last executing test programs: 9.110758742s ago: executing program 0 (id=4470): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001", @ANYRES16], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0x8, 0x400}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x80, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x3, 0xb0, 0x48, [{{0x9, 0x4, 0x0, 0x57, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x0, 0x80}, [@ncm={0x6, 0x24, 0x1a, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x9e, 0xa, 0xf4}, @mdlm_detail={0x11, 0x24, 0x13, 0x3, "531896a050fc29c313b064479c"}, @network_terminal={0x7, 0x24, 0xa, 0xf8, 0x9, 0x9, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xaa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xbc, 0xd4, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x6, 0x12}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf, 0xff, 0xf}}}}}]}}]}}, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x6, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @private, @loopback, {[@end]}}, {0x11}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 8.716052064s ago: executing program 4 (id=4473): mknod$loop(0x0, 0x0, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000003c0), &(0x7f00000004c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f000000c600)={0x2020}, 0x2020) write$P9_RWRITE(r5, &(0x7f0000000280)={0xb, 0x77, 0x1, 0x401}, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 7.827804037s ago: executing program 4 (id=4478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0xa000201a}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='GPL\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 7.780039381s ago: executing program 2 (id=4480): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5, 0xe80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x180000000) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) shutdown(0xffffffffffffffff, 0x0) 7.326380149s ago: executing program 1 (id=4483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="2001"], 0x0}) 6.959899919s ago: executing program 4 (id=4485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff]) setregid(r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000010000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x3d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x40042, 0x0) 6.881138905s ago: executing program 2 (id=4486): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x0, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) splice(r1, &(0x7f0000000000)=0x1, r2, &(0x7f0000000100)=0x400, 0x8, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000020c0)={0x43}, 0x10) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000019c0)={&(0x7f00000013c0)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4880}, 0x0) write(r3, &(0x7f0000000180)="e58bc4a77dfa3ec85c31609b28639ecce3245f283680b02d25bfb824fac4eb05d206861036c0d0488ad828797bdb59ee39b5f15129b6d03e930e60bb18c35644da890c1656b4c6b8d28b49576cd26e1e09827f34b0a2679dd19ece945a4f0198946d0d0c4c6e96feda92e4c7c66676b2d2b7", 0x72) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r4 = eventfd2(0x47, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) 6.687530211s ago: executing program 4 (id=4487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12014300000000406c256d7d6de03c59cb1d9e24000001020000000921000000012205000905810000000000000100"/60], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000", @ANYRES32, @ANYRES32, @ANYBLOB="000000defe120d000000006c0a000000000000000000000000ffdcbaef87f57bf40300000000000000000009000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1"], 0x254}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@barrier_val={'barrier', 0x3d, 0xb26}}, {@quota}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103000000576079b88ce1a8063dba3b2f0f36760000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) mkdir(0x0, 0x180) syz_usb_control_io$hid(r7, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002206000000030c84b2ad0073d75ef70366c222a8db9a1c013675793955fdb68c98879a81a97b6d300456b18aa404d70c9a24161ee9f172020e6e88782bbe6a4b360f2002de3b9cc55d450a640cd093a56f803ae9fcf61d783c0fd4c2fc0000000000005cdd3ae8814b5ca0206e0b38b9d4cb9abe92e43e43c9db0e134f560bb8cf47da0b3b774c64d376d5e7ea928bfc9af2882df22feb7567f86e8ac143b6bba43630d9db5d9d2cc7e0817144712fb199acdeb76976f56c4ac08ab4ddefdc3f64eec3786b62ba8c302f806f0000"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x2c, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)=ANY=[@ANYBLOB="200173b00789c491fe066fef25eebc7c79956b24"], 0x0}) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x2010, r6, 0x24abb000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r8}, 0x10) (async) syz_usb_control_io$hid(r7, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="936007660304000000040300541b5224ae95003e7d1e2396a35e9cfa5a5f3ce89554df73acf65ff5b8de9693625ae220e91462918e815fa853eb6e3aaad850da3ca8af2b0a2ae6c10a5dd59a6953f5433f264875578d5bfc9d04048c2ec56921fe842bec14d38002b053888b1bde1d69438ad4de68cce49fb102f5da9b6cd794af1685b23e723c6740ded534fecdccc7865ea95b780ff53b78"], 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io(r7, 0x0, 0x0) (rerun: 32) syz_usb_control_io$hid(r3, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) 6.138874626s ago: executing program 1 (id=4484): syz_emit_ethernet(0xb1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x891f, &(0x7f0000000000)={'bridge_slave_0\x00'}) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xf31, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x80000000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4f}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBENT(r5, 0x4b52, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r7 = creat(&(0x7f0000000500)='./file0\x00', 0x0) accept4$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x1800) r8 = openat(r6, &(0x7f0000000180)='./bus\x00', 0x4200, 0x40) setsockopt$sock_int(r8, 0x1, 0x1d, &(0x7f00000001c0)=0x4, 0x4) io_setup(0x1, &(0x7f0000000200)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)="dcdaf47b160a926b9e9cce26ac07306d6cd0e158f4487bd893a0d1129435d33b4626064de79e13f7ab06895fe42293d42650abd2033d644c5421c0834481a396307cf639dfa8e5074debefaeb72f6ab357b587b36ed760a57ecc798636739dcad0c455ecd53c78545bc1c7a17572723a6a99f62230feb532a7df96dbe6917e303c2b7d437655fe43e080f1aa1b331d151c765242bb01c3a7224adb7e5b65a67aba4d77c6a31248d6ea688de692f31e61b9ae60adfe6ca503543d10f4753e76d77eba679ebd243870b8bbb3126d83618c99a94503f42ce4cdedd98f3e9fd71dfadd911b3d8448a5e36cf2bc59667a12f4066b2dfbb929ab967692a83ac21eb0", 0xff}, {&(0x7f00000009c0)="742d4080eeaf84754973c3944a4fce7b63ff6bbe20031be8f18d45bc1e9e4d19cc35a38424a57854d11f86aad5eb353bf3d7de253e34d27d7e821cf54496e0d3c609852f8aea66cb731069eccb5d377ab19e8fd3afaede5670c324e5926eb8e6286320a5e8d0e5919f6c03b8d5b86d6fa988e10fa470fc37cd321ed4fbd0eb9959a1987c3f9d8aad182160233ef13b55499bdaf5f52f9a531b097d5ffc67eb8aa213d3f225eeb36ed42e429fe47cc20899fbb3e9e4a97154718452f17a269f", 0xbf}, {&(0x7f0000000a80)="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", 0xfc}, {&(0x7f0000002500)="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", 0x1000}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x60, 0x1}}, {{&(0x7f00000043c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000004080)="6a1b8fa286bd8d9ed31dd1e699adf460", 0x10}, {&(0x7f0000003500)="f2c3b526b2c7b7ad5de8733c0d045d1a2954b4a61e7975ddb756eeea52914a077a2f499a0d7a07e5d9974bea13e42fa3ca0dfe9b2d33e1faaf6767a3259ed244054ab3adb98a34544906bff8effadbd1e72eda1a365ad3f051a4702f413afe52d468602fdb8623b27004b786d8de7ef16d4de774b7eed4d98010b6aa97227d97626fdb914a356103753375a95492e920909ea3d7d1287715fd0cb282f653b918782522d4e8cb011a15597930f451d06f8ef8d3244cdd22ed6aea7b60f77f615f9100fa99bbebf22aaf6fbf693b576b10b90adf", 0xd3}, {&(0x7f00000044c0)="491b93a828dd7dd9448e615a62c2772b7d0f18bdb491a0d1f07e38148c6a9718b34b48fab2d9f0f915fb4f4a4317677736e6e5ed5b7b70c116e9f218228f5cf63b0f3ba52f915a1865ae4831942607a7e95e82216271447ecfee74e92718868848b1e0e5291de16b4711f5b4b1b4e63d2cfaeae09100e069b2acb086beae4270dcf98f53185cc3", 0x87}, {&(0x7f0000000d00)="596194d08d4649e18f2deb588a94d34b95661921775bf6084d83560b0d73c8119e8ad0c5ce83e1431bcbc7694a17173ea789ec642d7d66b726370250754003d0f93a194397e36e72f3f7010b6e816fa0a7e4e215f1637430a483ba35867a869c0b5d196feb750f313e22754b7a33d1f35b64c75fda5323dc4bfbf84215d69365c86d9ce57ab7b7f3d81ba80d98b9fc0e357a13f0cc1861aa1c6cb225ff82debe3655cfd4c7f27dc6b06d0e5242470595c762d8d2179fd602576a5dc04269bb2875", 0xc1}, {&(0x7f0000000440)="e94f47206f70d802dfb852cec74a263354da8b36f5f002b92493cc05d3387b9ffba23e3acce2d66f02561a925a4973f9c1fd56df5e6d90a7c0cba51f3c3d5cc8f5e0be42afd7e9a4579ab0ba7f81ddcf249e45f6a57f16a122a8cc07a49ee8be722c78556bfa5d01bf990468684082ca1bb8502a9ead9d1bb231d33f32db2b68522d7d", 0x83}], 0x5, 0x0, 0x0, 0x4054}}, {{&(0x7f0000004680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000004700)="833a8473f0069d74b64b7764acf5d3b8ebd9f896ddef894c34048f36e1c0f617a00b6b9bdcfaedb725477e4ebe6da5885231518bd6dc96464d9fb8c62442df6fe7e033a149d4ee862b34d4248e8c8f0bf0cc9c6d402d2d15e3fd3d15b728e198b9b91f85f54d318005fbed32", 0x6c}, {&(0x7f0000004780)="57601f4a00be6fed5f67b8e765d53d022791ba679771cbbcf47d7891f11971b7f38ee953b3bf2e308232e73c732923147d9393591f8df8206fe36fa8b89ae607f9324626d97a6da70cf8c7795e27998697900c", 0x53}, {&(0x7f0000004800)="d2ade88704dd8ff7cd25af4e1a9507225755bc3129a29997af9950f056b55e760a287c78e8e0a52c0229742e5337e1d5ec0f7cb37879abd9fe6c77223704c336288f79c0fcf1ab0170e818b47eed5d63ea1b", 0x52}, {&(0x7f0000004880)}], 0x4, 0x0, 0x0, 0x20008010}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006d00)=[{&(0x7f00000069c0)="609bff56dba4566557040a7493c3cf55ac85ba36c6d14dad8a914fcd095182b41cff7be0e6890bccb889f5d15d9c4da9e0d9c66abcec572804db270dd27c4971fbf1da678fbe4bc0f35363c9f54bccca7db48a45a66383931a8608d4d5335fdb15d30cbb201ade7e9f355945108bb50fa4708502df3d7f97a4841d3b783c357e5b94a087f263ee20608e963da43f4866e39c3d37eaefa9a2cd578aec701c1f2d25d1c5d2ffd5d20ca4b814168831ec9c0f0daf0a444ba62f69955e26d1c94f42238a26955593cb2b85073364a806b59cdf8d4364e687fd1c45720de999dd964ec8657c36be64fdc06c5e3c8c5f0ab5cd48dcda2e", 0xf4}, {&(0x7f0000000380)="69a47e", 0x3}, {&(0x7f0000006ac0)="611e93aaa06b602ba1feeb71a715569d4dc7e4467fb1e9b8ae93be6fd1553d0aea62cbdd94eafba01e061a1a0dcbd340fa581f29d34af245927fde84a462ee683b8bd7f615dd56a09dac4e3fa4e692a9ae763628213958b64d2bf1484584b555cc276310ca53430bcba5630202663c751e084d614107", 0x76}, {&(0x7f0000006b40)="a76d898f01f5b250b9e225886ec3179665602f5e3d3cc16d8a66ff618f8db914f14178c0aee03e63af35c54b55259cc02dabca5e11f284e2e7dc22a34957c419478aff32a268ca47601c1f41f5ec7d6e6ebbacfd29b8465fc16fb206f9cf4def79d225b84e593d23745da9d755bdc20e2083b3d67e62aaecaf43364f6a59c6b5322270ba79d29381610b8a79067dc754669cba95d56cd4ec6c460f23884c0657a4285f9ffa4c37723ad761faf72b95", 0xaf}, {&(0x7f0000006c00)}, {&(0x7f0000006c40)="5a014113f2459e91db", 0x9}], 0x6, 0x0, 0x0, 0x10}}], 0x4, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), 0x240400, &(0x7f0000000600)=ANY=[@ANYBLOB="687567653d6e657665722c687567653d6164766973652c687567653df6652c6769643d", @ANYRESHEX=0x0, @ANYRES64=r4, @ANYRES8=r7, @ANYRESOCT=r5, @ANYRESOCT=r2]) io_submit(r9, 0x9f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, r7, &(0x7f0000000000), 0x4000, 0x100000000000000}]) 6.097110389s ago: executing program 0 (id=4488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a0000000000006911c80000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x3) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x7, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1df715fb24b095"}, @mptcp=@synack={0x1e, 0x10}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) getresuid(&(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000400)) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a0000000000006911c80000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r3, 0x3) (async) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x7, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1df715fb24b095"}, @mptcp=@synack={0x1e, 0x10}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) getresuid(&(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000400)) (async) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) (async) 6.043658334s ago: executing program 1 (id=4489): mknod$loop(0x0, 0x0, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000003c0), &(0x7f00000004c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f000000c600)={0x2020}, 0x2020) write$P9_RWRITE(r5, &(0x7f0000000280)={0xb, 0x77, 0x1, 0x401}, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9ok2kcB/BfqkHQwcXJSR3kOFwURzOoJFFRCNEuIoeCImKmCELkAoIOmsHSDKW3dekVsvTP1DRDp5YWOpfSoUehQ5c72qXQpTl6fbq31z8gfD4k/Hie9/s+v/c3vOMb/NR64p9ut5uJiO65w9/d28oXHl4p3S0/i8jEi4j47Y9f/ty9kkmJ/VOvpfVKWg8Pne9833yQbS0/3br+cqbRs3/k5/9+cWGk3XvU2Th5o7nZi1++Vos/arl3S8X62rfFhSdjG/ly+3GjOf4oe/91ys2lejbVD1GLT/E+XkUlKvEmqsfUf7C1enPncrE1+fbOdqHTN30r5UpHnPOg/T9e7X/erN+7MXFp4HZtar68fmYvV/kfbxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKdvNDd78cvXavFHLfduqVhf+7a48GRsI19uP240xx9l779OublUz6b6IWrxKd7Hq6hEJd5E9Zj6D7ZWb+5cLrYm397ZLnT6pm+lXOmIcx60/8er/c+b9Xs3Ji4N3K5NzZfXz+zlKudO6AEAAAAAAAAAAAAAAAAAAAAgIvKFh1dKd8vPIjLxIiJ+/fv3nt39bvrePZNy11JdSfvDQ+c73zcfZFvLT7euv5xp/JX2P6f/hZF276kPw6H9GwAA///bW5Wc") 6.009189337s ago: executing program 2 (id=4490): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000340)) setuid(0x0) ptrace$ARCH_SET_GS(0x4207, r1, 0x0, 0x1001) socket$inet(0x2, 0x2, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_procfs(r1, &(0x7f0000000400)='ns\x00') getdents64(r3, &(0x7f0000000180)=""/212, 0xd4) getdents64(r3, &(0x7f0000000f80)=""/243, 0xf3) getdents64(r3, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000300)="88551f737e0c831454ba35871a0053f833fad44ea2caed741cffa1ceb4bcbae794a7fe528483407bb82319639b550dfb644531a3f7061a18470e29eca92bbdf88d206e9379d9e39e792b231a6a73d95f339c76c5ff14b934b864f711f66e0b", 0x5f, 0x80c0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000840)='kmem_cache_free\x00', r4}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000100)=0x2, 0x33) setsockopt$inet6_udp_int(r6, 0x88, 0x1, &(0x7f0000000080), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) poll(&(0x7f0000006c00)=[{r8}], 0x1, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) r10 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r9, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0}]) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001e0099030000000000000000fc000000000000000000000000000001000004d60000000000000000000000000000000080000001000000000735000010000a0029bd700028bd7000000000000c0015", @ANYRESOCT=r5], 0x5c}}, 0x0) 5.818302242s ago: executing program 2 (id=4491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x1, 0x2d, {0x2d, 0x8, "2359030ab6a75344b7060ca56dd72c66c1be427bf38cdc5ed438991f7eafff1f1788937357048bf1a6b5d9"}}, &(0x7f0000000040)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "ddb6421727cd9482b8d54cb8c6ed552c1be59596b7693e610b3870ed08da9044ddc32039c11fd6075ed22b4e71ae05387b43f55ebb7e6277c0e8"}}, &(0x7f00000000c0)={0x0, 0xf, 0x92, {0x5, 0xf, 0x92, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x4, 0x67, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "be1bb867cc8a6d82b8b19bd97005203c"}, @generic={0x53, 0x10, 0x2, "ef93d55e54f2b3fb2c781ba3fb9f1eb79d4fd9844323c9f8963fc14caf86473a28a0b1e8b0c38431879e66a77f0218d06482ae937b49209108906c898722f2d82119074ce06480d3f6a5faa688556523"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "7c1aef483f6ee3a85254356a525cc90c"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x8, 0xf2, "1bb07fc2", "9a0f0a14"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x4, 0x4, 0xfd, 0x9, 0x1}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x40, 0xe, 0xba, "5b2b7d032429ed679f35931c4ecc58fd4f5cf737862354f347b06a7a24c3c41698b100d38764453477007167b702c428832dc8d24205563af97b4bc2b8264392ab1e5d3e4e830280fc6aa37cee71c1938b9464ed7d4e658055c38e2933cb006d70467b60f5f5054cb7b13bfb24786a3fe0185a46831d5b61de15ff1e899fb128b1c02a2ea540c1ec82d3a2feca096dbf80bbdfc7af3b2ef4b604c3928119c574011eaa953b9da98d0070f89396c6719c6f611d8f58fe3d62a088"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x36}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x5, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x10, 0x4, [0xf]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "3d99"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "71e1"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x8}}) 5.228262891s ago: executing program 1 (id=4493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0xa000201a}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='GPL\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 4.844686232s ago: executing program 3 (id=4495): mknod$loop(0x0, 0x0, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000003c0), &(0x7f00000004c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f000000c600)={0x2020}, 0x2020) write$P9_RWRITE(r5, &(0x7f0000000280)={0xb, 0x77, 0x1, 0x401}, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9ok2kcB/BfqkHQwcXJSR3kOFwURzOoJFFRCNEuIoeCImKmCELkAoIOmsHSDKW3dekVsvTP1DRDp5YWOpfSoUehQ5c72qXQpTl6fbq31z8gfD4k/Hie9/s+v/c3vOMb/NR64p9ut5uJiO65w9/d28oXHl4p3S0/i8jEi4j47Y9f/ty9kkmJ/VOvpfVKWg8Pne9833yQbS0/3br+cqbRs3/k5/9+cWGk3XvU2Th5o7nZi1++Vos/arl3S8X62rfFhSdjG/ly+3GjOf4oe/91ys2lejbVD1GLT/E+XkUlKvEmqsfUf7C1enPncrE1+fbOdqHTN30r5UpHnPOg/T9e7X/erN+7MXFp4HZtar68fmYvV/kfbxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKdvNDd78cvXavFHLfduqVhf+7a48GRsI19uP240xx9l779OublUz6b6IWrxKd7Hq6hEJd5E9Zj6D7ZWb+5cLrYm397ZLnT6pm+lXOmIcx60/8er/c+b9Xs3Ji4N3K5NzZfXz+zlKudO6AEAAAAAAAAAAAAAAAAAAAAgIvKFh1dKd8vPIjLxIiJ+/fv3nt39bvrePZNy11JdSfvDQ+c73zcfZFvLT7euv5xp/JX2P6f/hZF276kPw6H9GwAA///bW5Wc") 4.329088535s ago: executing program 1 (id=4496): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x10, 0x0, 0x4, 0x8b4, 0xffffffffffffffff, 0x4fa9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.584832616s ago: executing program 3 (id=4497): bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0xfff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000d00)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000600)) (async) sendto$inet(r4, 0x0, 0x0, 0x2400077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$xdp(0x2c, 0x3, 0x0) 3.475578445s ago: executing program 3 (id=4498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000040), &(0x7f00000001c0)=0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000ac54e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000ebaf8f66e012df6c00000000000000000000000000000000000000000100000000"], 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000010003704000000000057996f46dafaff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e00000008000280040012000500110000000000"], 0x44}}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r8 = getpgid(r4) capget(&(0x7f00000001c0)={0x20080522, r8}, &(0x7f0000000280)={0x1, 0x3ff, 0xc5d, 0x64fb, 0x4288, 0x7}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000003c0)=@nullb, 0x0, &(0x7f0000000580)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f040000000a00000010000000000000000000000c0000000400000061"], &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x20) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 3.475310165s ago: executing program 4 (id=4499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001", @ANYRES16], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0x8, 0x400}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x80, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x3, 0xb0, 0x48, [{{0x9, 0x4, 0x0, 0x57, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x0, 0x80}, [@ncm={0x6, 0x24, 0x1a, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x9e, 0xa, 0xf4}, @mdlm_detail={0x11, 0x24, 0x13, 0x3, "531896a050fc29c313b064479c"}, @network_terminal={0x7, 0x24, 0xa, 0xf8, 0x9, 0x9, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xaa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xbc, 0xd4, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x6, 0x12}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf, 0xff, 0xf}}}}}]}}]}}, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x6, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @private, @loopback, {[@end]}}, {0x11}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 3.434930098s ago: executing program 1 (id=4500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000000a40)=ANY=[@ANYBLOB='discard,utf8,fmask=00000000000000000000271,namecase=1,discard,errors=continue,errors=remount-ro,umask=00000000000000000003377,utf8,iocharset=cp861,iocharset=macturkish,umask=00000000000000000005454,dmask=00000000000000000000005,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=user_u,subj_type=iocharset,dont_measure,uid>', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x21, 0x14fd, &(0x7f0000003f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}]}}, &(0x7f0000000f40)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xe20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x358, 0x0, 0x0, 0x148, 0x0, 0x148, 0x2c0, 0x240, 0x240, 0x2c0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1e8, 0x230, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1}}}, @common=@icmp={{0x28}, {0x0, "79d4"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6erspan0\x00'}}}, {{@ip={@dev, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000540)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0000f4ffffff0400a8dad2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 3.192891488s ago: executing program 2 (id=4501): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000001c0)={[{@lazytime}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@noflush_merge}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@user_xattr}]}, 0x1, 0x5513, &(0x7f0000000480)="$eJzs3M2LG2UYAPAn+9Fv6yIevHWgCLvQhGb7gd6qtviBLaXqwZNmkzSkTTLLJk3XPXnwKB78T6SCJ4/+DR48Cx7Eg+JNqGTeWe3qCtJmk378fjB5Zt6888zzhtLlmQkJ4Jm1kv3+ayVOxtGIWIyIExHFfqXcCpdSeCkiTkXEwgNbpRz/a+BQRByLiJOT5ClnpXzryzPj0xd+eee3b78/vHT8q29+mN+qgXl7OSL6m2n/bj/FvJPirXK8Me4WsX9+XMb0Rv92eZyneLe9UWS429idl84/10nz8807w0m82Ws0J7HTvVmMbw7SBYfjzm6e4oRbja3iuNXeKGJ3mBexs5Pybu+k/9t2bbbKfJ8U6WM02o1pvL3dTuvZvF3E5mBUjqe8eau9PYnjMpaXi2beaxV1bDzUR/xEeLc7uLOdjdtbw24+yC7U6q/U6her9a281R61z1cb/dbF89lqpzeZVh21G/1LnTzv9Nq1Zt5fy1Y7zWa1Xs9WL7c3uo1BVq/XztXOVi+slXtnsjevfZD1WtnqJL7eHdwZdXvD7Ga+laUz1rL12rlX17LT9ey9q9ez6zeuXLl6/f2PLn947bWrb79RTvpXWdnq+tn19Wr9bHW9vvb4rX/yZ/hA1v9ZWfQU1w+PpDLvAgCePPp/YB4Orv/fuhHRKMYPsv+f2BmmPl7///D0/8/2+uGR7O3/l+ZWBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM/fj8r23ip2VdHy8HH+uHHqhPK5ExEJE3N/HYhzak3OxzLP8H/OX/1HDd5UoMkyucbjcjkXEpXL74/mD/hQAAADg6fX1p6e+SN16elmZd0HMUrpps3Di4ynlq0TE8srPU8q2MHl5cUrJin/fS7E9pWzFDawjU0qWbrktTSvb/7K4Jxx5IFRSWJhpOQAAwEzs7QRm24UAAAAwS5/PuwDmoxK7jzKLZ8H3y2/e//1A8Oieo334wgAAAAA8Ln66t/94ZdaFAAAAADNX9P9+/w8AAACebun3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2bmj27SBOA7AfxtcoFVV1AW6St9gjI7Qxz5WDJAlGIGskAWYgbxlhAgifA4KEYmQfLaV6Pskc5wFv7tD8HB36AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31WZ5+//XTduc/aGdPKMBAAAALtlVm2X9ZJ7q35r735tbP5t6ERFlRFyau4/iy1nmqMmp3nh99aoPdxF1wrGNSXN9jYjfzfX4o+tPAQAAAD6v7Wq9SLP19DAfukNkcPVfKdKiTVn8ydRwERHV/CFTWnnMm2UKq7/f4/iXKa1ewJpmCktLbuNcaVepf+6nVbvpi6JIRfn++7ONHQAA6NHorOh3FgIAAECf/g7dAYZRxPNW5mkrcJKKZntvdlYDAAAAPqBi6A4AAAAAnavn/z2e/zd1/h8AAAD0L53/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJd21Wa5Xa0XbXP2h3byjAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ/bnHQVCIAzCYO/6zmTuf1hp0NTUpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf1ziqOADgb2Z2trYqrlH2EBEFD3qx221t7U08KMGDf4IQ0m2N3fqjzcGWIuTiTXLORfQoIijxlv8h5wRyibcc9hDBszKzM8nkB7j+6Mwm+XzgzfvuMMz7vlkI+c57CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlEbvHsRJduiM47g4t7n3eCHrt470mfWV7dmsZXFUZ9Knw8vVD1G3uUQAAAA4P5Kyvg8h7KRrc1kfd/L6Py2vyWr+754dx2U9f7TuL/uy9s/ar7/svrg/UGc8TnbT24vDwZXjqbSe3Cyn23N/e0Urf/L5u5ck/0LiD5ZfGKX584y+2dh4r52HF+rIFgD4Ny6XfRGUvw9lfb/JxAA4N1qVwrus/5NOszkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1GG0HJ4u4yiEMNs6iDNbe48XTurXV7Zny3ZjdXWles/sFmkI4fbicHClxrlMuwcPH92dHw4H9+sPXgkhNDX6O8X07340wcUhNPJ8BP9TEBdf9rTkczqCBn8oAQBwJqVFy+r6nXRtLjsXzYTw5/eH6//XK3GYsP7f/fjGZnWsav3fr22G06+3dO/z3oOHj95cvDd/Z3Bn8OlbV/tv96/dvH79Zi9/V9LzxgQAAID/pl20av0fzxxf/79UicOE9f8X3/a/qo6VqP9PdLDo13QmAAAA59vzr/7xe3TC+ajdDl/OLy3d74+P+5+vjo8NpPqPXShatf5PZprOCgAAAKjDaDk6tP5/qxKHCdf/n/nhpZ+q90xCCBeL9f/LC58Nb9U3nalWx58TNz1HAAAAmnWxaNX1/zTf/x/vb3mIQwhvvDaOi38DOFH9n7z/9Y/Vsar7/6/VN8WpFHfHzyPvuyG0uk1nBAAAwFn2VNGyYv+3dG3uk58vfdi2/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgbn8FAAD//ygKPpc=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r1) 3.04366275s ago: executing program 0 (id=4502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xa, 0x4, 0xf1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000280000000a0001007770616e30000000ddf82b7845760b0afaa53e121f8ccf5adb47fd923bc88fa089fd21fd46f551887aa9873a4eceb2ca7b0ff9ec252b01aac87286d114f789768661a3c085afbe36f366aea39b0f010884d0979a191ae49daeaa7b895c7364e7c408fc5dd67618908b8a422b9ee8"], 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xfe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) dup(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x1, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x4}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000a40)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000d6c8db0000dba47e06000000e28900000200df018000080000000607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfcc9651ae55c3cd537a47f9ebf6ba0009400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000000000008feeef48af7860cbd187f7906c6d9a1ceefa74506940e93712dacd265496", 0xe0) 2.983360385s ago: executing program 0 (id=4503): mknod$loop(0x0, 0x0, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000003c0), &(0x7f00000004c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f000000c600)={0x2020}, 0x2020) write$P9_RWRITE(r5, &(0x7f0000000280)={0xb, 0x77, 0x1, 0x401}, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 2.466436518s ago: executing program 3 (id=4504): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000004c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 2.124805066s ago: executing program 0 (id=4505): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000004c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 1.5841391s ago: executing program 3 (id=4506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0xa000201a}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='GPL\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 1.281826615s ago: executing program 0 (id=4507): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x810050, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x57e, &(0x7f0000000440)="$eJzs3ctrG8cfAPDvyo88f784EEJbSjHk0JQ0cmz3kUIP6bG0oYH2ngpbMcFyFCw5xG4gyaG59FJCoZQGSu/tvcfQf6B/RaANhBJMe+hFZeWVo9iSX1FsNfv5wNozuyt9d3Z2RrMaCQWQW6Ppn0LEyxHxdRJxJPavbhuMbOPoyn7Lj29MpUsSjcanfyaRZOta+yfZ/0NZ5qWI+PXLiFOF9XFri0uzpUqlPJ/lx+pzV8dqi0unL8+VZsoz5SsTk5Nn356ceO/dd3pW1jcu/P3dJ/c/PPvVieVvf3549G4S5+Jwtq29HG2SbYa41Z4ZjdHsCYbi3Jodx7f5xP1uuyeK/jCQtfOhSPuAIzGQtXrgxXczIhpATiXaP+RUaxzQurfvch/8wnr0wcoN0PryD668NxL7m/dGB5eTp+6M0vvdkR7ET2P88se9u+kS3d+HiKdD3+pBZCDvbt2OiDODg+3938o7wEnW/+3cmS3sszZG3l5/YC/dT8c/b3Ya/xRWxz/RYfxzqEPb3YnN23/hYQ/CdJWO/97vOP5dnbQaGchy/2uO+YaSS5cr5bRv+39EnIyhfWl+o/mcs8sPGt22tY//0iWN3xoLZsfxcHDf04+ZLtVLz1Lmdo9uR7zScfybrNZ/0qH+0/NxYYsxjpfvvdZt2+blf74aP0a83rH+n8xoJRvPT441r4ex1lWx3l93jv/WLf5elz+t/4Mbl38kaZ+vrW0/xg/7/ylH4+ba1asTzTu5/oeTz5rp4Wzd9VK9Pj8eMZx8vH79xJPHtvKt/dPynzyxcf/X6fo/EBGfb7H8d4799Gq3bR3qv7Db9T+9rfrffuLBR1983y3+1vq/t5qpk9marfR/Wz3AZzl3AAAAAAAA0G8KEXE4kkJxNV0oFIsrn+84FgcLlWqtfupSdeHKdDS/KzsSQ4XWTPeRts9DjGefh23lJ9bkJyPiaER8M3CgmS9OVSvTe114AAAAAAAAAAAAAAAAAAAA6BOHunz/P/X7wF4fHfDc7fAnvw/0+jiA3bdp++/FLz0BfWmHr//AC0D7h/zS/iG/tH/IL+0f8itr/6b7IYe8/kN+af8AAAAAAAAAAAAAAAAAAAAAAAAAAADQUxfOn0+XxvLjG1Npfvra4sJs9drp6XJttji3MFWcqs5fLc5UqzOVcnGqOrfZ81Wq1avjE7FwfaxertXHaotLF+eqC1fqFy/PlWbKF8tDu1IqAAAAAAAAAAAAAAAAAAAA+G+pLS7NliqV8vzuJwrZIexN9HwkhtPz+3xDDPZHSSV6nNjjjgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2vwbAAD//yfBNR0=") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bf"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0x0, &(0x7f00000009c0)={0x81, 0xe6b}, 0x0) r3 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000000000009500000700"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 891.703007ms ago: executing program 2 (id=4508): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5, 0xe80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x180000000) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) shutdown(0xffffffffffffffff, 0x0) 623.514249ms ago: executing program 3 (id=4509): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r1 = socket(0x2, 0xb, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r7 = dup2(r6, r5) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmmsg$unix(r7, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000280)="fe8dff16b32373f9bee35903f299caf3adf26a", 0x13}, {&(0x7f0000000680)="6f3da303a608", 0x6}, {&(0x7f0000000740)="2c2a1dfaa740f76912b73bb93eaab7bd226b90eaf625c22491021f53c27452e0119cc53a74951599ee909295ebfaef495e3a8b7edfca5bba7e401192d6e4375fc20fbd669347d2357b85d3381a28b378c2dd7dff5ce3777c7374ee1d7ed2fe222c1fcfba16ba1891698d2e84ddcfa75ab334ca73d1e9f00d8ee8c24416b7c3afdfb0d79c4613d090da263f440a015e0911616a1be89476db92f1a736d87f8aa12b9371cb1bd29cf357ec55e29fa00791e71e208d6c946456a408626cd08cfcf27970ca", 0xc3}, {&(0x7f0000000840)="49ace363f700920c767ddb0f4b04ce14033bc1e0435dbf774ca9b973923981773250a0b690c6b7bc7f2b90b8e75f8bd570c29b48ef4b2f35991acfb6df16498097bc5db705801dd0dcf0fce6bb37aab67f2942182f38cf442bf2b9b29b4297f0d5d45ff8ad30bbaa00663007", 0x6c}, {&(0x7f00000008c0)="61cf49a82b1eaa436784b04949b2da92600e773f0271ef84dbccb7bd8f4dea3790c7c4e844ad61d82010a3343b3829df8697e107b68f4f8206cbdfe45125297e804661021b1f10c55e7245458fa98471c96fd9a47ede697a", 0x58}, {&(0x7f0000002600)="62a742ed783eb8004c4f86ef4ef9df322f35541f93a4e989114c8254734ea2831806e7fec610a8b52af88f83684b3a99405fd7546449faa8500ae1691497f7be8798418780f9b88f9ce1b58b9bbfd6ff3fde3f15988fec012adfdb684c60393155cc47ce1debd6062cd6c14199456c3568a5598e36ad20e4d68972b87e04d977596a90019c9c074b326a1af05a181e082f5283df22f1e9e4d17e61b212132639271d37236252666459f6bdf5d2d0c71364bd074bca7cd4c9088b85219cdd32775d3cb37d8798cf4b1b43a8793d0c9ff8e1db89f52b2ef9da7b24fdec0c90dd330fc4262f4ea1aa28e4270a51c4d4e7dc7baa8c9abf941934f294b00a0bb5a8d080d00e884fcc83ee1ab511b54db246f6b71f0dd6354b7434862088a1170271a10fac35b1030a215dfeff6a01277271cfa3e8c1feb8dea11242587d6d5310a5eecd0ad2a93e54578890134ff820d747d66e5e34879a518993b5dc25c08cfac9e861aaf927aa0f6b7ff2d216b3e8d60165c5c79762a0bade2ef381b861e1a0d654548832c5239b03c4ec39f543457bf752e823d9e06ee648eaaf296aadfdd095fa187a5652f3252cabc515db202a5fbde0acb957b89b94a3061be9bd75b151fb58cb4b1d92203b3e7012f8d6b45736f7012e3d52fdfe1f552d0320c4c64a19fd9bdf9c1234abab573bf2aa5ccd30378296e6aa07bd2023760a219258c6fcc53a18e4b0c0e4fb8fddc160103ef3728f66f11a32aba0e85d44c3f08ba4959119690486050a4566fc0f5d78338261c228a6a5dd48d514379bec29148e4fec07f2525520c8113f7efe40a32d626942cbc656eb7d768f4473ad2efb076f7cc9df5480a97db14cadc65352d5e33ccb74b96b2cf81db5ca8dcc94997ccc742689028b5a1a6cadc55e73486f0826820421ac1b3a16b32cdd970f1e4354cfcea20adb3c397eeb29ab59d92775e4cb64b5066cd3d0d5d9578feee2e027578aa07e2880639012acf48875a4719bcfdcdd2a56ba1e8763fe25da543f401f15f985b055b930ad506bbe3fef99066b87971d111ede69212cee627c3425959029ba535d6fe15770aab41ece69108688cf01de872b96c4d89ed6ebfb8b61d058e64de532dbd1a407c32dceb03339b8a860069904e1a130124bdf0ffb357360d68a8175208ef1a05bb56a037724b5e2c4d0511fe014c0efcfceffad62d1d498333338de6d74f87496d6bc8bffde11f79c48b11824c97c264b38c88b8881f83a87d8f66bdee3772b0d3ba55366ce97eef1977c36764dfc735afd022dab7e3d145bb261a3f058315209082186d51bec67a7d4681ec7c2e22212a8dd20b045ab63ba2bc1f125410036bc3280d27f3afe4d5f192aa05467ff82c956d94456282f839f8e50953e0cf79172dbeb30ebfef043050c4eefc8f5d0b0839574459faed5e2f11ab102ca0eef746339a644b56f5a5240553e957388cf9e381d640bd669feb48da4b9bf54397d921da4eaf37e1bc69f406bde249a8911c8a5360180cbae538ee5ab80ca5f4ffb9eccf2e8f143a7e1cb9cc835de4251c57436426071c198482bece563a9e5dcd9fb07b47ec0915d60b25a934376d2df045e65b009672ce83c55ba8cd456aeb6e3e52ad13ed2d0ee7d0797ff0c78cca10b1dd0eb847b679d6984180625cc227d404ec87bc6146d2a7d7db88814cae6bc1e883d867eb0ca49c91a63ae44e4e8a61762cb905a29cd7798fd399d688c66dead2d2edae74a604cce97ca2c8e512a56f2599c35039ea2c9719f8cc51155b6eb2731a82607c8c8fb1c3398d5dbf0f9a3310a2f6ebe1f9f79d54bc7bd7f660837e2c0493c913532975081aacaf6bcbef4ec5fb0e511ec807bda99836981e4150f5704f51bcac447bd5ce5b43af08e7954babe1911f4407065b4be167cc992e93eb81ccaba546426693c72f4561c924d23a9361eeb602edbd21ed1faeec4ead47ca0b199dda07a4bf32eb998a7787651a3830b22937fb99b65a0e5b6c026d83850e6f6310ae13908444e549218752c06bd4167d33beffc9f1c7f2e55692506e0e36d101cc82828e541c2b0b1f066813fde30b45ef9127e8fdc40656314c769ae64cd639a941be2aac6b11fd52f09476fdd09bb69d42d4e19f83bc02f4762049f26ca4c579f62ae1cdfdecd51ed6901aee83d3139caaddde4b462c30800f3a2b2dcc544b20c8f6f654adc8f7788aea4a8096d9ef2c90f117030e4b09bd46b4b23bd77b5b589296815b0fe7927d4ffc0f00ca0cadfe14cb5c2370161f20329b8844a043d538e5693ee4547a6d9c87f93a0d8b21b5671fe0ad481bb7cc832ec901a1cc1e15382f63797d986ab75b4ad1824520ebd5683d01e9511926e2476cb13ff636b294123144b68eef48590368b862833efb2e819fc25e0ea0feb1cc7f7b87ecb3277a933acb194e7486c13b8130ae2b9de74c59b88b98646f31c43f4673861433c966567613e66cb31faf2376b751f924af735d866ecd128ce491fe1a7d5e87bfbdaa7ed4f94eb827c53c654138582df7493c71eb3d0d9995d965665b74fbecc707bb8b87a7726adcfc5724de5dc49ca3f91d40d355ce6fd47162de015158256379c78d914705d3ec8afdc2a2595a2161713eab927cb32874f8a3f392ab6ab183e49f0e7aa14b1df6b9a36cdf3235cb55434ac12aef50dc4910f63582e87ca8298fc58e7a631a124026546beefaa84077c72c6646f77b271720a15f698c3287c5603d9204818dcf2f747a914054567b921853a366484b01dac0b025ac974c4e050b96d3d7e238e1c5c0341395a44dc2702506309618883b2b8435bd8a3e887836b78516515d3acb5ff8cc4bc6bb9dce54f5e2ae520fda407b0e8bb1810a3c506887c0216126f30207c6062950eae9329e2ce1596eaefb16bb0d2bdeb5af369eff0915bef4798129b490e87bde7f72eee81cf75ca370a54661333da39b69341162dda25f0efe023981d1d46362885f28c12a070a6272d6898fef7f63f2fc4bc6c626fb24d6844ab1054a077a83ad89ee94978139dc48ec913a2749a2a70a60022f907403b821340ea53099712fdd79138218ac668f8176286d49e3ab10a1368fbbc32fbf0cd8527b1eb9adf14b788d0c94636e425d60b50de53e94ad3cd89906cf7751391ca52caf8c386d381ed694d77fca62b6b4752a4499824362dc975619e0855d35941f8610a5e2ef708f1c73a9541c1fc2284abe43f23240290d06a1c470e91823e3089eb998d411e469f38d7b4b87195fe3bf35a3f0b9927594e8c7ac5a18c01c2477ed7f9d8c48ad1f63dac4764b52ce3a9cdde05b88d03eef5483a6a85e736d7099dd68661056b45afd5258c0e62b38cdcc008f1e13dffee0c1100ed66b98ec03a13b0e5ecc54c09c4b1a430ff2a8d651e41dd08a7aa062ff8f8a50f6501318e15eb3c99d915c17f06b9703fb4ce1476976911880081e9ac27802ec8d49a64dad856552a35b1c85f47ac297f0fa6eb23bcff0d773b2bd309cb63a00e12371d8e3987eabc788ab73ef62a3fe4a0a388c287d7175b0726de0209b8ece573548ed19de876a7afdfe326d74d7cde10cfba43d1f36ad31574258fcc194390981ae2443b609ddc87cd3908d537243dcd49c7e6c2e1a698a48f9ce7bb6319286e26ae1321ca0fb6434cd2819d2ab37c160496634acb31903c349c2db97ec017c0b61b41b65682de917d496ea7d22e8ac9afcc57d4ada4876e1c1e7be975dbae081079c5fb0de0845143d20d9c9f3ae3bc7c5078afeb7f61b7aab1a7fc2da194c25a19d4fe30dd27172e67ed2726e726dedbcc689869524fccb34f781348d09e19d9be0456bb012ea546b811321a0c416844408c0840ef54222cf0f72403188ceec2f4546767106217b3d40ee16a4de98725d5e21d039b8d3113b427e4f74d38ece1de0ad5c7c16b649f38dbda9bf10e7039bc87e8ff6f4b45e990ed393f4938100cbf87c8f9a5566ef488dc179ce28ac77d3fb84f8c3ef0c5d2a0069165a41cb3e1db92398cd9691e78118a5108db15cf9992f666c614a8db7a799bf6ffc9bcd1e95ed75cabd68fbe333c8df5f31301d9bcd89fec9b96a602940d19d9c3193c1b4bedfce0c04731c98d63bdb4c129941f9d0fb5b8554dec1e789c209a1665dc6fbd3e97f686e55825417ba8e4a975054aee3dc3a2dd3596b41a1c5d3661916c0e14b2d5066fefb35537f9fe4e38d4de01cd659bc45face36ba534c422330873faf7047b9fb825dc196e36b4a9c83418b67c2812954470b70c1de3cd068679b2ebb8b3ebcd599c74a2f392bbe05536010601577674e64fc2ec4e4c5f5c0863c5a8d51494dd3e2aa5fc0e49d89a63bf59dffc2f7c86d570e18241fd543fb7abf4c2e40c79403949b77a7c109731d04a44bf3ba3626a50e8e190fd7a1b433eee4e695d6b2fdfdd6dc387bfa051e973ddd98c8c2d2fcbc77feb03e3c209a63984ab1cbb01140089771d733b9ce351fe01e786e332b0dd8759ecc165751e21cde998bbceb1317fc80c9038f0fa3a4b4e927be1052089632816218cc26f3426a5c035bc6530f41925bbc713fe89c42f64ec5a1bda6c8783abf65ecf73b3e3732ae7dcef7a9261a8a5e4fd273eb2d1635d16c4ef4a6fb3671f1adc86ca1532e24a5df672d0502642726c87e6740b0af3eead578eb7204c551fa96928f16ba603b1f350dac505ae317515f509a45f7e7a6849cc0ae9611cd4cc924cd1ec056ddbb2efae1cd45096e396378894574fdfbe8da1321997c7297cdbc67aca2fa4f58e7f0937259e46792a2bbb4d81c8d954b6344c5f8826e4542f4e28b3ad18adda9033abeee64c13f529701eeddf8cbfdaa589c44c295b7450a13f7a3df014422e48f51ab5c861756b3db7f17864d3efc627fce2b8324dc517f79370e80bb28cf13a140a64643fdd7c3539b7d455c94f652839a79af295051d8fb0cbbd5c2117628849a107a609d74d48cbddc0eb333068a59dbf067afe2f4bb7f5920276c45f4de7c83a86822de2663a4c77401e0172fadc5850a7e5b093f304780820a203d2416c845abb6c418d26bb44d3fea022f0baded78ff41d4060ca0ddd59819a3e6982b182db44c30e6501d5faa8acbb07a1af360fcaa62a44e6e6db534e44a678245666373f8cebcd829583184f696e5dea854ac58010387d14ba607aeea79bcd28355d1af9f5349cbac1935af325c1f6f0473e508c8beb15c89acb9a51a02fdde1ff91507e863035d4b48aeaf6f5b900ab74ff933adaf06cc4dfbb26998176deee3205154b4c169d7da4f56456f8a7ab03756418ee96f0926fa844b425bbb817d2f69fade5c355f3a905a607cd3ff9f9046961893127ead8bab5d4a2b79e25605152358f367ad52c2fae13c486caf271ffaa9b7a441b8ba2b7458e516e03028e36999f9d8e0c0d15a4ad18bf401c1f2bc702a558df7696d8c911d2b2a2a371540564e4c5b47f6fb0a20970f1db80bf4d0fcce0c846cb8f33c2cc20efd72e76d03a83fa93053d767b6b295947db34b9b2831744148fce440b19d7b52d81785bda03ed363e155bd53d2b4630756ff74cfb4ca29ea6e603de95b98f8e25a7c512c764cbf92dfea95f3cabab310322e6f77ebd9f8c3383971ef85f508f5165c0245ef539f308ca5f7837e5ee0b76731a4a4f32a4675174d373faf2adf31d180410548694a81007d4e30387991862a2054877f1778063f90e1fca444a442144be533b274c5e7b3ef9896044f76dc51b1b711526784e184868c89a44274184ac917c7e6239bfa6dea95b691fec7f4625c3cd52f45fd2473780a1123334", 0x1000}, {&(0x7f0000000940)="9c3d378e4f4c466086806d2511dcaf728dd6a2bcab02a3cc2f7d9efb59ff02f451441e9af7951b4ec8f97199fd19982ff530e9ca16dc4b3bebee0a6e6fa261687d378cf3f09c9fcffb0fd232d41c882b229a4b94e2c5c632339b3607392389f60a36b57efd257aeaaa1244968e8a36d262cdb3779adbc4d428ed462287", 0x7d}, {&(0x7f00000009c0)="c95f1cd524d6ccbf6e65a18de369dfbad31d0ee340fe731902dc8cf14568f91e0ee773858fbe6046a96f2ebc8507e743dafa019bc4e4359bf2eaab9e53336902d2e22a7783c8feea", 0x48}], 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="140000000000000001000000040000001103c57dd809707bc8fdead51be8954cc556c8f88e56ae1ae77c6ea7c1bf31b7369693b54a473ac27720139734af6d4fae4729dd058508a0efacb3f6bf60b5e2b5a93e2a4766f1d0d8ce5e6d862b41b0a86af0b6e8b6d285f6fb53c42f8a68614e114727ca283d68021d8972fbc14738065d8213cabcb388e7f4424c434c0c9231f5c3c5bde51c82f23b030fe2bf98d83264e2235eebf8eb92fed1ce42441fccad50ea15227c290cbd8b109a505205d272b4f2af", @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32], 0xe8, 0x4000}}, {{&(0x7f0000000e40)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000ec0)="ab77a188e2815d6375b2ab3a093873736ee09c9abd082cea1a719c1ec09f808369c97d17cf08b540842c42883541f69292705ea0faf1818453c12c9ba5d1aeb434400ae01bfd773ff7b33cfc2a8a9de67af2f832f0d0b2dd4671c4d86c39a0c87b1b4e68fad63941ed09ca92385aec8ec558b924c21b5e717238e5044b17034882cceca65daed11109c42846409fcf51f02fb8ced1c56f616bfe7a991d8abe730ec69f64f2", 0xa5}, {&(0x7f0000000f80)="eae5abdb7775cde85b216a3b049bce40b7dba323d08cf1428885b2b88f3964e4de8fc678be9029551e98bc68f752400500a26a5cc1d32aac48a7d7926a99f31e7d73591b73ea9cc45f9175493c7cbca3d1d5d079168253ca279c17ef005c0120d3f9c6bf28270754dc2da5d3dacc92c6ea27ba6b055f40e7a6d554e0", 0x7c}, {&(0x7f0000001000)="bd0e13bc9d690be59703e4b3efedc980eb9cf1f8a0e367a8f7fb85c495def4083bf35298c2862ea64aa1caa308e5235f8c71ad7826c805878be052aea0425d65cd80280f35946939e5585719c33bb6404c88212283519c09a3ab04716a06ba909c201266fe79d89eee544c8faa814770e349a16850606a97fe4a814cbe5f1e904488bd49e97de261cd8df3f3ac7f08784e179e37862ad4e6b8611ec82fd332d02bd8ad9eb1160c6cf1b544b0808c099e6c9e97cce2f7ebfd93814f3d959177cc19b35c064dcfbdcc2a8d6f7fd94e921316a31aeff9dcd559fa21a6093901b524cc4a7af33a7fa008a7b1c353261a8524f1", 0xf1}, {&(0x7f0000001100)="6734258155c91068fb54cb62689debae3f46bbe13372b72c3bdae40fae6fe0cf75b615b024661a3ebc4c4046c17a2908120b1f4fda3abe69c5630545f5ce4d37995a82d452c24252868a4387d53f1de8815e3c78f66b7dec6caf6f477f3e1d47cfd415eda2aed56ee8ccf0f7c579caa957c5482f9c1309a56c5c883fe35e4cad0cd0278dd32e5e2daba8f8", 0x8b}, {&(0x7f00000011c0)="859d93dbfe5011f142b43d8f11fcd7b54d96b6221dabdce9dc5cee82b94a6657e1306fe01662ac101a428b4b31a44263bdb1e9c91a55eebea1ea0e2e5d1aa831c7dd0d81c73dedc23a1d0f5a00d937172df524d88e31dbf12cd472ce8f0efefb4ff5666faabdb51b8ce10dd5d0f6dca8ee9ec3c770e3902c637ce2607e6a0280097149f85e7ba0ed86795f4e95d1630b07486f12716729", 0x97}, {&(0x7f0000000ac0)="96d4cd028c22c9fc426052d90fb5dc637b3909e417964ba21e955eea777652ae6a21642519ee940d60c061d6b08067162d521d0971fcf989ede19f231ecbc05d88e09a2d5693fabbb1daffb6acd9475b48d67282c3f5a001e2a3263a48b1ffca1991afa51a4a4110ecaedf208ed0066f7b6b6632a5d1c39f9a93ef6d41571bfffffffffffffbff9686becc97f5bf0f5fc700"/161, 0xa1}, {&(0x7f0000001480)="8761c55bb14cdb93b6716b8dbf6e3f2a21d89f846165c43235f70e343a77722e9dd26713ce0885f8140fac6698638a30649fe3f79af4df7dffc4822b1f5c020334029f97a5c305d2877965820beab90eb182854945dbcec455cabc2ac16708a93b4e4c6c559e41634999183e7718c6886f0ff87d2eeb4461f561177307395bbfcee4d9547a46dd259c33d51f3b56631fd3e4bbb540a6fbce89469fb5cf346198d5dde308ecffeb09994deb6835f6f1fcef2a1b0ad71aae85bf1255182ddf9cf4995a239828e8e4a6a611c2d917b94cfbb5be1665315dd62e918a8621bf9d059b3ac979c8f0455568117afc418642b6a0", 0xf0}], 0x7, &(0x7f0000005740)=ANY=[@ANYBLOB="1c000000000000000800000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x58, 0xc004}}], 0x7, 0x80) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=4510): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f00000004c0)={0x18, 0xffffffffffffffda}, 0x12) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x40000, 0x1}}, 0x30) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='projid_map\x00') close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000081c0)={0xfffffffffffffd3b, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "a1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000540)=0x0) sched_setscheduler(r7, 0x0, &(0x7f00000005c0)=0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) kernel console output (not intermixed with test programs): 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.166398][T16828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.175939][T16828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.188586][T16828] usb 4-1: New USB device found, idVendor=0eef, idProduct=73f7, bcdDevice= 0.00 [ 788.197378][T16828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.215797][T16828] usb 4-1: config 0 descriptor?? [ 788.227046][T16534] attempt to access beyond end of device [ 788.227046][T16534] loop1: rw=2049, want=45104, limit=40427 [ 788.575561][T15856] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 788.696596][T16828] hid-generic 0003:0EEF:73F7.0096: item fetching failed at offset 10/11 [ 788.704940][T16828] hid-generic: probe of 0003:0EEF:73F7.0096 failed with error -22 [ 788.947029][T17518] udc-core: couldn't find an available UDC or it's busy [ 788.953845][T17518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 788.961295][T15856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 788.972885][T16828] usb 4-1: USB disconnect, device number 18 [ 789.186171][T15856] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 789.266943][T15856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.302639][T15856] usb 5-1: Product: syz [ 789.306827][T15856] usb 5-1: Manufacturer: syz [ 789.311236][T15856] usb 5-1: SerialNumber: syz [ 789.326953][T17526] EXT4-fs (loop1): Test dummy encryption mode enabled [ 789.335306][T17526] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.4074: inline data xattr refers to an external xattr inode [ 789.350302][T17526] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4074: couldn't read orphan inode 12 (err -117) [ 789.362208][T17526] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,data_err=abort,init_itable,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue [ 789.565565][T16830] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 789.591430][T17526] udc-core: couldn't find an available UDC or it's busy [ 789.598388][T17526] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 789.605702][T15856] usbhid 5-1:1.0: can't add hid device: -22 [ 789.643518][T15856] usbhid: probe of 5-1:1.0 failed with error -22 [ 789.822626][T15856] usb 5-1: USB disconnect, device number 40 [ 789.898801][T17533] overlayfs: missing 'workdir' [ 789.995559][T16830] usb 3-1: Using ep0 maxpacket: 32 [ 790.135637][T16830] usb 3-1: config index 0 descriptor too short (expected 64274, got 18) [ 790.315696][T16830] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 790.324585][T16830] usb 3-1: New USB device strings: Mfr=1, Product=42, SerialNumber=41 [ 790.341917][T16830] usb 3-1: Product: syz [ 790.345969][T16830] usb 3-1: Manufacturer: syz [ 790.350341][T16830] usb 3-1: SerialNumber: syz [ 790.355336][T16830] usb 3-1: config 0 descriptor?? [ 790.625601][T16831] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 790.885574][T16831] usb 5-1: Using ep0 maxpacket: 32 [ 791.075699][T16831] usb 5-1: unable to get BOS descriptor or descriptor too short [ 791.165752][T16831] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 791.177589][T16831] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 791.187724][T16831] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 791.346826][T17556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4081'. [ 791.585664][T16831] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.594549][T16831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.602419][T16831] usb 5-1: Manufacturer: Ц [ 792.317763][T17574] udc-core: couldn't find an available UDC or it's busy [ 792.324626][T17574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 792.375606][T16831] cdc_ncm 5-1:1.0: bind() failure [ 792.381199][T16831] cdc_ncm 5-1:1.1: bind() failure [ 792.392299][T16831] usb 5-1: USB disconnect, device number 41 [ 792.940449][T17580] tipc: Started in network mode [ 792.945211][T17580] tipc: Own node identity 1, cluster identity 4711 [ 792.952079][T17580] tipc: 32-bit node address hash set to 1 [ 793.058612][T17578] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 793.066989][T17578] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 793.076686][T17578] F2FS-fs (loop1): invalid crc value [ 793.125570][T16830] rtl8150 3-1:0.0: couldn't reset the device [ 793.131612][T16830] rtl8150: probe of 3-1:0.0 failed with error -5 [ 793.143054][T17599] input: syz1 as /devices/virtual/input/input90 [ 793.161766][T16830] usb 3-1: USB disconnect, device number 27 [ 793.181028][T17578] F2FS-fs (loop1): Found nat_bits in checkpoint [ 793.215695][T15857] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 793.231165][T17578] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 793.238629][T17578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 793.455548][T15857] usb 5-1: Using ep0 maxpacket: 32 [ 793.655625][T15857] usb 5-1: config index 0 descriptor too short (expected 64274, got 18) [ 793.865194][T15857] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 793.874272][T15857] usb 5-1: New USB device strings: Mfr=1, Product=42, SerialNumber=41 [ 793.882661][T15857] usb 5-1: Product: syz [ 793.886649][T15857] usb 5-1: Manufacturer: syz [ 793.891048][T15857] usb 5-1: SerialNumber: syz [ 793.896475][T15857] usb 5-1: config 0 descriptor?? [ 794.202796][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.230079][T17617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4096'. [ 794.238926][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.246118][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.253402][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.260640][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.268655][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.275928][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.522683][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.530000][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.541336][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.549725][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.557168][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.564403][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.575752][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.586043][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.598706][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.606119][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.613343][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.620753][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.628181][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.635403][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.690285][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.699374][T17629] udc-core: couldn't find an available UDC or it's busy [ 794.699434][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.714104][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.715409][T17629] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 794.721581][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.736044][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.743218][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.750475][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.759545][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.767000][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.774256][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.781429][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.789188][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.796424][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.803585][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.810845][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.818003][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.825192][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.832531][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.839728][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.847359][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.854565][T16830] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 794.862338][T16830] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz0] on syz0 [ 794.883626][T17629] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 794.905324][T17629] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 794.914329][T17629] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 794.923237][ T24] audit: type=1400 audit(2000000050.920:3693): avc: denied { remount } for pid=17628 comm="syz.1.4099" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 794.924172][T17629] EXT4-fs (loop1): re-mounted. Opts: (null) [ 794.961870][T17629] udc-core: couldn't find an available UDC or it's busy [ 794.976321][T17629] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 794.987846][T17650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4104'. [ 795.179166][T17659] input: syz1 as /devices/virtual/input/input91 [ 795.285570][T16831] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 795.726328][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4108'. [ 795.885665][T16831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.903877][T16831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.928059][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4110'. [ 795.967168][T17676] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 795.974605][T17670] udc-core: couldn't find an available UDC or it's busy [ 795.981374][T17670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 795.985592][T17676] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 795.988942][T16831] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 796.005018][T16831] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 796.013907][T16831] usb 3-1: Product: syz [ 796.045998][T16831] usb 3-1: config 0 descriptor?? [ 796.069625][T17676] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nobarrier,sysvgroups,norecovery,errors=continue,nomblk_io_submit,quota,nomblk_io_submit,lazytime,,errors=continue [ 796.202808][T17683] overlayfs: missing 'workdir' [ 796.956286][T17698] loop3: p2 p3 p4 [ 796.962059][T17698] loop3: p2 start 452985600 is beyond EOD, truncated [ 796.968714][T17698] loop3: p3 size 33554432 extends beyond EOD, truncated [ 796.976258][T17698] loop3: p4 start 8388607 is beyond EOD, truncated [ 797.242100][T16831] konepure 0003:1E7D:2DB4.0098: item fetching failed at offset 10/11 [ 797.250148][T16831] konepure 0003:1E7D:2DB4.0098: parse failed [ 797.255650][T15857] rtl8150 5-1:0.0: couldn't reset the device [ 797.256384][T16831] konepure: probe of 0003:1E7D:2DB4.0098 failed with error -22 [ 797.261947][T15857] rtl8150: probe of 5-1:0.0 failed with error -5 [ 797.284991][T15857] usb 5-1: USB disconnect, device number 42 [ 797.458516][T17706] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 797.466198][T17706] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 797.475263][T17706] F2FS-fs (loop1): invalid crc value [ 797.482112][T17706] F2FS-fs (loop1): Found nat_bits in checkpoint [ 797.505002][T17706] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 797.512020][T17706] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 797.976598][T17718] EXT4-fs (loop3): Test dummy encryption mode enabled [ 797.984815][T17718] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.4120: invalid block [ 797.995912][T17718] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4120: couldn't read orphan inode 11 (err -117) [ 798.007916][T17718] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 798.110160][T17723] input: syz1 as /devices/virtual/input/input92 [ 798.581722][T16826] usb 3-1: USB disconnect, device number 28 [ 798.865605][T17748] EXT4-fs (loop1): Test dummy encryption mode enabled [ 798.879589][T17748] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.4129: inline data xattr refers to an external xattr inode [ 798.894946][T17748] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4129: couldn't read orphan inode 12 (err -117) [ 798.906807][T17748] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,data_err=abort,init_itable,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue [ 799.197864][T15857] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 799.207179][T17748] udc-core: couldn't find an available UDC or it's busy [ 799.214125][T17748] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 799.437240][T17765] overlayfs: missing 'workdir' [ 799.585636][T15857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.596532][T15857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.606736][T15857] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 799.615783][T15857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.624980][T15857] usb 3-1: config 0 descriptor?? [ 799.679475][T17767] fuse: Bad value for 'fd' [ 800.096863][T15857] hid (null): bogus close delimiter [ 800.168921][T17788] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 800.183293][T17788] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.4140: invalid indirect mapped block 1 (level 1) [ 800.203253][T17788] EXT4-fs (loop1): 1 truncate cleaned up [ 800.208977][T17788] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 800.305738][T15857] usb 3-1: language id specifier not provided by device, defaulting to English [ 800.316789][T17794] udc-core: couldn't find an available UDC or it's busy [ 800.323555][T17794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 800.383127][T17795] input: syz1 as /devices/virtual/input/input93 [ 800.587191][T17798] udc-core: couldn't find an available UDC or it's busy [ 800.594384][T17798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 800.736996][T15857] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0099/input/input94 [ 800.749505][T15857] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0099/input/input95 [ 800.762347][T15857] uclogic 0003:256C:006D.0099: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 800.845577][T16828] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 800.930033][T17801] syz.0.4143[17801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.930099][T17801] syz.0.4143[17801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.948363][T16826] usb 3-1: USB disconnect, device number 29 [ 801.448671][T17804] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 801.456371][T17804] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 801.466869][T17804] F2FS-fs (loop3): Found nat_bits in checkpoint [ 801.496678][T17804] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 801.503664][T17804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 801.530677][T17804] overlayfs: invalid origin (0000007900c7d96a760000ff880005000000000006000000000000000000000000000000000000000000000000000000) [ 801.551756][T13153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 801.551767][T13153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 801.559326][T13153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 801.566880][T13153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 801.574294][T13153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 801.581910][T13153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 801.589420][T13153] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 801.798007][T17816] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 801.819755][T17816] ext4 filesystem being mounted at /230/bus supports timestamps until 2038 (0x7fffffff) [ 802.115558][T15857] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 802.339499][T17824] syz.2.4148[17824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.339545][T17824] syz.2.4148[17824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.365548][T15857] usb 4-1: Using ep0 maxpacket: 32 [ 802.565768][T15857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.635548][T15856] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 802.645737][T15857] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 802.656829][T15857] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 802.666583][T15857] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 802.885548][T15856] usb 3-1: Using ep0 maxpacket: 32 [ 803.025642][T15856] usb 3-1: config index 0 descriptor too short (expected 64274, got 18) [ 803.225872][T15856] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 803.235324][T15856] usb 3-1: New USB device strings: Mfr=1, Product=42, SerialNumber=41 [ 803.243884][T15856] usb 3-1: Product: syz [ 803.248092][T15856] usb 3-1: Manufacturer: syz [ 803.252544][T15856] usb 3-1: SerialNumber: syz [ 803.261555][T15856] usb 3-1: config 0 descriptor?? [ 803.365620][T15857] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.374568][T15857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.382593][T15857] usb 4-1: Manufacturer: Ц [ 804.095703][T15857] cdc_ncm 4-1:1.0: bind() failure [ 804.101289][T15857] cdc_ncm 4-1:1.1: bind() failure [ 804.109436][T15857] usb 4-1: USB disconnect, device number 19 [ 804.209347][T17845] udc-core: couldn't find an available UDC or it's busy [ 804.216254][T17845] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 804.639523][T17854] syz.3.4159[17854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.639586][T17854] syz.3.4159[17854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.961395][T17866] udc-core: couldn't find an available UDC or it's busy [ 804.980247][T17866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 805.507652][T17887] syz.1.4170[17887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.507703][T17887] syz.1.4170[17887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.835580][T15856] rtl8150 3-1:0.0: couldn't reset the device [ 805.852669][T15856] rtl8150: probe of 3-1:0.0 failed with error -5 [ 805.859616][T15856] usb 3-1: USB disconnect, device number 30 [ 805.885571][T15857] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 806.129762][T15857] usb 5-1: Using ep0 maxpacket: 32 [ 806.197098][T17903] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 806.205866][T17903] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038 (0x7fffffff) [ 806.215710][T15856] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 806.516826][T15857] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 806.528665][T15857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.540934][T15857] usb 5-1: Product: syz [ 806.541981][T17910] EXT4-fs (loop1): Ignoring removed oldalloc option [ 806.545024][T15857] usb 5-1: Manufacturer: syz [ 806.551889][T17910] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 806.555911][T15856] usb 3-1: Using ep0 maxpacket: 32 [ 806.567737][T15857] usb 5-1: SerialNumber: syz [ 806.572728][T17910] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 806.573041][T15857] usb 5-1: config 0 descriptor?? [ 806.685624][T15856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.696493][T15856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.706095][T15856] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 806.714894][T15856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.723286][T15856] usb 3-1: config 0 descriptor?? [ 807.046125][T17898] fuse: Unknown parameter 'rootm/de' [ 807.053200][T17898] fuse: Unknown parameter '00000000000000000008' [ 807.206347][T15856] lua 0003:1E7D:2C2E.009A: global environment stack underflow [ 807.213703][T15856] lua 0003:1E7D:2C2E.009A: item 0 0 1 11 parsing failed [ 807.220579][T15856] lua 0003:1E7D:2C2E.009A: parse failed [ 807.226078][T15856] lua: probe of 0003:1E7D:2C2E.009A failed with error -22 [ 807.285596][T16828] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 807.408115][T15854] usb 3-1: USB disconnect, device number 31 [ 807.565563][T16828] usb 4-1: device descriptor read/64, error -71 [ 807.926570][T17926] device pim6reg1 entered promiscuous mode [ 807.955630][T16828] usb 4-1: device descriptor read/64, error -71 [ 807.987448][T17930] syz.0.4181[17930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 807.987505][T17930] syz.0.4181[17930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 808.225581][T16828] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 808.852197][T16828] usb 4-1: device descriptor read/64, error -71 [ 808.939007][T17955] syz.0.4189[17955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 808.939047][T17955] syz.0.4189[17955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.386227][T17960] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 809.412508][T17960] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 809.422063][T17960] F2FS-fs (loop1): invalid crc value [ 809.429015][T17960] F2FS-fs (loop1): Found nat_bits in checkpoint [ 809.466868][T17960] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 809.473827][T17960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 809.505568][T16828] usb 4-1: device descriptor read/64, error -71 [ 809.905905][T16828] usb usb4-port1: attempt power cycle [ 810.065817][T15857] rtl8150 5-1:0.0: couldn't reset the device [ 810.086253][T15857] rtl8150: probe of 5-1:0.0 failed with error -5 [ 810.196341][T15857] usb 5-1: USB disconnect, device number 44 [ 810.205481][T17980] syz.2.4194[17980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.205723][T17980] syz.2.4194[17980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.249221][T17982] EXT4-fs (loop3): Test dummy encryption mode enabled [ 810.348366][T17982] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 810.369312][T17982] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038 (0x7fffffff) [ 810.423125][ T24] audit: type=1400 audit(2000000066.410:3694): avc: denied { read } for pid=17992 comm="syz.0.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 810.485853][ T24] audit: type=1400 audit(2000000066.470:3695): avc: denied { lock } for pid=17992 comm="syz.0.4199" path="socket:[85791]" dev="sockfs" ino=85791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 810.581839][T18007] input: syz1 as /devices/virtual/input/input96 [ 810.725653][T15857] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 810.943736][T18009] loop1: unable to read partition table [ 810.949260][T18009] loop1: partition table beyond EOD, truncated [ 810.955207][T18009] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 811.075535][T15857] usb 5-1: Using ep0 maxpacket: 32 [ 811.195596][T15857] usb 5-1: config 113 has an invalid interface number: 36 but max is 0 [ 811.203668][T15857] usb 5-1: config 113 has no interface number 0 [ 811.210050][T15857] usb 5-1: config 113 interface 36 has no altsetting 0 [ 811.244156][T18020] overlayfs: failed to resolve './file0': -2 [ 811.808995][T15857] usb 5-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice=c8.b7 [ 811.818452][T15857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.827907][T15857] usb 5-1: Product: А [ 811.832192][T15857] usb 5-1: Manufacturer: ఊ [ 811.837478][T15857] usb 5-1: SerialNumber: ᗉڠɧ砳昁蠒鳜棫魥숿籅㛚禙Ỹﷳ쌌즃ຕ聂淑캽웯閉脫䔓턇䯶科砡ﰈ잺幢略㿍婲梠ㆸ‮奒綬㼋磥ꉉވྦྷ [ 811.984134][T18034] syz.2.4207[18034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 811.984177][T18034] syz.2.4207[18034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 812.149870][T18040] syz.0.4209[18040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 812.161322][T18040] syz.0.4209[18040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 812.306282][T18038] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 812.309628][T15857] usb 5-1: USB disconnect, device number 45 [ 812.513728][T18052] IPv6: Can't replace route, no match found [ 812.654924][T18057] overlayfs: failed to resolve './file2': -2 [ 812.908491][T18062] EXT4-fs (loop1): quotafile must be on filesystem root [ 813.396753][T18072] loop1: unable to read partition table [ 813.402277][T18072] loop1: partition table beyond EOD, truncated [ 813.408411][T18072] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 813.435550][T15854] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 813.480021][ T93] loop1: unable to read partition table [ 813.485801][ T93] loop1: partition table beyond EOD, truncated [ 813.525561][T16829] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 813.865745][T15854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.876504][T15854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.886081][T15854] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 813.894867][T15854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.903573][T15854] usb 5-1: config 0 descriptor?? [ 813.972704][T18080] udc-core: couldn't find an available UDC or it's busy [ 813.979627][T18080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 813.979640][T16829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 814.135602][T16829] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 814.144501][T16829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.152285][T16829] usb 4-1: Product: syz [ 814.156287][T16829] usb 4-1: Manufacturer: syz [ 814.160667][T16829] usb 4-1: SerialNumber: syz [ 814.326635][T18082] syz.2.4220[18082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.326676][T18082] syz.2.4220[18082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.366093][T18059] udc-core: couldn't find an available UDC or it's busy [ 814.384402][T18059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 814.396935][T15854] wacom 0003:056A:00F8.009B: item fetching failed at offset 1/5 [ 814.404917][T15854] wacom 0003:056A:00F8.009B: parse failed [ 814.410807][T15854] wacom: probe of 0003:056A:00F8.009B failed with error -22 [ 814.425743][T16829] usbhid 4-1:1.0: can't add hid device: -22 [ 814.431546][T16829] usbhid: probe of 4-1:1.0 failed with error -22 [ 814.516367][T18089] udc-core: couldn't find an available UDC or it's busy [ 814.523128][T18089] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 814.531185][T18090] syz.1.4223[18090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.531228][T18090] syz.1.4223[18090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.608139][T16829] usb 5-1: USB disconnect, device number 46 [ 814.628590][T16826] usb 4-1: USB disconnect, device number 23 [ 815.164437][T18100] syz.4.4226[18100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 815.164480][T18100] syz.4.4226[18100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 815.458676][T15854] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 815.885647][T15854] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 815.896761][T15854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.908886][T15854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.922558][T15854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 815.954850][T18112] F2FS-fs (loop1): invalid crc value [ 815.969069][T18112] F2FS-fs (loop1): Found nat_bits in checkpoint [ 816.027137][T18112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 816.075594][T15854] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 816.084625][T15854] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 816.257362][T15854] usb 4-1: Manufacturer: syz [ 816.263880][T15854] usb 4-1: config 0 descriptor?? [ 816.314690][T16534] attempt to access beyond end of device [ 816.314690][T16534] loop1: rw=2049, want=45120, limit=40427 [ 816.375623][T16829] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 816.446325][T18136] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 816.459187][T18136] EXT4-fs error (device loop1): mb_free_blocks:1524: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 816.473541][T18136] EXT4-fs (loop1): Remounting filesystem read-only [ 816.480149][T18136] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.4235: invalid indirect mapped block 1 (level 1) [ 816.493335][T18136] EXT4-fs (loop1): 1 truncate cleaned up [ 816.498962][T18136] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock, [ 816.625544][T16828] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 816.735613][T16829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.746497][T16829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.756216][T16829] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 816.765062][T16829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.773749][T16829] usb 3-1: config 0 descriptor?? [ 816.815591][T15854] usbhid 4-1:0.0: can't add hid device: -71 [ 816.821392][T15854] usbhid: probe of 4-1:0.0 failed with error -71 [ 816.828284][T15854] usb 4-1: USB disconnect, device number 24 [ 816.865592][T16828] usb 5-1: Using ep0 maxpacket: 16 [ 816.985604][T16828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.019168][T18124] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 817.029393][ T24] audit: type=1400 audit(2000000073.020:3696): avc: denied { relabelto } for pid=18123 comm="syz.2.4232" name="file0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 817.056644][ T24] audit: type=1400 audit(2000000073.020:3697): avc: denied { associate } for pid=18123 comm="syz.2.4232" name="file0" dev="tmpfs" ino=329 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 817.155614][T16829] usbhid 3-1:0.0: can't add hid device: -71 [ 817.161682][T16829] usbhid: probe of 3-1:0.0 failed with error -71 [ 817.168591][T16829] usb 3-1: USB disconnect, device number 32 [ 817.175581][T16828] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 817.184503][T16828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.192441][T16828] usb 5-1: Product: syz [ 817.196423][T16828] usb 5-1: Manufacturer: syz [ 817.200815][T16828] usb 5-1: SerialNumber: syz [ 817.205874][T16828] usb 5-1: config 0 descriptor?? [ 817.331806][T18144] syz.1.4237[18144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 817.331845][T18144] syz.1.4237[18144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 817.424932][T18146] FAULT_INJECTION: forcing a failure. [ 817.424932][T18146] name failslab, interval 1, probability 0, space 0, times 0 [ 817.448530][T18146] CPU: 1 PID: 18146 Comm: syz.1.4237 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 817.458313][T18146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 817.468210][T18146] Call Trace: [ 817.471338][T18146] dump_stack_lvl+0x1e2/0x24b [ 817.475847][T18146] ? panic+0x812/0x812 [ 817.479755][T18146] ? __fsnotify_parent+0x4b9/0x6c0 [ 817.484701][T18146] ? bfq_pos_tree_add_move+0x43b/0x43b [ 817.489999][T18146] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 817.496590][T18146] ? proc_fail_nth_write+0x20b/0x290 [ 817.501710][T18146] dump_stack+0x15/0x17 [ 817.505713][T18146] should_fail+0x3c6/0x510 [ 817.509958][T18146] ? getname_flags+0xba/0x520 [ 817.514471][T18146] __should_failslab+0xa4/0xe0 [ 817.519072][T18146] should_failslab+0x9/0x20 [ 817.523412][T18146] kmem_cache_alloc+0x3d/0x2e0 [ 817.528016][T18146] getname_flags+0xba/0x520 [ 817.532347][T18146] getname+0x19/0x20 [ 817.536088][T18146] do_sys_openat2+0xd7/0x710 [ 817.540509][T18146] ? strncpy_from_kernel_nofault+0x169/0x1e0 [ 817.546323][T18146] ? do_sys_open+0x220/0x220 [ 817.550750][T18146] ? bpf_probe_read_kernel_str+0x49/0x70 [ 817.556220][T18146] ? bpf_trace_run2+0xf4/0x280 [ 817.560816][T18146] __x64_sys_openat+0x243/0x290 [ 817.565511][T18146] ? __ia32_sys_open+0x270/0x270 [ 817.570288][T18146] ? __bpf_trace_sys_enter+0x62/0x70 [ 817.574811][ T24] audit: type=1400 audit(2000000073.560:3698): avc: denied { rmdir } for pid=16991 comm="syz-executor" name="file0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 817.575404][T18146] ? syscall_enter_from_user_mode+0x144/0x1a0 [ 817.575415][T18146] do_syscall_64+0x34/0x70 [ 817.575434][T18146] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 817.610465][T18148] sch_fq: defrate 16 ignored. [ 817.612378][T18146] RIP: 0033:0x7f2dc52cf9f9 [ 817.612389][T18146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.612395][T18146] RSP: 002b:00007f2dc3f2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 817.655082][T18146] RAX: ffffffffffffffda RBX: 00007f2dc545e058 RCX: 00007f2dc52cf9f9 [ 817.661137][T18149] syz.2.4238[18149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 817.662889][T18146] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 817.662896][T18146] RBP: 00007f2dc3f2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 817.662910][T18146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.697692][T18146] R13: 000000000000006e R14: 00007f2dc545e058 R15: 00007ffd175b4e88 [ 817.706495][T18149] syz.2.4238[18149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 817.716015][T16828] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 817.733467][T16828] uvcvideo: No valid video chain found. [ 817.775669][T15852] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 817.916222][T18120] tmpfs: Unknown parameter 'fd' [ 817.922565][T16828] usb 5-1: USB disconnect, device number 47 [ 817.975551][T16825] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 818.185614][T15852] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.255608][T16825] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 818.515629][T15852] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 818.524532][T15852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.532362][T15852] usb 4-1: Product: syz [ 818.536311][T15852] usb 4-1: Manufacturer: syz [ 818.540703][T15852] usb 4-1: SerialNumber: syz [ 818.755570][T15853] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 818.805742][T15852] usbhid 4-1:1.0: can't add hid device: -22 [ 818.811640][T15852] usbhid: probe of 4-1:1.0 failed with error -22 [ 819.006602][T15852] usb 4-1: USB disconnect, device number 25 [ 819.055871][T16825] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 819.064852][T16825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.175791][T15853] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 819.186542][T15853] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 819.195534][T15853] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 819.204649][T15853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.506439][T18156] udc-core: couldn't find an available UDC or it's busy [ 819.513437][T18156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 819.523313][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4240'. [ 819.575634][T15853] usb 5-1: string descriptor 0 read error: -71 [ 819.584364][T15853] usb 5-1: USB disconnect, device number 48 [ 819.805715][T15852] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 820.079945][T18173] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 820.087923][T18173] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 820.099049][T18173] F2FS-fs (loop1): Found nat_bits in checkpoint [ 820.132132][T18173] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 820.139094][T18173] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 820.165733][T18173] overlayfs: invalid origin (000000790000000000000010000000000000000000000000000000000000000000000000000000000000000000000000) [ 820.307012][T15852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.328742][T15852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.347435][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 820.347501][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 820.373066][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 820.380390][T15852] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 820.380471][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 820.396048][T15852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.396772][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 820.411921][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 820.420006][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 820.422971][T15852] usb 4-1: config 0 descriptor?? [ 820.608056][T18196] bpf_get_probe_write_proto: 2 callbacks suppressed [ 820.608080][T18196] syz.1.4249[18196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 820.614676][T18196] syz.1.4249[18196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 820.625859][T15857] usb 3-1: USB disconnect, device number 33 [ 820.916739][T15852] samsung 0003:0419:0001.009C: unknown main item tag 0x0 [ 820.927821][T15852] samsung 0003:0419:0001.009C: unknown main item tag 0x0 [ 820.950165][T15852] samsung 0003:0419:0001.009C: unknown main item tag 0x0 [ 821.014862][T15852] samsung 0003:0419:0001.009C: unknown main item tag 0x0 [ 821.022068][T15852] samsung 0003:0419:0001.009C: unknown main item tag 0x0 [ 821.029034][T15852] samsung 0003:0419:0001.009C: unknown main item tag 0x0 [ 821.035949][T15852] samsung 0003:0419:0001.009C: unknown main item tag 0x0 [ 821.044229][T15852] samsung 0003:0419:0001.009C: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 821.101060][T18199] overlayfs: invalid origin (000000790000000000000010000000000000000000000000000000000000000000000000000000000000000000000000) [ 821.129786][T18203] FAULT_INJECTION: forcing a failure. [ 821.129786][T18203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.217451][T15853] usb 4-1: USB disconnect, device number 26 [ 821.271814][T18203] CPU: 1 PID: 18203 Comm: syz.1.4249 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 821.281613][T18203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 821.291496][T18203] Call Trace: [ 821.294634][T18203] dump_stack_lvl+0x1e2/0x24b [ 821.299139][T18203] ? panic+0x812/0x812 [ 821.303045][T18203] ? bfq_pos_tree_add_move+0x43b/0x43b [ 821.308349][T18203] dump_stack+0x15/0x17 [ 821.312333][T18203] should_fail+0x3c6/0x510 [ 821.316671][T18203] should_fail_usercopy+0x1a/0x20 [ 821.321531][T18203] strncpy_from_user+0x24/0x2d0 [ 821.326221][T18203] ? getname_flags+0xba/0x520 [ 821.330732][T18203] getname_flags+0xf2/0x520 [ 821.335074][T18203] getname+0x19/0x20 [ 821.338804][T18203] do_sys_openat2+0xd7/0x710 [ 821.343233][T18203] ? release_firmware_map_entry+0x18d/0x18d [ 821.348957][T18203] ? do_sys_open+0x220/0x220 [ 821.353385][T18203] ? bpf_probe_read_kernel_str+0x49/0x70 [ 821.358853][T18203] ? __kasan_check_read+0x11/0x20 [ 821.363800][T18203] ? preempt_schedule_notrace+0x11b/0x140 [ 821.369358][T18203] ? preempt_schedule_common+0xf0/0xf0 [ 821.374651][T18203] __x64_sys_openat+0x243/0x290 [ 821.379337][T18203] ? __ia32_sys_open+0x270/0x270 [ 821.384111][T18203] ? bpf_probe_read_kernel_str+0x3f/0x70 [ 821.389597][T18203] ? syscall_enter_from_user_mode+0x152/0x1a0 [ 821.395487][T18203] do_syscall_64+0x34/0x70 [ 821.399749][T18203] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 821.405467][T18203] RIP: 0033:0x7f2dc52cf9f9 [ 821.409716][T18203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.429242][T18203] RSP: 002b:00007f2dc3f2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 821.437486][T18203] RAX: ffffffffffffffda RBX: 00007f2dc545e058 RCX: 00007f2dc52cf9f9 [ 821.445471][T18203] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 821.453392][T18203] RBP: 00007f2dc3f2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 821.461183][T18203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.469004][T18203] R13: 000000000000006e R14: 00007f2dc545e058 R15: 00007ffd175b4e88 [ 821.522999][T18208] syz.0.4254[18208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 821.523064][T18208] syz.0.4254[18208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 821.907372][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 821.960103][T18237] hub 6-0:1.0: USB hub found [ 821.964648][T18237] hub 6-0:1.0: 1 port detected [ 822.205639][T16825] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 822.442763][ T24] audit: type=1400 audit(2000000078.430:3699): avc: denied { accept } for pid=18242 comm="syz.1.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 822.455531][T18244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4262'. [ 822.477002][T18244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18244 comm=syz.0.4262 [ 822.495726][T16825] usb 4-1: no configurations [ 822.500401][T16825] usb 4-1: can't read configurations, error -22 [ 822.861396][T16825] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 823.017419][T18258] overlayfs: invalid origin (0000007900c7d96a760000ff880005000000000006000000000000000000000000000000000000000000000000000000) [ 823.039596][T18265] syz.4.4272[18265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 823.039637][T18265] syz.4.4272[18265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 823.145642][T16825] usb 4-1: no configurations [ 823.161343][T16825] usb 4-1: can't read configurations, error -22 [ 823.167773][T16825] usb usb4-port1: attempt power cycle [ 823.575547][T16825] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 823.705621][T16825] usb 4-1: no configurations [ 823.710154][T16825] usb 4-1: can't read configurations, error -22 [ 823.865566][T16825] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 823.898529][T18277] 9pnet: Insufficient options for proto=fd [ 823.995588][T16825] usb 4-1: no configurations [ 824.000040][T16825] usb 4-1: can't read configurations, error -22 [ 824.006851][T16825] usb usb4-port1: unable to enumerate USB device [ 824.269357][T18284] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 824.277728][T18284] EXT4-fs (loop1): orphan cleanup on readonly fs [ 824.284190][T18284] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 824.298711][T18284] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 824.305805][T18284] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4277: bg 0: block 40: padding at end of block bitmap is not set [ 824.320094][T18284] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 824.329165][T18284] EXT4-fs (loop1): 1 truncate cleaned up [ 824.334649][T18284] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 824.433861][T18289] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #16: comm syz.1.4277: corrupted xattr block 31 [ 824.445745][T18289] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 824.545553][T16825] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 824.915731][T16825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.926711][T16825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.936303][T16825] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 824.945182][T16825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.958737][T16825] usb 3-1: config 0 descriptor?? [ 825.216050][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 825.225795][T18299] udc-core: couldn't find an available UDC or it's busy [ 825.232543][T18299] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 825.240279][T18299] udc-core: couldn't find an available UDC or it's busy [ 825.247196][T18299] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 825.254762][T18299] udc-core: couldn't find an available UDC or it's busy [ 825.261618][T18299] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 825.419918][T15852] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 825.436441][T16825] pantherlord 0003:0F30:0111.009D: item fetching failed at offset 6/7 [ 825.444675][T16825] pantherlord 0003:0F30:0111.009D: parse failed [ 825.450796][T16825] pantherlord: probe of 0003:0F30:0111.009D failed with error -22 [ 825.915536][T15852] usb 4-1: device descriptor read/64, error -71 [ 826.114659][T18311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 826.268765][T18319] syz.4.4285[18319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 826.268847][T18319] syz.4.4285[18319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 826.314397][T15852] usb 4-1: device descriptor read/64, error -71 [ 826.605546][T15852] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 826.905535][T15852] usb 4-1: device descriptor read/64, error -71 [ 827.315628][T15852] usb 4-1: device descriptor read/64, error -71 [ 827.322610][T15853] usb 3-1: USB disconnect, device number 34 [ 827.330607][ T24] audit: type=1326 audit(2000000083.320:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f715309f9 code=0x7ffc0000 [ 827.354121][ T24] audit: type=1326 audit(2000000083.320:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f715309f9 code=0x7ffc0000 [ 827.377993][ T24] audit: type=1326 audit(2000000083.320:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f715309f9 code=0x7ffc0000 [ 827.402225][ T24] audit: type=1326 audit(2000000083.320:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f715309f9 code=0x7ffc0000 [ 827.425769][ T24] audit: type=1326 audit(2000000083.320:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9f715309f9 code=0x7ffc0000 [ 827.449397][T15852] usb usb4-port1: attempt power cycle [ 827.455108][ T24] audit: type=1326 audit(2000000083.320:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f71530a33 code=0x7ffc0000 [ 827.478628][ T24] audit: type=1326 audit(2000000083.320:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f7152f4df code=0x7ffc0000 [ 827.502504][ T24] audit: type=1326 audit(2000000083.320:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9f71530a87 code=0x7ffc0000 [ 827.525920][ T24] audit: type=1326 audit(2000000083.350:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f7152f390 code=0x7ffc0000 [ 827.549726][ T24] audit: type=1326 audit(2000000083.350:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f715305fb code=0x7ffc0000 [ 827.572961][ T24] audit: type=1326 audit(2000000083.350:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f715305fb code=0x7ffc0000 [ 827.596085][ T24] audit: type=1326 audit(2000000083.350:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f715629e5 code=0x7ffc0000 [ 827.619567][ T24] audit: type=1326 audit(2000000083.350:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f715305fb code=0x7ffc0000 [ 827.642852][ T24] audit: type=1326 audit(2000000083.350:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9f7152f68a code=0x7ffc0000 [ 827.807535][ T24] audit: type=1326 audit(2000000083.350:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.2.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9f7152f68a code=0x7ffc0000 [ 827.895540][T15852] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 828.042049][T15852] usb 4-1: device descriptor read/8, error -71 [ 828.250395][T18363] syz.4.4297[18363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.250454][T18363] syz.4.4297[18363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.335625][T15852] usb 4-1: device descriptor read/8, error -71 [ 829.083040][T18378] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 829.125290][T18378] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 829.164657][T18383] input: syz1 as /devices/virtual/input/input97 [ 829.228547][T18388] udc-core: couldn't find an available UDC or it's busy [ 829.235439][T18388] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 829.456776][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'. [ 829.879351][T15852] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 830.131972][T15852] usb 4-1: Using ep0 maxpacket: 16 [ 830.255600][T15852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 36352, setting to 64 [ 830.266595][T15852] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 830.275398][T15852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.283985][T15852] usb 4-1: config 0 descriptor?? [ 830.326039][T15852] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 830.794781][T18429] syz.0.4312[18429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 830.794841][T18429] syz.0.4312[18429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 830.876637][T18402] udc-core: couldn't find an available UDC or it's busy [ 830.894599][T18402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 830.906061][T18426] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 830.913690][T18426] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 830.923723][T18426] F2FS-fs (loop1): invalid crc value [ 830.966400][T18426] F2FS-fs (loop1): Found nat_bits in checkpoint [ 831.053342][T18426] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 831.067896][T18426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 831.252708][T18404] udc-core: couldn't find an available UDC or it's busy [ 831.263860][T18404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 831.900179][T18462] netlink: 'syz.1.4319': attribute type 1 has an invalid length. [ 831.910337][T18462] syz.1.4319[18462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 831.910386][T18462] syz.1.4319[18462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 832.146810][T18464] overlayfs: invalid origin (0000007900c7d96a760000ff880000000000000000000000000000000000000000000000000000000000000000000000) [ 832.200842][T18469] F2FS-fs (loop1): invalid crc value [ 832.209549][T18469] F2FS-fs (loop1): Found nat_bits in checkpoint [ 832.231487][T18469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 832.416870][T15854] usb 4-1: USB disconnect, device number 35 [ 832.681431][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 832.681443][ T24] audit: type=1326 audit(2000000088.670:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18483 comm="syz.2.4326" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f715309f9 code=0x0 [ 833.047308][T18488] syz.4.4327[18488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 833.047371][T18488] syz.4.4327[18488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 833.094197][T16534] attempt to access beyond end of device [ 833.094197][T16534] loop1: rw=2049, want=45104, limit=40427 [ 833.560842][T18494] fuse: Bad value for 'fd' [ 833.575779][T16826] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 833.579992][T18496] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 833.591082][T18496] System zones: 0-2, 18-18, 34-35 [ 833.596591][T18496] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue [ 833.608217][T18496] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038 (0x7fffffff) [ 833.622840][T18496] overlayfs: unrecognized mount option "uid>00000000000000000000" or missing value [ 833.955578][T16826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.965718][T16826] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 833.974585][T16826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.993018][T16826] usb 4-1: config 0 descriptor?? [ 834.056047][T16826] rndis_host 4-1:0.0: skipping garbage [ 834.061333][T16826] rndis_host 4-1:0.0: invalid descriptor buffer length [ 834.068432][T16826] rndis_host: probe of 4-1:0.0 failed with error -22 [ 834.075042][T16826] cdc_acm 4-1:0.0: skipping garbage [ 834.080239][T16826] cdc_acm 4-1:0.0: invalid descriptor buffer length [ 834.086853][T16826] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 834.094498][T16826] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 834.101060][T16826] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 834.374361][T18492] udc-core: couldn't find an available UDC or it's busy [ 834.379115][ T24] audit: type=1400 audit(2000000090.360:3757): avc: denied { getopt } for pid=18491 comm="syz.3.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 834.414729][T18492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 834.424037][T16826] usb 4-1: USB disconnect, device number 36 [ 834.715535][T16829] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 834.731032][T18515] overlayfs: missing 'lowerdir' [ 834.838962][T18518] device syzkaller0 entered promiscuous mode [ 834.965540][T16829] usb 3-1: Using ep0 maxpacket: 16 [ 835.095587][T16829] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 835.103394][T16829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.113739][T16829] usb 3-1: config 0 has no interface number 0 [ 835.119833][T16829] usb 3-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.265638][T16829] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 835.274561][T16829] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 835.282327][T16829] usb 3-1: Product: syz [ 835.286334][T16829] usb 3-1: SerialNumber: syz [ 835.291334][T16829] usb 3-1: config 0 descriptor?? [ 835.816635][T18534] syz.3.4341[18534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 835.816678][T18534] syz.3.4341[18534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 836.675209][T18549] udc-core: couldn't find an available UDC or it's busy [ 836.697340][T18549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 836.776520][T18551] attempt to access beyond end of device [ 836.776520][T18551] loop3: rw=2049, want=1041, limit=128 [ 836.792209][T18551] attempt to access beyond end of device [ 836.792209][T18551] loop3: rw=0, want=178, limit=128 [ 836.803208][T18550] attempt to access beyond end of device [ 836.803208][T18550] loop3: rw=0, want=178, limit=128 [ 836.813759][T18550] Buffer I/O error on dev loop3, logical block 177, async page read [ 836.821652][T18550] attempt to access beyond end of device [ 836.821652][T18550] loop3: rw=0, want=179, limit=128 [ 836.832146][T18550] Buffer I/O error on dev loop3, logical block 178, async page read [ 836.840018][T18550] attempt to access beyond end of device [ 836.840018][T18550] loop3: rw=0, want=180, limit=128 [ 836.850393][T18550] Buffer I/O error on dev loop3, logical block 179, async page read [ 836.858238][T18550] attempt to access beyond end of device [ 836.858238][T18550] loop3: rw=0, want=181, limit=128 [ 836.868579][T18550] Buffer I/O error on dev loop3, logical block 180, async page read [ 836.876431][T18550] attempt to access beyond end of device [ 836.876431][T18550] loop3: rw=0, want=182, limit=128 [ 836.886820][T18550] Buffer I/O error on dev loop3, logical block 181, async page read [ 836.894625][T18550] attempt to access beyond end of device [ 836.894625][T18550] loop3: rw=0, want=183, limit=128 [ 836.905064][T18550] Buffer I/O error on dev loop3, logical block 182, async page read [ 836.912872][T18550] attempt to access beyond end of device [ 836.912872][T18550] loop3: rw=0, want=184, limit=128 [ 836.923325][T18550] Buffer I/O error on dev loop3, logical block 183, async page read [ 836.931120][T18550] Buffer I/O error on dev loop3, logical block 184, async page read [ 836.935525][T15853] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 836.938948][T18550] Buffer I/O error on dev loop3, logical block 177, async page read [ 836.954074][T18550] Buffer I/O error on dev loop3, logical block 178, async page read [ 837.235537][T16826] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 837.305659][T15853] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 837.359731][T18556] F2FS-fs (loop1): invalid crc value [ 837.366188][T18556] F2FS-fs (loop1): Found nat_bits in checkpoint [ 837.388072][T18556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 837.457172][ T24] audit: type=1400 audit(2000000093.450:3758): avc: denied { audit_control } for pid=18560 comm="syz.2.4348" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 837.478568][T15853] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 837.487963][T15853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.488089][T16829] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 837.495853][T15853] usb 5-1: Product: syz [ 837.502966][T16826] usb 4-1: Using ep0 maxpacket: 32 [ 837.512055][T15853] usb 5-1: Manufacturer: syz [ 837.513644][T16829] usb 3-1: USB disconnect, device number 35 [ 837.524231][T18562] input: syz0 as /devices/virtual/input/input98 [ 837.537082][T15853] usb 5-1: SerialNumber: syz [ 837.655661][T16826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 837.666700][T16826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 837.677786][T16826] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 837.686674][T16826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.695293][T16826] usb 4-1: config 0 descriptor?? [ 837.715671][T18551] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 837.736197][T16826] hub 4-1:0.0: USB hub found [ 837.823459][T15853] usbhid 5-1:1.0: can't add hid device: -22 [ 837.833868][T15853] usbhid: probe of 5-1:1.0 failed with error -22 [ 837.945566][T16829] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 837.975716][T16826] hub 4-1:0.0: 2 ports detected [ 837.995535][ T24] audit: type=1400 audit(2000000093.930:3759): avc: denied { shutdown } for pid=18563 comm="syz.0.4349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 838.020187][T16825] usb 5-1: USB disconnect, device number 49 [ 838.185612][T16826] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 838.191860][T16826] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 838.495690][T16826] usbhid 4-1:0.0: can't add hid device: -71 [ 838.501549][T16826] usbhid: probe of 4-1:0.0 failed with error -71 [ 838.535613][T16829] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 838.544119][T16826] usb 4-1: USB disconnect, device number 37 [ 838.549917][T16829] usb 3-1: config 0 has no interface number 0 [ 838.560279][T16829] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.582703][T16829] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.665753][T16829] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 838.674784][T16829] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 838.684611][T16829] usb 3-1: Manufacturer: syz [ 838.914361][T16829] usb 3-1: config 0 descriptor?? [ 839.049020][T18594] syz.3.4356[18594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 839.049077][T18594] syz.3.4356[18594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 839.196353][T18590] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 839.215397][T18590] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 839.227516][T18590] F2FS-fs (loop1): invalid crc value [ 839.257354][T18590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 839.324167][T18590] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 839.331114][T18590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 839.411797][T16829] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.009E/input/input99 [ 839.448232][T16829] sony 0003:054C:03D5.009E: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 839.530095][T18609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4359'. [ 839.539165][T18608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4359'. [ 839.849383][T15853] usb 3-1: USB disconnect, device number 36 [ 840.135550][T16826] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 840.156296][T18623] EXT4-fs (loop1): Test dummy encryption mode enabled [ 840.164241][T18623] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 840.175006][T18623] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038 (0x7fffffff) [ 840.188283][T18623] input: syz1 as /devices/virtual/input/input100 [ 840.286895][T18629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 840.397350][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4364'. [ 840.406454][T18633] udc-core: couldn't find an available UDC or it's busy [ 840.413201][T18633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 840.495599][T16826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.508629][T16829] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 840.516059][T16826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.525904][T16826] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 840.534741][T16826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.543548][T16826] usb 5-1: config 0 descriptor?? [ 840.875625][T16829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 840.886550][T16826] usbhid 5-1:0.0: can't add hid device: -71 [ 840.893352][T16826] usbhid: probe of 5-1:0.0 failed with error -71 [ 840.900570][T16829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8244, setting to 1024 [ 841.104731][T16826] usb 5-1: USB disconnect, device number 50 [ 841.111514][T16829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.133721][T16829] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 841.142623][T16829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.150954][T16829] usb 4-1: config 0 descriptor?? [ 841.636497][T16829] acrux 0003:1A34:0802.009F: item fetching failed at offset 3/5 [ 841.644356][T16829] acrux 0003:1A34:0802.009F: parse failed [ 841.650567][T16829] acrux: probe of 0003:1A34:0802.009F failed with error -22 [ 841.774363][T18652] fuse: Bad value for 'fd' [ 841.837084][T18627] udc-core: couldn't find an available UDC or it's busy [ 841.843855][T18627] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 842.540454][T18666] syz.4.4372[18666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 842.540525][T18666] syz.4.4372[18666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.099737][T15853] usb 4-1: USB disconnect, device number 38 [ 844.585891][T18704] FAULT_INJECTION: forcing a failure. [ 844.585891][T18704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.599341][T18704] CPU: 0 PID: 18704 Comm: syz.0.4382 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 844.609121][T18704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 844.619021][T18704] Call Trace: [ 844.622155][T18704] dump_stack_lvl+0x1e2/0x24b [ 844.626669][T18704] ? bfq_pos_tree_add_move+0x43b/0x43b [ 844.631959][T18704] dump_stack+0x15/0x17 [ 844.635951][T18704] should_fail+0x3c6/0x510 [ 844.636251][T18710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4385'. [ 844.640204][T18704] should_fail_usercopy+0x1a/0x20 [ 844.640214][T18704] _copy_from_user+0x20/0xd0 [ 844.640231][T18704] iovec_from_user+0xc7/0x330 [ 844.662768][T18704] __import_iovec+0x6d/0x3b0 [ 844.667186][T18704] ? __fget_files+0x31e/0x380 [ 844.671701][T18704] import_iovec+0xe5/0x120 [ 844.675955][T18704] do_preadv+0x1d4/0x350 [ 844.680034][T18704] ? vfs_writev+0x510/0x510 [ 844.684372][T18704] ? strncpy_from_kernel_nofault+0x169/0x1e0 [ 844.690280][T18704] ? bpf_trace_run2+0xf4/0x280 [ 844.694877][T18704] ? __bpf_trace_sys_enter+0x62/0x70 [ 844.699996][T18704] __x64_sys_preadv+0x9e/0xb0 [ 844.704512][T18704] do_syscall_64+0x34/0x70 [ 844.708764][T18704] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 844.714497][T18704] RIP: 0033:0x7fb88aeb69f9 [ 844.718745][T18704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.738273][T18704] RSP: 002b:00007fb889b36048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 844.746520][T18704] RAX: ffffffffffffffda RBX: 00007fb88b044f80 RCX: 00007fb88aeb69f9 [ 844.754327][T18704] RDX: 0000000000000001 RSI: 0000000020000400 RDI: 0000000000000006 [ 844.762142][T18704] RBP: 00007fb889b360a0 R08: 0000000000000000 R09: 0000000000000000 [ 844.769947][T18704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.777771][T18704] R13: 000000000000000b R14: 00007fb88b044f80 R15: 00007fff2b520cb8 [ 844.849783][T18720] syz.2.4388[18720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 844.849844][T18720] syz.2.4388[18720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 844.896264][T18710] EXT4-fs (loop1): orphan cleanup on readonly fs [ 844.916220][T18710] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 844.925445][T18710] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 844.935622][T18710] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.4385: Failed to acquire dquot type 0 [ 844.947480][T18710] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 844.956453][T18710] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 844.966162][T18710] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.4385: Failed to acquire dquot type 0 [ 844.986921][T18710] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4385: bg 0: block 64: padding at end of block bitmap is not set [ 845.040758][T18710] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 845.081144][T18710] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 845.090240][T18710] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 845.100031][T18710] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.4385: Failed to acquire dquot type 0 [ 845.113052][T18710] EXT4-fs (loop1): 1 orphan inode deleted [ 845.119000][T18710] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 845.129329][T18710] EXT4-fs error (device loop1): ext4_lookup:1831: inode #2: comm syz.1.4385: deleted inode referenced: 16 [ 845.215534][T16826] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 845.569742][T18730] loop1: unable to read partition table [ 845.575274][T18730] loop1: partition table beyond EOD, truncated [ 845.581287][T18730] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 845.642241][ T93] loop1: unable to read partition table [ 845.647853][ T93] loop1: partition table beyond EOD, truncated [ 845.765872][T16826] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 845.780143][T16826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.794597][T16826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.804463][T16826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 845.850273][T18737] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4393'. [ 845.882645][T18749] 9pnet: Insufficient options for proto=fd [ 845.890438][T18749] tmpfs: Unknown parameter ';γ' [ 845.895637][T15854] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 845.895851][T16826] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 845.912050][T16826] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 845.920322][T16826] usb 5-1: Manufacturer: syz [ 845.928553][T16826] usb 5-1: config 0 descriptor?? [ 845.956531][ T110] tipc: Left network mode [ 846.062833][T18751] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.069798][T18751] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.077586][T18751] device bridge_slave_0 entered promiscuous mode [ 846.086351][T18751] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.093194][T18751] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.101036][T18751] device bridge_slave_1 entered promiscuous mode [ 846.138774][T18751] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.145702][T18751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.152787][T18751] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.159603][T18751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.166771][T15854] usb 4-1: Using ep0 maxpacket: 8 [ 846.181949][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 846.189967][ T3809] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.197890][ T3809] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.201503][T18756] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 846.214770][T18756] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038 (0x7fffffff) [ 846.225769][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 846.233771][ T3809] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.240619][ T3809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.247988][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 846.256056][ T3809] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.262866][ T3809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.270186][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 846.277969][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 846.292838][T16829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 846.303790][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 846.311339][T15854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.322941][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 846.330138][T15854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.340478][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 846.348083][T15854] usb 4-1: New USB device found, idVendor=0405, idProduct=c298, bcdDevice= 0.00 [ 846.357437][T15854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.358443][T18751] device veth0_vlan entered promiscuous mode [ 846.374364][T15854] usb 4-1: config 0 descriptor?? [ 846.393957][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 846.403078][T18751] device veth1_macvtap entered promiscuous mode [ 846.410046][T16826] appleir 0003:05AC:8243.00A0: unknown main item tag 0x0 [ 846.414369][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 846.417817][T16826] appleir 0003:05AC:8243.00A0: No inputs registered, leaving [ 846.433646][T16826] appleir 0003:05AC:8243.00A0: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 846.460644][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 846.729607][ T110] device bridge_slave_1 left promiscuous mode [ 846.768362][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.775954][ T110] device bridge_slave_0 left promiscuous mode [ 846.781963][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.789940][ T110] device veth1_macvtap left promiscuous mode [ 846.795867][ T110] device veth0_vlan left promiscuous mode [ 846.878621][T13076] usb 5-1: USB disconnect, device number 51 [ 847.205620][T15854] usbhid 4-1:0.0: can't add hid device: -71 [ 847.211418][T15854] usbhid: probe of 4-1:0.0 failed with error -71 [ 847.218735][T15854] usb 4-1: USB disconnect, device number 39 [ 847.480990][T18779] input: syz0 as /devices/virtual/input/input101 [ 847.489706][T18781] syz.2.4403[18781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 847.489766][T18781] syz.2.4403[18781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.267998][T18801] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 848.285526][T15854] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 848.287288][T18801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 848.305876][T18801] F2FS-fs (loop1): Found nat_bits in checkpoint [ 848.335902][T18801] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 848.342829][T18801] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 848.382633][T18801] overlayfs: invalid origin (000000790000000000000010000000000000000000000000000000000000000000000000000000000000000000000000) [ 848.403750][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 848.403760][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 848.412236][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 848.419690][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 848.427192][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 848.434624][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 848.442076][T16534] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 848.629571][T15854] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 849.605606][T15854] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 849.614661][T15854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.621572][T18830] EXT4-fs (loop1): Ignoring removed orlov option [ 849.628934][T18830] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 849.787085][T18835] device pim6reg1 entered promiscuous mode [ 850.206012][T15854] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 850.213159][T15854] uvcvideo: No valid video chain found. [ 850.262379][T15854] usb 4-1: USB disconnect, device number 40 [ 850.579610][T18853] syz.0.4420[18853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.579651][T18853] syz.0.4420[18853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.601223][T18845] F2FS-fs (loop1): invalid crc value [ 850.622659][T18845] F2FS-fs (loop1): Found nat_bits in checkpoint [ 850.637911][T18857] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4421'. [ 850.656793][T18845] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 850.984452][T18845] handle_bad_sector: 122 callbacks suppressed [ 850.984466][T18845] attempt to access beyond end of device [ 850.984466][T18845] loop1: rw=34817, want=77952, limit=40427 [ 850.988195][T13074] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 851.047874][T18867] loop3: unable to read partition table [ 851.053400][T18867] loop3: partition table beyond EOD, truncated [ 851.059382][T18867] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 851.404692][T16534] attempt to access beyond end of device [ 851.404692][T16534] loop1: rw=524288, want=45072, limit=40427 [ 851.416119][T16534] attempt to access beyond end of device [ 851.416119][T16534] loop1: rw=0, want=45072, limit=40427 [ 851.425571][T13074] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 851.436999][T13074] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 851.445970][T13074] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 851.446976][T16534] attempt to access beyond end of device [ 851.446976][T16534] loop1: rw=2049, want=45112, limit=40427 [ 851.455675][T13074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.557358][ T1824] tipc: Left network mode [ 851.670450][T18881] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.677596][T18881] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.684735][T18881] device bridge_slave_0 entered promiscuous mode [ 851.709703][T18881] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.723030][T18881] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.733326][T18881] device bridge_slave_1 entered promiscuous mode [ 851.768690][T18861] udc-core: couldn't find an available UDC or it's busy [ 851.792331][T18861] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 851.869251][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4422'. [ 851.902467][T18881] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.909326][T18881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.916536][T18881] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.923369][T18881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.944556][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 851.953195][T16825] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.960624][T16825] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.976361][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 851.984451][T16825] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.991314][T16825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.998925][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 852.007668][T16825] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.014532][T16825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.040334][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.048480][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.057450][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.065431][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.080857][T18881] device veth0_vlan entered promiscuous mode [ 852.087977][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.096770][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.104883][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.112716][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.120955][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.128514][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.141197][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.149289][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.158365][T18881] device veth1_macvtap entered promiscuous mode [ 852.169732][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 852.177672][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 852.186475][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 852.198311][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 852.206773][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 852.245923][ T1824] device bridge_slave_1 left promiscuous mode [ 852.252034][ T1824] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.259767][ T1824] device bridge_slave_0 left promiscuous mode [ 852.266336][ T1824] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.274322][ T1824] device veth1_macvtap left promiscuous mode [ 852.388293][T18893] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 852.396573][T18893] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 852.405909][T18893] F2FS-fs (loop1): invalid crc value [ 852.412606][T18893] F2FS-fs (loop1): Found nat_bits in checkpoint [ 852.454846][T18899] syz.3.4431[18899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.454907][T18899] syz.3.4431[18899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.466864][T18893] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 852.485143][T18893] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 852.597358][T18908] EXT4-fs (loop3): Unrecognized mount option "obj_role='*" or missing value [ 853.135689][T13076] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 853.629935][T18923] syz.0.4437[18923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.629992][T18923] syz.0.4437[18923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.635602][T13076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.665098][T13076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.675140][T13076] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 853.684858][T13076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.730296][T13076] usb 3-1: config 0 descriptor?? [ 853.775656][T13074] usb 5-1: string descriptor 0 read error: -71 [ 853.783020][T13074] usb 5-1: USB disconnect, device number 52 [ 854.135561][T13074] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 854.226986][T13076] hid-steam 0003:28DE:1142.00A1: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 854.242272][T13076] hid-steam 0003:28DE:1142.00A2: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 854.315534][T13076] hid-steam 0003:28DE:1142.00A1: Steam wireless receiver connected [ 854.429488][ T2553] usb 3-1: USB disconnect, device number 37 [ 854.437658][ T2553] hid-steam 0003:28DE:1142.00A1: Steam wireless receiver disconnected [ 854.486688][T18940] EXT4-fs (loop3): Test dummy encryption mode enabled [ 854.493627][T18940] EXT4-fs (loop3): Ignoring removed orlov option [ 854.495590][T13074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.510496][T18940] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 854.511093][T13074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.548814][T13074] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 854.557902][T13074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.569741][T13074] usb 5-1: config 0 descriptor?? [ 855.225525][ T2553] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 855.485527][ T2553] usb 3-1: Using ep0 maxpacket: 32 [ 855.835600][ T2553] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 855.844596][ T2553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.852391][ T2553] usb 3-1: Product: syz [ 855.856375][ T2553] usb 3-1: Manufacturer: syz [ 855.860775][ T2553] usb 3-1: SerialNumber: syz [ 855.865877][ T2553] usb 3-1: config 0 descriptor?? [ 856.845566][T13074] usbhid 5-1:0.0: can't add hid device: -71 [ 856.851359][T13074] usbhid: probe of 5-1:0.0 failed with error -71 [ 856.863181][T13074] usb 5-1: USB disconnect, device number 53 [ 857.082753][T18982] udc-core: couldn't find an available UDC or it's busy [ 857.089799][T18982] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 857.146296][T18988] EXT4-fs (loop1): Ignoring removed orlov option [ 857.152532][T18988] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 857.167021][T18988] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 857.357795][ T24] audit: type=1400 audit(2000000113.350:3760): avc: denied { setcurrent } for pid=18987 comm="syz.1.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 857.377635][ T24] audit: type=1401 audit(2000000113.350:3761): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 857.717829][T18995] syz.4.4454[18995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.717894][T18995] syz.4.4454[18995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 858.585630][ T2553] rtl8150 3-1:0.0: couldn't reset the device [ 858.602866][ T2553] rtl8150: probe of 3-1:0.0 failed with error -5 [ 858.610417][ T2553] usb 3-1: USB disconnect, device number 38 [ 859.005554][ T2553] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 859.860043][T19027] bridge0: port 3(gretap0) entered blocking state [ 859.866337][T19027] bridge0: port 3(gretap0) entered disabled state [ 859.872996][T19027] device gretap0 entered promiscuous mode [ 859.878734][T19027] bridge0: port 3(gretap0) entered blocking state [ 859.884981][T19027] bridge0: port 3(gretap0) entered forwarding state [ 859.892750][T19027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 859.901354][T19027] udc-core: couldn't find an available UDC or it's busy [ 859.908233][T19027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 860.925523][ T2553] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 861.075541][T16827] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 861.193413][T19043] syz.0.4466[19043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.193457][T19043] syz.0.4466[19043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.345595][ T2553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.367706][ T2553] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 861.376525][ T2553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.384883][ T2553] usb 3-1: config 0 descriptor?? [ 861.515581][T16827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.526344][T16827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.535847][T16827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 861.548455][T16827] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 861.557279][T16827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.565648][T16827] usb 5-1: config 0 descriptor?? [ 861.696154][ T2553] keytouch 0003:0926:3333.00A3: fixing up Keytouch IEC report descriptor [ 861.705570][ T2553] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.00A3/input/input102 [ 861.787723][ T2553] keytouch 0003:0926:3333.00A3: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 861.898932][ T2553] usb 3-1: USB disconnect, device number 40 [ 862.045631][ T26] INFO: task syz.1.3776:16328 blocked for more than 122 seconds. [ 862.053405][ T26] Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 862.061105][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 862.066956][T16827] wacom 0003:056A:0094.00A4: unknown main item tag 0x0 [ 862.070149][ T26] task:syz.1.3776 state:D stack: 0 pid:16328 ppid: 15466 flags:0x10004004 [ 862.076428][T16827] wacom 0003:056A:0094.00A4: unknown main item tag 0x0 [ 862.085438][ T26] Call Trace: [ 862.092445][T16827] wacom 0003:056A:0094.00A4: unknown main item tag 0x0 [ 862.102071][T16827] wacom 0003:056A:0094.00A4: unknown main item tag 0x0 [ 862.109012][T16827] wacom 0003:056A:0094.00A4: unknown main item tag 0x0 [ 862.115921][T16827] wacom 0003:056A:0094.00A4: unknown main item tag 0x0 [ 862.122661][T16827] wacom 0003:056A:0094.00A4: unknown main item tag 0x0 [ 862.129674][T16827] wacom 0003:056A:0094.00A4: Using device in hidraw-only mode [ 862.138133][T16827] wacom 0003:056A:0094.00A4: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 862.143956][ T26] __schedule+0xbe6/0x1330 [ 862.154352][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 862.160251][ T26] ? __kasan_check_write+0x14/0x20 [ 862.165193][ T26] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 862.170136][ T26] ? _raw_spin_lock_irqsave+0x210/0x210 [ 862.175525][ T26] schedule+0x13d/0x1d0 [ 862.179491][ T26] rwsem_down_read_slowpath+0x81e/0x1000 [ 862.184964][ T26] ? down_write_killable+0x180/0x180 [ 862.190417][ T26] ? sync_inodes_sb+0x4c8/0x8a0 [ 862.195082][ T26] ? __kasan_check_read+0x11/0x20 [ 862.199960][ T26] ? try_to_writeback_inodes_sb+0xc0/0xc0 [ 862.205557][ T26] down_read+0xa4/0x210 [ 862.209569][ T26] ? __kasan_check_write+0x14/0x20 [ 862.214567][ T26] ? _raw_spin_lock+0xa4/0x1b0 [ 862.219643][ T26] ? __down_common+0x530/0x530 [ 862.224337][ T26] ? __put_super+0x53/0x2b0 [ 862.228687][ T26] iterate_supers+0xb3/0x1f0 [ 862.233483][ T26] ? ksys_sync+0x1d0/0x1d0 [ 862.237825][ T26] ksys_sync+0xb9/0x1d0 [ 862.241758][ T26] ? sync_filesystem+0x250/0x250 [ 862.246862][ T26] ? syscall_enter_from_user_mode+0x144/0x1a0 [ 862.252804][ T26] __do_sys_sync+0xe/0x20 [ 862.269316][ T26] do_syscall_64+0x34/0x70 [ 862.273719][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 862.280027][ T26] RIP: 0033:0x7f7f299009f9 [ 862.284336][ T26] RSP: 002b:00007f7f28580048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 862.293315][ T26] RAX: ffffffffffffffda RBX: 00007f7f29a8ef80 RCX: 00007f7f299009f9 [ 862.301273][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 862.309781][ T26] RBP: 00007f7f2996e8ee R08: 0000000000000000 R09: 0000000000000000 [ 862.317715][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.325966][ T26] R13: 000000000000000b R14: 00007f7f29a8ef80 R15: 00007ffe46f6caf8 [ 862.334156][ T26] NMI backtrace for cpu 1 [ 862.338428][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 862.347937][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 862.357830][ T26] Call Trace: [ 862.360966][ T26] dump_stack_lvl+0x1e2/0x24b [ 862.365469][ T26] ? panic+0x812/0x812 [ 862.369378][ T26] ? bfq_pos_tree_add_move+0x43b/0x43b [ 862.374673][ T26] ? sysvec_reschedule_ipi+0x83/0x160 [ 862.379885][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 862.385781][ T26] dump_stack+0x15/0x17 [ 862.389776][ T26] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 862.395590][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 862.401486][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 862.407216][ T26] watchdog+0xe5d/0xfd0 [ 862.411211][ T26] ? hungtask_pm_notify+0x50/0x50 [ 862.416068][ T26] ? __kasan_check_read+0x11/0x20 [ 862.420927][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 862.425703][ T26] kthread+0x34b/0x3d0 [ 862.429608][ T26] ? hungtask_pm_notify+0x50/0x50 [ 862.434468][ T26] ? kthread_blkcg+0xd0/0xd0 [ 862.438897][ T26] ret_from_fork+0x1f/0x30 [ 862.443263][ T26] Sending NMI from CPU 1 to CPUs 0: [ 862.448666][ C0] NMI backtrace for cpu 0 [ 862.448673][ C0] CPU: 0 PID: 19039 Comm: syz.4.4465 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 862.448680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 862.448683][ C0] RIP: 0033:0x7fc59c53d803 [ 862.448694][ C0] Code: 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 12 98 2b 00 89 f0 4c 8d 05 09 78 2b 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 <48> 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 [ 862.448699][ C0] RSP: 002b:00007ffc440bddb8 EFLAGS: 00000202 [ 862.448707][ C0] RAX: 0000000081520585 RBX: 00007fc59d33a720 RCX: ffffffff81520585 [ 862.448712][ C0] RDX: 0000000000000585 RSI: ffffffff81520585 RDI: 00000000000000ff [ 862.448717][ C0] RBP: 0000000000000000 R08: 00007fc59c7f5000 R09: 00007fc59c7f7000 [ 862.448723][ C0] R10: 0000000081520589 R11: 00000000000000ff R12: ffffffff8152062c [ 862.448728][ C0] R13: 00007fc59c80af40 R14: 0000000000000008 R15: 00000000000617a6 [ 862.448732][ C0] FS: 0000555556a26500 GS: 0000000000000000 [ 862.549860][ T2553] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 862.825504][ T2553] usb 3-1: Using ep0 maxpacket: 8 [ 862.874017][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4469'. [ 862.965652][ T2553] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.975374][ T2553] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 862.985004][ T2553] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 862.994769][ T2553] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 863.004330][ T2553] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 863.054475][T13076] usb 5-1: USB disconnect, device number 54 [ 863.175587][ T2553] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.184600][ T2553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.192904][ T2553] usb 3-1: Product: syz [ 863.197135][ T2553] usb 3-1: Manufacturer: syz [ 863.201540][ T2553] usb 3-1: SerialNumber: syz [ 863.212449][T19061] overlayfs: invalid origin (0000007900c7000000000010000000000000000000000000000000000000000000000000000000000000000000000000) [ 863.246480][ T24] audit: type=1326 audit(2000000119.240:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.269935][ T24] audit: type=1326 audit(2000000119.240:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.293943][ T24] audit: type=1326 audit(2000000119.240:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.317443][ T24] audit: type=1326 audit(2000000119.240:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.341084][ T24] audit: type=1326 audit(2000000119.240:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.364879][ T24] audit: type=1326 audit(2000000119.240:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.388419][ T24] audit: type=1326 audit(2000000119.240:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.412163][ T24] audit: type=1326 audit(2000000119.240:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.435819][ T24] audit: type=1326 audit(2000000119.240:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.459670][ T24] audit: type=1326 audit(2000000119.240:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.4.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59c67c9f9 code=0x7ffc0000 [ 863.765611][ T2553] cdc_ncm 3-1:1.0: bind() failure [ 863.771214][ T2553] cdc_ncm 3-1:1.1: bind() failure [ 863.777328][ T2553] usb 3-1: USB disconnect, device number 41 [ 864.214149][T19089] syz.4.4478[19089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 864.214213][T19089] syz.4.4478[19089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 864.600550][T18881] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f) [ 864.620074][T18881] FAT-fs (loop1): Filesystem has been set read-only [ 864.627327][T18881] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f) [ 864.666539][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.673374][T19099] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.680712][T19099] device bridge_slave_0 entered promiscuous mode [ 864.687522][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.694410][T19099] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.702128][T19099] device bridge_slave_1 entered promiscuous mode [ 864.761798][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.768658][T19099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.775772][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.782628][T19099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.825766][T19104] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.832623][T19104] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.840289][T19104] device bridge_slave_0 entered promiscuous mode [ 864.848977][T19104] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.855905][T19104] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.862975][T19104] device bridge_slave_1 entered promiscuous mode [ 864.885013][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.892415][ T2553] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.899589][ T2553] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.917390][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 864.925351][ T2553] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.932198][ T2553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.939913][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 864.948098][ T2553] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.954923][ T2553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.978204][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 864.990579][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.017471][ T110] bridge0: port 3(gretap0) entered disabled state [ 865.024367][ T110] device gretap0 left promiscuous mode [ 865.029866][ T110] bridge0: port 3(gretap0) entered disabled state [ 865.052157][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 865.060928][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 865.075941][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 865.085045][T16827] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.091911][T16827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.135065][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 865.143225][T16827] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.150097][T16827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.159662][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 865.172516][T19099] device veth0_vlan entered promiscuous mode [ 865.182974][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 865.191176][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 865.199048][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 865.255025][T19111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4485'. [ 865.268887][T19099] device veth1_macvtap entered promiscuous mode [ 865.300186][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 865.309598][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 865.321563][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 865.474160][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 865.482192][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.498408][T16828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 865.511251][T19104] device veth0_vlan entered promiscuous mode [ 865.517900][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 865.526696][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 865.534597][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 865.574071][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 865.588764][T19128] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19128 comm=syz.3.4482 [ 865.601914][T19128] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19128 comm=syz.3.4482 [ 865.629307][ T110] device bridge_slave_1 left promiscuous mode [ 865.636489][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.648801][ T110] device bridge_slave_0 left promiscuous mode [ 865.655018][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.668824][ T110] device veth1_macvtap left promiscuous mode [ 865.675635][ T110] device veth0_vlan left promiscuous mode [ 865.681616][T19129] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19129 comm=syz.3.4482 [ 865.694540][T19129] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5 sclass=netlink_xfrm_socket pid=19129 comm=syz.3.4482 [ 865.825546][T15854] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 865.839618][T19104] device veth1_macvtap entered promiscuous mode [ 865.850200][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 865.858331][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 865.868726][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 865.877182][T16827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 866.156651][T15854] usb 5-1: too many configurations: 29, using maximum allowed: 8 [ 866.287657][T15854] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 866.295152][T15854] usb 5-1: can't read configurations, error -61 [ 866.306075][T19140] loop1: unable to read partition table [ 866.311576][T19140] loop1: partition table beyond EOD, truncated [ 866.317755][T19140] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 866.380068][ T93] loop1: unable to read partition table [ 866.386083][ T93] loop1: partition table beyond EOD, truncated [ 866.475603][T15854] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 866.618259][T16827] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 866.775619][T15854] usb 5-1: too many configurations: 29, using maximum allowed: 8 [ 866.855145][T19149] syz.1.4493[19149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.855188][T19149] syz.1.4493[19149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.905618][T15854] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 866.924424][T15854] usb 5-1: can't read configurations, error -61 [ 866.930696][T15854] usb usb5-port1: attempt power cycle [ 867.035620][T16827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 867.245716][T16827] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 867.254695][T16827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.262508][T16827] usb 3-1: Product: syz [ 867.266479][T16827] usb 3-1: Manufacturer: syz [ 867.270886][T16827] usb 3-1: SerialNumber: syz [ 867.386868][T15854] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 867.535899][T16827] usbhid 3-1:1.0: can't add hid device: -22 [ 867.541739][T16827] usbhid: probe of 3-1:1.0 failed with error -22 [ 867.625641][T15854] usb 5-1: too many configurations: 29, using maximum allowed: 8 [ 867.736856][ T2553] usb 3-1: USB disconnect, device number 42 [ 867.745918][T15854] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 867.753416][T15854] usb 5-1: can't read configurations, error -61 [ 867.836269][T19159] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 867.844004][T19159] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 867.853096][T19159] F2FS-fs (loop1): invalid crc value [ 867.859597][T19159] F2FS-fs (loop1): Found nat_bits in checkpoint [ 867.881780][T19159] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 867.888775][T19159] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 867.905537][T15854] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 868.465592][T15854] usb 5-1: too many configurations: 29, using maximum allowed: 8 [ 868.579446][T15854] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 868.586924][T15854] usb 5-1: can't read configurations, error -71 [ 868.593027][T15854] usb usb5-port1: unable to enumerate USB device [ 868.955987][T19183] exfat: Deprecated parameter 'utf8' [ 868.965559][T19183] exfat: Deprecated parameter 'namecase' [ 868.971047][T19183] exfat: Deprecated parameter 'utf8' [ 868.975555][T15854] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 869.036958][T19183] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 869.057564][T19183] syz.1.4500[19183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.057625][T19183] syz.1.4500[19183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.481410][T19192] udc-core: couldn't find an available UDC or it's busy [ 869.499824][T19192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 869.675637][T15854] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 869.707294][T15854] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 869.716759][T15854] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.726041][T15854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.845516][ T2553] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 870.006295][T19175] udc-core: couldn't find an available UDC or it's busy [ 870.013112][T19175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 870.022304][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4499'. [ 870.235574][ T2553] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.245836][ T2553] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.325604][ T2553] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 870.334520][ T2553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 870.342305][ T2553] usb 3-1: SerialNumber: syz [ 870.458634][T19203] syz.3.4506[19203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.458675][T19203] syz.3.4506[19203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.636233][ T2553] usb 3-1: 0:2 : does not exist [ 870.691384][ T2553] usb 3-1: USB disconnect, device number 43 [ 870.906179][ T525] udevd[525]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 873.145458][ C1] sched: RT throttling activated [ 971.525420][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 971.531844][ C1] rcu: 1-...!: (10008 ticks this GP) idle=4ea/1/0x4000000000000000 softirq=87154/87155 fqs=35 last_accelerate: deee/0604 dyntick_enabled: 1 [ 971.545981][ C1] (t=10000 jiffies g=109321 q=331) [ 971.551009][ C1] rcu: rcu_preempt kthread starved for 9929 jiffies! g109321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 971.562333][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 971.572155][ C1] rcu: RCU grace-period kthread stack dump: [ 971.577953][ C1] task:rcu_preempt state:I stack: 0 pid: 13 ppid: 2 flags:0x10004000 [ 971.587167][ C1] Call Trace: [ 971.590294][ C1] __schedule+0xbe6/0x1330 [ 971.594537][ C1] ? release_firmware_map_entry+0x18d/0x18d [ 971.600262][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 971.605561][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 971.610245][ C1] schedule+0x13d/0x1d0 [ 971.614237][ C1] schedule_timeout+0x18c/0x360 [ 971.618926][ C1] ? prepare_to_swait_event+0x39f/0x3e0 [ 971.624305][ C1] ? console_conditional_schedule+0x10/0x10 [ 971.630039][ C1] ? run_local_timers+0x160/0x160 [ 971.635512][ C1] rcu_gp_kthread+0xefc/0x23a0 [ 971.640107][ C1] ? dyntick_save_progress_counter+0x1c0/0x1c0 [ 971.646099][ C1] ? rcu_barrier_callback+0x50/0x50 [ 971.651132][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 971.655834][ C1] ? __kasan_check_read+0x11/0x20 [ 971.660678][ C1] ? __kthread_parkme+0xb9/0x1c0 [ 971.665454][ C1] kthread+0x34b/0x3d0 [ 971.669356][ C1] ? rcu_barrier_callback+0x50/0x50 [ 971.674388][ C1] ? kthread_blkcg+0xd0/0xd0 [ 971.678816][ C1] ret_from_fork+0x1f/0x30 [ 971.683093][ C1] NMI backtrace for cpu 1 [ 971.687238][ C1] CPU: 1 PID: 19214 Comm: syz.3.4509 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 971.697042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 971.706932][ C1] Call Trace: [ 971.710057][ C1] [ 971.712756][ C1] dump_stack_lvl+0x1e2/0x24b [ 971.717264][ C1] ? panic+0x812/0x812 [ 971.721171][ C1] ? bfq_pos_tree_add_move+0x43b/0x43b [ 971.726475][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 971.731758][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 971.736451][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 971.742467][ C1] dump_stack+0x15/0x17 [ 971.746438][ C1] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 971.752260][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 971.758155][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 971.763885][ C1] rcu_dump_cpu_stacks+0x199/0x2b0 [ 971.768829][ C1] rcu_sched_clock_irq+0xf8a/0x1890 [ 971.773861][ C1] ? rcutree_dead_cpu+0x340/0x340 [ 971.778726][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 971.783756][ C1] update_process_times+0x198/0x200 [ 971.788792][ C1] tick_sched_timer+0x188/0x240 [ 971.793475][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 971.798859][ C1] __hrtimer_run_queues+0x3d7/0xa50 [ 971.803894][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 971.808841][ C1] ? clockevents_program_event+0x214/0x2c0 [ 971.814481][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 971.820385][ C1] hrtimer_interrupt+0x39a/0x8b0 [ 971.825161][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 971.830887][ C1] asm_call_irq_on_stack+0xf/0x20 [ 971.835743][ C1] [ 971.838524][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 971.843992][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 971.849808][ C1] RIP: 0010:preempt_count_add+0x6c/0x1a0 [ 971.855274][ C1] Code: b9 7e 48 c7 c0 00 b9 08 87 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 f2 00 00 00 83 3d ed aa bf 05 00 75 11 65 8b 05 70 5f b9 7e <0f> b6 c0 3d f5 00 00 00 73 6e 65 8b 05 5f 5f b9 7e 25 ff ff ff 7f [ 971.874803][ C1] RSP: 0018:ffffc90001aa6978 EFLAGS: 00000246 [ 971.880703][ C1] RAX: 0000000000000402 RBX: 0000000000000201 RCX: ffffffff8708b903 [ 971.888515][ C1] RDX: ffffc900047ba000 RSI: 000000000003ffff RDI: 0000000000000201 [ 971.896328][ C1] RBP: ffffc90001aa6990 R08: ffffffff849904d1 R09: ffffed102711e9f1 [ 971.904136][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000354d34 [ 971.911957][ C1] R13: ffff8881388f4f88 R14: 00000000c2ba78d1 R15: dffffc0000000000 [ 971.919857][ C1] ? tipc_sk_lookup+0x511/0x650 [ 971.924540][ C1] _raw_spin_trylock_bh+0x6e/0x190 [ 971.929486][ C1] ? _raw_spin_trylock+0x1a0/0x1a0 [ 971.934534][ C1] tipc_sk_rcv+0x4c2/0x1e30 [ 971.938891][ C1] ? __stack_depot_save+0x468/0x4d0 [ 971.943918][ C1] ? kasan_set_track+0x5d/0x70 [ 971.948507][ C1] ? kasan_set_track+0x4b/0x70 [ 971.953108][ C1] ? kasan_set_free_info+0x23/0x40 [ 971.958053][ C1] ? __kasan_slab_free+0x11/0x20 [ 971.962824][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 971.968211][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 971.972895][ C1] ? kfree_skbmem+0x104/0x170 [ 971.977412][ C1] ? tipc_sk_rcv+0x1b52/0x1e30 [ 971.982016][ C1] ? tipc_node_xmit+0x34b/0xe30 [ 971.986695][ C1] ? tipc_sk_filter_rcv+0x1da8/0x3e00 [ 971.991901][ C1] ? tipc_sk_rcv+0x8a1/0x1e30 [ 971.996417][ C1] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 972.001625][ C1] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 972.006744][ C1] ? __fput+0x33d/0x7b0 [ 972.010736][ C1] ? ____fput+0x15/0x20 [ 972.014732][ C1] ? __skb_queue_purge+0x180/0x180 [ 972.019679][ C1] ? debug_smp_processor_id+0x17/0x20 [ 972.024886][ C1] tipc_node_xmit+0x34b/0xe30 [ 972.029404][ C1] ? __kasan_slab_free+0x11/0x20 [ 972.034172][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 972.039554][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 972.044241][ C1] ? kfree_skbmem+0x104/0x170 [ 972.048754][ C1] tipc_node_xmit_skb+0x153/0x1b0 [ 972.053614][ C1] ? __skb_queue_purge+0x180/0x180 [ 972.058562][ C1] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 972.063768][ C1] tipc_sk_rcv+0x1c0b/0x1e30 [ 972.068194][ C1] ? tipc_sk_filter_rcv+0x1192/0x3e00 [ 972.073486][ C1] ? tipc_data_ready+0x97/0xa0 [ 972.078089][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 972.083320][ C1] ? __skb_queue_purge+0x180/0x180 [ 972.088248][ C1] tipc_node_xmit+0x34b/0xe30 [ 972.092757][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 972.097802][ C1] ? __kernel_text_address+0x9b/0x110 [ 972.102998][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 972.108384][ C1] ? __kasan_check_write+0x14/0x20 [ 972.113326][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 972.118621][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 972.123311][ C1] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 972.128352][ C1] ? tipc_sk_dump+0xf50/0xf50 [ 972.132861][ C1] ? __kasan_check_write+0x14/0x20 [ 972.137802][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 972.142664][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 972.147365][ C1] tipc_sk_rcv+0x8a1/0x1e30 [ 972.151696][ C1] ? __skb_queue_purge+0x180/0x180 [ 972.156638][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 972.161844][ C1] tipc_node_xmit+0x34b/0xe30 [ 972.166360][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 972.171740][ C1] tipc_node_distr_xmit+0x36a/0x4d0 [ 972.176774][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 972.181808][ C1] ? __kasan_check_write+0x14/0x20 [ 972.186757][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 972.192050][ C1] ? __tipc_shutdown+0xe7c/0x1510 [ 972.196923][ C1] tipc_sk_backlog_rcv+0x18b/0x210 [ 972.201865][ C1] ? tipc_sk_timeout+0xab0/0xab0 [ 972.206633][ C1] __release_sock+0x148/0x410 [ 972.211143][ C1] release_sock+0x65/0x1b0 [ 972.215396][ C1] tipc_release+0xb6b/0x1440 [ 972.219825][ C1] sock_close+0xdf/0x270 [ 972.223900][ C1] ? sock_mmap+0xa0/0xa0 [ 972.227984][ C1] __fput+0x33d/0x7b0 [ 972.231798][ C1] ____fput+0x15/0x20 [ 972.235631][ C1] task_work_run+0x129/0x190 [ 972.240067][ C1] exit_to_user_mode_loop+0xbf/0xd0 [ 972.245094][ C1] syscall_exit_to_user_mode+0xa2/0x1a0 [ 972.250472][ C1] do_syscall_64+0x40/0x70 [ 972.254719][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 972.260445][ C1] RIP: 0033:0x7f34e10a09f9 [ 972.264697][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.284139][ C1] RSP: 002b:00007f34dfd20048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.292381][ C1] RAX: 00000000000203a0 RBX: 00007f34e122ef80 RCX: 00007f34e10a09f9 [ 972.300194][ C1] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 972.308012][ C1] RBP: 00007f34e110e8ee R08: 0000000000000000 R09: 0000000000000000 [ 972.316510][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.324318][ C1] R13: 000000000000000b R14: 00007f34e122ef80 R15: 00007ffc37a3c968 [ 1012.920311][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz.3.4509:19213] [ 1012.928535][ C0] Modules linked in: [ 1012.932274][ C0] CPU: 0 PID: 19213 Comm: syz.3.4509 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 1012.942076][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1012.951982][ C0] RIP: 0010:kvm_wait+0xfc/0x150 [ 1012.956674][ C0] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 15 56 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 06 56 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04 [ 1012.976709][ C0] RSP: 0018:ffffc90000cb79e0 EFLAGS: 00000246 [ 1012.982611][ C0] RAX: 0000000000000003 RBX: 1ffff92000196f40 RCX: ffffffff8150b334 [ 1012.990421][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc90000cb7a20 [ 1012.998234][ C0] RBP: ffffc90000cb7a90 R08: dffffc0000000000 R09: ffffed102711e9f2 [ 1013.006045][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1013.013856][ C0] R13: ffff8881388f4f88 R14: 0000000000000003 R15: 0000000000000246 [ 1013.021676][ C0] FS: 00005555568c1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1013.030433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.036865][ C0] CR2: 0000555555c1f4a8 CR3: 0000000126fa8000 CR4: 00000000003526b0 [ 1013.044674][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1013.052481][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1013.060285][ C0] Call Trace: [ 1013.063412][ C0] [ 1013.066125][ C0] ? show_regs+0x58/0x60 [ 1013.070191][ C0] ? watchdog_timer_fn+0x471/0x590 [ 1013.075134][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 1013.080256][ C0] ? __hrtimer_run_queues+0x3d7/0xa50 [ 1013.085466][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 1013.090498][ C0] ? clockevents_program_event+0x214/0x2c0 [ 1013.096138][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 1013.102041][ C0] ? hrtimer_interrupt+0x39a/0x8b0 [ 1013.106993][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1013.112902][ C0] ? asm_call_irq_on_stack+0xf/0x20 [ 1013.117923][ C0] [ 1013.120700][ C0] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 1013.126343][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1013.132333][ C0] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 1013.138407][ C0] ? kvm_wait+0xfc/0x150 [ 1013.142486][ C0] ? asm_common_interrupt+0x1e/0x40 [ 1013.147519][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 1013.152468][ C0] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 1013.158543][ C0] __pv_queued_spin_lock_slowpath+0x72f/0xc70 [ 1013.164449][ C0] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 1013.170697][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 1013.175469][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1013.180501][ C0] ? memset+0x35/0x40 [ 1013.184319][ C0] lock_sock_nested+0x92/0x300 [ 1013.188921][ C0] ? locks_remove_posix+0x610/0x610 [ 1013.193952][ C0] ? sock_init_data+0xc0/0xc0 [ 1013.198469][ C0] ? __kasan_check_read+0x11/0x20 [ 1013.203335][ C0] tipc_release+0x57/0x1440 [ 1013.207670][ C0] sock_close+0xdf/0x270 [ 1013.211745][ C0] ? sock_mmap+0xa0/0xa0 [ 1013.215827][ C0] __fput+0x33d/0x7b0 [ 1013.219645][ C0] ____fput+0x15/0x20 [ 1013.223466][ C0] task_work_run+0x129/0x190 [ 1013.227892][ C0] exit_to_user_mode_loop+0xbf/0xd0 [ 1013.232925][ C0] syscall_exit_to_user_mode+0xa2/0x1a0 [ 1013.238305][ C0] do_syscall_64+0x40/0x70 [ 1013.242563][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1013.248285][ C0] RIP: 0033:0x7f34e10a09f9 [ 1013.252541][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.271987][ C0] RSP: 002b:00007ffc37a3cac8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1013.280224][ C0] RAX: 0000000000000000 RBX: 00007f34e1230a80 RCX: 00007f34e10a09f9 [ 1013.288036][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1013.295847][ C0] RBP: 00007f34e1230a80 R08: 0000000000000006 R09: 00007ffc37a3cdaf [ 1013.303659][ C0] R10: 00000000003ffbdc R11: 0000000000000246 R12: 00000000000d4f2b [ 1013.311469][ C0] R13: 00007ffc37a3cbc0 R14: 00007ffc37a3cbe0 R15: ffffffffffffffff [ 1013.319289][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1013.325158][ C1] NMI backtrace for cpu 1 [ 1013.325165][ C1] CPU: 1 PID: 19214 Comm: syz.3.4509 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 1013.325171][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1013.325175][ C1] RIP: 0010:_raw_spin_lock_bh+0xc0/0x1b0 [ 1013.325186][ C1] Code: fc 4c 89 ff be 04 00 00 00 e8 8c 13 f6 fc 43 0f b6 04 26 84 c0 0f 85 aa 00 00 00 8b 44 24 20 b9 01 00 00 00 f0 41 0f b1 4d 00 <75> 33 48 c7 04 24 0e 36 e0 45 49 c7 04 1c 00 00 00 00 65 48 8b 04 [ 1013.325191][ C1] RSP: 0018:ffffc90001aa69a0 EFLAGS: 00000246 [ 1013.325199][ C1] RAX: 0000000000000000 RBX: 1ffff92000354d34 RCX: 0000000000000001 [ 1013.325205][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90001aa69c0 [ 1013.325210][ C1] RBP: ffffc90001aa6a30 R08: dffffc0000000000 R09: 0000000000000003 [ 1013.325215][ C1] R10: fffff52000354d38 R11: dffffc0000000001 R12: dffffc0000000000 [ 1013.325220][ C1] R13: ffffc90001aa6e94 R14: 1ffff92000354d38 R15: ffffc90001aa69c0 [ 1013.325225][ C1] FS: 00007f34dfd206c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1013.325230][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.325235][ C1] CR2: 0000000020003000 CR3: 0000000126fa8000 CR4: 00000000003526a0 [ 1013.325240][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1013.325245][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1013.325247][ C1] Call Trace: [ 1013.325250][ C1] [ 1013.325253][ C1] ? show_regs+0x58/0x60 [ 1013.325257][ C1] ? nmi_cpu_backtrace+0x133/0x160 [ 1013.325261][ C1] ? _raw_spin_lock_bh+0xc0/0x1b0 [ 1013.325264][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1013.325268][ C1] ? nmi_handle+0xa8/0x280 [ 1013.325271][ C1] ? _raw_spin_lock_bh+0xc0/0x1b0 [ 1013.325274][ C1] ? default_do_nmi+0x69/0x160 [ 1013.325278][ C1] ? exc_nmi+0xad/0x100 [ 1013.325281][ C1] ? end_repeat_nmi+0x16/0x31 [ 1013.325285][ C1] ? _raw_spin_lock_bh+0xc0/0x1b0 [ 1013.325288][ C1] ? _raw_spin_lock_bh+0xc0/0x1b0 [ 1013.325292][ C1] ? _raw_spin_lock_bh+0xc0/0x1b0 [ 1013.325294][ C1] [ 1013.325298][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1013.325303][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x17 [ 1013.325306][ C1] tipc_sk_rcv+0x2d6/0x1e30 [ 1013.325310][ C1] ? __stack_depot_save+0x468/0x4d0 [ 1013.325312][ C1] ? kasan_set_track+0x5d/0x70 [ 1013.325315][ C1] ? kasan_set_track+0x4b/0x70 [ 1013.325318][ C1] ? kasan_set_free_info+0x23/0x40 [ 1013.325321][ C1] ? __kasan_slab_free+0x11/0x20 [ 1013.325324][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 1013.325326][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 1013.325329][ C1] ? kfree_skbmem+0x104/0x170 [ 1013.325331][ C1] ? tipc_sk_rcv+0x1b52/0x1e30 [ 1013.325334][ C1] ? tipc_node_xmit+0x34b/0xe30 [ 1013.325336][ C1] ? tipc_sk_filter_rcv+0x1da8/0x3e00 [ 1013.325339][ C1] ? tipc_sk_rcv+0x8a1/0x1e30 [ 1013.325342][ C1] ? tipc_node_distr_xmit+0x36a/0x4d0 [ 1013.325344][ C1] ? tipc_sk_backlog_rcv+0x18b/0x210 [ 1013.325347][ C1] ? __fput+0x33d/0x7b0 [ 1013.325349][ C1] ? ____fput+0x15/0x20 [ 1013.325352][ C1] ? __skb_queue_purge+0x180/0x180 [ 1013.325355][ C1] ? debug_smp_processor_id+0x17/0x20 [ 1013.325357][ C1] tipc_node_xmit+0x34b/0xe30 [ 1013.325360][ C1] ? __kasan_slab_free+0x11/0x20 [ 1013.325363][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 1013.325366][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 1013.325368][ C1] ? kfree_skbmem+0x104/0x170 [ 1013.325371][ C1] tipc_node_xmit_skb+0x153/0x1b0 [ 1013.325374][ C1] ? __skb_queue_purge+0x180/0x180 [ 1013.325379][ C1] ? trace_tipc_sk_rej_msg+0x2b/0x6f0 [ 1013.325381][ C1] tipc_sk_rcv+0x1c0b/0x1e30 [ 1013.325384][ C1] ? tipc_sk_filter_rcv+0x1192/0x3e00 [ 1013.325387][ C1] ? tipc_data_ready+0x97/0xa0 [ 1013.325390][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 1013.325392][ C1] ? __skb_queue_purge+0x180/0x180 [ 1013.325395][ C1] tipc_node_xmit+0x34b/0xe30 [ 1013.325397][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 1013.325400][ C1] ? __kernel_text_address+0x9b/0x110 [ 1013.325403][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 1013.325406][ C1] ? __kasan_check_write+0x14/0x20 [ 1013.325409][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1013.325412][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 1013.325415][ C1] tipc_sk_filter_rcv+0x1da8/0x3e00 [ 1013.325417][ C1] ? tipc_sk_dump+0xf50/0xf50 [ 1013.325420][ C1] ? __kasan_check_write+0x14/0x20 [ 1013.325422][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1013.325425][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 1013.325428][ C1] tipc_sk_rcv+0x8a1/0x1e30 [ 1013.325430][ C1] ? __skb_queue_purge+0x180/0x180 [ 1013.325433][ C1] ? tipc_sk_filter_rcv+0x3583/0x3e00 [ 1013.325436][ C1] tipc_node_xmit+0x34b/0xe30 [ 1013.325438][ C1] ? tipc_node_get_linkname+0x190/0x190 [ 1013.325441][ C1] tipc_node_distr_xmit+0x36a/0x4d0 [ 1013.325444][ C1] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 1013.325446][ C1] ? __kasan_check_write+0x14/0x20 [ 1013.325449][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1013.325452][ C1] ? __tipc_shutdown+0xe7c/0x1510 [ 1013.325454][ C1] tipc_sk_backlog_rcv+0x18b/0x210 [ 1013.325457][ C1] ? tipc_sk_timeout+0xab0/0xab0 [ 1013.325460][ C1] __release_sock+0x148/0x410 [ 1013.325462][ C1] release_sock+0x65/0x1b0 [ 1013.325465][ C1] tipc_release+0xb6b/0x1440 [ 1013.325467][ C1] sock_close+0xdf/0x270 [ 1013.325469][ C1] ? sock_mmap+0xa0/0xa0 [ 1013.325472][ C1] __fput+0x33d/0x7b0 [ 1013.325474][ C1] ____fput+0x15/0x20 [ 1013.325476][ C1] task_work_run+0x129/0x190 [ 1013.325479][ C1] exit_to_user_mode_loop+0xbf/0xd0 [ 1013.325482][ C1] syscall_exit_to_user_mode+0xa2/0x1a0 [ 1013.325484][ C1] do_syscall_64+0x40/0x70 [ 1013.325487][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1013.325490][ C1] RIP: 0033:0x7f34e10a09f9 [ 1013.325498][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.325501][ C1] RSP: 002b:00007f34dfd20048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1013.325507][ C1] RAX: 00000000000203a0 RBX: 00007f34e122ef80 RCX: 00007f34e10a09f9 [ 1013.325511][ C1] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1013.325514][ C1] RBP: 00007f34e110e8ee R08: 0000000000000000 R09: 0000000000000000 [ 1013.325518][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.325522][ C1] R13: 000000000000000b R14: 00007f34e122ef80 R15: 00007ffc37a3c968