450] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.5835: Failed to acquire dquot type 0
[ 1196.008135][T19450] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1196.018742][T16072] usb 9-1: config 0 descriptor??
[ 1196.029493][T19450] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.5835: mark_inode_dirty error
[ 1196.051858][T19450] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1196.062597][T19450] EXT4-fs (loop0): 1 orphan inode deleted
[ 1196.068564][T19450] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1196.092045][ T1517] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1196.140168][ T1517] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1196.145087][T19455] loop5: detected capacity change from 0 to 40427
[ 1196.149941][T19450] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[ 1196.156194][ T1517] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0
[ 1196.168777][T19450] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on
[ 1196.196322][T19455] F2FS-fs (loop5): fault_injection options not supported
[ 1196.213249][T19455] F2FS-fs (loop5): fault_type options not supported
[ 1196.224111][T19455] F2FS-fs (loop5): invalid crc value
[ 1196.243108][T19455] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1196.277438][T15352] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1196.277590][T19455] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1196.292294][T15352] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1196.308393][T15352] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1196.501678][T19468] attempt to access beyond end of device
[ 1196.501678][T19468] loop5: rw=2049, want=47072, limit=40427
[ 1196.539501][T19468] attempt to access beyond end of device
[ 1196.539501][T19468] loop5: rw=0, want=47072, limit=40427
[ 1196.556375][T16072] hid-generic 0003:1B1C:0C10.005D: unknown main item tag 0x0
[ 1196.574693][T16072] hid-generic 0003:1B1C:0C10.005D: unknown main item tag 0x0
[ 1196.585456][T16072] hid-generic 0003:1B1C:0C10.005D: unknown main item tag 0x0
[ 1196.604087][T16072] hid-generic 0003:1B1C:0C10.005D: unknown main item tag 0x0
[ 1196.614834][T16072] hid-generic 0003:1B1C:0C10.005D: unknown main item tag 0x0
[ 1196.634471][T16072] hid-generic 0003:1B1C:0C10.005D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0
[ 1196.660474][T19467] loop0: detected capacity change from 0 to 40427
[ 1196.698449][T19467] F2FS-fs (loop0): invalid crc value
[ 1196.725229][T19467] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1196.771035][T19467] F2FS-fs (loop0): Start checkpoint disabled!
[ 1196.786439][T19467] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1196.816177][ T3279] usb 9-1: USB disconnect, device number 41
[ 1196.827301][T19467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5839'.
[ 1196.836427][T19467] netlink: 'syz.0.5839': attribute type 3 has an invalid length.
[ 1196.844396][T19467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5839'.
[ 1196.874515][  T311] attempt to access beyond end of device
[ 1196.874515][  T311] loop0: rw=2049, want=40976, limit=40427
[ 1197.036367][T19478] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1197.059322][T19478] SELinux: failed to load policy
[ 1199.447795][T19502] loop3: detected capacity change from 0 to 1024
[ 1199.569943][T19502] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5848: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1199.585801][T19505] loop8: detected capacity change from 0 to 4096
[ 1199.771648][T19502] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1199.803458][T19502] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5848: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1199.847878][T19505] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1199.879865][T19505] System zones: 0-5
[ 1199.918719][T19505] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1199.957610][T19502] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1200.004671][T19502] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5848: Failed to acquire dquot type 0
[ 1200.018310][T19502] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1200.029851][T19502] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5848: mark_inode_dirty error
[ 1200.068627][T19502] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1200.196432][T19502] EXT4-fs (loop3): 1 orphan inode deleted
[ 1200.300654][T19502] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1200.300978][ T5549] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1200.857828][ T5549] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1200.878505][ T5549] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:10: Failed to release dquot type 0
[ 1200.918427][T19502] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1200.945413][T19502] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1201.313122][T19524] loop8: detected capacity change from 0 to 4096
[ 1201.322312][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1201.378550][T19524] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1201.385456][T19524] EXT4-fs (loop8): Ignoring removed orlov option
[ 1201.405232][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1201.416196][T19524] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1201.506606][T19520] loop0: detected capacity change from 0 to 40427
[ 1201.520393][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1201.531937][T19520] F2FS-fs (loop0): invalid crc value
[ 1201.539730][T19520] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1201.587819][T19520] F2FS-fs (loop0): Start checkpoint disabled!
[ 1201.612661][T19520] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1201.631853][T19533] overlayfs: missing 'lowerdir'
[ 1201.643365][T19520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5851'.
[ 1201.658969][T19520] netlink: 'syz.0.5851': attribute type 3 has an invalid length.
[ 1201.667730][T19520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5851'.
[ 1201.783664][ T5549] handle_bad_sector: 1 callbacks suppressed
[ 1201.783680][ T5549] attempt to access beyond end of device
[ 1201.783680][ T5549] loop0: rw=2049, want=40976, limit=40427
[ 1201.941880][T19540] loop5: detected capacity change from 0 to 4096
[ 1201.951705][ T3279] usb 9-1: new full-speed USB device number 42 using dummy_hcd
[ 1201.966907][T19540] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1201.975668][T19540] System zones: 0-5
[ 1202.708677][T19547] 9pnet: Insufficient options for proto=fd
[ 1202.718608][T19547] loop3: detected capacity change from 0 to 1024
[ 1202.743242][T19540] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1202.866860][T19549] loop0: detected capacity change from 0 to 4096
[ 1202.882660][T19549] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1202.903033][T19549] System zones: 0-5
[ 1202.909297][T19549] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1204.413840][T19568] loop0: detected capacity change from 0 to 1024
[ 1204.458831][T19568] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.5865: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1204.512628][T19568] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1204.542569][T19568] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.5865: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1204.589885][T19568] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1204.616108][T19568] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.5865: Failed to acquire dquot type 0
[ 1204.644642][T19568] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1204.665244][T19568] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.5865: mark_inode_dirty error
[ 1204.763576][T19568] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1204.823565][ T3279] usb 9-1: unable to read config index 0 descriptor/all
[ 1204.836955][T19568] EXT4-fs (loop0): 1 orphan inode deleted
[ 1204.837287][ T3279] usb 9-1: can't read configurations, error -71
[ 1204.858235][  T310] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1204.896566][T19568] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1204.923018][  T310] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1204.931926][  T310] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0
[ 1204.975583][T19568] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[ 1204.994001][T19574] loop3: detected capacity change from 0 to 40427
[ 1204.999769][T19568] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on
[ 1205.052251][T19574] F2FS-fs (loop3): fault_injection options not supported
[ 1205.059511][T19574] F2FS-fs (loop3): fault_type options not supported
[ 1205.069486][T19574] F2FS-fs (loop3): invalid crc value
[ 1205.092488][T19574] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1205.107459][T15352] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1205.120704][T15352] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1205.130611][T15352] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1205.130984][T19574] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1205.229735][T19586] loop0: detected capacity change from 0 to 4096
[ 1205.259344][T19586] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1205.268334][T19586] System zones: 0-5
[ 1205.273010][T19586] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1206.224338][T19591] attempt to access beyond end of device
[ 1206.224338][T19591] loop3: rw=2049, want=47072, limit=40427
[ 1206.248194][T19591] attempt to access beyond end of device
[ 1206.248194][T19591] loop3: rw=0, want=47072, limit=40427
[ 1206.960901][T19588] loop5: detected capacity change from 0 to 40427
[ 1206.974788][T13453] attempt to access beyond end of device
[ 1206.974788][T13453] loop3: rw=2049, want=47080, limit=40427
[ 1207.034741][T19588] F2FS-fs (loop5): invalid crc value
[ 1207.046768][T19602] 9pnet: Insufficient options for proto=fd
[ 1207.078449][T19602] loop8: detected capacity change from 0 to 1024
[ 1207.112531][T19588] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1207.599130][T19588] F2FS-fs (loop5): Start checkpoint disabled!
[ 1207.840269][T19588] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1207.977948][T19615] loop8: detected capacity change from 0 to 4096
[ 1207.982681][T19588] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5870'.
[ 1208.011246][T19588] netlink: 'syz.5.5870': attribute type 3 has an invalid length.
[ 1208.107591][T19588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5870'.
[ 1208.200110][T19615] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1208.243000][T19615] System zones: 0-5
[ 1208.385023][T19615] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1208.613855][   T45] attempt to access beyond end of device
[ 1208.613855][   T45] loop5: rw=2049, want=40976, limit=40427
[ 1209.911885][T19637] loop5: detected capacity change from 0 to 1024
[ 1210.008496][T19637] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 2: comm syz.5.5882: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1210.060354][T19637] Quota error (device loop5): qtree_write_dquot: dquota write failed
[ 1210.417550][T19637] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 48: comm syz.5.5882: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1211.464643][T19637] Quota error (device loop5): v2_write_file_info: Can't write info structure
[ 1211.484389][T19646] loop3: detected capacity change from 0 to 4096
[ 1211.501697][T19637] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.5882: Failed to acquire dquot type 0
[ 1211.540114][T19646] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1211.555763][T19637] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1211.565887][T19646] System zones: 0-5
[ 1211.577293][T19646] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1211.600022][T19650] loop0: detected capacity change from 0 to 128
[ 1211.616521][T19637] EXT4-fs error (device loop5): ext4_evict_inode:285: inode #11: comm syz.5.5882: mark_inode_dirty error
[ 1211.639089][T19637] EXT4-fs warning (device loop5): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1211.651604][T19637] EXT4-fs (loop5): 1 orphan inode deleted
[ 1211.659108][T19637] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1211.682075][  T310] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1211.723405][T19637] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option
[ 1211.737604][T19653] input: syz1 as /devices/virtual/input/input56
[ 1211.752815][T19637] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on
[ 1211.759486][  T310] Quota error (device loop5): remove_tree: Can't read quota data block 1
[ 1211.774318][  T310] EXT4-fs error (device loop5): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0
[ 1212.348640][T15113] EXT4-fs error (device loop5): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1212.413242][T19663] 9pnet: Insufficient options for proto=fd
[ 1212.482131][T15113] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1212.508881][T15113] EXT4-fs error (device loop5): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1212.870160][T19669] loop3: detected capacity change from 0 to 4096
[ 1213.066762][T19669] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1213.073990][T19669] EXT4-fs (loop3): Ignoring removed orlov option
[ 1213.169544][T19669] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1213.646065][T19677] loop8: detected capacity change from 0 to 4096
[ 1213.772053][T19677] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1213.780487][T19677] System zones: 0-5
[ 1213.787983][T19677] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1213.813067][T16072] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[ 1214.742950][T16072] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1214.751394][T16072] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1214.782588][T16072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1214.807856][T16072] usb 4-1: config 0 descriptor??
[ 1214.871017][T15611] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[ 1215.277144][T15611] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1215.291854][T15611] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1215.406622][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x1
[ 1215.414920][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x5
[ 1215.423272][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x6
[ 1215.429716][T19704] loop8: detected capacity change from 0 to 4096
[ 1215.432240][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x0
[ 1215.446532][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x0
[ 1215.456275][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x0
[ 1215.466582][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x0
[ 1215.476226][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x0
[ 1215.485418][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x0
[ 1215.502790][T16072] logitech-djreceiver 0003:046D:C52F.005E: unknown main item tag 0x0
[ 1215.529412][T19704] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1215.536460][T19704] EXT4-fs (loop8): Ignoring removed orlov option
[ 1216.233881][T19704] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1216.879363][T19717] overlayfs: missing 'lowerdir'
[ 1217.050999][T15611] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1217.065048][T15611] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1217.104811][T15611] usb 6-1: can't set config #1, error -71
[ 1217.111835][T19723] loop5: detected capacity change from 0 to 128
[ 1217.116315][T15611] usb 6-1: USB disconnect, device number 67
[ 1217.151592][ T3279] usb 4-1: USB disconnect, device number 60
[ 1217.175971][T19723] input: syz1 as /devices/virtual/input/input57
[ 1217.189880][T16072] usb 9-1: new full-speed USB device number 44 using dummy_hcd
[ 1217.406451][T19730] loop3: detected capacity change from 0 to 4096
[ 1217.439193][T19730] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1217.448483][T19730] System zones: 0-5
[ 1217.458134][T19730] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1218.269324][T16072] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1218.291750][T16072] usb 9-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1218.323297][T16072] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1218.336195][T19745] loop0: detected capacity change from 0 to 4096
[ 1218.352314][T16072] usb 9-1: config 0 descriptor??
[ 1218.389181][T19745] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1218.408173][T19745] System zones: 0-5
[ 1218.413020][T19745] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1218.923829][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x1
[ 1218.932082][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x5
[ 1218.940346][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x6
[ 1218.950726][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0
[ 1218.959125][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0
[ 1218.967811][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0
[ 1218.980883][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0
[ 1219.048342][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0
[ 1219.057911][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0
[ 1219.066518][T16072] logitech-djreceiver 0003:046D:C52F.005F: unknown main item tag 0x0
[ 1219.351128][ T3279] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1219.720293][T19765] loop5: detected capacity change from 0 to 1024
[ 1219.811551][T19765] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 2: comm syz.5.5918: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1219.826578][T19765] Quota error (device loop5): qtree_write_dquot: dquota write failed
[ 1219.835037][T19765] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 48: comm syz.5.5918: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1219.840118][ T3279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1219.849905][T19765] Quota error (device loop5): v2_write_file_info: Can't write info structure
[ 1219.865905][ T3279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1219.868793][T19765] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.5918: Failed to acquire dquot type 0
[ 1219.890845][T19765] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1219.900994][T19765] EXT4-fs error (device loop5): ext4_evict_inode:285: inode #11: comm syz.5.5918: mark_inode_dirty error
[ 1219.913123][T19765] EXT4-fs warning (device loop5): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1219.924098][T19765] EXT4-fs (loop5): 1 orphan inode deleted
[ 1219.930079][T19765] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1219.953739][  T311] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1219.984576][  T311] Quota error (device loop5): remove_tree: Can't read quota data block 1
[ 1220.001092][  T311] EXT4-fs error (device loop5): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0
[ 1220.003500][T19765] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option
[ 1220.028470][T19765] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on
[ 1220.064499][ T3279] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1220.075146][  T279] usb 1-1: new low-speed USB device number 59 using dummy_hcd
[ 1220.082948][ T3279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1220.091408][ T3279] usb 4-1: Product: syz
[ 1220.095619][ T3279] usb 4-1: Manufacturer: syz
[ 1220.100589][ T3279] usb 4-1: SerialNumber: syz
[ 1220.116734][ T3279] usb 4-1: config 0 descriptor??
[ 1220.130697][T15113] EXT4-fs error (device loop5): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1220.147217][T15113] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1220.149952][T19752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1220.162694][T15113] EXT4-fs error (device loop5): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1220.171324][T19752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1220.414741][T19774] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5921'.
[ 1220.422190][T19752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1220.431588][T19752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1220.491941][  T279] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1220.502540][  T279] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1220.543690][ T1658] usb 9-1: USB disconnect, device number 44
[ 1220.664136][T19777] loop8: detected capacity change from 0 to 128
[ 1220.708677][T19777] input: syz1 as /devices/virtual/input/input58
[ 1220.930047][ T3279] Error reading MAC address
[ 1220.936410][ T3279] usb 4-1: USB disconnect, device number 61
[ 1221.243109][T19781] loop5: detected capacity change from 0 to 40427
[ 1221.277219][T19781] F2FS-fs (loop5): invalid crc value
[ 1221.289175][T19781] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1221.339190][T19781] F2FS-fs (loop5): Start checkpoint disabled!
[ 1221.346325][T19781] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1221.377688][T19781] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5924'.
[ 1221.386918][T19781] netlink: 'syz.5.5924': attribute type 3 has an invalid length.
[ 1221.395121][T19781] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5924'.
[ 1221.425426][  T310] attempt to access beyond end of device
[ 1221.425426][  T310] loop5: rw=2049, want=40976, limit=40427
[ 1221.464945][T19785] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5926'.
[ 1221.534060][T19789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=19789 comm=syz.8.5927
[ 1221.908479][T19789] loop8: detected capacity change from 0 to 40427
[ 1222.006891][T19789] F2FS-fs (loop8): invalid crc value
[ 1222.101440][T19789] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1222.262612][T19789] F2FS-fs (loop8): Start checkpoint disabled!
[ 1222.310508][T19789] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1222.629103][ T3279] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1222.699091][  T310] attempt to access beyond end of device
[ 1222.699091][  T310] loop8: rw=2049, want=45104, limit=40427
[ 1222.767202][T19795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5928'.
[ 1222.776861][T19795] netlink: 'syz.4.5928': attribute type 3 has an invalid length.
[ 1222.784884][T19795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5928'.
[ 1222.798367][T19799] loop5: detected capacity change from 0 to 512
[ 1222.866848][T19799] EXT4-fs (loop5): Ignoring removed orlov option
[ 1222.890267][T19805] loop8: detected capacity change from 0 to 1024
[ 1222.896324][T19799] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1222.907392][ T3279] usb 4-1: Using ep0 maxpacket: 32
[ 1222.949844][  T279] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1222.968209][  T279] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1222.979663][T19805] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 2: comm syz.8.5930: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1222.996489][T19799] EXT4-fs (loop5): 1 truncate cleaned up
[ 1223.002347][T19799] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1223.022992][T19805] Quota error (device loop8): qtree_write_dquot: dquota write failed
[ 1223.031555][T19805] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 48: comm syz.8.5930: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1223.046276][  T279] usb 1-1: can't set config #1, error -71
[ 1223.052079][ T3279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1223.080686][T19805] Quota error (device loop8): v2_write_file_info: Can't write info structure
[ 1223.084072][  T279] usb 1-1: USB disconnect, device number 59
[ 1223.099283][ T3279] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1223.114366][T19805] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.5930: Failed to acquire dquot type 0
[ 1223.141994][ T3279] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1223.155639][T19805] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1223.171791][ T3279] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1223.188312][T19805] EXT4-fs error (device loop8): ext4_evict_inode:285: inode #11: comm syz.8.5930: mark_inode_dirty error
[ 1223.206540][T19805] EXT4-fs warning (device loop8): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1223.210049][ T3279] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1223.231617][ T3279] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1223.233733][T19805] EXT4-fs (loop8): 1 orphan inode deleted
[ 1223.250941][ T3279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.269323][T19805] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1223.272229][ T3279] usb 4-1: config 0 descriptor??
[ 1223.320252][ T1517] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1223.344014][ T1517] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1223.363597][ T1517] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0
[ 1223.429836][T19805] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[ 1223.469136][T19805] EXT4-fs (loop8): Cannot change journaled quota options when quota turned on
[ 1223.505318][  T279] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1223.649665][T14225] EXT4-fs error (device loop8): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1223.677857][T14225] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1223.697957][T14225] EXT4-fs error (device loop8): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1223.818761][T19813] loop8: detected capacity change from 0 to 4096
[ 1223.827290][ T3279] hid-generic 0003:1B1C:0C10.0060: unknown main item tag 0x0
[ 1223.834805][ T3279] hid-generic 0003:1B1C:0C10.0060: unknown main item tag 0x0
[ 1223.855083][ T3279] hid-generic 0003:1B1C:0C10.0060: unknown main item tag 0x0
[ 1223.872286][ T3279] hid-generic 0003:1B1C:0C10.0060: unknown main item tag 0x0
[ 1223.888095][ T3279] hid-generic 0003:1B1C:0C10.0060: unknown main item tag 0x0
[ 1223.900766][  T279] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1223.933002][T19813] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1223.936729][ T3279] hid-generic 0003:1B1C:0C10.0060: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1223.941822][T19813] System zones: 
[ 1223.953879][  T279] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1223.975507][T19813] 0-5
[ 1223.986324][T19813] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1224.111511][ T3279] usb 4-1: USB disconnect, device number 62
[ 1224.167948][  T279] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1224.177143][  T279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1224.185656][  T279] usb 1-1: Product: syz
[ 1224.190004][  T279] usb 1-1: Manufacturer: syz
[ 1224.194688][  T279] usb 1-1: SerialNumber: syz
[ 1224.208746][  T279] usb 1-1: config 0 descriptor??
[ 1224.232033][T19804] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1224.239410][T19804] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1224.472078][T19804] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1224.479443][T19804] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1224.684933][T19821] loop3: detected capacity change from 0 to 4096
[ 1224.705970][T19821] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1224.714698][T19821] System zones: 0-5
[ 1224.719517][T19821] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1225.126665][  T279] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1225.225887][  T279] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[ 1225.238132][T19826] loop8: detected capacity change from 0 to 40427
[ 1225.238805][  T279] usb 1-1: USB disconnect, device number 60
[ 1225.318319][T19826] F2FS-fs (loop8): invalid crc value
[ 1225.329133][T19826] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1225.358091][T19826] F2FS-fs (loop8): Start checkpoint disabled!
[ 1225.365758][T19826] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1225.471566][T16072] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1225.497495][T19832] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5936'.
[ 1225.506746][T19832] netlink: 'syz.8.5936': attribute type 3 has an invalid length.
[ 1225.515027][T19832] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5936'.
[ 1225.660843][T19834] loop3: detected capacity change from 0 to 4096
[ 1225.709549][T19834] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1225.717824][T19834] System zones: 0-5
[ 1225.722723][T19834] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1225.878473][T16072] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1225.889506][T16072] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1226.113428][ T1517] attempt to access beyond end of device
[ 1226.113428][ T1517] loop8: rw=2049, want=40976, limit=40427
[ 1226.141907][T19840] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1226.155718][T19840] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1226.209043][T16072] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1226.225804][T16072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1226.298256][T16072] usb 6-1: Product: syz
[ 1226.302673][T16072] usb 6-1: Manufacturer: syz
[ 1226.307424][T16072] usb 6-1: SerialNumber: syz
[ 1226.313710][T16072] usb 6-1: config 0 descriptor??
[ 1226.337206][T19828] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1226.344361][T19828] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1226.646748][T19828] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1226.719217][T19828] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1227.277564][T16072] Error reading MAC address
[ 1227.285525][T16072] usb 6-1: USB disconnect, device number 68
[ 1227.766956][T19865] loop3: detected capacity change from 0 to 1024
[ 1227.852534][T19865] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.5943: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1227.867026][T19865] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1227.876596][T19865] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.5943: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1227.891622][T19865] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1227.900669][T19865] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.5943: Failed to acquire dquot type 0
[ 1227.912542][T19865] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1227.922562][T19865] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.5943: mark_inode_dirty error
[ 1227.934039][T19865] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1227.944313][T19865] EXT4-fs (loop3): 1 orphan inode deleted
[ 1227.950085][T19865] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1227.973569][  T311] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1227.988167][  T311] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1228.010267][T19865] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[ 1228.018854][  T311] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0
[ 1228.032668][T19865] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[ 1228.051021][T19872] 9pnet: Insufficient options for proto=fd
[ 1228.061829][   T30] audit: type=1326 audit(2000001117.050:25004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.5.5948" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ccd60de59 code=0x0
[ 1228.229805][T13453] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1228.243067][T13453] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1228.253097][T13453] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1228.386152][T19878] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1228.406106][T19878] SELinux: failed to load policy
[ 1228.682390][T19884] loop3: detected capacity change from 0 to 40427
[ 1228.794431][T19892] loop8: detected capacity change from 0 to 1024
[ 1228.830756][T19884] F2FS-fs (loop3): invalid crc value
[ 1229.008722][ T7020] usb 1-1: new low-speed USB device number 61 using dummy_hcd
[ 1229.071406][T19884] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1229.363494][T19884] F2FS-fs (loop3): Start checkpoint disabled!
[ 1229.660708][ T7020] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1229.726978][ T7020] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1229.740723][T19884] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1229.908064][T19884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5952'.
[ 1229.917773][T19884] netlink: 'syz.3.5952': attribute type 3 has an invalid length.
[ 1229.925626][T19884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5952'.
[ 1229.947638][  T311] attempt to access beyond end of device
[ 1229.947638][  T311] loop3: rw=2049, want=45104, limit=40427
[ 1230.599021][T19910] loop3: detected capacity change from 0 to 40427
[ 1230.857744][T19910] F2FS-fs (loop3): invalid crc value
[ 1230.889844][T19910] F2FS-fs (loop3): Invalid segment type: 16, segno: 8
[ 1230.914072][T19910] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[ 1231.006993][T16072] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1231.061538][T19920] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1231.070693][T19920] SELinux: failed to load policy
[ 1231.106330][T19924] loop3: detected capacity change from 0 to 4096
[ 1231.150799][T19924] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1231.159351][T19924] System zones: 0-5
[ 1231.164529][T19924] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1231.514969][T16072] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1231.524895][T16072] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1231.701662][T16072] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1231.711461][T16072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.719981][T16072] usb 6-1: Product: syz
[ 1231.724193][T16072] usb 6-1: Manufacturer: syz
[ 1231.728808][T16072] usb 6-1: SerialNumber: syz
[ 1231.734444][T16072] usb 6-1: config 0 descriptor??
[ 1231.755026][T19912] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1231.762046][T19912] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1231.861958][ T7020] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1232.151891][ T7020] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1232.178002][T19912] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1232.182611][ T7020] usb 1-1: can't set config #1, error -71
[ 1232.191617][T19912] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1233.064684][ T7020] usb 1-1: USB disconnect, device number 61
[ 1233.158730][T19942] loop8: detected capacity change from 0 to 1024
[ 1233.214348][T19952] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1233.234672][T19952] SELinux: failed to load policy
[ 1233.235170][T19942] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 2: comm syz.8.5970: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1233.254585][T19942] Quota error (device loop8): qtree_write_dquot: dquota write failed
[ 1233.264775][T19942] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 48: comm syz.8.5970: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1233.273678][T19955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5975'.
[ 1233.280104][T19942] Quota error (device loop8): v2_write_file_info: Can't write info structure
[ 1233.298232][T19942] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.5970: Failed to acquire dquot type 0
[ 1233.312105][T19942] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1233.322195][T19942] EXT4-fs error (device loop8): ext4_evict_inode:285: inode #11: comm syz.8.5970: mark_inode_dirty error
[ 1233.333672][T19942] EXT4-fs warning (device loop8): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1233.344556][T16072] Error reading MAC address
[ 1233.350324][T16072] usb 6-1: USB disconnect, device number 69
[ 1233.358129][T19942] EXT4-fs (loop8): 1 orphan inode deleted
[ 1233.364213][T19942] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1233.390128][   T45] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1233.447212][   T45] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1233.461120][   T45] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1233.475312][T19942] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[ 1233.485974][T19942] EXT4-fs (loop8): Cannot change journaled quota options when quota turned on
[ 1233.806785][T14225] EXT4-fs error (device loop8): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1233.819869][T14225] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1233.830020][T14225] EXT4-fs error (device loop8): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1233.942856][T19973] loop8: detected capacity change from 0 to 4096
[ 1234.331074][T19973] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1234.343398][T19973] System zones: 0-5
[ 1234.352912][T19973] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1234.394414][T15611] usb 1-1: new low-speed USB device number 62 using dummy_hcd
[ 1235.792213][T19991] SELinux:  policydb version 896366843 does not match my version range 15-33
[ 1235.837119][T19991] SELinux: failed to load policy
[ 1235.948311][T19980] loop3: detected capacity change from 0 to 40427
[ 1235.974425][T19980] F2FS-fs (loop3): fault_injection options not supported
[ 1236.019304][T19980] F2FS-fs (loop3): fault_type options not supported
[ 1236.047800][T19980] F2FS-fs (loop3): invalid crc value
[ 1236.053726][T19999] loop5: detected capacity change from 0 to 16
[ 1236.092466][T19980] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1236.237144][T19999] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1236.245566][T19980] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1236.254041][T15611] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1236.254480][T19999] attempt to access beyond end of device
[ 1236.254480][T19999] loop5: rw=0, want=40, limit=16
[ 1236.264384][T15611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1236.324441][T19999] attempt to access beyond end of device
[ 1236.324441][T19999] loop5: rw=0, want=40, limit=16
[ 1236.406577][T19999] attempt to access beyond end of device
[ 1236.406577][T19999] loop5: rw=0, want=40, limit=16
[ 1236.527205][T20008] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5988'.
[ 1236.594373][T19999] attempt to access beyond end of device
[ 1236.594373][T19999] loop5: rw=0, want=40, limit=16
[ 1236.635942][T19999] attempt to access beyond end of device
[ 1236.635942][T19999] loop5: rw=0, want=40, limit=16
[ 1236.671080][T20010] loop0: detected capacity change from 0 to 1024
[ 1236.720371][T20012] loop5: detected capacity change from 0 to 4096
[ 1236.734723][T15611] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1236.744675][T15611] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1236.767791][T15611] usb 1-1: can't set config #1, error -71
[ 1236.776558][T20013] attempt to access beyond end of device
[ 1236.776558][T20013] loop3: rw=2049, want=47072, limit=40427
[ 1236.797107][T15611] usb 1-1: USB disconnect, device number 62
[ 1236.820198][  T279] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1236.851407][T20012] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1236.862762][T20010] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.5990: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1236.882174][T20012] System zones: 0-5
[ 1236.931429][T20012] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1236.954964][T20013] attempt to access beyond end of device
[ 1236.954964][T20013] loop3: rw=0, want=47072, limit=40427
[ 1236.966296][T20010] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1236.975095][T20010] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.5990: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1237.075405][T20010] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1237.085077][T20010] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.5990: Failed to acquire dquot type 0
[ 1237.096801][T20010] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1237.106600][T20010] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.5990: mark_inode_dirty error
[ 1237.118545][T20010] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1237.265503][T13453] attempt to access beyond end of device
[ 1237.265503][T13453] loop3: rw=2049, want=47080, limit=40427
[ 1237.275294][T20010] EXT4-fs (loop0): 1 orphan inode deleted
[ 1237.290610][  T279] usb 9-1: Using ep0 maxpacket: 32
[ 1237.296027][T20010] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1237.300422][   T45] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1237.414222][   T45] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1237.442770][T20010] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[ 1237.446928][   T45] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1237.465362][  T279] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1237.500318][  T279] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1237.517118][T20010] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on
[ 1237.528639][  T279] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1237.539067][  T279] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1237.552636][  T279] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1237.560051][  T279] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1237.621598][  T279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1237.637442][  T279] usb 9-1: config 0 descriptor??
[ 1237.734078][T15352] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1237.747825][T15352] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1237.758840][T15352] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1237.838233][T20028] loop0: detected capacity change from 0 to 4096
[ 1237.891908][T20028] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1237.900495][T20028] System zones: 0-5
[ 1237.905042][T20028] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1237.973692][T20035] loop5: detected capacity change from 0 to 4096
[ 1238.016389][T20035] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1238.025593][T20035] System zones: 0-5
[ 1238.030863][T20035] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1238.328290][  T279] hid-generic 0003:1B1C:0C10.0061: unknown main item tag 0x0
[ 1238.335768][  T279] hid-generic 0003:1B1C:0C10.0061: unknown main item tag 0x0
[ 1238.355820][  T279] hid-generic 0003:1B1C:0C10.0061: unknown main item tag 0x0
[ 1238.365449][T20041] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5997'.
[ 1238.375075][  T279] hid-generic 0003:1B1C:0C10.0061: unknown main item tag 0x0
[ 1238.383155][  T279] hid-generic 0003:1B1C:0C10.0061: unknown main item tag 0x0
[ 1238.392332][  T279] hid-generic 0003:1B1C:0C10.0061: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0
[ 1239.293648][ T7020] usb 9-1: USB disconnect, device number 45
[ 1239.545132][T16072] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[ 1239.675770][T20056] loop0: detected capacity change from 0 to 512
[ 1239.749092][T20056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1239.760239][T20056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[ 1239.768310][T20056] System zones: 1-12
[ 1239.773086][T20056] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.6000: bad orphan inode 131072
[ 1239.784284][T20056] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none.
[ 1239.801737][T20056] incfs: iterate_incfs_dir / -22
[ 1239.812899][   T30] audit: type=1400 audit(2000001128.045:25005): avc:  denied  { map } for  pid=20055 comm="syz.0.6000" path="/proc/784/task/785" dev="proc" ino=91005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1239.935478][T20061] loop8: detected capacity change from 0 to 1024
[ 1239.942399][T16072] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1239.953843][T16072] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1239.965263][T16072] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1239.976731][T16072] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1240.058135][T20061] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 2: comm syz.8.6005: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1240.090493][T20061] Quota error (device loop8): qtree_write_dquot: dquota write failed
[ 1240.104065][T20061] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 48: comm syz.8.6005: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1240.141834][T20061] Quota error (device loop8): v2_write_file_info: Can't write info structure
[ 1240.151009][   T26] usb 6-1: new low-speed USB device number 70 using dummy_hcd
[ 1240.158859][T16072] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1240.168167][T20061] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.6005: Failed to acquire dquot type 0
[ 1240.179523][T16072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.196979][T16072] usb 4-1: Product: syz
[ 1240.201503][T20061] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1240.211568][T16072] usb 4-1: Manufacturer: syz
[ 1240.227286][T16072] usb 4-1: SerialNumber: syz
[ 1240.232199][T20061] EXT4-fs error (device loop8): ext4_evict_inode:285: inode #11: comm syz.8.6005: mark_inode_dirty error
[ 1240.245401][T20061] EXT4-fs warning (device loop8): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1240.255813][T20061] EXT4-fs (loop8): 1 orphan inode deleted
[ 1240.261698][T20061] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1240.265539][T20066] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1240.284513][   T45] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1240.291963][T20052] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1240.323105][T20066] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1240.330329][   T45] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1240.346781][T20061] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[ 1240.361942][   T45] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1240.375037][T20066] device bridge_slave_0 entered promiscuous mode
[ 1240.385970][T20066] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1240.393255][T20061] EXT4-fs (loop8): Cannot change journaled quota options when quota turned on
[ 1240.402641][T20066] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.410307][T20066] device bridge_slave_1 entered promiscuous mode
[ 1240.557598][T20052] loop3: detected capacity change from 0 to 256
[ 1240.566413][T14225] EXT4-fs error (device loop8): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1240.581676][   T26] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1240.584520][T20066] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1240.597331][   T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[ 1240.599289][T20066] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1240.617521][T20066] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1240.624848][T20066] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1240.633772][T14225] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1240.644152][ T5549] device bridge_slave_1 left promiscuous mode
[ 1240.653843][T14225] EXT4-fs error (device loop8): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1240.665685][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.673244][ T5549] device bridge_slave_0 left promiscuous mode
[ 1240.676266][T20052] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1240.690309][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1240.717584][ T5549] device veth1_macvtap left promiscuous mode
[ 1240.723789][ T5549] device veth0_vlan left promiscuous mode
[ 1240.834224][T20074] exFAT-fs (loop3): hint_cluster is invalid (17)
[ 1240.870768][T20074] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[ 1240.878940][T20074] exFAT-fs (loop3): Filesystem has been set read-only
[ 1240.944500][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1240.953516][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1240.972700][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.995951][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1241.009443][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1241.028577][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1241.035675][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1241.037992][T20077] loop8: detected capacity change from 0 to 512
[ 1241.062631][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1241.071165][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1241.084143][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1241.091214][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1241.126104][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1241.145306][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1241.154529][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1241.159337][T16072] cdc_ncm 4-1:1.0: bind() failure
[ 1241.178068][T16072] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1241.186002][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1241.194955][T16072] cdc_ncm 4-1:1.1: bind() failure
[ 1241.222590][T16072] usb 4-1: USB disconnect, device number 63
[ 1241.229066][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1241.237811][T20077] EXT4-fs (loop8): Ignoring removed orlov option
[ 1241.244876][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1241.255046][T20077] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1241.280244][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1241.289237][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1241.294695][T20077] EXT4-fs (loop8): 1 truncate cleaned up
[ 1241.298826][T20066] device veth0_vlan entered promiscuous mode
[ 1241.309465][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1241.316741][T20077] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1241.320832][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1241.343370][T20081] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1241.350214][T20081] EXT4-fs (loop3): Ignoring removed orlov option
[ 1241.363510][T20081] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[ 1241.422912][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1241.437303][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1241.455710][T20066] device veth1_macvtap entered promiscuous mode
[ 1241.490379][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1241.508235][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1241.533455][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1241.544852][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1241.553448][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1241.777382][T20091] overlayfs: missing 'lowerdir'
[ 1241.886918][T20089] set_capacity_and_notify: 1 callbacks suppressed
[ 1241.886972][T20089] loop9: detected capacity change from 0 to 40427
[ 1241.916745][T20089] F2FS-fs (loop9): invalid crc value
[ 1241.940892][T20089] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1241.993988][T20089] F2FS-fs (loop9): Start checkpoint disabled!
[ 1242.016947][T20089] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[ 1242.077691][T16072] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[ 1242.111508][T20089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6007'.
[ 1242.136661][T20089] netlink: 'syz.9.6007': attribute type 3 has an invalid length.
[ 1242.169364][T20089] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6007'.
[ 1242.239113][  T310] attempt to access beyond end of device
[ 1242.239113][  T310] loop9: rw=2049, want=40976, limit=40427
[ 1242.519825][T16072] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1242.529772][T16072] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1242.575509][T16072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1242.692070][T16072] usb 4-1: config 0 descriptor??
[ 1243.046389][T20113] loop9: detected capacity change from 0 to 40427
[ 1243.062940][T20117] input: syz1 as /devices/virtual/input/input59
[ 1243.064167][T20115] loop8: detected capacity change from 0 to 4096
[ 1243.132006][   T26] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[ 1243.141483][T20113] F2FS-fs (loop9): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[ 1243.141936][   T26] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[ 1243.160923][T20115] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1243.169565][T20115] System zones: 0-5
[ 1243.178529][   T26] usb 6-1: can't set config #1, error -71
[ 1243.186205][T20115] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1243.196752][T20113] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1243.207280][   T26] usb 6-1: USB disconnect, device number 70
[ 1243.221859][T20113] F2FS-fs (loop9): fault_type options not supported
[ 1243.228515][T20113] F2FS-fs (loop9): fault_injection options not supported
[ 1243.320913][T20113] F2FS-fs (loop9): invalid crc value
[ 1243.333037][T20113] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1243.350876][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x1
[ 1243.388688][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x5
[ 1243.453785][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x6
[ 1243.560620][T20113] F2FS-fs (loop9): Start checkpoint disabled!
[ 1243.569113][T20113] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1243.569183][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x0
[ 1243.576383][T20113] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[ 1243.589655][T20121] loop5: detected capacity change from 0 to 40427
[ 1243.608299][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x0
[ 1243.620945][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x0
[ 1243.635094][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x0
[ 1243.647783][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x0
[ 1243.653216][T20121] F2FS-fs (loop5): fault_injection options not supported
[ 1243.656918][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x0
[ 1243.664492][T20121] F2FS-fs (loop5): fault_type options not supported
[ 1243.671879][T16072] logitech-djreceiver 0003:046D:C52F.0062: unknown main item tag 0x0
[ 1243.691788][T20121] F2FS-fs (loop5): invalid crc value
[ 1243.715311][T20121] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1243.782571][T20121] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1243.920857][   T30] audit: type=1400 audit(2000001131.891:25006): avc:  denied  { append } for  pid=20112 comm="syz.9.6017" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1244.039665][T20136] attempt to access beyond end of device
[ 1244.039665][T20136] loop5: rw=2049, want=47072, limit=40427
[ 1244.062658][   T45] attempt to access beyond end of device
[ 1244.062658][   T45] loop9: rw=2049, want=40992, limit=40427
[ 1244.105593][T20138] loop8: detected capacity change from 0 to 4096
[ 1244.114552][T20136] attempt to access beyond end of device
[ 1244.114552][T20136] loop5: rw=0, want=47072, limit=40427
[ 1244.172413][T20138] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1244.193607][T20138] System zones: 0-5
[ 1244.198560][T20138] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1244.280139][T20145] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6024'.
[ 1244.760776][T16072] usb 4-1: USB disconnect, device number 64
[ 1244.791920][T15611] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1245.048413][T15611] usb 10-1: Using ep0 maxpacket: 32
[ 1245.176929][T15611] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.187253][T15611] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1246.149323][T15113] attempt to access beyond end of device
[ 1246.149323][T15113] loop5: rw=2049, want=47080, limit=40427
[ 1246.160173][T15611] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1246.173872][T20162] input: syz1 as /devices/virtual/input/input60
[ 1246.180323][T15611] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1246.180355][T15611] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1246.180383][T15611] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1246.210787][T15611] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1246.224284][T15611] usb 10-1: config 0 descriptor??
[ 1249.281071][T20175] loop8: detected capacity change from 0 to 128
[ 1249.332911][T20171] tipc: Started in network mode
[ 1249.338018][T20171] tipc: Node identity 4, cluster identity 4711
[ 1249.344405][T20171] tipc: Node number set to 4
[ 1249.573865][T20181] loop5: detected capacity change from 0 to 256
[ 1249.718653][T20185] loop3: detected capacity change from 0 to 1024
[ 1249.785378][T20181] FAT-fs (loop5): Directory bread(block 64) failed
[ 1249.971361][T20181] FAT-fs (loop5): Directory bread(block 65) failed
[ 1250.125270][T20181] FAT-fs (loop5): Directory bread(block 66) failed
[ 1250.300152][T20181] FAT-fs (loop5): Directory bread(block 67) failed
[ 1250.461793][T20181] FAT-fs (loop5): Directory bread(block 68) failed
[ 1250.503363][T20181] FAT-fs (loop5): Directory bread(block 69) failed
[ 1250.532031][T20181] FAT-fs (loop5): Directory bread(block 70) failed
[ 1250.557058][T20181] FAT-fs (loop5): Directory bread(block 71) failed
[ 1250.583861][T15611] usbhid 10-1:0.0: can't add hid device: -71
[ 1250.590409][T20181] FAT-fs (loop5): Directory bread(block 72) failed
[ 1250.646790][T20196] loop8: detected capacity change from 0 to 128
[ 1250.688127][T20181] FAT-fs (loop5): Directory bread(block 73) failed
[ 1250.713983][T20196] input: syz1 as /devices/virtual/input/input61
[ 1250.852568][T15611] usbhid: probe of 10-1:0.0 failed with error -71
[ 1250.862744][T15611] usb 10-1: USB disconnect, device number 5
[ 1250.936634][   T30] audit: type=1400 audit(2000001138.461:25007): avc:  denied  { remount } for  pid=20180 comm="syz.5.6034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 1250.971132][T20183] loop9: detected capacity change from 0 to 40427
[ 1251.057708][T20183] F2FS-fs (loop9): invalid crc value
[ 1251.067362][T20183] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1251.070639][T20198] loop3: detected capacity change from 0 to 40427
[ 1251.284980][T20198] F2FS-fs (loop3): fault_injection options not supported
[ 1251.339771][T20183] F2FS-fs (loop9): Start checkpoint disabled!
[ 1251.598698][T20198] F2FS-fs (loop3): fault_type options not supported
[ 1251.756071][T20183] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[ 1251.815000][T20198] F2FS-fs (loop3): invalid crc value
[ 1251.968942][T20198] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1251.979042][T20211] loop8: detected capacity change from 0 to 4096
[ 1252.037540][T20211] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1252.057870][T20211] System zones: 0-5
[ 1252.058056][T20198] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1252.077892][T20211] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1252.113810][T20183] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6037'.
[ 1252.129813][T20183] netlink: 'syz.9.6037': attribute type 3 has an invalid length.
[ 1252.138122][T20183] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6037'.
[ 1252.175430][ T5549] attempt to access beyond end of device
[ 1252.175430][ T5549] loop9: rw=2049, want=40976, limit=40427
[ 1252.272213][T16072] usb 6-1: new full-speed USB device number 71 using dummy_hcd
[ 1252.537639][T20226] attempt to access beyond end of device
[ 1252.537639][T20226] loop3: rw=2049, want=47072, limit=40427
[ 1252.551983][T20226] attempt to access beyond end of device
[ 1252.551983][T20226] loop3: rw=0, want=47072, limit=40427
[ 1252.902711][T16072] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1252.913348][T15611] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 1252.996404][T16072] usb 6-1: not running at top speed; connect to a high speed hub
[ 1253.095600][T16072] usb 6-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config
[ 1253.129527][T16072] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1253.233677][T16072] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1253.437134][T16072] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[ 1253.451904][T16072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1253.474595][T16072] usb 6-1: Product: syz
[ 1253.486499][T16072] usb 6-1: Manufacturer: syz
[ 1253.499039][T16072] usb 6-1: SerialNumber: syz
[ 1253.533206][T20214] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1253.580146][T13453] attempt to access beyond end of device
[ 1253.580146][T13453] loop3: rw=2049, want=47080, limit=40427
[ 1253.939847][T16072] usb 6-1: MIDIStreaming interface descriptor not found
[ 1254.030574][T16072] usb 6-1: USB disconnect, device number 71
[ 1254.046108][T15611] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[ 1254.054471][T15611] usb 10-1: config 179 has no interface number 0
[ 1254.061181][T15611] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64
[ 1254.072796][T15611] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1254.095565][T15611] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1254.117073][T15611] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1254.131439][T15611] usb 10-1: config 179 interface 65 has no altsetting 0
[ 1254.135700][T20249] loop3: detected capacity change from 0 to 40427
[ 1254.139178][T15611] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1254.158427][T20249] F2FS-fs (loop3): invalid crc value
[ 1254.160481][T15611] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1254.173678][T20249] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1254.184894][T20256] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6056'.
[ 1254.213186][T20249] F2FS-fs (loop3): Start checkpoint disabled!
[ 1254.220374][T20249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1254.227127][T20259] loop8: detected capacity change from 0 to 1024
[ 1254.228700][T20230] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1254.251012][T15611] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input62
[ 1254.256836][T20249] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6051'.
[ 1254.272151][T20249] netlink: 'syz.3.6051': attribute type 3 has an invalid length.
[ 1254.280167][T20249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6051'.
[ 1254.307138][T20259] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 2: comm syz.8.6057: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1254.312687][   T45] attempt to access beyond end of device
[ 1254.312687][   T45] loop3: rw=2049, want=40976, limit=40427
[ 1254.333031][T20259] Quota error (device loop8): qtree_write_dquot: dquota write failed
[ 1254.344351][T20259] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 48: comm syz.8.6057: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1254.372560][T20259] Quota error (device loop8): v2_write_file_info: Can't write info structure
[ 1254.383328][T20259] EXT4-fs error (device loop8): ext4_acquire_dquot:6227: comm syz.8.6057: Failed to acquire dquot type 0
[ 1254.395177][T20259] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1254.405123][T20259] EXT4-fs error (device loop8): ext4_evict_inode:285: inode #11: comm syz.8.6057: mark_inode_dirty error
[ 1254.417650][T20259] EXT4-fs warning (device loop8): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[ 1254.428402][T20259] EXT4-fs (loop8): 1 orphan inode deleted
[ 1254.434604][T20259] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1254.457764][   T45] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1254.506137][T20230] UDC core: couldn't find an available UDC or it's busy: -16
[ 1254.513638][T20230] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1254.521539][   T45] Quota error (device loop8): remove_tree: Can't read quota data block 1
[ 1254.531957][   T45] EXT4-fs error (device loop8): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[ 1254.549404][T20230] loop9: detected capacity change from 0 to 256
[ 1254.556890][T20259] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[ 1254.567593][T20259] EXT4-fs (loop8): Cannot change journaled quota options when quota turned on
[ 1254.771647][T20230] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[ 1254.792188][T20230] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 1254.946832][T16072] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[ 1255.327691][T14225] EXT4-fs error (device loop8): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1255.553556][T14225] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5904: Corrupt filesystem
[ 1255.574295][T14225] EXT4-fs error (device loop8): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[ 1255.874795][T20282] tipc: Started in network mode
[ 1255.879831][T20282] tipc: Node identity 4, cluster identity 4711
[ 1255.886100][T20282] tipc: Node number set to 4
[ 1256.002198][T16072] usb 4-1: device descriptor read/64, error -71
[ 1256.045361][ T3279] usb 10-1: USB disconnect, device number 6
[ 1256.065932][ T3279] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1256.129233][T20293] binder: 20292:20293 ioctl 40101283 200000000000 returned -22
[ 1257.754135][   T30] audit: type=1400 audit(2000001144.834:25008): avc:  denied  { ioctl } for  pid=20299 comm="syz.8.6070" path="net:[4026532465]" dev="nsfs" ino=4026532465 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1257.787703][T20303] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6071'.
[ 1257.868039][T20307] loop9: detected capacity change from 0 to 4096
[ 1257.928867][T20307] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1258.045847][T20311] loop8: detected capacity change from 0 to 4096
[ 1258.100625][T20307] System zones: 0-5
[ 1258.190211][T20311] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1258.219056][T20307] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1258.311340][T20311] System zones: 0-5
[ 1258.347170][T20314] loop5: detected capacity change from 0 to 4096
[ 1258.381735][T20311] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1258.482795][T20314] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1258.619241][T20314] System zones: 0-5
[ 1258.735404][T20314] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1260.283916][T20304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6072'.
[ 1260.324670][T20304] netlink: 'syz.4.6072': attribute type 3 has an invalid length.
[ 1260.360773][T20304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6072'.
[ 1260.417815][T20331] loop3: detected capacity change from 0 to 128
[ 1260.528089][T20327] input: syz1 as /devices/virtual/input/input63
[ 1260.694396][T20330] loop8: detected capacity change from 0 to 40427
[ 1260.740423][T20330] F2FS-fs (loop8): invalid crc value
[ 1260.759202][T20330] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1260.829435][T20330] F2FS-fs (loop8): Start checkpoint disabled!
[ 1260.848373][T20330] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1260.864741][T20330] attempt to access beyond end of device
[ 1260.864741][T20330] loop8: rw=524288, want=45072, limit=40427
[ 1260.889074][T20330] attempt to access beyond end of device
[ 1260.889074][T20330] loop8: rw=0, want=45072, limit=40427
[ 1260.916243][T20330] attempt to access beyond end of device
[ 1260.916243][T20330] loop8: rw=0, want=45072, limit=40427
[ 1260.942151][T20342] loop9: detected capacity change from 0 to 40427
[ 1260.963372][   T45] attempt to access beyond end of device
[ 1260.963372][   T45] loop8: rw=2049, want=40968, limit=40427
[ 1260.974749][   T45] attempt to access beyond end of device
[ 1260.974749][   T45] loop8: rw=2049, want=41000, limit=40427
[ 1261.004891][T20342] F2FS-fs (loop9): fault_injection options not supported
[ 1261.012451][T20342] F2FS-fs (loop9): fault_type options not supported
[ 1261.066649][T20342] F2FS-fs (loop9): invalid crc value
[ 1261.172792][T20342] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1261.270626][T20363] loop3: detected capacity change from 0 to 512
[ 1261.354548][T20364] loop8: detected capacity change from 0 to 1024
[ 1261.412064][T20363] EXT4-fs (loop3): Ignoring removed orlov option
[ 1261.552548][T20363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1261.596691][T20342] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1261.950586][T20363] EXT4-fs (loop3): 1 truncate cleaned up
[ 1262.073930][T20363] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[ 1262.460557][T20376] attempt to access beyond end of device
[ 1262.460557][T20376] loop9: rw=2049, want=47072, limit=40427
[ 1262.474607][T20376] attempt to access beyond end of device
[ 1262.474607][T20376] loop9: rw=0, want=47072, limit=40427
[ 1263.030646][T20380] loop3: detected capacity change from 0 to 2048
[ 1263.097594][T20380] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[ 1263.104786][T20380] EXT4-fs (loop3): Ignoring removed bh option
[ 1263.151969][T20380] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,bh,bsddf,. Quota mode: none.
[ 1263.229562][T20380] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6089: bg 0: block 234: padding at end of block bitmap is not set
[ 1263.244635][T20066] attempt to access beyond end of device
[ 1263.244635][T20066] loop9: rw=2049, want=47080, limit=40427
[ 1263.282589][T20380] EXT4-fs (loop3): Remounting filesystem read-only
[ 1263.326041][T20387] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6092'.
[ 1263.451856][T20390] loop8: detected capacity change from 0 to 1024
[ 1263.469213][T20392] loop3: detected capacity change from 0 to 4096
[ 1263.496163][T20390] EXT4-fs (loop8): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[ 1263.567539][T20392] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1263.582478][T20392] System zones: 0-5
[ 1263.596976][T20392] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1263.674971][T20401] tipc: Started in network mode
[ 1263.679932][T20401] tipc: Node identity 4, cluster identity 4711
[ 1263.686423][T20401] tipc: Node number set to 4
[ 1264.056302][T20409] loop8: detected capacity change from 0 to 4096
[ 1264.101612][T20409] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1264.117815][T20409] System zones: 0-5
[ 1264.125363][T20409] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1264.767334][T20417] loop5: detected capacity change from 0 to 128
[ 1265.022223][T20414] input: syz1 as /devices/virtual/input/input64
[ 1265.045543][T20421] loop9: detected capacity change from 0 to 4096
[ 1265.375474][T20426] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6099'.
[ 1265.390483][T20421] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1265.399436][T20421] System zones: 0-5
[ 1265.404236][T20421] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1266.047062][T16072] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1266.356370][T16072] usb 4-1: Using ep0 maxpacket: 32
[ 1266.484782][T16072] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1266.506380][T16072] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1266.543133][T16072] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1266.584872][T16072] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1266.621587][T16072] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1266.670566][T16072] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1266.787237][T16072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.886776][T16072] usb 4-1: config 0 descriptor??
[ 1267.231913][T20452] loop9: detected capacity change from 0 to 128
[ 1267.426553][T16072] hid-generic 0003:1B1C:0C10.0063: unknown main item tag 0x0
[ 1267.434413][T16072] hid-generic 0003:1B1C:0C10.0063: unknown main item tag 0x0
[ 1267.444072][T20454] tipc: Started in network mode
[ 1267.449161][T20454] tipc: Node identity 4, cluster identity 4711
[ 1267.455460][T20454] tipc: Node number set to 4
[ 1267.479435][T15611] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1267.479788][T20451] input: syz1 as /devices/virtual/input/input65
[ 1267.511061][T16072] hid-generic 0003:1B1C:0C10.0063: unknown main item tag 0x0
[ 1267.521073][T16072] hid-generic 0003:1B1C:0C10.0063: unknown main item tag 0x0
[ 1267.528585][T16072] hid-generic 0003:1B1C:0C10.0063: unknown main item tag 0x0
[ 1267.539586][T16072] hid-generic 0003:1B1C:0C10.0063: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1267.542547][   T30] audit: type=1400 audit(2000001153.986:25009): avc:  denied  { mounton } for  pid=20460 comm="syz.8.6111" path="/334/file0" dev="tmpfs" ino=1902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1267.674770][  T279] usb 4-1: USB disconnect, device number 66
[ 1267.734881][T15611] usb 6-1: Using ep0 maxpacket: 16
[ 1267.748215][T20466] loop8: detected capacity change from 0 to 40427
[ 1267.839941][T20466] F2FS-fs (loop8): invalid crc value
[ 1267.883140][T20466] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1267.905904][T15611] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1267.921624][T20466] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0
[ 1267.933378][T20466] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[ 1268.187163][T20484] loop8: detected capacity change from 0 to 128
[ 1268.264488][T20484] input: syz1 as /devices/virtual/input/input66
[ 1268.450980][T15611] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[ 1268.460824][T15611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.469174][T20489] loop9: detected capacity change from 0 to 512
[ 1268.479151][T15611] usb 6-1: Product: syz
[ 1268.486045][T15611] usb 6-1: Manufacturer: syz
[ 1268.490674][T15611] usb 6-1: SerialNumber: syz
[ 1268.523937][   T30] audit: type=1400 audit(2000001154.912:25010): avc:  denied  { read } for  pid=20485 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 1268.607184][T20494] loop3: detected capacity change from 0 to 128
[ 1268.722040][T20494] input: syz1 as /devices/virtual/input/input67
[ 1268.845519][T20489] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.6119: bg 0: block 376: padding at end of block bitmap is not set
[ 1268.881232][T20489] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.6119: inode #1: comm syz.9.6119: iget: illegal inode #
[ 1268.895018][T15611] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1268.902910][T20489] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.6119: error while reading EA inode 1 err=-117
[ 1268.915822][T20489] EXT4-fs (loop9): 1 orphan inode deleted
[ 1268.921762][T20489] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000007,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,noquota,dioread_lock,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[ 1268.928140][T15611] snd-usb-audio: probe of 6-1:1.0 failed with error -2
[ 1268.974576][T15611] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1269.004301][T15611] snd-usb-audio: probe of 6-1:1.1 failed with error -2
[ 1269.403094][T20489] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1269.452878][T20489] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6119'.
[ 1269.525510][T20499] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1269.580617][T20499] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1269.736722][T15611] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1269.765344][T15611] snd-usb-audio: probe of 6-1:1.2 failed with error -2
[ 1269.783285][T15611] usb 6-1: USB disconnect, device number 72
[ 1270.389331][T20519] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6128'.
[ 1270.577348][   T30] audit: type=1400 audit(2000001156.765:25011): avc:  denied  { mount } for  pid=20516 comm="syz.4.6127" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1270.748660][T20530] ip_tunnel: non-ECT from 100.1.1.1 with TOS=0x92
[ 1270.756442][T20534] xt_hashlimit: size too large, truncated to 1048576
Stopping sshd: stopped /usr/sbin/sshd (pid 193)
OK
Stopping crond: stopped /usr/sbin/crond (pid 185)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 139)
[ 1270.871700][   T30] audit: type=1400 audit(2000001157.111:25012): avc:  denied  { search } for  pid=20549 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1270.897602][ T1658] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1270.966406][T20552] loop8: detected capacity change from 0 to 128
[ 1271.048026][T20552] input: syz1 as /devices/virtual/input/input68
[ 1271.111460][   T30] audit: type=1400 audit(2000001157.139:25013): avc:  denied  { read write } for  pid=15113 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1271.154813][   T30] audit: type=1400 audit(2000001157.139:25014): avc:  denied  { open } for  pid=15113 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1271.210685][T20555] loop5: detected capacity change from 0 to 4096
Stopping network: [ 1271.269155][T20562] loop8: detected capacity change from 0 to 4096
[ 1271.277442][   T30] audit: type=1400 audit(2000001157.139:25015): avc:  denied  { ioctl } for  pid=15113 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1271.322574][T20555] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1271.347102][T20555] System zones: 0-5
[ 1271.369048][ T1658] usb 10-1: Using ep0 maxpacket: 32
[ 1271.374783][   T30] audit: type=1400 audit(2000001157.570:25016): avc:  denied  { read write } for  pid=20566 comm="ip" path="/dev/console" dev="rootfs" ino=31 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[ 1271.411401][   T30] audit: type=1400 audit(2000001157.617:25017): avc:  denied  { write } for  pid=140 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1271.438480][T20571] loop3: detected capacity change from 0 to 512
[ 1271.458690][T20555] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1271.466678][T20571] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6135: bg 0: block 376: padding at end of block bitmap is not set
[ 1271.496454][ T1658] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1271.496519][T20562] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1271.515522][ T1658] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1271.528988][   T30] audit: type=1400 audit(2000001157.617:25018): avc:  denied  { remove_name } for  pid=140 comm="dhcpcd" name="sock" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1271.537815][ T1658] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1271.561417][T20571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.6135: inode #1: comm syz.3.6135: iget: illegal inode #
OK
[ 1271.582450][ T1658] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
Stopping iptables: [ 1271.609307][T20562] System zones: 0-5
OK
[ 1271.614288][T20571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.6135: error while reading EA inode 1 err=-117
[ 1271.616359][ T1658] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1271.626877][T20562] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
Stopping system [ 1271.655976][ T1658] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
message bus: [ 1271.678057][ T1658] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1271.687042][ T1658] usb 10-1: config 0 descriptor??
[ 1271.709672][T20571] EXT4-fs (loop3): 1 orphan inode deleted
[ 1271.715760][T20571] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000007,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,noquota,dioread_lock,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[ 1272.043540][T20571] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1272.051905][T20571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6135'.
done
[ 1272.256394][ T1658] hid-generic 0003:1B1C:0C10.0064: unknown main item tag 0x0
[ 1272.263842][ T1658] hid-generic 0003:1B1C:0C10.0064: unknown main item tag 0x0
[ 1272.297849][ T1658] hid-generic 0003:1B1C:0C10.0064: unknown main item tag 0x0
[ 1272.326882][ T1658] hid-generic 0003:1B1C:0C10.0064: unknown main item tag 0x0
[ 1272.383322][ T1658] hid-generic 0003:1B1C:0C10.0064: unknown main item tag 0x0
[ 1272.413024][ T1658] hid-generic 0003:1B1C:0C10.0064: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0
[ 1272.441267][T20584] loop5: detected capacity change from 0 to 40427
Stopping klogd: [ 1272.498020][T20584] F2FS-fs (loop5): fault_injection options not supported
[ 1272.513740][ T1658] usb 10-1: USB disconnect, device number 7
[ 1272.531063][T20584] F2FS-fs (loop5): fault_type options not supported
[ 1272.542090][T20584] F2FS-fs (loop5): invalid crc value
OK
[ 1272.571863][T20584] F2FS-fs (loop5): Found nat_bits in checkpoint
Stopping acpid: [ 1272.661204][T20584] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1272.707181][T20607] device gre1 entered promiscuous mode
[ 1272.766191][T20594] loop3: detected capacity change from 0 to 40427
[ 1272.937956][T20609] attempt to access beyond end of device
[ 1272.937956][T20609] loop5: rw=2049, want=47072, limit=40427
[ 1272.961514][T20609] attempt to access beyond end of device
[ 1272.961514][T20609] loop5: rw=0, want=47072, limit=40427
[ 1273.142433][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 1273.142529][   T30] audit: type=1400 audit(2000001159.151:25047): avc:  denied  { prog_run } for  pid=20583 comm="syz.5.6136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1273.172558][T20594] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1273.270345][T20594] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1273.301199][T20594] F2FS-fs (loop3): invalid crc value
[ 1273.337207][T20594] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1273.349715][T20616] loop9: detected capacity change from 0 to 1024
[ 1273.426180][T20594] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1273.442013][T20616] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[ 1273.452190][T20594] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1273.469485][T20616] EXT4-fs (loop9): revision level too high, forcing read-only mode
[ 1273.493263][T20616] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1273.513645][   T30] audit: type=1400 audit(2000001159.582:25048): avc:  denied  { write } for  pid=20593 comm="syz.3.6138" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1273.539694][T20616] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.6141: Inode bitmap for bg 0 marked uninitialized
[ 1273.556549][T15113] attempt to access beyond end of device
[ 1273.556549][T15113] loop5: rw=2049, want=47080, limit=40427
[ 1273.579342][T20616] EXT4-fs (loop9): Remounting filesystem read-only
[ 1273.590904][T20616] EXT4-fs (loop9): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback.
[ 1273.595593][   T30] audit: type=1400 audit(2000001159.610:25049): avc:  denied  { open } for  pid=20593 comm="syz.3.6138" path="/377/bus/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1273.635590][   T30] audit: type=1400 audit(2000001159.610:25050): avc:  denied  { ioctl } for  pid=20593 comm="syz.3.6138" path="/377/bus/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1273.664471][   T30] audit: type=1400 audit(2000001159.657:25051): avc:  denied  { unmount } for  pid=13453 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
OK
[ 1273.736220][T20624] loop8: detected capacity change from 0 to 4096
Stopping syslogd: stopped /sbin/syslogd (pid 83)
OK
[ 1273.780892][T20624] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1273.789616][T20624] System zones: 0-5
[ 1273.794762][T20627] loop9: detected capacity change from 0 to 4096
[ 1273.802122][T20624] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
[ 1273.963273][T20627] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0002]
[ 1273.978745][T20627] System zones: 0-5
[ 1273.992003][T20627] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,inlinecrypt,,errors=continue. Quota mode: writeback.
umount: can't remount debugfs read-only
[ 1274.073695][T20641] loop3: detected capacity change from 0 to 128
[ 1274.151362][T20641] input: syz1 as /devices/virtual/input/input69
[ 1274.158690][   T30] audit: type=1400 audit(2000001160.171:25052): avc:  denied  { read write } for  pid=20636 comm="syz.3.6144" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1274.263898][   T30] audit: type=1400 audit(2000001160.171:25053): avc:  denied  { open } for  pid=20636 comm="syz.3.6144" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1274.302775][   T30] audit: type=1400 audit(2000001160.181:25054): avc:  denied  { ioctl } for  pid=20636 comm="syz.3.6144" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1275.021385][T20634] F2FS-fs (loop5): invalid crc value
[ 1275.069612][T20634] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1275.194280][T20651] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6150'.
[ 1275.249051][T20634] F2FS-fs (loop5): Start checkpoint disabled!
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
Connection to 10.128.1.75 closed by remote host.
[ 1275.325374][   T30] audit: type=1400 audit(2000001161.276:25055): avc:  denied  { write } for  pid=277 comm="syz-executor" path="pipe:[14132]" dev="pipefs" ino=14132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1275.449104][  T311] tipc: Disabling bearer <udp:syz2>
[ 1275.464549][  T311] tipc: Left network mode
[ 1276.344253][  T311] device veth1_macvtap left promiscuous mode
[ 1276.350508][  T311] device veth0_vlan left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[ 1276.774683][  T311] tipc: Left network mode
[ 1276.779814][  T311] tipc: Left network mode
[ 1276.784523][  T311] tipc: Left network mode
[ 1276.789297][  T311] tipc: Disabling bearer <udp:syz2>
[ 1276.794903][  T311] tipc: Left network mode
[ 1277.396198][  T311] device bridge_slave_1 left promiscuous mode
[ 1277.402610][  T311] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1277.410006][  T311] device bridge_slave_0 left promiscuous mode
[ 1277.416301][  T311] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1277.424473][  T311] device bridge_slave_1 left promiscuous mode
[ 1277.430814][  T311] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1277.438900][  T311] device bridge_slave_1 left promiscuous mode
[ 1277.445229][  T311] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1277.453083][  T311] device bridge_slave_0 left promiscuous mode
[ 1277.459541][  T311] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1277.467728][  T311] device bridge_slave_1 left promiscuous mode
[ 1277.474400][  T311] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1277.482243][  T311] device bridge_slave_0 left promiscuous mode
[ 1277.488384][  T311] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1277.497031][  T311] device veth1_macvtap left promiscuous mode
[ 1277.503305][  T311] device veth0_vlan left promiscuous mode
[ 1277.509478][  T311] device veth1_macvtap left promiscuous mode
[ 1277.515598][  T311] device veth0_vlan left promiscuous mode
[ 1277.521969][  T311] device veth1_macvtap left promiscuous mode
[ 1277.528319][  T311] device veth0_vlan left promiscuous mode
[ 1277.755572][T20653] kvm: exiting hardware virtualization
[ 1277.762563][T20653] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 1277.771195][T20653] ACPI: PM: Preparing to enter system sleep state S5
[ 1277.779386][T20653] reboot: Power down
serialport: VM disconnected.