last executing test programs: 17.997760079s ago: executing program 3 (id=3514): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000001a00)=ANY=[], 0x1, 0x1dd, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0x2000000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 17.037707257s ago: executing program 3 (id=3518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000080000dcea050843dd3cf736ef0ee30d26a020448ac14db286dca438997fdcc2fad37e0b1a1f60eaf7bd9850988789f94e9a4b5e562533e0049f517629d548d50b66b441d0d83eb83faecee9758d7fca6c019411806c9a65b59fadcaa0a8c2050c3bfc950bf1c9639474f5e03f087d1a5f810dc1d4e715341790fd7af68b324dff156d58d505d65afda48f0722934e6958cecddcc7ad20500f3eaa0121bf24a22fc690bb86a320bd81d68c84d04e471b0d0096728f4f2f72af481f078b34dd2392a994857f92f71d3d69df47815911d9f20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001418110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r4}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r7}, 0x69) 17.009640409s ago: executing program 3 (id=3519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000840)=""/253, 0x3a, 0xfd, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="ddcb1db20e8d137021070fdf7c7d3cff9d985ee4a03a37ea5227e5733547c0598d3b7336f8433f5291b738878e89e75be12930f04484ed90c3e2c0849de5db093391"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x49c09af425efe604, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) accept$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000440)=0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") 16.118724021s ago: executing program 3 (id=3523): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="0918db7152848a841b85612c6b"]) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0xae) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 15.224914193s ago: executing program 3 (id=3528): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x138) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 14.778912414s ago: executing program 4 (id=3529): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc836], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, 0x45c) r4 = dup(r3) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) sendfile(r8, r7, 0x0, 0xc) sendfile(r7, r8, 0x0, 0x3) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x5514, &(0x7f0000000f00)="$eJzs3E1vG8UbAPBx0iZp03//EeLArStVSIlUW3FeKrgFaMWLSBXxcuAEju1Ybm1vFDtOyIkDR8SBb4JA4sSRz8CBMzfEAcQNqcg7E9TwIoHixA35/aTtszOeffzMqko0s9EG4NJayH75qRRuhmshhOkQwo0QivNSOgobMTwXQrgVQph64iil/t87ZkII10MIN0fJY85S+uizO8Pb6z++8fPX385emf/8q+8mN2tg0p4PIXR34/lBN8a8FePD1F8btovYXRumGD/oPkrtPMaD5naR4aB2PK5WxNVWHJ/v7vdHcadTq49iq71T9O/24hf2h63jPMUFD2t7RbvR3C5iu58XsXUU6zo8ij/bjvqDmKeR8n1YpA+DwXGM/c3DZpzP7qMi1nuD1B/z5o3m4SgOU0xfF+p5p1HUsX2aO/10e7Pd2z/Mhs29fjvvZeuV6guV6t1ydS9vNAfNtXKt27i7li22OqNh5UGz1t1o5Xmr06zU8+5Sttiq18vVarZ4r7ndrvWyarWyWlkury+lszvZqw/ezTqNbHEUX2739gftTj/byfeyeMVStlJZfXEpu13N3t7cyrbeun9/c+ud9++99+ClzddfSYP+VFa2uLK8slKuLpdXqkvnOf+5MM75j37X/6v5f5yKHuP84VRKky4A4OKx/gcm4aKv/4P1/1hY/1/a+T9OTncDudys/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq3vr37xWnGyENvzqf9/qeuZ1C6FEKZCCI//wnSYOZFzOo2/+jfjr/6hhm9KocgwumY2HddDCBvp+PX/Z30XAAAA4L/ry49ufRpX6/GfhUkXxHmKmzZTNz4YU75iy2fhhzFkCWmzKTx7+qqi0f/vK+FwTNmKDay5uTFlK7bcrowp2T8zfSLMPRFKMUwdj5w517oAAICzdHIlcL6rEAAAAM7TJ5MugMkonrSmv8VPj/lmY0gPBK+daAEAAAAXUGnSBQAAAABnrlj/n9X7/+a9/w8AAACeCvH9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bs7d5OTOhQFAPi00Pd4P0ZinLsVZ7AMl+DQoWErLAG34AZYA85cggFDe1ExGEz6F8n3Je3lNs3hlNDBObcpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KanYjF9uL8a1Y2z3tTTzNUAAAAAh6yKxbT8MK7m/9Lxs3ToIs2ziMgj4lDtPohfezEHKU7xxfnFpxweI8oI2+/4nba/EXGdtpfztn8FAAAAOF3L2XxSVevVbtx3QnSpatrk/28aipdFRDF+bihavt1dfuvUzfH+0Pb/PYy7+mmVygZW7UdmdsqW27CpaMcN0u3+Now+DFk15N2lAwAAdGW/EuiwCgEAAKBjt30nQD+y2C1l7taCyyfv3xcE/+zNAAAAgB8o6zsBAAAAoHVl/e/9fwAAAHDaqvf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZVsZguZ/NJ3TjrTT3NXA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8sj/vKAzDYBAGN4ny6oQu4Pvf0izYrVs3MyD4+LcSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCzPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxc/++cVNxAMC/Z5+vtIAIAWUIQlRigIWm19LSlQVFDPwJSFF6LYErP9oMtKqQsrChzF0QjAghgcLWf6SVupStQ4YiMTGA7LOT16MSB1Xsa/L5SM/va8vx+z4nivL1cw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaOy+ux/n5WZhEmf1sTsPb66X/d2pvnR7+95y2cq412bST4dX053eUneJAAAAcHTkTX0fMYhiZ7UMsoWq/i+ac8qa/7vnJ3FTz0/X/U3f1P5l+/WXBy/vDbQwGae86KWN8ej0P1PpH+A059oL/3pGv7rz1bOXvPqGZO9vvbRbVPez9019UhHHDjpTAOD/OtX0ddD8PVT2wy4TA+DI6CeF9/26/s8Xus0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA2DrXi2iXsRsdzfj0t3H95cr/qp/dvb95abdv7Wre30muUlioi4tDEenW5rIk+Ba9dvfLI2Ho+uth+8FhHdjV4HH85wTkSXGQqeNMjqn/XZvupkRHSfc/dBx7+YAAA4dIq6lXX9/WJntTzWW4z46/tH6/83kjjS+n+qT+v/Bx+dv5OOldb/w9ZmOP9WNq98vnLt+o23Nq6sXR5dHn369pnhO8OzF86du7BSPStZ8cQEAACAJzOoW1r/Z4sRu1Pr/yeSOGas/7/4dvhVOlau/n+s/UW/rjMBAAA42l48+cfvvccc7w0G8eXa5ubV4WS7t39msu0g1f/sWN3S+j9f7DorAAAAoA27W71H1v8vJnHMuP7/3A+v/JReM4+I4/X6/6n1z8YX25tOR/6c6aw2/p34wKcKAADAXDtet3T9v6je/8/2XnnIIuLN1ydx/TGAM9X/+Xtf/5iOlb7/f7a9Kc6lbGlyP6p+KaK/1HVGAAAAHGbP1K0s9n8rdlY//vnEBwPv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07e8AAAD//zwaQfU=") openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) 12.934436843s ago: executing program 4 (id=3532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x0, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x68030000, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) 12.933846893s ago: executing program 4 (id=3533): syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x7) sendto$inet(r2, &(0x7f0000001740)="cb", 0x1, 0x8001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x219}], 0x1}}], 0x1, 0x4008095) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 11.591891316s ago: executing program 3 (id=3539): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f00000008c0)}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800008, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() getpriority(0x2, r5) (async) sched_setaffinity(0x0, 0xfffffffffffffea9, &(0x7f0000000240)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x40000000, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070000000000000000ac1e000100000000001414aa000000000000000000000000000000000000000002000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) sysinfo(0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x20000400) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 11.128751839s ago: executing program 4 (id=3542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000080000dcea050843dd3cf736ef0ee30d26a020448ac14db286dca438997fdcc2fad37e0b1a1f60eaf7bd9850988789f94e9a4b5e562533e0049f517629d548d50b66b441d0d83eb83faecee9758d7fca6c019411806c9a65b59fadcaa0a8c2050c3bfc950bf1c9639474f5e03f087d1a5f810dc1d4e715341790fd7af68b324dff156d58d505d65afda48f0722934e6958cecddcc7ad20500f3eaa0121bf24a22fc690bb86a320bd81d68c84d04e471b0d0096728f4f2f72af481f078b34dd2392a994857f92f71d3d69df47815911d9f20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001418110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r3}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0x69) 10.617992965s ago: executing program 4 (id=3545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000611109e8000000000000002e26f7d06f6184eb45fa297b42317c0daf1fc062a2e8bc001264a9d51fdd5cbde5c62575e7104a383d96f689a97acf91d2805c84d15aa5bf5be62070a3d227b36f9c6bd08805d4fa90ebfdb11dfc467324a7d5b9c9fbf2f3c4a80af1f2a8f583a1263e73cd7614109782a1fb211a782e3cc77da9e2adf7816298a5d777842a8b3727c4cac6a90000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)=""/174) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000003d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x32}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xe6, &(0x7f0000000600)=""/230, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x8, 0x9, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x2, 0x1, 0x6, 0x5}], 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup=r2, 0x37, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r2, r8, 0x21, 0x4, r2, @void, @value=r5, @void, @void, r9}, 0x20) 10.010506471s ago: executing program 4 (id=3547): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYRES32], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4004000) r2 = eventfd(0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) ptrace(0x10, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) 9.291310527s ago: executing program 1 (id=3548): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x138) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 8.474359482s ago: executing program 2 (id=3550): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fgetxattr(r1, &(0x7f0000000100)=@known='security.selinux\x00', 0x0, 0x0) 7.569410356s ago: executing program 1 (id=3552): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="dc08c547000200004d0cb008d778bc30670000000000592d940c72f4fdc8818d47e0a3773dd5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000290000000000000018120000a05e594b0230545fb7794333ac9c1f1e8bc60f6f5a8bf5e287ceebe1278d051540acf1913594984d880b7db4", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffc9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x42) openat$selinux_avc_cache_threshold(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) 7.568570755s ago: executing program 2 (id=3553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000300000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) 6.546985359s ago: executing program 0 (id=3554): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x0, @val=@target_btf_id=r5}, 0x40) socket(0x1, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs$userns(r2, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000012c0)={0x2020}, 0x2020) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket(0x10, 0x803, 0x0) write(r9, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0", 0x19) setsockopt$sock_int(r9, 0x1, 0x8, 0x0, 0x0) sendto(r9, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, 0x0, 0x0, 0x0, 0x0) 6.546640279s ago: executing program 1 (id=3555): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x90, 0x50, 0x6, @loopback, @rand_addr=' \x01\x00', 0x0, 0x8000, 0x8, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) 6.546336719s ago: executing program 2 (id=3556): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000250001002abd7000fedbdf250c0000001782634614c8d56cf045f4b828afd85f76b68f"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mknod$loop(0x0, 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000007d5e1c1b258bc1fb56dcfca9abb78bbd5d1d3d3a32a3c10a3da820ac982facb6a06b02cd21264f2455", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000050000000100010009000000010000001a22b86567b5483c4a4d6c8fa7c445d9f438e6a1af7c01b5341628d37b4788bb5759a265aef9088af309cd1d973599d9f073d0ea86653887dd0da0b5c029c80545c0a4716c47b7663b8b7b38dcf98538c2c91af500"/116, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f00000003c0), &(0x7f00000004c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f000000c600)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) 5.393322275s ago: executing program 0 (id=3557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1210086, &(0x7f0000001240)=ANY=[@ANYBLOB='errors=continue,errors=continue,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=euc-jp,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmas0020000000000000007\x00\x00\x00\x00\x00\x00'], 0x5, 0x152f, &(0x7f0000002f80)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r5, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.392850445s ago: executing program 2 (id=3558): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file3\x00', 0x414, &(0x7f00000003c0)={[{@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [], 0x81, "7464fbe08eb369"}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69) 4.224567042s ago: executing program 0 (id=3559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x508, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x51e, &(0x7f0000000100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES16=r6, @ANYRESHEX=r7], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='sched_switch\x00', r8}, 0x18) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 4.223945452s ago: executing program 2 (id=3560): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(0x0, 0x1c0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = syz_clone(0x400, &(0x7f0000000240)="7dfa946df0d34f241f3cbd662bdb242ec3f2d7b886268d52d829399d68353ae550e87842ef30870f6e697831bb9ac2f48adf1fb0173543be5cafb36f82197990e5feb64a3d724e468d18db32deb30f8bb00fb08da3fc6c2113b79b1486b3bd3958715eb8cbec7b71acf4266744521b1e2c6c69b839c3dd143acfd935b53a840ac7ce00e690b0e88fca99f07816d8a2665595ccfde28b644dc4d935ebf788c9ee11e464e43e1c01e940c3d15f60cd9308bc512c8b02bb79f28282215e3f4e7ed5fbd38fb4a809fbc88c01fad412e9d8d822bd4a77ef8b25", 0xd7, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000003c0)="1ae96e830d145218d0e79e3033b09de9939b4cee80b65101655e9c4dc22bdab4650645f45a05401538a667b2b6f777158323b078cdb4bfb439753214137f8dc24bc1170083464113787ea68070b5ba") sched_setscheduler(r2, 0x3, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x0, [0x7c2a, 0x0, 0x7]}, &(0x7f0000000840)=0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x90, 0x50, 0x6, @loopback, @rand_addr=' \x01\x00', 0x0, 0x8000, 0x8, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) 2.915530473s ago: executing program 0 (id=3561): fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000008005400000054000000060000000500000001000005ff7f00000a00000005000000ca34ffff050000000000000c020000000c00000000000009030000000900000003000006040000000800000000100000040000000002000004000000070000000061302e6100"], 0x0, 0x72, 0x0, 0x0, 0x400, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b80000002300050b0000000000000000fe8000000000000000000000000000aaac1414bb00000000000600000000000000007590a3447ffda909a5364a8cd3517aeb2e7c7a474d77d44dfc456570ff1392b3569bbf41279be1ba5d09007666dad51968c746911ed913a2241fe819c7df5fe75cfd020964598e4fdf7c97ce4944b5f713a0f0878d1a572b647f21e2451be30451a46194f15961a88516d97f24eeda", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000080000000000e7000700201018170000", @ANYRES32=0x1, @ANYBLOB="000000000000000085100000000000000d73800001000000850000009b000000186100000c00000000000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0xdc, &(0x7f0000000480)=""/220, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xf, 0x67a7e410}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2], 0x0, 0x10, 0x1000, @void, @value}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="32e2", 0x2}], 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a0800450000280000000000069078ac3614bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") clock_gettime(0xffffffc4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/unix\x00') preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x0, 0x3) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/config\x00') preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000140)=""/112, 0x70}, {&(0x7f0000000380)=""/251, 0xfb}], 0x2, 0x2, 0x3ff) getdents64(0xffffffffffffffff, 0x0, 0x0) 2.912832903s ago: executing program 1 (id=3562): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x138) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 1.507107722s ago: executing program 0 (id=3563): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008ae09, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0221000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1.506403232s ago: executing program 1 (id=3564): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 747.6Âĩs ago: executing program 0 (id=3565): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="15001000000800395032303030ae75000000000000"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800a, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@privport}, {@version_L}, {@privport}], [{@fsname}, {@obj_type={'obj_type', 0x3d, '/dev/snd/timer\x00'}}, {@measure}, {@euid_gt={'euid>', r3}}, {@dont_hash}]}}) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x1000}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}}}, 0x10, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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") mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x10, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_none}], [], 0x6b}}) 296.03Âĩs ago: executing program 1 (id=3566): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'wg0\x00', &(0x7f00000003c0)=@ethtool_rx_ntuple={0x35, {0x1f, @udp_ip4_spec={@local, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e22, 0x4e20, 0x5}, @ah_ip4_spec={@broadcast, @loopback, 0x9, 0xfe}, 0x9, 0x9, 0x81, 0x0, 0xffffffffffffffff}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr\x00') getdents(r2, &(0x7f0000001440)=""/228, 0xe4) openat(r2, &(0x7f0000000040)='./file0\x00', 0x2, 0xc5) dup(0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000180)={'icmp\x00', 0x2}, &(0x7f00000001c0)=0x1e) 0s ago: executing program 2 (id=3567): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00'], 0x138) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) kernel console output (not intermixed with test programs): 49] [ 957.758879][T14263] loop1: detected capacity change from 0 to 1024 [ 957.808261][T14263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 957.836837][T12099] EXT4-fs (loop1): unmounting filesystem. [ 957.853008][T14270] loop1: detected capacity change from 0 to 256 [ 957.859500][T14270] FAT-fs (loop1): Unrecognized mount option "uni_xlate0" or missing value [ 958.333304][T14281] loop3: detected capacity change from 0 to 40427 [ 958.340168][T14281] F2FS-fs (loop3): Unrecognized mount option "˙˙" or missing value [ 958.414228][T14282] loop3: detected capacity change from 0 to 2048 [ 958.456819][T10370] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 958.488725][ T3544] usb 3-1: USB disconnect, device number 94 [ 958.489948][T14284] loop4: detected capacity change from 0 to 512 [ 958.509437][T14284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 958.520074][T14284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 958.528853][T14284] System zones: 1-12 [ 958.533882][T14284] EXT4-fs (loop4): 1 truncate cleaned up [ 958.539660][T14284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 958.550164][T10909] EXT4-fs (loop2): unmounting filesystem. [ 958.576553][ T10] Quota error (device loop2): do_check_range: Getting block 3925999616 out of range 1-5 [ 958.588476][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:1: Failed to release dquot type 0 [ 958.600430][ T10] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 958.610990][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:1: Failed to release dquot type 1 [ 958.931082][T14297] loop1: detected capacity change from 0 to 512 [ 958.948926][T14297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 958.961319][T14297] EXT4-fs (loop1): 1 truncate cleaned up [ 958.967058][T14297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 959.544112][T12303] EXT4-fs (loop4): unmounting filesystem. [ 959.778817][T12099] EXT4-fs (loop1): unmounting filesystem. [ 959.882239][T14321] loop1: detected capacity change from 0 to 256 [ 959.899927][T14321] FAT-fs (loop1): Unrecognized mount option "uid=" or missing value [ 959.967509][T14323] FAULT_INJECTION: forcing a failure. [ 959.967509][T14323] name failslab, interval 1, probability 0, space 0, times 0 [ 960.010586][T14323] CPU: 0 PID: 14323 Comm: syz.3.3348 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 960.020225][T14323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 960.030118][T14323] Call Trace: [ 960.033242][T14323] [ 960.036018][T14323] dump_stack_lvl+0x151/0x1b7 [ 960.040534][T14323] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 960.045831][T14323] dump_stack+0x15/0x1c [ 960.049816][T14323] should_fail_ex+0x3d0/0x520 [ 960.054331][T14323] ? __se_sys_mount+0x156/0x3b0 [ 960.059018][T14323] __should_failslab+0xaf/0xf0 [ 960.063622][T14323] should_failslab+0x9/0x20 [ 960.067962][T14323] __kmem_cache_alloc_node+0x3d/0x250 [ 960.073167][T14323] ? __kasan_check_write+0x14/0x20 [ 960.078112][T14323] ? _copy_from_user+0x90/0xc0 [ 960.082711][T14323] ? __se_sys_mount+0x156/0x3b0 [ 960.087397][T14323] kmalloc_trace+0x2a/0xa0 [ 960.091651][T14323] __se_sys_mount+0x156/0x3b0 [ 960.096163][T14323] ? __this_cpu_preempt_check+0x13/0x20 [ 960.101549][T14323] ? __x64_sys_mount+0xd0/0xd0 [ 960.106145][T14323] ? debug_smp_processor_id+0x17/0x20 [ 960.111355][T14323] __x64_sys_mount+0xbf/0xd0 [ 960.115782][T14323] x64_sys_call+0x49d/0x9a0 [ 960.120118][T14323] do_syscall_64+0x3b/0xb0 [ 960.124371][T14323] ? clear_bhb_loop+0x55/0xb0 [ 960.128888][T14323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.134613][T14323] RIP: 0033:0x7f9975d7dff9 [ 960.138868][T14323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.158397][T14323] RSP: 002b:00007f9976b2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.166641][T14323] RAX: ffffffffffffffda RBX: 00007f9975f35f80 RCX: 00007f9975d7dff9 [ 960.174453][T14323] RDX: 0000000020000340 RSI: 0000000020000280 RDI: 0000000020000200 [ 960.182263][T14323] RBP: 00007f9976b2d090 R08: 0000000020000880 R09: 0000000000000000 [ 960.190077][T14323] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 960.197888][T14323] R13: 0000000000000000 R14: 00007f9975f35f80 R15: 00007ffea795e7f8 [ 960.205703][T14323] [ 960.231236][T14325] loop1: detected capacity change from 0 to 40427 [ 960.247306][T14325] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 960.254324][T14325] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 960.263184][T14325] F2FS-fs (loop1): Unrecognized mount option "aqfmt=vfsv›ÉH" or missing value [ 960.284995][ T28] audit: type=1400 audit(2000000094.759:19911): avc: denied { map } for pid=14324 comm="syz.1.3349" path="socket:[98383]" dev="sockfs" ino=98383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 960.310530][T14325] loop1: detected capacity change from 0 to 128 [ 960.326447][T14329] loop2: detected capacity change from 0 to 1024 [ 960.331042][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x4 [ 960.351063][ T28] audit: type=1400 audit(2000000094.759:19912): avc: denied { read } for pid=14324 comm="syz.1.3349" path="socket:[98383]" dev="sockfs" ino=98383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 960.356150][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x2 [ 960.392342][T14329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 960.473664][T14338] loop3: detected capacity change from 0 to 512 [ 960.480543][T14338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 960.497786][T14338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 960.506725][T14338] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038 (0x7fffffff) [ 960.520657][T14338] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 960.539646][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 960.556155][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 960.563623][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 960.574616][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 960.582351][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.167939][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.176493][ T28] audit: type=1400 audit(2000000095.609:19913): avc: denied { connect } for pid=14335 comm="syz.0.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 961.417547][T10909] EXT4-fs (loop2): unmounting filesystem. [ 961.430786][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.462445][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.496941][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.526799][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.534600][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.565263][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.595159][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.607891][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.635783][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.645865][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.663598][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.671932][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.684541][T14349] loop4: detected capacity change from 0 to 1024 [ 961.690869][ T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0 [ 961.699737][ T866] hid-generic 0000:3000000:0000.012F: hidraw0: HID v0.00 Device [sy] on syz0 [ 961.744976][T14349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 961.756199][ T3544] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 962.394530][ T5612] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 962.452076][T14360] loop1: detected capacity change from 0 to 512 [ 962.474254][T14360] ext4: Unknown parameter 'uid<00000000000000000000' [ 962.533564][ T3544] usb 4-1: Using ep0 maxpacket: 16 [ 962.542534][T12303] EXT4-fs (loop4): unmounting filesystem. [ 962.572389][T14362] loop4: detected capacity change from 0 to 512 [ 962.586898][T14362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 962.622633][T14362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 962.631893][T14362] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038 (0x7fffffff) [ 962.648516][T14362] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 962.662943][ T5612] usb 1-1: Using ep0 maxpacket: 16 [ 962.667970][ T3544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.678746][ T3544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.689807][ T3544] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 962.698902][ T3544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.716697][ T3544] usb 4-1: config 0 descriptor?? [ 962.796190][ T5612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.816124][ T5612] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.887200][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x4 [ 962.894674][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x2 [ 962.902500][ T5612] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 962.911791][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 962.919935][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.927680][ T5612] usb 1-1: SerialNumber: syz [ 962.932484][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.940124][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.947698][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.955288][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.967402][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.974861][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.983103][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.990714][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 962.998343][ T300] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 963.005750][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.014067][ T5612] usb 1-1: 0:2 : does not exist [ 963.019384][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.026133][ T1931] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 963.027238][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.042246][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.049914][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.057451][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.064901][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.072588][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.080272][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.087887][ T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0 [ 963.100602][ T434] hid-generic 0000:3000000:0000.0130: hidraw0: HID v0.00 Device [sy] on syz0 [ 963.197058][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0 [ 963.204570][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0 [ 963.212271][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0 [ 963.222744][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0 [ 963.230346][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0 [ 963.243098][ T3544] hid-multitouch 0003:1FD2:6007.0131: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 963.255010][ T300] usb 5-1: Using ep0 maxpacket: 16 [ 963.276146][ T1931] usb 2-1: Using ep0 maxpacket: 32 [ 963.386191][ T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.396966][ T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.401617][ T866] usb 4-1: USB disconnect, device number 62 [ 963.406736][ T300] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 963.422015][ T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.430552][ T300] usb 5-1: config 0 descriptor?? [ 963.556249][ T1931] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 963.565168][ T1931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.573217][ T1931] usb 2-1: Product: syz [ 963.577305][ T1931] usb 2-1: Manufacturer: syz [ 963.581728][ T1931] usb 2-1: SerialNumber: syz [ 963.586946][ T1931] usb 2-1: config 0 descriptor?? [ 963.741112][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x4 [ 963.748666][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x2 [ 963.756407][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.763919][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.771549][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.779178][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.786989][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.794493][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.802220][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.810443][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.818093][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.825648][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.835054][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.842612][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.849997][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.857472][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.864934][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.872417][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.879912][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.887325][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.894779][ T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0 [ 963.904632][ T434] hid-generic 0000:3000000:0000.0132: hidraw0: HID v0.00 Device [sy] on syz0 [ 963.949806][T12054] EXT4-fs (loop3): unmounting filesystem. [ 964.096194][ T300] usbhid 5-1:0.0: can't add hid device: -71 [ 964.102016][ T300] usbhid: probe of 5-1:0.0 failed with error -71 [ 964.109267][ T300] usb 5-1: USB disconnect, device number 95 [ 964.278873][ T5612] usb 1-1: USB disconnect, device number 94 [ 964.346177][ T866] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 964.416435][T12303] EXT4-fs (loop4): unmounting filesystem. [ 964.615802][T14386] loop2: detected capacity change from 0 to 512 [ 964.646930][T14386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 964.656638][T14386] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038 (0x7fffffff) [ 964.886223][ T866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.056509][ T866] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 965.065713][ T866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.073590][ T866] usb 4-1: Product: syz [ 965.078834][ T866] usb 4-1: Manufacturer: syz [ 965.096077][ T866] usb 4-1: SerialNumber: syz [ 965.107019][ T866] usb 4-1: config 0 descriptor?? [ 965.329160][T14398] loop4: detected capacity change from 0 to 16 [ 965.335728][T14398] erofs: (device loop4): mounted with root inode @ nid 36. [ 965.387540][ T866] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 965.395216][ T866] usb 4-1: USB disconnect, device number 63 [ 965.401330][T10370] udevd[10370]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 965.446936][T14399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 965.455860][T14399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 965.464909][T14399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 965.473809][T14399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 965.504690][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x4 [ 965.528366][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x2 [ 965.529186][T10909] EXT4-fs (loop2): unmounting filesystem. [ 965.535898][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.535920][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.535939][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.535958][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.535976][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.557827][T14403] loop2: detected capacity change from 0 to 512 [ 965.564244][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.588183][T14403] EXT4-fs (loop2): 1 orphan inode deleted [ 965.598122][T14403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 965.607425][T14403] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038 (0x7fffffff) [ 965.614967][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.684621][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.694824][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.702599][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.710157][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.717651][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.725307][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.733250][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.740866][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 965.748674][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 966.033122][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 966.040656][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 966.048324][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0 [ 966.056413][T11880] hid-generic 0000:3000000:0000.0133: hidraw0: HID v0.00 Device [sy] on syz0 [ 966.187738][T14419] loop4: detected capacity change from 0 to 1024 [ 966.201543][T14419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 966.219831][T12303] EXT4-fs (loop4): unmounting filesystem. [ 966.236793][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x4 [ 966.244414][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x2 [ 966.251998][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.259955][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.267697][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.275357][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.283530][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.303456][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.311166][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.318680][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.326176][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.333582][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.341112][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.356169][T11880] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 966.629698][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.637246][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.648651][T10909] EXT4-fs (loop2): unmounting filesystem. [ 966.656664][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.664201][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.671935][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.679618][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.687270][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.694786][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0 [ 966.703164][ T5612] hid-generic 0000:3000000:0000.0134: hidraw0: HID v0.00 Device [] on [ 966.856308][T11880] usb 1-1: Using ep0 maxpacket: 16 [ 966.898522][T14435] incfs: Options parsing error. -22 [ 966.903789][T14435] incfs: mount failed -22 [ 966.976328][T11880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.987904][T11880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.008846][T14437] loop1: detected capacity change from 0 to 1024 [ 967.015188][T11880] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 967.024805][T11880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.034746][T11880] usb 1-1: config 0 descriptor?? [ 967.056947][T10370] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 967.057865][T14441] loop3: detected capacity change from 0 to 512 [ 967.097259][T14441] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.103512][T14441] EXT4-fs: Ignoring removed i_version option [ 967.127109][T14441] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.3378: invalid block [ 967.149795][T14441] EXT4-fs (loop3): Remounting filesystem read-only [ 967.179433][T14441] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.3378: couldn't read orphan inode 11 (err -117) [ 967.211747][T14441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 967.334997][T12054] EXT4-fs (loop3): unmounting filesystem. [ 967.382879][T14437] loop1: detected capacity change from 0 to 40427 [ 967.386239][T11880] usbhid 1-1:0.0: can't add hid device: -71 [ 967.394895][T11880] usbhid: probe of 1-1:0.0 failed with error -71 [ 967.404612][T14437] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 967.412168][T14437] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 967.417024][T11880] usb 1-1: USB disconnect, device number 95 [ 967.426933][T14437] F2FS-fs (loop1): invalid crc value [ 967.435215][T14437] F2FS-fs (loop1): Found nat_bits in checkpoint [ 967.466188][ T434] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 967.474449][T14437] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 967.481382][T14437] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 967.509348][T12099] syz-executor: attempt to access beyond end of device [ 967.509348][T12099] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 967.556185][ T1931] rtl8150 2-1:0.0: couldn't reset the device [ 967.562110][ T1931] rtl8150: probe of 2-1:0.0 failed with error -5 [ 967.587377][ T1931] usb 2-1: USB disconnect, device number 104 [ 967.631012][T14456] loop1: detected capacity change from 0 to 1024 [ 967.646213][ T5612] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 967.647670][T14456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 967.671373][T12099] EXT4-fs (loop1): unmounting filesystem. [ 967.702834][T14461] loop1: detected capacity change from 0 to 1024 [ 967.716248][ T434] usb 5-1: Using ep0 maxpacket: 16 [ 967.717914][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x4 [ 967.725050][T14461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 967.736165][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x2 [ 967.744394][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.745457][T14461] FAULT_INJECTION: forcing a failure. [ 967.745457][T14461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.764991][T14461] CPU: 0 PID: 14461 Comm: syz.1.3383 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 967.766214][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.774606][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 967.791971][T14461] Call Trace: [ 967.795185][T14461] [ 967.796145][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.797955][T14461] dump_stack_lvl+0x151/0x1b7 [ 967.805437][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.809932][T14461] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 967.809949][T14461] ? __stack_depot_save+0x36/0x480 [ 967.809969][T14461] dump_stack+0x15/0x1c [ 967.809983][T14461] should_fail_ex+0x3d0/0x520 [ 967.826153][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.827647][T14461] should_fail+0xb/0x10 [ 967.831644][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.836400][T14461] should_fail_usercopy+0x1a/0x20 [ 967.836430][T14461] _copy_to_user+0x1e/0x90 [ 967.836450][T14461] simple_read_from_buffer+0xc7/0x150 [ 967.851538][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.855519][T14461] proc_fail_nth_read+0x1a3/0x210 [ 967.860619][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.864632][T14461] ? proc_fault_inject_write+0x390/0x390 [ 967.870033][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.877305][T14461] ? fsnotify_perm+0x269/0x5b0 [ 967.877335][T14461] ? security_file_permission+0x86/0xb0 [ 967.877349][T14461] ? proc_fault_inject_write+0x390/0x390 [ 967.877367][T14461] vfs_read+0x26c/0xae0 [ 967.882558][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.889628][T14461] ? kernel_read+0x1f0/0x1f0 [ 967.889652][T14461] ? mutex_lock+0xb1/0x1e0 [ 967.895331][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 967.902561][T14461] ? bit_wait_io_timeout+0x120/0x120 [ 967.902587][T14461] ? __fdget_pos+0x2e2/0x390 [ 967.902607][T14461] ? ksys_read+0x77/0x2c0 [ 967.959327][T14461] ksys_read+0x199/0x2c0 [ 967.963399][T14461] ? __this_cpu_preempt_check+0x13/0x20 [ 967.968783][T14461] ? vfs_write+0xed0/0xed0 [ 967.973034][T14461] ? debug_smp_processor_id+0x17/0x20 [ 967.978241][T14461] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 967.984144][T14461] __x64_sys_read+0x7b/0x90 [ 967.988482][T14461] x64_sys_call+0x28/0x9a0 [ 967.992734][T14461] do_syscall_64+0x3b/0xb0 [ 967.996987][T14461] ? clear_bhb_loop+0x55/0xb0 [ 968.001500][T14461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 968.007229][T14461] RIP: 0033:0x7fad7097ca3c [ 968.011481][T14461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 968.030923][T14461] RSP: 002b:00007fad71740030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 968.039168][T14461] RAX: ffffffffffffffda RBX: 00007fad70b35f80 RCX: 00007fad7097ca3c [ 968.046982][T14461] RDX: 000000000000000f RSI: 00007fad717400a0 RDI: 0000000000000006 [ 968.054791][T14461] RBP: 00007fad71740090 R08: 0000000000000000 R09: 0000000000000000 [ 968.062600][T14461] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 968.070413][T14461] R13: 0000000000000000 R14: 00007fad70b35f80 R15: 00007ffe2fcf9e98 [ 968.078229][T14461] [ 968.082067][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 968.091788][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 968.099420][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 968.107103][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 968.114579][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 968.122083][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 968.129519][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 968.137162][ T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0 [ 968.145837][ T866] hid-generic 0000:3000000:0000.0135: hidraw0: HID v0.00 Device [sy] on syz0 [ 968.160549][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.186394][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.205859][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.217791][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.239917][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.259535][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.271136][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.305528][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.325109][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.336515][ T434] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 968.346033][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.368275][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.378204][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.386305][ T434] usb 5-1: Product: syz [ 968.390303][ T434] usb 5-1: Manufacturer: syz [ 968.394711][ T434] usb 5-1: SerialNumber: syz [ 968.400455][ T434] usb 5-1: config 0 descriptor?? [ 968.406376][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.436786][ T434] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 968.444634][ T434] usb 5-1: Detected FT232H [ 968.456395][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.476303][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.498658][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 968.517766][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.529469][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.541206][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.546184][ T5612] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 968.552826][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.561639][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.573049][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.580544][ T5612] usb 4-1: Product: syz [ 968.592186][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 968.596214][ T5612] usb 4-1: Manufacturer: syz [ 968.611279][ T5612] usb 4-1: SerialNumber: syz [ 968.619360][ T5612] usb 4-1: config 0 descriptor?? [ 968.656233][T14478] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3389'. [ 968.695686][T14478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14478 comm=syz.2.3389 [ 968.718781][ T434] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 968.727708][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x4 [ 968.737095][T12099] EXT4-fs (loop1): unmounting filesystem. [ 968.817949][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x2 [ 968.825529][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.833044][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.840628][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.848522][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.856060][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.863679][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.871211][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.878689][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.886225][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.893677][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.901122][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.969709][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.978230][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.985821][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 968.995789][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 969.003475][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 969.008180][ T5612] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 969.020184][ T5612] usb 4-1: USB disconnect, device number 64 [ 969.022735][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 969.039672][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 969.047982][ T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0 [ 969.057558][ T866] hid-generic 0000:3000000:0000.0136: hidraw0: HID v0.00 Device [] on [ 969.207824][ T434] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 969.226629][T12657] udevd[12657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 969.337734][ T10] device bridge_slave_1 left promiscuous mode [ 969.343960][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.351445][ T10] device bridge_slave_0 left promiscuous mode [ 969.357509][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.365338][ T10] device veth1_macvtap left promiscuous mode [ 969.371401][ T10] device veth0_vlan left promiscuous mode [ 969.407958][ T866] usb 5-1: USB disconnect, device number 96 [ 969.431324][ T866] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 969.472259][ T866] ftdi_sio 5-1:0.0: device disconnected [ 969.490648][T14499] loop3: detected capacity change from 0 to 512 [ 969.497374][T14499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 969.507906][T14493] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.514791][T14493] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.522236][T14493] device bridge_slave_0 entered promiscuous mode [ 969.523214][T14499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 969.529385][T14493] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.537293][T14499] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038 (0x7fffffff) [ 969.544234][T14493] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.561110][T14493] device bridge_slave_1 entered promiscuous mode [ 969.606021][T14499] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 969.648048][T14493] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.654912][T14493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.662011][T14493] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.668794][T14493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.677119][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x4 [ 969.684581][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x2 [ 969.725119][T14493] device veth0_vlan entered promiscuous mode [ 969.747376][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 969.754774][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 969.763050][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.770966][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.779522][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 969.779711][T12054] EXT4-fs (loop3): unmounting filesystem. [ 969.787559][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.802393][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.810254][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 969.820675][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 969.829142][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.838438][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 969.847043][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.854584][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.864274][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 969.928321][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.935849][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.945983][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 969.953989][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 969.963158][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 969.971089][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.018986][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.033916][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.044600][T14493] device veth1_macvtap entered promiscuous mode [ 970.049695][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.067457][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.077857][T14517] loop1: detected capacity change from 0 to 1024 [ 970.083135][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.092110][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.099786][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.107573][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0 [ 970.115643][T11880] hid-generic 0000:3000000:0000.0137: hidraw0: HID v0.00 Device [] on [ 970.126332][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 970.134308][T14517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 970.135297][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 970.151141][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 970.159608][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 970.167890][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 970.176072][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 970.184269][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 970.210584][T14493] EXT4-fs (loop1): unmounting filesystem. [ 970.370605][T14515] loop2: detected capacity change from 0 to 40427 [ 970.386509][T14515] F2FS-fs (loop2): invalid crc value [ 970.393184][T14515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 970.424060][T14515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 970.520684][T14537] loop3: detected capacity change from 0 to 512 [ 970.540480][T14537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 970.550494][ T28] audit: type=1400 audit(2000000105.029:19914): avc: denied { map } for pid=14534 comm="syz.0.3406" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 970.550662][T14535] binder: BINDER_SET_CONTEXT_MGR already set [ 970.584314][T14535] binder: 14534:14535 ioctl 4018620d 200002c0 returned -16 [ 970.595023][T14535] binder: 14534:14535 ioctl c0306201 20000300 returned -14 [ 970.598458][T14537] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038 (0x7fffffff) [ 970.619721][T14537] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 970.648749][ T28] audit: type=1400 audit(2000000105.129:19915): avc: denied { setopt } for pid=14514 comm="syz.2.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 970.674969][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3406'. [ 970.675490][ T28] audit: type=1400 audit(2000000105.149:19916): avc: denied { bind } for pid=14514 comm="syz.2.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 970.893984][T10909] syz-executor: attempt to access beyond end of device [ 970.893984][T10909] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 970.936203][ T866] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 970.963656][T14547] device ip6tnl0 entered promiscuous mode [ 970.970720][T14547] bridge0: port 3(vlan2) entered blocking state [ 970.976915][T14547] bridge0: port 3(vlan2) entered disabled state [ 971.017265][T14546] device ip6tnl0 left promiscuous mode [ 971.071853][T14554] loop2: detected capacity change from 0 to 512 [ 971.086735][T14554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 971.098541][T14554] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038 (0x7fffffff) [ 971.119065][T14554] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 971.176713][ T866] usb 4-1: Using ep0 maxpacket: 16 [ 971.179729][T14566] loop2: detected capacity change from 0 to 128 [ 971.188357][T14558] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 971.198748][T14558] SELinux: failed to load policy [ 971.207116][T14566] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 971.227889][T14566] EXT4-fs: error: could not find journal device path [ 971.336249][ T866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.352324][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x4 [ 971.357445][ T866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.361449][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x2 [ 971.369435][ T866] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 971.385818][ T866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.502793][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 971.512186][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 971.534269][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 971.541498][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 971.548201][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.553211][ T866] usb 4-1: config 0 descriptor?? [ 971.566596][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.574080][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.583098][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.584185][T14577] tipc: Started in network mode [ 971.595487][T14577] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 971.600927][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.609537][T14577] tipc: Enabling of bearer rejected, failed to enable media [ 971.612002][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.627855][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.635566][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.651495][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.659304][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.666877][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.676717][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.684195][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.692095][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.699751][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.707442][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.714945][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.722680][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.730325][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0 [ 971.742870][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 971.756525][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 971.764365][ T3544] hid-generic 0000:3000000:0000.0138: hidraw0: HID v0.00 Device [sy] on syz0 [ 971.774655][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 971.783636][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 971.793093][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 971.801290][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 971.809484][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 971.817418][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 971.883510][T14583] incfs: Options parsing error. -22 [ 971.889125][T14583] incfs: mount failed -22 [ 972.052805][T14591] loop1: detected capacity change from 0 to 256 [ 972.061659][T14591] FAT-fs (loop1): invalid media value (0x29) [ 972.064553][T14593] FAULT_INJECTION: forcing a failure. [ 972.064553][T14593] name failslab, interval 1, probability 0, space 0, times 0 [ 972.067925][T14591] FAT-fs (loop1): Can't find a valid FAT filesystem [ 972.092094][T14593] CPU: 0 PID: 14593 Comm: syz.2.3420 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 972.101716][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 972.111609][T14593] Call Trace: [ 972.114734][T14593] [ 972.116313][ T866] usbhid 4-1:0.0: can't add hid device: -71 [ 972.117512][T14593] dump_stack_lvl+0x151/0x1b7 [ 972.123306][ T866] usbhid: probe of 4-1:0.0 failed with error -71 [ 972.127753][T14593] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 972.127776][T14593] dump_stack+0x15/0x1c [ 972.127789][T14593] should_fail_ex+0x3d0/0x520 [ 972.127810][T14593] ? vfs_parse_fs_string+0x119/0x220 [ 972.127826][T14593] __should_failslab+0xaf/0xf0 [ 972.127842][T14593] should_failslab+0x9/0x20 [ 972.127861][T14593] __kmem_cache_alloc_node+0x3d/0x250 [ 972.143945][ T866] usb 4-1: USB disconnect, device number 65 [ 972.147723][T14593] ? vfs_parse_fs_string+0x119/0x220 [ 972.147747][T14593] __kmalloc_node_track_caller+0xa2/0x1e0 [ 972.147770][T14593] kmemdup_nul+0x2f/0xa0 [ 972.187470][T14593] vfs_parse_fs_string+0x119/0x220 [ 972.192414][T14593] ? vfs_parse_fs_param+0x4a0/0x4a0 [ 972.197449][T14593] ? module_put+0xeb/0x220 [ 972.201701][T14593] do_new_mount+0x257/0xb30 [ 972.206040][T14593] ? do_move_mount_old+0x160/0x160 [ 972.210986][T14593] ? security_capable+0x87/0xb0 [ 972.215675][T14593] ? ns_capable+0x89/0xe0 [ 972.219843][T14593] path_mount+0x671/0x1070 [ 972.224101][T14593] ? user_path_at_empty+0x14e/0x1a0 [ 972.229127][T14593] __se_sys_mount+0x2c4/0x3b0 [ 972.233636][T14593] ? __this_cpu_preempt_check+0x13/0x20 [ 972.239020][T14593] ? __x64_sys_mount+0xd0/0xd0 [ 972.243620][T14593] ? debug_smp_processor_id+0x17/0x20 [ 972.248834][T14593] __x64_sys_mount+0xbf/0xd0 [ 972.253260][T14593] x64_sys_call+0x49d/0x9a0 [ 972.257593][T14593] do_syscall_64+0x3b/0xb0 [ 972.261846][T14593] ? clear_bhb_loop+0x55/0xb0 [ 972.266359][T14593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.272086][T14593] RIP: 0033:0x7f2043b7dff9 [ 972.276341][T14593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.295783][T14593] RSP: 002b:00007f20448bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 972.304031][T14593] RAX: ffffffffffffffda RBX: 00007f2043d35f80 RCX: 00007f2043b7dff9 [ 972.311837][T14593] RDX: 0000000020000340 RSI: 0000000020000280 RDI: 0000000020000200 [ 972.319652][T14593] RBP: 00007f20448bc090 R08: 0000000020000880 R09: 0000000000000000 [ 972.327460][T14593] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 972.335269][T14593] R13: 0000000000000000 R14: 00007f2043d35f80 R15: 00007ffeb9d84298 [ 972.343088][T14593] [ 973.282258][T12054] EXT4-fs unmount: 3 callbacks suppressed [ 973.282272][T12054] EXT4-fs (loop3): unmounting filesystem. [ 973.347182][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x4 [ 973.360132][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x2 [ 973.377765][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.390812][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.399188][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.412065][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.430146][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.445640][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.475200][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.493844][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.503914][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.518261][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.535866][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.550610][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.566340][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.581001][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.590382][T14628] loop2: detected capacity change from 0 to 40427 [ 973.595888][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.599069][T14628] F2FS-fs (loop2): Unrecognized mount option "0xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 973.607335][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.621576][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.629070][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.636647][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0 [ 973.646266][ T3544] hid-generic 0000:3000000:0000.0139: hidraw0: HID v0.00 Device [sy] on syz0 [ 973.671391][T14639] loop3: detected capacity change from 0 to 512 [ 973.688727][T14639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 973.714156][T14628] loop2: detected capacity change from 0 to 512 [ 973.721452][T14639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 973.733534][T14639] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038 (0x7fffffff) [ 973.745477][T14628] EXT4-fs: Ignoring removed mblk_io_submit option [ 973.752020][T14628] EXT4-fs: Ignoring removed i_version option [ 973.762522][T14639] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 973.763803][T14628] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.3430: invalid block [ 973.797127][T12054] EXT4-fs (loop3): unmounting filesystem. [ 973.809522][T14628] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.3430: couldn't read orphan inode 11 (err -117) [ 973.816799][T14646] loop4: detected capacity change from 0 to 16 [ 973.827952][T14628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 973.850086][T14646] erofs: (device loop4): mounted with root inode @ nid 36. [ 973.963295][T14653] FAULT_INJECTION: forcing a failure. [ 973.963295][T14653] name failslab, interval 1, probability 0, space 0, times 0 [ 973.976006][T14653] CPU: 1 PID: 14653 Comm: syz.1.3439 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 973.985621][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 973.995522][T14653] Call Trace: [ 973.998640][T14653] [ 974.001416][T14653] dump_stack_lvl+0x151/0x1b7 [ 974.005937][T14653] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 974.011228][T14653] ? __kasan_check_write+0x14/0x20 [ 974.016191][T14653] ? node_tag_clear+0x1ff/0x320 [ 974.020865][T14653] dump_stack+0x15/0x1c [ 974.024852][T14653] should_fail_ex+0x3d0/0x520 [ 974.029367][T14653] ? kstrdup_const+0x41/0x50 [ 974.033790][T14653] __should_failslab+0xaf/0xf0 [ 974.038393][T14653] should_failslab+0x9/0x20 [ 974.042732][T14653] __kmem_cache_alloc_node+0x3d/0x250 [ 974.047938][T14653] ? kstrdup_const+0x41/0x50 [ 974.052363][T14653] __kmalloc_node_track_caller+0xa2/0x1e0 [ 974.057919][T14653] kstrdup+0x39/0x70 [ 974.061652][T14653] kstrdup_const+0x41/0x50 [ 974.065902][T14653] __kernfs_new_node+0x99/0x700 [ 974.070592][T14653] ? up_write+0x7d/0x2a0 [ 974.074670][T14653] ? rwsem_write_trylock+0x153/0x340 [ 974.079789][T14653] ? kernfs_new_node+0x230/0x230 [ 974.084563][T14653] ? rwsem_mark_wake+0x770/0x770 [ 974.089340][T14653] ? up_write+0x7d/0x2a0 [ 974.093415][T14653] kernfs_new_node+0x130/0x230 [ 974.098017][T14653] kernfs_create_link+0xba/0x210 [ 974.102789][T14653] sysfs_do_create_link_sd+0x89/0x110 [ 974.107999][T14653] sysfs_create_link+0x68/0x80 [ 974.112769][T14653] device_add+0x7bf/0xf10 [ 974.116941][T14653] netdev_register_kobject+0x177/0x320 [ 974.122239][T14653] ? raw_notifier_call_chain+0xdf/0xf0 [ 974.127524][T14653] register_netdevice+0xe43/0x1490 [ 974.132478][T14653] ? netif_stacked_transfer_operstate+0x240/0x240 [ 974.138722][T14653] ? __mutex_lock_slowpath+0x10/0x10 [ 974.143841][T14653] ? radix_tree_lookup+0x284/0x290 [ 974.148790][T14653] ppp_dev_configure+0x804/0xa90 [ 974.153564][T14653] ppp_ioctl+0x604/0x1990 [ 974.157727][T14653] ? __mutex_lock_slowpath+0x10/0x10 [ 974.162848][T14653] ? ppp_poll+0x250/0x250 [ 974.167021][T14653] ? security_file_ioctl+0x84/0xb0 [ 974.171962][T14653] ? ppp_poll+0x250/0x250 [ 974.176129][T14653] __se_sys_ioctl+0x114/0x190 [ 974.180728][T14653] __x64_sys_ioctl+0x7b/0x90 [ 974.185328][T14653] x64_sys_call+0x98/0x9a0 [ 974.189586][T14653] do_syscall_64+0x3b/0xb0 [ 974.193842][T14653] ? clear_bhb_loop+0x55/0xb0 [ 974.198434][T14653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.204161][T14653] RIP: 0033:0x7fc1e977dff9 [ 974.208415][T14653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.227856][T14653] RSP: 002b:00007fc1ea5e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.236104][T14653] RAX: ffffffffffffffda RBX: 00007fc1e9935f80 RCX: 00007fc1e977dff9 [ 974.243914][T14653] RDX: 0000000020001439 RSI: 00000000c004743e RDI: 0000000000000005 [ 974.251723][T14653] RBP: 00007fc1ea5e2090 R08: 0000000000000000 R09: 0000000000000000 [ 974.259534][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.267346][T14653] R13: 0000000000000000 R14: 00007fc1e9935f80 R15: 00007fff8985be88 [ 974.275162][T14653] [ 974.752350][T10909] EXT4-fs (loop2): unmounting filesystem. [ 974.784952][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x4 [ 974.797658][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x2 [ 974.821027][T14665] loop1: detected capacity change from 0 to 512 [ 974.832741][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.849504][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.857305][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.865570][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.873151][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.884463][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.899268][T14671] loop3: detected capacity change from 0 to 16 [ 974.906488][T14665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 974.915130][T14671] erofs: (device loop3): mounted with root inode @ nid 36. [ 974.922699][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.930381][T14665] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 974.950382][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.967315][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 974.986633][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.002776][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.018969][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.032927][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.041059][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.049140][T14677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 975.049810][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.057947][T14677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 975.057992][T14677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 975.072495][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.090415][T14677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 975.134117][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.149833][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.157599][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0 [ 975.166019][ T3544] hid-generic 0000:3000000:0000.013A: hidraw0: HID v0.00 Device [] on [ 975.416574][T14684] loop4: detected capacity change from 0 to 512 [ 975.476325][T14684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 975.486151][ T3544] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 975.502944][T14684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 975.512266][T14684] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038 (0x7fffffff) [ 975.538855][T14684] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 975.571540][T12303] EXT4-fs (loop4): unmounting filesystem. [ 975.647691][T14690] serio: Serial port ptm0 [ 975.683748][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x4 [ 975.691684][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x2 [ 975.699732][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.724127][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.744308][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.759948][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.768350][T14698] loop3: detected capacity change from 0 to 512 [ 975.788579][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.796052][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.820113][T14698] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 975.830245][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.830993][T14698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 975.841084][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.845593][T14698] System zones: 1-12 [ 975.853233][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.864336][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.864607][T14698] EXT4-fs (loop3): 1 truncate cleaned up [ 975.872043][ T3544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.888175][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.895624][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.903499][T14698] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 975.913958][ T3544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.928714][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.937856][ T3544] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 975.950860][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.958538][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.966272][ T3544] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 975.975177][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.982961][ T3544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.990992][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 975.999335][ T3544] usb 2-1: config 0 descriptor?? [ 976.004175][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 976.011961][ T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0 [ 976.020128][ T434] hid-generic 0000:3000000:0000.013B: hidraw0: HID v0.00 Device [sy] on syz0 [ 976.497289][ T3544] plantronics 0003:047F:FFFF.013C: No inputs registered, leaving [ 976.509491][ T3544] plantronics 0003:047F:FFFF.013C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 976.563101][ T28] audit: type=1400 audit(2000000111.039:19917): avc: denied { mounton } for pid=14708 comm="syz.0.3453" path="/129/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 976.636171][T14713] FAULT_INJECTION: forcing a failure. [ 976.636171][T14713] name failslab, interval 1, probability 0, space 0, times 0 [ 976.656153][T14713] CPU: 0 PID: 14713 Comm: syz.4.3454 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 976.665788][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 976.675683][T14713] Call Trace: [ 976.678804][T14713] [ 976.681582][T14713] dump_stack_lvl+0x151/0x1b7 [ 976.686095][T14713] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 976.691386][T14713] ? stack_trace_save+0x113/0x1c0 [ 976.696249][T14713] ? stack_trace_snprint+0xf0/0xf0 [ 976.701200][T14713] dump_stack+0x15/0x1c [ 976.705187][T14713] should_fail_ex+0x3d0/0x520 [ 976.709701][T14713] ? parse_opts+0x17a/0x690 [ 976.714041][T14713] __should_failslab+0xaf/0xf0 [ 976.714766][T14707] loop2: detected capacity change from 0 to 40427 [ 976.718636][T14713] should_failslab+0x9/0x20 [ 976.718658][T14713] __kmem_cache_alloc_node+0x3d/0x250 [ 976.718674][T14713] ? v9fs_session_init+0x1f2/0x1950 [ 976.718690][T14713] ? legacy_get_tree+0xf1/0x190 [ 976.744595][T14713] ? vfs_get_tree+0x88/0x290 [ 976.749019][T14713] ? parse_opts+0x17a/0x690 [ 976.753353][T14713] __kmalloc_node_track_caller+0xa2/0x1e0 [ 976.758911][T14713] kstrdup+0x39/0x70 [ 976.762640][T14713] parse_opts+0x17a/0x690 [ 976.766808][T14713] ? p9_fd_show_options+0x1b0/0x1b0 [ 976.771841][T14713] ? debug_smp_processor_id+0x17/0x20 [ 976.777047][T14713] p9_fd_create+0x8d/0x520 [ 976.781302][T14713] ? p9_fd_create_unix+0x480/0x480 [ 976.786247][T14713] ? p9_client_create+0x770/0x11c0 [ 976.791198][T14713] ? p9_client_create+0x770/0x11c0 [ 976.796141][T14713] p9_client_create+0x867/0x11c0 [ 976.800918][T14713] ? do_trace_9p_fid_put+0x110/0x110 [ 976.806038][T14713] ? kstrdup+0x54/0x70 [ 976.809946][T14713] v9fs_session_init+0x1f2/0x1950 [ 976.814805][T14713] ? v9fs_show_options+0x570/0x570 [ 976.819761][T14713] ? kasan_save_alloc_info+0x1f/0x30 [ 976.824869][T14713] ? __kasan_kmalloc+0x9c/0xb0 [ 976.829471][T14713] ? kmalloc_trace+0x44/0xa0 [ 976.833895][T14713] v9fs_mount+0xca/0xb60 [ 976.837976][T14713] ? incfs_get_verity_signature+0x420/0x420 [ 976.843702][T14713] ? cap_capable+0x1d2/0x270 [ 976.848133][T14713] legacy_get_tree+0xf1/0x190 [ 976.852642][T14713] ? incfs_get_verity_signature+0x420/0x420 [ 976.858372][T14713] vfs_get_tree+0x88/0x290 [ 976.862624][T14713] do_new_mount+0x2ba/0xb30 [ 976.866964][T14713] ? do_move_mount_old+0x160/0x160 [ 976.871909][T14713] ? security_capable+0x87/0xb0 [ 976.876598][T14713] ? ns_capable+0x89/0xe0 [ 976.880763][T14713] path_mount+0x671/0x1070 [ 976.885016][T14713] ? user_path_at_empty+0x14e/0x1a0 [ 976.890062][T14713] __se_sys_mount+0x2c4/0x3b0 [ 976.894565][T14713] ? __this_cpu_preempt_check+0x13/0x20 [ 976.899952][T14713] ? __x64_sys_mount+0xd0/0xd0 [ 976.904546][T14713] ? debug_smp_processor_id+0x17/0x20 [ 976.909753][T14713] __x64_sys_mount+0xbf/0xd0 [ 976.914181][T14713] x64_sys_call+0x49d/0x9a0 [ 976.918528][T14713] do_syscall_64+0x3b/0xb0 [ 976.922771][T14713] ? clear_bhb_loop+0x55/0xb0 [ 976.927288][T14713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.933015][T14713] RIP: 0033:0x7f08f317dff9 [ 976.937268][T14713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.956709][T14713] RSP: 002b:00007f08f3eec038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 976.964951][T14713] RAX: ffffffffffffffda RBX: 00007f08f3335f80 RCX: 00007f08f317dff9 [ 976.972765][T14713] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 976.980572][T14713] RBP: 00007f08f3eec090 R08: 0000000020000140 R09: 0000000000000000 [ 976.988385][T14713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.996196][T14713] R13: 0000000000000000 R14: 00007f08f3335f80 R15: 00007ffe953e2ca8 [ 977.004013][T14713] [ 977.017684][T12054] EXT4-fs (loop3): unmounting filesystem. [ 977.024722][T14707] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 977.034603][T14707] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 977.055395][T14707] F2FS-fs (loop2): Found nat_bits in checkpoint [ 977.070806][T14725] loop4: detected capacity change from 0 to 512 [ 977.096256][T14725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 977.105045][T14707] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 977.112002][T14707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 977.130922][T14725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 977.140607][T14725] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038 (0x7fffffff) [ 977.165396][T14725] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 977.192418][T12303] EXT4-fs (loop4): unmounting filesystem. [ 977.259830][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x4 [ 977.276154][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x2 [ 977.283800][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.306141][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.306158][ T5612] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 977.313625][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.337499][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.344962][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.366395][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.373879][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.381749][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.389464][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.397030][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.404485][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.409995][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x4 [ 977.412300][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.426502][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x2 [ 977.427128][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.449138][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.463208][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.477420][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.486951][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.492779][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.494451][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.508468][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.509539][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.521217][ T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0 [ 977.524272][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.539523][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.540248][ T866] hid-generic 0000:3000000:0000.013D: hidraw1: HID v0.00 Device [] on [ 977.547040][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.563927][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.579063][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.587051][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.594607][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.602099][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.609733][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.617326][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.624877][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.632598][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.640173][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.648094][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.655638][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.663443][ T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0 [ 977.672883][ T434] hid-generic 0000:3000000:0000.013E: hidraw1: HID v0.00 Device [sy] on syz0 [ 977.686268][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 977.736826][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.747675][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.758252][ T5612] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 977.767680][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.778138][ T5612] usb 1-1: config 0 descriptor?? [ 977.946165][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 978.066270][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.236342][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 978.249305][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.257410][ T24] usb 3-1: Product: syz [ 978.261375][ T24] usb 3-1: Manufacturer: syz [ 978.265803][ T24] usb 3-1: SerialNumber: syz [ 978.288150][T14493] EXT4-fs (loop1): unmounting filesystem. [ 978.297079][ T24] usb 3-1: config 0 descriptor?? [ 978.341400][ T5612] sony 0003:12BA:0100.013F: hidraw1: USB HID vff.ff Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0 [ 978.352688][ T5612] sony 0003:12BA:0100.013F: failed to claim input [ 978.586216][ T24] usb 3-1: Found UVC 0.00 device syz (8086:0b03) [ 978.592425][ T24] usb 3-1: No valid video chain found. [ 978.788207][ T5612] usb 3-1: USB disconnect, device number 95 [ 978.956478][ T866] usb 2-1: USB disconnect, device number 105 [ 978.966196][ T24] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 979.208578][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 979.214632][T14762] loop3: detected capacity change from 0 to 512 [ 979.221470][T14762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 979.231791][T14762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 979.239721][T14762] System zones: 1-12 [ 979.244638][T14762] EXT4-fs (loop3): 1 truncate cleaned up [ 979.250141][T14762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 979.326184][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.336999][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.356248][ T24] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 979.366341][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.375757][ T24] usb 5-1: config 0 descriptor?? [ 979.403640][T14773] loop1: detected capacity change from 0 to 512 [ 979.423683][T14773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 979.437783][T14773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 979.446575][T14773] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 979.463058][T14773] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 979.490729][T14493] EXT4-fs (loop1): unmounting filesystem. [ 979.626150][ T5612] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 979.765651][T14782] loop4: detected capacity change from 0 to 256 [ 979.773781][T14782] FAT-fs (loop4): Unrecognized mount option "dont_measure" or missing value [ 980.001580][T12657] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 980.044447][ T710] usb 1-1: USB disconnect, device number 96 [ 980.087872][T12054] EXT4-fs (loop3): unmounting filesystem. [ 980.129820][T14789] FAULT_INJECTION: forcing a failure. [ 980.129820][T14789] name failslab, interval 1, probability 0, space 0, times 0 [ 980.142352][T14789] CPU: 1 PID: 14789 Comm: syz.3.3473 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 980.151966][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 980.161864][T14789] Call Trace: [ 980.164987][T14789] [ 980.167762][T14789] dump_stack_lvl+0x151/0x1b7 [ 980.172277][T14789] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 980.177570][T14789] dump_stack+0x15/0x1c [ 980.181562][T14789] should_fail_ex+0x3d0/0x520 [ 980.186075][T14789] ? security_inode_alloc+0x29/0x120 [ 980.191194][T14789] __should_failslab+0xaf/0xf0 [ 980.195796][T14789] should_failslab+0x9/0x20 [ 980.200134][T14789] kmem_cache_alloc+0x3b/0x2c0 [ 980.204735][T14789] security_inode_alloc+0x29/0x120 [ 980.209680][T14789] inode_init_always+0x720/0x970 [ 980.214455][T14789] ? shmem_match+0x180/0x180 [ 980.218880][T14789] new_inode_pseudo+0x98/0x1d0 [ 980.223507][T14789] new_inode+0x28/0x1c0 [ 980.227497][T14789] shmem_get_inode+0x32d/0xc20 [ 980.232084][T14789] __shmem_file_setup+0x111/0x2a0 [ 980.236939][T14789] shmem_file_setup+0x2f/0x40 [ 980.241459][T14789] __se_sys_memfd_create+0x1e1/0x3e0 [ 980.246575][T14789] __x64_sys_memfd_create+0x5b/0x70 [ 980.251604][T14789] x64_sys_call+0x871/0x9a0 [ 980.255943][T14789] do_syscall_64+0x3b/0xb0 [ 980.260196][T14789] ? clear_bhb_loop+0x55/0xb0 [ 980.264707][T14789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.270438][T14789] RIP: 0033:0x7f9975d7dff9 [ 980.274689][T14789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.294132][T14789] RSP: 002b:00007f9976b2ce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 980.302376][T14789] RAX: ffffffffffffffda RBX: 0000000000005505 RCX: 00007f9975d7dff9 [ 980.310186][T14789] RDX: 00007f9976b2cef0 RSI: 0000000000000000 RDI: 00007f9975df0b02 [ 980.317996][T14789] RBP: 0000000020002480 R08: 00007f9976b2cbb7 R09: 00007f9976b2ce40 [ 980.325810][T14789] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0 [ 980.333707][T14789] R13: 00007f9976b2cef0 R14: 00007f9976b2ceb0 R15: 00000000200002c0 [ 980.341521][T14789] [ 980.355049][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x4 [ 980.362607][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x2 [ 980.376144][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.376499][ T5612] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.383615][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.383644][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.435688][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.443413][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.451097][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.466232][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.480834][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.489233][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.496884][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.515458][T14796] loop1: detected capacity change from 0 to 1024 [ 980.528129][T14796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 980.545494][T14493] EXT4-fs (loop1): unmounting filesystem. [ 980.562401][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.570041][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.577715][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.585264][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.592871][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.600464][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.615737][ T5612] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 980.624816][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.632777][ T5612] usb 3-1: Product: syz [ 980.636825][ T5612] usb 3-1: Manufacturer: syz [ 980.641224][ T5612] usb 3-1: SerialNumber: syz [ 980.647275][ T5612] usb 3-1: config 0 descriptor?? [ 980.655431][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.663120][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.670798][ T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0 [ 980.678780][ T866] hid-generic 0000:3000000:0000.0140: hidraw0: HID v0.00 Device [] on [ 980.836167][ T28] audit: type=1400 audit(2000000115.309:19918): avc: denied { mounton } for pid=14800 comm="syz.1.3476" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 980.907808][ T5612] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 980.916970][ T5612] usb 3-1: USB disconnect, device number 96 [ 981.306370][T12657] udevd[12657]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 981.420050][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x4 [ 981.427874][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x2 [ 981.435409][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.443044][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.463001][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.471036][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.478392][T14814] loop2: detected capacity change from 0 to 512 [ 981.478780][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.492229][T14814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 981.495386][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.507671][T14814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 981.508118][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.517130][T14814] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038 (0x7fffffff) [ 981.524704][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.541682][ T866] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 981.601577][T14814] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 981.786903][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.794551][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.803930][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.812129][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.812794][T10909] EXT4-fs (loop2): unmounting filesystem. [ 981.819659][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.819681][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.819700][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.840174][ T866] usb 4-1: Using ep0 maxpacket: 8 [ 981.856342][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 981.862120][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.862144][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.862163][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.886293][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 981.894597][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0 [ 981.899452][ T24] usb 5-1: USB disconnect, device number 97 [ 981.904597][ T5612] hid-generic 0000:3000000:0000.0141: hidraw0: HID v0.00 Device [sy] on syz0 [ 982.006226][ T866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.016140][T14827] loop2: detected capacity change from 0 to 512 [ 982.025446][ T866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 982.026269][T14827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 982.034766][ T866] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 982.057722][T14827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 982.065527][T14827] System zones: 1-12 [ 982.070727][T14827] EXT4-fs (loop2): 1 truncate cleaned up [ 982.076537][T14827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 982.226363][ T866] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.297901][T14822] loop4: detected capacity change from 0 to 40427 [ 982.305982][T14822] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(12288) [ 982.313648][ T866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.323517][ T866] usb 4-1: Product: syz [ 982.326742][T14822] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 982.327887][ T866] usb 4-1: Manufacturer: syz [ 982.340278][ T866] usb 4-1: SerialNumber: syz [ 982.342890][T14822] F2FS-fs (loop4): Unrecognized mount option "usrquota=fsync_mode=strict" or missing value [ 982.383786][T14834] loop4: detected capacity change from 0 to 1024 [ 982.386547][ T866] cdc_ncm 4-1:1.0: skipping garbage [ 982.399041][ T866] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 982.408185][ T866] cdc_ncm 4-1:1.0: bind() failure [ 982.416615][T14834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 982.434152][T12303] EXT4-fs (loop4): unmounting filesystem. [ 982.644454][ T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 982.850193][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x4 [ 982.860850][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x2 [ 982.876630][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.891347][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.907074][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.916128][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 982.916625][T10909] EXT4-fs (loop2): unmounting filesystem. [ 982.926945][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.942560][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.953956][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.961573][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.969110][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.976762][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.984225][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.991723][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 982.999253][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 983.006861][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 983.014299][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 983.022171][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 983.029717][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 983.037247][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.048050][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.057733][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 983.065265][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 983.074172][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 983.083456][ T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0 [ 983.091000][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.157537][ T24] usb 2-1: config 0 descriptor?? [ 983.162442][ T866] hid-generic 0000:3000000:0000.0142: hidraw0: HID v0.00 Device [] on [ 983.647122][ T24] wacom 0003:056A:00CC.0143: unknown main item tag 0x0 [ 983.654418][ T24] wacom 0003:056A:00CC.0143: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.1-1/input0 [ 983.850352][T14832] loop1: detected capacity change from 0 to 256 [ 983.865046][T14859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.893210][T14832] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 983.906016][T14859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.033550][T14862] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 984.207372][T14862] loop4: detected capacity change from 0 to 1024 [ 984.215140][T14862] EXT4-fs: Ignoring removed bh option [ 984.577153][T14862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 984.604873][T14861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32625 sclass=netlink_route_socket pid=14861 comm=syz.4.3491 [ 984.658648][T14872] FAULT_INJECTION: forcing a failure. [ 984.658648][T14872] name failslab, interval 1, probability 0, space 0, times 0 [ 984.671123][T14872] CPU: 0 PID: 14872 Comm: syz.2.3492 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 984.680695][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 984.690588][T14872] Call Trace: [ 984.693712][T14872] [ 984.696493][T14872] dump_stack_lvl+0x151/0x1b7 [ 984.701006][T14872] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 984.706307][T14872] ? stack_trace_save+0x113/0x1c0 [ 984.711163][T14872] ? stack_trace_snprint+0xf0/0xf0 [ 984.716104][T14872] dump_stack+0x15/0x1c [ 984.720097][T14872] should_fail_ex+0x3d0/0x520 [ 984.724612][T14872] ? parse_opts+0x17a/0x690 [ 984.728952][T14872] __should_failslab+0xaf/0xf0 [ 984.733552][T14872] should_failslab+0x9/0x20 [ 984.737887][T14872] __kmem_cache_alloc_node+0x3d/0x250 [ 984.743093][T14872] ? v9fs_session_init+0x1f2/0x1950 [ 984.748129][T14872] ? legacy_get_tree+0xf1/0x190 [ 984.752900][T14872] ? vfs_get_tree+0x88/0x290 [ 984.757328][T14872] ? parse_opts+0x17a/0x690 [ 984.761671][T14872] __kmalloc_node_track_caller+0xa2/0x1e0 [ 984.767221][T14872] kstrdup+0x39/0x70 [ 984.770953][T14872] parse_opts+0x17a/0x690 [ 984.775119][T14872] ? p9_fd_show_options+0x1b0/0x1b0 [ 984.780160][T14872] ? debug_smp_processor_id+0x17/0x20 [ 984.785367][T14872] p9_fd_create+0x8d/0x520 [ 984.789618][T14872] ? p9_fd_create_unix+0x480/0x480 [ 984.794563][T14872] ? p9_client_create+0x770/0x11c0 [ 984.799509][T14872] ? p9_client_create+0x770/0x11c0 [ 984.804454][T14872] p9_client_create+0x867/0x11c0 [ 984.809236][T14872] ? do_trace_9p_fid_put+0x110/0x110 [ 984.814350][T14872] ? kstrdup+0x54/0x70 [ 984.818260][T14872] v9fs_session_init+0x1f2/0x1950 [ 984.823120][T14872] ? v9fs_show_options+0x570/0x570 [ 984.828066][T14872] ? kasan_save_alloc_info+0x1f/0x30 [ 984.833183][T14872] ? __kasan_kmalloc+0x9c/0xb0 [ 984.837782][T14872] ? kmalloc_trace+0x44/0xa0 [ 984.842297][T14872] v9fs_mount+0xca/0xb60 [ 984.846376][T14872] ? incfs_get_verity_signature+0x420/0x420 [ 984.852103][T14872] ? cap_capable+0x1d2/0x270 [ 984.856533][T14872] legacy_get_tree+0xf1/0x190 [ 984.861059][T14872] ? incfs_get_verity_signature+0x420/0x420 [ 984.867040][T14872] vfs_get_tree+0x88/0x290 [ 984.871294][T14872] do_new_mount+0x2ba/0xb30 [ 984.875642][T14872] ? do_move_mount_old+0x160/0x160 [ 984.880580][T14872] ? security_capable+0x87/0xb0 [ 984.885270][T14872] ? ns_capable+0x89/0xe0 [ 984.889434][T14872] path_mount+0x671/0x1070 [ 984.893690][T14872] ? user_path_at_empty+0x14e/0x1a0 [ 984.898725][T14872] __se_sys_mount+0x2c4/0x3b0 [ 984.903233][T14872] ? __this_cpu_preempt_check+0x13/0x20 [ 984.908621][T14872] ? __x64_sys_mount+0xd0/0xd0 [ 984.913243][T14872] ? debug_smp_processor_id+0x17/0x20 [ 984.918425][T14872] __x64_sys_mount+0xbf/0xd0 [ 984.922847][T14872] x64_sys_call+0x49d/0x9a0 [ 984.927187][T14872] do_syscall_64+0x3b/0xb0 [ 984.931441][T14872] ? clear_bhb_loop+0x55/0xb0 [ 984.935953][T14872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 984.941691][T14872] RIP: 0033:0x7f2043b7dff9 [ 984.945934][T14872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.965376][T14872] RSP: 002b:00007f20448bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 984.973619][T14872] RAX: ffffffffffffffda RBX: 00007f2043d35f80 RCX: 00007f2043b7dff9 [ 984.981430][T14872] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 984.989240][T14872] RBP: 00007f20448bc090 R08: 0000000020000140 R09: 0000000000000000 [ 984.997052][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 985.004863][T14872] R13: 0000000000000000 R14: 00007f2043d35f80 R15: 00007ffeb9d84298 [ 985.012680][T14872] [ 985.048382][T12303] EXT4-fs (loop4): unmounting filesystem. [ 985.054872][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x4 [ 985.062785][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x2 [ 985.070667][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.078346][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.085895][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.093585][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.101823][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.110021][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.123134][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.133233][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.140888][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.150376][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.158110][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.167887][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.175393][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.187698][ T866] usb 4-1: USB disconnect, device number 66 [ 985.381102][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.386618][T14894] loop4: detected capacity change from 0 to 512 [ 985.399845][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.401315][T14892] loop3: detected capacity change from 0 to 512 [ 985.427361][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.434919][T14894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 985.444602][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.445294][T14892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 985.452147][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.467950][ T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0 [ 985.476602][ T434] hid-generic 0000:3000000:0000.0144: hidraw1: HID v0.00 Device [sy] on syz0 [ 985.486820][T14894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 985.494678][T14894] System zones: 1-12 [ 985.507940][T14894] EXT4-fs (loop4): 1 truncate cleaned up [ 985.516989][T14894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 985.607369][T14892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 985.635509][T14892] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038 (0x7fffffff) [ 985.645088][ T434] usb 2-1: USB disconnect, device number 106 [ 985.761658][T14892] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 985.791524][T12054] EXT4-fs (loop3): unmounting filesystem. [ 985.867490][T14902] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3500'. [ 986.097970][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x4 [ 986.108553][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x2 [ 986.125295][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.142121][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.156371][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.169322][T14909] loop2: detected capacity change from 0 to 1024 [ 986.175527][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.183937][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.191719][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.199661][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.207408][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.219156][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.227738][T14909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 986.238179][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.252463][T10909] EXT4-fs (loop2): unmounting filesystem. [ 986.263229][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.356129][ T866] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 986.423808][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.433192][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.435883][T14916] loop2: detected capacity change from 0 to 512 [ 986.440734][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.440758][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.440777][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.460191][T14916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 986.461762][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.484869][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.492481][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0 [ 986.498778][T14916] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 986.508934][ T3544] hid-generic 0000:3000000:0000.0145: hidraw0: HID v0.00 Device [] on [ 986.508995][T14916] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038 (0x7fffffff) [ 986.564343][T14916] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 986.593064][T12303] EXT4-fs (loop4): unmounting filesystem. [ 986.600621][T10909] EXT4-fs (loop2): unmounting filesystem. [ 986.643548][T14922] loop4: detected capacity change from 0 to 4096 [ 986.654654][T14922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 986.662421][T14922] EXT4-fs (loop4): Test dummy encryption mode enabled [ 986.674061][T14922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 987.266681][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.279158][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.300720][ T866] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 987.380515][ T866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.425739][ T866] usb 1-1: config 0 descriptor?? [ 987.495213][T12303] EXT4-fs (loop4): unmounting filesystem. [ 987.627990][T14947] loop2: detected capacity change from 0 to 512 [ 987.648339][T14947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 987.661062][T14947] EXT4-fs (loop2): 1 truncate cleaned up [ 987.666940][T14947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 987.689856][T14947] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 987.698826][T14947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 987.768881][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3511'. [ 987.908201][ T866] arvo 0003:1E7D:30D4.0146: item fetching failed at offset 5/7 [ 987.918916][ T866] arvo 0003:1E7D:30D4.0146: parse failed [ 987.927632][ T866] arvo: probe of 0003:1E7D:30D4.0146 failed with error -22 [ 987.941262][T10909] EXT4-fs (loop2): unmounting filesystem. [ 987.969203][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x4 [ 987.992494][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x2 [ 988.009356][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.024812][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.039598][T14953] loop2: detected capacity change from 0 to 512 [ 988.045946][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.054438][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.062348][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.070091][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.073378][T14953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 988.077664][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.086524][T14953] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038 (0x7fffffff) [ 988.129738][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.143040][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.223653][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.295157][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.904963][T14961] loop3: detected capacity change from 0 to 16 [ 988.911089][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.917579][T14961] erofs: (device loop3): mounted with root inode @ nid 36. [ 988.931629][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.944111][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.944928][T14961] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 1 for nid 36 [ 988.961276][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.970391][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.977983][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.985531][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 988.993105][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0 [ 989.034574][T10909] EXT4-fs (loop2): unmounting filesystem. [ 989.042978][ T5612] hid-generic 0000:3000000:0000.0147: hidraw0: HID v0.00 Device [sy] on syz0 [ 989.113298][T14971] loop1: detected capacity change from 0 to 512 [ 989.128032][T14971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 989.156535][T14971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 989.172488][T14971] System zones: 1-12 [ 989.182650][T14971] EXT4-fs (loop1): 1 truncate cleaned up [ 989.199421][T14971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 989.254662][T14967] loop4: detected capacity change from 0 to 40427 [ 989.276052][T14967] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 989.292930][T14967] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 989.307511][T14967] F2FS-fs (loop4): invalid crc value [ 989.323571][T14967] F2FS-fs (loop4): Found nat_bits in checkpoint [ 989.398412][T14967] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 989.405389][T14967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 989.425788][T14969] loop2: detected capacity change from 0 to 40427 [ 989.467262][T14984] tmpfs: Unknown parameter 'nolazytime˙˙' [ 989.497309][T14984] loop3: detected capacity change from 0 to 512 [ 989.539391][T14969] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 989.608686][T14969] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 989.628214][T14984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 989.637028][T14984] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038 (0x7fffffff) [ 989.647553][T14984] EXT4-fs (loop3): unmounting filesystem. [ 989.656619][T14969] F2FS-fs (loop2): Found nat_bits in checkpoint [ 989.796315][T14969] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 989.805971][T14969] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 989.995642][ T5612] usb 1-1: USB disconnect, device number 97 [ 990.173734][T15007] 9pnet_fd: Insufficient options for proto=fd [ 990.193099][T15007] loop3: detected capacity change from 0 to 512 [ 990.269381][T15007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 990.278667][T14493] EXT4-fs (loop1): unmounting filesystem. [ 990.284306][T15007] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff) [ 990.373049][T15007] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.3523: corrupted inode contents [ 990.430491][ T28] audit: type=1400 audit(2000000124.909:19919): avc: denied { write } for pid=15012 comm="syz.1.3525" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 990.512879][T15007] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.3523: mark_inode_dirty error [ 990.536542][T15007] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.3523: corrupted inode contents [ 990.556146][T15007] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.3523: mark_inode_dirty error [ 990.846670][ T1931] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 990.991836][T15005] loop4: detected capacity change from 0 to 40427 [ 991.007496][T15005] F2FS-fs (loop4): invalid crc value [ 991.023767][T15005] F2FS-fs (loop4): Found nat_bits in checkpoint [ 991.039705][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 991.119249][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 991.141895][T15005] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 991.276335][ T1931] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 991.294509][ T1931] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 991.326621][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 991.392669][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 991.410159][ T1931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.413372][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 991.442224][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 991.464071][T12303] syz-executor: attempt to access beyond end of device [ 991.464071][T12303] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 991.637441][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x4 [ 991.649085][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x2 [ 991.664799][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.679476][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.687102][ T1931] usb 2-1: string descriptor 0 read error: -22 [ 991.693139][ T1931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 991.755154][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.762720][ T1931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.770828][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.779919][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.788482][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.796020][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.803513][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.811140][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 991.819144][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 992.927883][ T1931] usb 2-1: 0:2 : does not exist [ 992.932876][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 992.942359][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 992.993343][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 993.055229][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 993.062819][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 993.070357][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 993.078003][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 993.085440][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 993.093026][ T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0 [ 993.170108][ T300] usb 2-1: USB disconnect, device number 107 [ 993.172515][T15045] xt_bpf: check failed: parse error [ 993.183451][ T866] hid-generic 0000:3000000:0000.0148: hidraw0: HID v0.00 Device [] on [ 993.496138][ T866] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 993.616450][T10370] udevd[10370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 993.866172][ T866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.931213][T15054] loop2: detected capacity change from 0 to 40427 [ 993.958836][T15054] F2FS-fs (loop2): Unrecognized mount option "0xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 994.036788][T15054] loop2: detected capacity change from 0 to 512 [ 994.043134][T15054] EXT4-fs: Ignoring removed mblk_io_submit option [ 994.049635][ T866] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 994.058787][ T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.066791][T15054] EXT4-fs: Ignoring removed i_version option [ 994.072609][ T866] usb 5-1: Product: syz [ 994.077218][ T866] usb 5-1: Manufacturer: syz [ 994.081623][ T866] usb 5-1: SerialNumber: syz [ 994.087504][ T866] usb 5-1: config 0 descriptor?? [ 994.092863][T15054] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.3535: invalid block [ 994.103849][T15054] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.3535: couldn't read orphan inode 11 (err -117) [ 994.115775][T15054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 994.347690][ T866] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 994.357841][ T866] usb 5-1: USB disconnect, device number 98 [ 994.364903][T12054] EXT4-fs (loop3): unmounting filesystem. [ 994.380869][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x4 [ 994.391286][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x2 [ 994.399365][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.406881][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.414534][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.422910][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.435996][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.443688][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.451509][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.465225][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.476928][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.484484][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.491903][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.499425][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.510598][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.518121][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.525576][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.533045][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.540621][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.550460][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.557992][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0 [ 994.570765][ T5612] hid-generic 0000:3000000:0000.0149: hidraw0: HID v0.00 Device [sy] on syz0 [ 994.618812][T10370] udevd[10370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 994.668302][T10909] EXT4-fs (loop2): unmounting filesystem. [ 994.956141][ T866] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 995.006798][ T320] device bridge_slave_1 left promiscuous mode [ 995.012728][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.020000][ T320] device bridge_slave_0 left promiscuous mode [ 995.025948][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.033439][ T320] device veth1_macvtap left promiscuous mode [ 995.039428][ T320] device veth0_vlan left promiscuous mode [ 995.164301][T15076] loop2: detected capacity change from 0 to 512 [ 995.177242][T15076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 995.187666][T15076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 995.196711][T15076] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038 (0x7fffffff) [ 995.209930][T15076] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 995.238833][T10909] EXT4-fs (loop2): unmounting filesystem. [ 995.316187][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.326952][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.336467][ T866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 995.349252][ T866] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 995.358067][ T866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.366319][ T866] usb 1-1: config 0 descriptor?? [ 995.677273][T15083] loop1: detected capacity change from 0 to 512 [ 995.698859][ T28] audit: type=1400 audit(2000000130.179:19920): avc: denied { call } for pid=15085 comm="syz.2.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 995.719497][T15083] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 995.728578][T15083] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 995.847285][ T866] plantronics 0003:047F:FFFF.014A: No inputs registered, leaving [ 995.868445][ T866] plantronics 0003:047F:FFFF.014A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 996.290133][T15100] loop2: detected capacity change from 0 to 16 [ 996.297839][T15100] erofs: (device loop2): mounted with root inode @ nid 36. [ 996.564940][T14493] EXT4-fs (loop1): unmounting filesystem. [ 996.616158][ T300] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 996.906129][ T300] usb 5-1: device descriptor read/64, error -71 [ 996.998025][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x4 [ 997.005595][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x2 [ 997.013063][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.051843][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.059481][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.067168][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.074613][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.082132][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.089560][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.097513][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.104963][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.112475][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.119991][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.127663][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.135202][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.142754][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.150401][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.158005][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.165519][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.183345][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.215136][ T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0 [ 997.241081][ T866] hid-generic 0000:3000000:0000.014B: hidraw1: HID v0.00 Device [sy] on syz0 [ 997.396132][ T1931] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 997.416167][ T300] usb 5-1: device descriptor read/64, error -71 [ 997.706145][ T300] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 997.817181][T15114] loop2: detected capacity change from 0 to 512 [ 997.823917][T15114] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 997.843248][T15114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 997.852364][T15114] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038 (0x7fffffff) [ 997.879150][T15114] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 997.902405][T10909] EXT4-fs (loop2): unmounting filesystem. [ 998.180957][ T300] usb 5-1: device descriptor read/64, error -71 [ 998.596152][ T300] usb 5-1: device descriptor read/64, error -71 [ 998.661627][ T866] usb 1-1: USB disconnect, device number 98 [ 998.720550][T15122] loop1: detected capacity change from 0 to 512 [ 998.720984][ T300] usb usb5-port1: attempt power cycle [ 998.736488][T15122] EXT4-fs (loop1): Test dummy encryption mode enabled [ 998.802342][T15122] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.3552: invalid block [ 998.813869][T15122] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.3552: couldn't read orphan inode 11 (err -117) [ 998.825889][T15122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 998.856375][T14493] EXT4-fs (loop1): unmounting filesystem. [ 998.937332][T15129] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3553'. [ 999.156135][ T300] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 999.336182][ T300] usb 5-1: device descriptor read/8, error -71 [ 999.616181][ T300] usb 5-1: device descriptor read/8, error -71 [ 999.745139][ T28] audit: type=1400 audit(2000000134.219:19921): avc: denied { nlmsg_read } for pid=15136 comm="syz.2.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 999.746961][T15137] netem: change failed [ 1000.077199][ T300] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1000.286169][ T300] usb 5-1: device descriptor read/8, error -71 [ 1000.603402][ T300] usb 5-1: device descriptor read/8, error -71 [ 1000.726196][ T300] usb usb5-port1: unable to enumerate USB device [ 1000.854236][T15148] loop2: detected capacity change from 0 to 512 [ 1000.868033][T15148] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1000.878740][T15148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1000.887039][T15148] System zones: 1-12 [ 1000.892594][T15148] EXT4-fs (loop2): 1 truncate cleaned up [ 1000.898729][T15148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1000.969192][T10909] EXT4-fs (loop2): unmounting filesystem. [ 1003.375563][T15166] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1003.376677][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x4 [ 1003.447018][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x2 [ 1003.454690][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.462494][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.470074][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.477693][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.485146][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.492798][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.500646][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.508710][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.516602][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.524276][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.532289][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.540316][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.548307][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.563470][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.571674][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.579649][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.587698][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.595289][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.603417][ T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0 [ 1003.625922][ T866] hid-generic 0000:3000000:0000.014C: hidraw0: HID v0.00 Device [sy] on syz0 [ 1006.297421][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x4 [ 1006.304905][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x2 [ 1006.313753][T15189] 9pnet_fd: Insufficient options for proto=fd SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=3540 state=1 status=67 (errno 9: Bad file descriptor) [ 1006.418824][ T28] audit: type=1400 audit(2000000140.899:19922): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[13863]" dev="pipefs" ino=13863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1006.436155][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.476140][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.489825][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.514242][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.526175][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.533643][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.556172][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.576327][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.583825][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.600760][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.610142][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.618843][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.626484][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.633934][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.641762][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.649387][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.657229][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.664673][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.672354][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0 [ 1006.683552][ T320] tipc: Disabling bearer [ 1006.688994][ T320] tipc: Left network mode [ 1006.689435][ T1931] hid-generic 0000:3000000:0000.014D: hidraw0: HID v0.00 Device [] on [ 1006.795070][T15206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.802016][T15206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.809263][T15206] device bridge_slave_0 entered promiscuous mode [ 1006.815988][T15206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.823144][T15206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.830335][T15206] device bridge_slave_1 entered promiscuous mode [ 1006.868147][T15206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.874983][T15206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.882111][T15206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.888883][T15206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.908412][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1006.915747][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.922804][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.937728][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1006.945603][ T866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.952386][ T866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.959769][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1006.967733][ T866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.974545][ T866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.981783][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1006.989495][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1007.004298][T15206] device veth0_vlan entered promiscuous mode [ 1007.010494][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1007.018745][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1007.026457][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1007.033582][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1007.045772][T15206] device veth1_macvtap entered promiscuous mode [ 1007.052699][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1007.063138][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1007.072395][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1007.386639][ T320] device bridge_slave_1 left promiscuous mode [ 1007.392548][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.399946][ T320] device bridge_slave_0 left promiscuous mode [ 1007.405844][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.413391][ T320] device veth1_macvtap left promiscuous mode [ 1007.419259][ T320] device veth0_vlan left promiscuous mode [ 1008.236627][ T320] device bridge_slave_1 left promiscuous mode [ 1008.242535][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.249830][ T320] device bridge_slave_0 left promiscuous mode [ 1008.255721][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.263408][ T320] device bridge_slave_1 left promiscuous mode [ 1008.269366][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.276572][ T320] device bridge_slave_0 left promiscuous mode [ 1008.282464][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.290211][ T320] device veth1_macvtap left promiscuous mode [ 1008.296007][ T320] device veth0_vlan left promiscuous mode [ 1008.301981][ T320] device veth1_macvtap left promiscuous mode [ 1008.307871][ T320] device veth0_vlan left promiscuous mode