last executing test programs: 59.401669802s ago: executing program 4 (id=1560): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.177935719s ago: executing program 4 (id=1564): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, r0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) poll(0x0, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="05000000010001", 0x7) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x140192}) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 57.255927691s ago: executing program 4 (id=1568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r4, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) syz_socket_connect_nvme_tcp() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) 55.86726642s ago: executing program 4 (id=1571): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 55.797644341s ago: executing program 4 (id=1573): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') 55.415956397s ago: executing program 4 (id=1580): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 45.588836792s ago: executing program 3 (id=1779): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) 45.481389884s ago: executing program 3 (id=1781): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0xfffc, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x9, 0x100, @void}}}}}}}, 0x0) 45.431453194s ago: executing program 3 (id=1783): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 45.333397926s ago: executing program 3 (id=1785): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x281, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) 44.637149745s ago: executing program 3 (id=1789): pipe2(&(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44880) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40080, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001a0001ff8000000000f61e000a000000"], 0x2c}}, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) socket(0x29, 0x6, 0x7) ftruncate(r6, 0x2007ffc) 44.437560248s ago: executing program 3 (id=1792): r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}]}, 0x48}}, 0x40080) readv(r0, &(0x7f00000003c0)=[{0x0}], 0x1) 44.437370528s ago: executing program 32 (id=1792): r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}]}, 0x48}}, 0x40080) readv(r0, &(0x7f00000003c0)=[{0x0}], 0x1) 40.371497274s ago: executing program 33 (id=1580): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 28.135146202s ago: executing program 1 (id=1872): mkdir(&(0x7f0000000100)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x63, &(0x7f0000000300), 0x0, 0x0, 0x0, &(0x7f0000000380), 0x8, 0x42, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) 26.18621358s ago: executing program 1 (id=1875): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x122) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x121a02, 0x0) sendfile(r1, r0, 0x0, 0x8) 25.500003209s ago: executing program 1 (id=1880): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@tcp, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6(0xa, 0x2, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x5e0) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) getpid() epoll_create1(0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) setitimer(0x1, 0x0, 0x0) 25.42867263s ago: executing program 1 (id=1884): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 25.39409747s ago: executing program 1 (id=1885): syz_usb_connect(0x2, 0x10e, &(0x7f00000047c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff0100042402", @ANYBLOB="7e943709a26e0512"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 25.225614603s ago: executing program 1 (id=1887): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 23.847996522s ago: executing program 34 (id=1887): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 8.617600732s ago: executing program 2 (id=1957): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000"], 0x44}}, 0x0) 8.567648432s ago: executing program 2 (id=1958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 8.545478773s ago: executing program 5 (id=1959): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x54) socket$inet_tcp(0x2, 0x1, 0x0) getresgid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$eJzs3d9rXFUeAPDvnWSStJ1u0t3C/njZbtvdLpTOZLKk0IVlW/ZhF9aC2D+gxmQaQyaZkJnUJBRM/wUVLfggIvjki6DvRcRXfRH1QXzxSRAtFRF8GJk7kzZNMklImkzNfD5wuPfcO5nvORnu+c6cSe4JoGudioiViOiLiGcjYrB1PGmVuNwsjcfdv3drvFGSqNevfZek5xv1WPMzDcdazzkQEc/8N+K5ZGPc6tLy9Fi5XJpv1Qu1mblCdWn5wtTM2GRpsjQ7Mjx6abR4sVgsPra+vvRj7venP7j8rzeeeuvjt99bXEzW9HdtP3ZrZZNjza5nI7fmWG9E/H+vwZ4QPa3+9HW6IexKJiJ+GxGn0+t/MHrSVxMAOMzq9cGoD66tAwCHXePzfy6STL41F5CLTCafb87hnYyjmXKlWjt/o7IwOxHpHNZQZDM3psql4dbc2VBkk0a9mO4/rI+sq/8jIk5ExCv9R9J6frxSnujkGx8A6GLH1uX/H/qb+R8AOOQGOt0AAODAyf8A0H3kfwDoPvI/AHQf+R8Auo/8DwDdR/4HgK7y9NWrjVJfvf/1xM2lhenKzQsTpep0fmZhPD9emZ/LT1Yqk+k9e2a2e75ypTJ3MWYXFgu1UrVWqC4tX5+pLMzWrqf39b5eyh5IrwCArZz4890vkohY+eeRtMSatRzkajjcMp1uANAxPZ1uANAxVvuC7uUzPrDJEr1rZNv/idCd3cc09wCdde6P5v+hW8nB0L3M/0P3Mv8P3ateT6z5DwBdZjdz/Jf34X0I0Dlbf/+/xS1C9vD9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPza5dKSZPKttcBzkcnk8xHHI2IossmNqXJpOCJ+ExGf92f7G/VipxsNAOxR5puktf7XucGzufVn+5Kf+tNtRLzw+rXXFsdqtfli4/j3D47X7rSOj3Si/QDAdlbz9GoeX3X/3q3x1XKQ7fn2SnNx0Y3xe6M33Q5ENiKO3k9a9abG+5WexxB/5XZE/GGz+EnkIo4MtVY+XR+/Efv4/sePh/Ezj8TPpOea28bv4nePoS3Qbe5eaS5ovvH6y8SpdLv59T+QjlB71378yzwY/3rajH+ndtrHjwb/1zb+7Yg/9W4+/qzGT9rEP7vD+F9Xvny53bn6mxHnNs0/ySOxCrWZuUJ1afnC1MzYZGmyNDsyPHpptHixWCwW0jnqwupM9Ub/fvWzF7fq/9E28Qe26f9fd9j/rz75z4d/2SL+389s/vqf3CJ+Iyf+bYfx3znz/vPtzjXiT7Tp/3av//kdxr/76bs/7/ChAMABqC4tT4+Vy6V5O3b2c6fvyWiGnZ3udHpkAvbbw4u+0y0BAAAAAAAAAAAAAADaOYh/J+p0HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi8fgkAAP//ZCDc4A==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) 7.443430008s ago: executing program 5 (id=1966): creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 6.174389106s ago: executing program 5 (id=1970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlink(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 6.084951476s ago: executing program 2 (id=1973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.993605568s ago: executing program 6 (id=1974): r0 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x8048}], 0x400000000000172, 0x4001c00) 5.993135048s ago: executing program 2 (id=1975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x80000, 0x100000000, 0x0, 0x0, 0x100000, 0xb, 0x0, 0x8000000, 0x7, 0x3, 0xfffffffffffffffe, 0x200, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.895159643s ago: executing program 0 (id=1976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.879125363s ago: executing program 7 (id=1977): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$link(0x8, 0x0, r4) 4.809579744s ago: executing program 2 (id=1978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 4.809274424s ago: executing program 0 (id=1979): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") 4.803401694s ago: executing program 0 (id=1980): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) 4.707254725s ago: executing program 5 (id=1981): creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 4.681962076s ago: executing program 5 (id=1982): ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e01"], 0x0) 4.093612644s ago: executing program 6 (id=1983): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000"], 0x44}}, 0x0) 3.713732489s ago: executing program 7 (id=1984): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@tcp, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6(0xa, 0x2, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x5e0) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) setitimer(0x1, 0x0, 0x0) 3.7035542s ago: executing program 0 (id=1985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 3.64953298s ago: executing program 6 (id=1986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x28, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.64906039s ago: executing program 7 (id=1987): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x2004}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x6, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.64875178s ago: executing program 6 (id=1988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x80000, 0x100000000, 0x0, 0x0, 0x100000, 0xb, 0x0, 0x8000000, 0x7, 0x3, 0xfffffffffffffffe, 0x200, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.61421787s ago: executing program 0 (id=1989): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./bus\x00', 0x1000806, &(0x7f00000016c0)=ANY=[], 0x9, 0x1508, &(0x7f0000002040)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x25dfdbfb, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x8e040, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) socket(0x10, 0x2, 0x0) 3.603366021s ago: executing program 6 (id=1990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e9000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.541352991s ago: executing program 7 (id=1991): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000059c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") 3.540875442s ago: executing program 6 (id=1992): set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x68040200) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b00010000000009049c0002010351000905031300000000000725ec02a5dd0009b5"], 0x0) 1.227759574s ago: executing program 2 (id=1993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x4da, 0x1813c0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") kcmp(0x0, 0x0, 0x2, r0, r0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 1.195983504s ago: executing program 5 (id=1994): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3400c0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2044004}, 0x48800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') rmdir(&(0x7f0000000080)='./file0\x00') 165.161448ms ago: executing program 0 (id=1995): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x5b0, @dev, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 164.457948ms ago: executing program 7 (id=1996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000"], 0x44}}, 0x0) 0s ago: executing program 7 (id=1997): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) kernel console output (not intermixed with test programs): Directory bread(block 66) failed [ 514.422662][ T5815] FAT-fs (loop0): Directory bread(block 67) failed [ 514.429446][ T5815] FAT-fs (loop0): Directory bread(block 68) failed [ 514.436066][ T5815] FAT-fs (loop0): Directory bread(block 69) failed [ 514.442915][ T5815] FAT-fs (loop0): Directory bread(block 70) failed [ 514.449559][ T5815] FAT-fs (loop0): Directory bread(block 71) failed [ 514.456293][ T5815] FAT-fs (loop0): Directory bread(block 72) failed [ 514.462930][ T5815] FAT-fs (loop0): Directory bread(block 73) failed [ 515.311942][ T5821] loop4: detected capacity change from 0 to 512 [ 515.454103][ T5821] EXT4-fs (loop4): orphan cleanup on readonly fs [ 515.463491][ T5821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1330: bg 0: block 248: padding at end of block bitmap is not set [ 515.479894][ T5821] Quota error (device loop4): write_blk: dquota write failed [ 515.487477][ T5821] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 515.497531][ T5821] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.1330: Failed to acquire dquot type 1 [ 515.512572][ T5821] EXT4-fs (loop4): 1 truncate cleaned up [ 515.519415][ T5821] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,bsdgroups,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 516.318752][ T5826] loop0: detected capacity change from 0 to 1024 [ 516.412495][ T5826] EXT4-fs (loop0): Test dummy encryption mode enabled [ 516.512132][ T5826] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: writeback. [ 517.141791][ T5832] loop2: detected capacity change from 0 to 512 [ 517.339340][ T5832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 517.759862][ T5839] loop0: detected capacity change from 0 to 512 [ 517.871007][ T5832] EXT4-fs (loop2): 1 truncate cleaned up [ 517.955948][ T5839] EXT4-fs (loop0): orphan cleanup on readonly fs [ 517.965668][ T5839] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1334: bg 0: block 248: padding at end of block bitmap is not set [ 517.981718][ T5839] Quota error (device loop0): write_blk: dquota write failed [ 517.989337][ T5839] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 517.999362][ T5839] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.1334: Failed to acquire dquot type 1 [ 518.013685][ T5839] EXT4-fs (loop0): 1 truncate cleaned up [ 518.020430][ T5839] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,bsdgroups,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 518.109479][ T5832] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mb_optimize_scan=0x0000000000000001,debug_want_extra_isize=0x0000000000000068,nombcache,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 519.005640][ T5845] syz.2.1333[5845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.005731][ T5845] syz.2.1333[5845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.818187][ T5849] loop1: detected capacity change from 0 to 1024 [ 519.859635][ T5849] EXT4-fs (loop1): Ignoring removed orlov option [ 519.866032][ T5849] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 519.948082][ T5856] loop4: detected capacity change from 0 to 256 [ 519.971438][ T5849] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 520.089291][ T5856] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 520.437713][ T5864] loop1: detected capacity change from 0 to 2048 [ 520.469675][ T5861] loop2: detected capacity change from 0 to 2048 [ 520.499862][ T5861] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 520.507043][ T5861] EXT4-fs (loop2): dax option not supported [ 520.514232][ T5864] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 520.528625][ T5864] EXT4-fs (loop1): dax option not supported [ 522.275359][ T5877] overlayfs: missing 'lowerdir' [ 523.047987][ T5880] loop3: detected capacity change from 0 to 1024 [ 523.076493][ T5880] EXT4-fs (loop3): dax option not supported [ 523.118608][ T5886] loop4: detected capacity change from 0 to 1024 [ 523.245805][ T5882] overlayfs: failed to resolve './file0': -2 [ 523.316137][ T5894] overlayfs: missing 'lowerdir' [ 523.636183][ T5886] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 523.710130][ T5893] loop0: detected capacity change from 0 to 512 [ 523.825752][ T5893] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 523.842816][ T5893] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 523.876223][ T5908] loop1: detected capacity change from 0 to 1024 [ 523.889745][ T5893] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1345: corrupted inode contents [ 523.902462][ T5893] EXT4-fs error (device loop0): ext4_dirty_inode:6070: inode #2: comm syz.0.1345: mark_inode_dirty error [ 523.914293][ T5893] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1345: corrupted inode contents [ 523.960336][ T5893] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1345: mark_inode_dirty error [ 523.991818][ T5908] EXT4-fs (loop1): Ignoring removed oldalloc option [ 524.014468][ T5910] loop2: detected capacity change from 0 to 512 [ 524.086162][ T5913] loop3: detected capacity change from 0 to 1024 [ 524.147608][ T5908] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,oldalloc,mb_optimize_scan=0x0000000000000001,usrquota,auto_da_alloc=0x0000000000000053,,errors=continue. Quota mode: writeback. [ 524.183105][ T5913] EXT4-fs (loop3): Ignoring removed orlov option [ 524.189554][ T5913] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 524.210586][ T5910] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 524.227078][ T5910] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 524.241793][ T5910] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.1348: corrupted inode contents [ 524.253954][ T5910] EXT4-fs error (device loop2): ext4_dirty_inode:6070: inode #2: comm syz.2.1348: mark_inode_dirty error [ 524.265730][ T5910] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.1348: corrupted inode contents [ 524.277757][ T5910] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1348: mark_inode_dirty error [ 524.313377][ T5913] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 524.441503][ T5908] overlayfs: missing 'lowerdir' [ 524.697980][ T5920] loop2: detected capacity change from 0 to 1024 [ 524.738537][ T5920] EXT4-fs (loop2): dax option not supported [ 525.164176][ T5937] overlayfs: missing 'lowerdir' [ 526.749173][ T5949] overlayfs: missing 'lowerdir' [ 527.065440][ T5946] overlayfs: failed to resolve './file0': -2 [ 527.069984][ T5955] loop4: detected capacity change from 0 to 256 [ 527.283043][ T5955] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 527.359666][ T5959] loop1: detected capacity change from 0 to 512 [ 527.562849][ T5964] loop3: detected capacity change from 0 to 1024 [ 527.607861][ T5965] loop2: detected capacity change from 0 to 1024 [ 527.633773][ T5960] loop0: detected capacity change from 0 to 512 [ 527.655704][ T5959] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 527.673939][ T5959] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 527.913889][ T5959] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.1362: corrupted inode contents [ 527.927006][ T5959] EXT4-fs error (device loop1): ext4_dirty_inode:6070: inode #2: comm syz.1.1362: mark_inode_dirty error [ 527.940628][ T5959] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.1362: corrupted inode contents [ 527.954065][ T5959] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1362: mark_inode_dirty error [ 529.430958][ T5964] EXT4-fs (loop3): dax option not supported [ 529.438322][ T5965] EXT4-fs (loop2): Ignoring removed oldalloc option [ 529.456823][ T5960] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 529.543807][ T5965] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,oldalloc,mb_optimize_scan=0x0000000000000001,usrquota,auto_da_alloc=0x0000000000000053,,errors=continue. Quota mode: writeback. [ 529.689120][ T5976] loop4: detected capacity change from 0 to 1024 [ 529.723610][ T5976] EXT4-fs (loop4): dax option not supported [ 529.732450][ T5965] overlayfs: missing 'lowerdir' [ 530.508690][ T5984] loop3: detected capacity change from 0 to 1024 [ 530.681513][ T5984] EXT4-fs (loop3): dax option not supported [ 530.929885][ T5990] loop2: detected capacity change from 0 to 1024 [ 530.993665][ T5990] EXT4-fs (loop2): dax option not supported [ 531.112299][ T5997] loop1: detected capacity change from 0 to 1024 [ 531.150535][ T5994] loop4: detected capacity change from 0 to 8192 [ 531.190555][ T5997] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 531.606454][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 531.754809][ T6004] loop3: detected capacity change from 0 to 512 [ 535.029373][ T6004] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 535.101429][ T6007] loop2: detected capacity change from 0 to 2048 [ 535.179740][ T6007] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 535.186970][ T6007] EXT4-fs (loop2): dax option not supported [ 535.428834][ T6012] loop3: detected capacity change from 0 to 256 [ 535.879549][ T6012] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 538.641728][ T6025] loop2: detected capacity change from 0 to 1024 [ 539.163277][ T6028] loop1: detected capacity change from 0 to 1024 [ 539.776168][ T6025] EXT4-fs (loop2): Test dummy encryption mode enabled [ 539.784528][ T6028] EXT4-fs (loop1): Test dummy encryption mode enabled [ 540.082259][ T6025] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: writeback. [ 540.410628][ T6028] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: writeback. [ 540.786307][ T6041] loop2: detected capacity change from 0 to 1024 [ 541.953259][ T6041] EXT4-fs (loop2): dax option not supported [ 542.520500][ T6046] loop3: detected capacity change from 0 to 40427 [ 543.345901][ T6046] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 543.354600][ T30] audit: type=1400 audit(1749689880.892:218): avc: denied { getopt } for pid=6057 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 543.404419][ T6046] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 543.456302][ T6066] loop1: detected capacity change from 0 to 1024 [ 543.534113][ T6066] EXT4-fs (loop1): dax option not supported [ 543.947907][ T6046] F2FS-fs (loop3): Found nat_bits in checkpoint [ 544.350742][ T6077] loop4: detected capacity change from 0 to 2048 [ 544.351408][ T6079] loop1: detected capacity change from 0 to 512 [ 544.389849][ T6077] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 544.404892][ T6077] EXT4-fs (loop4): dax option not supported [ 544.480732][ T6079] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 544.480732][ T6079] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 544.480732][ T6079] [ 544.514972][ T6079] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 544.621455][ T6079] EXT4-fs (loop1): Unrecognized mount option "obj_type=/dev/net/tun" or missing value [ 544.661035][ T6088] loop3: detected capacity change from 0 to 2048 [ 544.682429][ T6088] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 544.786417][ T6088] EXT4-fs (loop3): dax option not supported [ 545.114945][ T6081] loop2: detected capacity change from 0 to 40427 [ 545.130218][ T6093] loop1: detected capacity change from 0 to 512 [ 545.151327][ T6081] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 545.156111][ T6095] loop0: detected capacity change from 0 to 1024 [ 545.164702][ T6081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 545.175000][ T6081] F2FS-fs (loop2): invalid crc value [ 545.182519][ T6081] F2FS-fs (loop2): Found nat_bits in checkpoint [ 545.517587][ T6095] EXT4-fs (loop0): dax option not supported [ 545.614634][ T6093] EXT4-fs (loop1): 1 orphan inode deleted [ 545.620681][ T6093] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 545.701779][ T6110] loop4: detected capacity change from 0 to 1024 [ 545.740016][ T6093] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.755516][ T6081] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 545.763072][ T6081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 545.774764][ T6110] EXT4-fs (loop4): Test dummy encryption mode enabled [ 546.704507][ T6110] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: writeback. [ 548.074142][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1404'. [ 548.974336][ T6125] loop1: detected capacity change from 0 to 1024 [ 549.207035][ T6125] EXT4-fs (loop1): dax option not supported [ 549.446931][ T6140] loop4: detected capacity change from 0 to 1024 [ 549.458481][ T6135] loop0: detected capacity change from 0 to 512 [ 550.304620][ T6140] EXT4-fs (loop4): Test dummy encryption mode enabled [ 550.667581][ T6140] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: writeback. [ 551.784130][ T6135] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 551.801434][ T6135] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 551.818541][ T6135] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1406: corrupted inode contents [ 552.184259][ T6135] EXT4-fs error (device loop0): ext4_dirty_inode:6070: inode #2: comm syz.0.1406: mark_inode_dirty error [ 552.205571][ T6135] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1406: corrupted inode contents [ 552.218621][ T6135] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1406: mark_inode_dirty error [ 552.252373][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1406'. [ 552.360565][ T6153] loop1: detected capacity change from 0 to 40427 [ 552.421498][ T6153] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 552.429980][ T6153] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 552.439650][ T6153] F2FS-fs (loop1): invalid crc value [ 552.463129][ T6167] loop0: detected capacity change from 0 to 1024 [ 552.471161][ T6153] F2FS-fs (loop1): Found nat_bits in checkpoint [ 552.529797][ T6167] EXT4-fs (loop0): dax option not supported [ 552.558135][ T6153] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 552.565880][ T6153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 552.631128][ T6163] loop4: detected capacity change from 0 to 40427 [ 552.677049][ T6162] loop3: detected capacity change from 0 to 40427 [ 552.687722][ T6163] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 552.713492][ T6163] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 552.730830][ T6162] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 552.759389][ T6163] F2FS-fs (loop4): invalid crc value [ 552.768065][ T6162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 552.804341][ T6162] F2FS-fs (loop3): invalid crc value [ 552.805041][ T6163] F2FS-fs (loop4): Found nat_bits in checkpoint [ 552.823427][ T6162] F2FS-fs (loop3): Found nat_bits in checkpoint [ 552.853423][ T6163] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 552.860634][ T6163] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 553.084196][ T6162] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 553.093653][ T6162] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 554.557845][ T6195] loop0: detected capacity change from 0 to 512 [ 554.712704][ T6197] loop2: detected capacity change from 0 to 512 [ 554.762444][ T6195] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 554.779206][ T6195] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 554.842237][ T6195] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1415: corrupted inode contents [ 554.855647][ T6195] EXT4-fs error (device loop0): ext4_dirty_inode:6070: inode #2: comm syz.0.1415: mark_inode_dirty error [ 554.868504][ T6195] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1415: corrupted inode contents [ 554.882390][ T6195] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1415: mark_inode_dirty error [ 555.080622][ T6197] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 555.691700][ T6202] loop0: detected capacity change from 0 to 1024 [ 555.733614][ T6202] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 555.788006][ T6205] loop3: detected capacity change from 0 to 256 [ 555.821161][ T6205] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 558.015816][ T6214] loop2: detected capacity change from 0 to 256 [ 558.095980][ T6214] FAT-fs (loop2): Directory bread(block 64) failed [ 558.102739][ T6214] FAT-fs (loop2): Directory bread(block 65) failed [ 558.109531][ T6214] FAT-fs (loop2): Directory bread(block 66) failed [ 558.116202][ T6214] FAT-fs (loop2): Directory bread(block 67) failed [ 558.122787][ T6214] FAT-fs (loop2): Directory bread(block 68) failed [ 558.129630][ T6214] FAT-fs (loop2): Directory bread(block 69) failed [ 558.136427][ T6214] FAT-fs (loop2): Directory bread(block 70) failed [ 558.143048][ T6214] FAT-fs (loop2): Directory bread(block 71) failed [ 558.149629][ T6214] FAT-fs (loop2): Directory bread(block 72) failed [ 558.156282][ T6214] FAT-fs (loop2): Directory bread(block 73) failed [ 558.349048][ T6218] device vlan2 entered promiscuous mode [ 560.235684][ T6218] device syz_tun entered promiscuous mode [ 560.497253][ T6230] loop4: detected capacity change from 0 to 1024 [ 560.524308][ T6230] EXT4-fs (loop4): dax option not supported [ 560.594080][ T6232] loop2: detected capacity change from 0 to 1024 [ 560.710793][ T6228] loop3: detected capacity change from 0 to 40427 [ 560.763795][ T6232] EXT4-fs (loop2): dax option not supported [ 561.012854][ T6228] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 561.020850][ T6228] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 561.041987][ T6228] F2FS-fs (loop3): invalid crc value [ 561.096628][ T6228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 561.161644][ T6235] loop0: detected capacity change from 0 to 40427 [ 561.181281][ T6228] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 561.191955][ T6235] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 561.212453][ T6228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 561.221722][ T6235] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 561.254672][ T6235] F2FS-fs (loop0): invalid crc value [ 561.275444][ T6235] F2FS-fs (loop0): Found nat_bits in checkpoint [ 561.431174][ T6249] loop4: detected capacity change from 0 to 256 [ 561.749012][ T6249] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 561.844685][ T6255] loop1: detected capacity change from 0 to 1024 [ 561.862396][ T6235] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 561.871162][ T6235] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 561.905052][ T6255] EXT4-fs (loop1): dax option not supported [ 562.013692][ T6258] loop2: detected capacity change from 0 to 512 [ 563.310794][ T6258] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 563.327582][ T6258] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.394310][ T6258] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.1429: corrupted inode contents [ 563.407075][ T6258] EXT4-fs error (device loop2): ext4_dirty_inode:6070: inode #2: comm syz.2.1429: mark_inode_dirty error [ 563.420226][ T6258] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.1429: corrupted inode contents [ 563.433519][ T6258] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1429: mark_inode_dirty error [ 563.907428][ T6272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1434'. [ 564.068555][ T6276] device vlan2 entered promiscuous mode [ 564.204961][ T6276] device syz_tun entered promiscuous mode [ 566.660317][ T6289] loop3: detected capacity change from 0 to 512 [ 570.327295][ T6291] loop2: detected capacity change from 0 to 256 [ 572.197726][ T6291] FAT-fs (loop2): Directory bread(block 64) failed [ 572.206939][ T6291] FAT-fs (loop2): Directory bread(block 65) failed [ 572.213998][ T6291] FAT-fs (loop2): Directory bread(block 66) failed [ 572.220796][ T6291] FAT-fs (loop2): Directory bread(block 67) failed [ 572.227587][ T6291] FAT-fs (loop2): Directory bread(block 68) failed [ 572.234184][ T6291] FAT-fs (loop2): Directory bread(block 69) failed [ 572.241210][ T6291] FAT-fs (loop2): Directory bread(block 70) failed [ 572.247801][ T6291] FAT-fs (loop2): Directory bread(block 71) failed [ 572.254563][ T6291] FAT-fs (loop2): Directory bread(block 72) failed [ 572.261133][ T6291] FAT-fs (loop2): Directory bread(block 73) failed [ 572.364848][ T6302] loop1: detected capacity change from 0 to 1024 [ 572.386069][ T6299] loop0: detected capacity change from 0 to 2048 [ 572.425744][ T6302] EXT4-fs (loop1): dax option not supported [ 572.560457][ T6299] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 572.560487][ T6299] EXT4-fs (loop0): dax option not supported [ 576.106620][ T6319] loop2: detected capacity change from 0 to 256 [ 577.633146][ T6319] FAT-fs (loop2): Directory bread(block 64) failed [ 577.640090][ T6319] FAT-fs (loop2): Directory bread(block 65) failed [ 577.647226][ T6319] FAT-fs (loop2): Directory bread(block 66) failed [ 577.653171][ T6323] loop0: detected capacity change from 0 to 1024 [ 577.654506][ T6319] FAT-fs (loop2): Directory bread(block 67) failed [ 577.667452][ T6319] FAT-fs (loop2): Directory bread(block 68) failed [ 577.674682][ T6319] FAT-fs (loop2): Directory bread(block 69) failed [ 577.681375][ T6319] FAT-fs (loop2): Directory bread(block 70) failed [ 577.687927][ T6319] FAT-fs (loop2): Directory bread(block 71) failed [ 577.694560][ T6319] FAT-fs (loop2): Directory bread(block 72) failed [ 577.701689][ T6319] FAT-fs (loop2): Directory bread(block 73) failed [ 577.753074][ T6328] loop1: detected capacity change from 0 to 16 [ 577.807175][ T6323] EXT4-fs (loop0): dax option not supported [ 577.964052][ T6332] loop4: detected capacity change from 0 to 512 [ 579.699449][ T6332] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 579.716350][ T6332] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 579.793995][ T6332] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #2: comm syz.4.1448: corrupted inode contents [ 579.807068][ T6332] EXT4-fs error (device loop4): ext4_dirty_inode:6070: inode #2: comm syz.4.1448: mark_inode_dirty error [ 579.819784][ T6332] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #2: comm syz.4.1448: corrupted inode contents [ 579.832545][ T6332] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.1448: mark_inode_dirty error [ 579.903929][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1448'. [ 580.247920][ T6342] loop0: detected capacity change from 0 to 1024 [ 580.359940][ T6344] loop2: detected capacity change from 0 to 512 [ 580.558620][ T6344] EXT4-fs (loop2): orphan cleanup on readonly fs [ 580.568735][ T6344] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1451: bg 0: block 248: padding at end of block bitmap is not set [ 580.585437][ T6344] Quota error (device loop2): write_blk: dquota write failed [ 580.593517][ T6344] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 580.603722][ T6344] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.1451: Failed to acquire dquot type 1 [ 580.617779][ T6344] EXT4-fs (loop2): 1 truncate cleaned up [ 580.624924][ T6344] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,bsdgroups,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 580.874541][ T6342] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 581.912983][ T6352] loop3: detected capacity change from 0 to 1024 [ 581.966115][ T6352] EXT4-fs (loop3): Ignoring removed orlov option [ 581.972566][ T6352] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 581.998262][ T6362] loop4: detected capacity change from 0 to 512 [ 582.045944][ T6352] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 582.232472][ T6362] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 582.488124][ T6370] loop1: detected capacity change from 0 to 256 [ 582.578871][ T6370] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 589.978054][ T6417] loop0: detected capacity change from 0 to 512 [ 590.330106][ T6417] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 590.346993][ T6417] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 590.404751][ T6417] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1468: corrupted inode contents [ 590.417808][ T6417] EXT4-fs error (device loop0): ext4_dirty_inode:6070: inode #2: comm syz.0.1468: mark_inode_dirty error [ 590.430547][ T6417] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1468: corrupted inode contents [ 590.444379][ T6417] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1468: mark_inode_dirty error [ 590.609762][ T6423] loop4: detected capacity change from 0 to 1024 [ 591.019824][ T6428] overlayfs: failed to resolve './file1': -2 [ 591.051190][ T6423] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 591.377795][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 591.658981][ T6215] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 592.029056][ T6215] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 592.047629][ T6215] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 592.057714][ T6215] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.078182][ T6215] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 592.339025][ T6215] usb 2-1: string descriptor 0 read error: -22 [ 592.349003][ T6215] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 592.388767][ T6215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.401048][ T6215] usb 2-1: config 0 descriptor?? [ 592.439661][ T6215] hub 2-1:0.0: bad descriptor, ignoring hub [ 592.455925][ T6215] hub: probe of 2-1:0.0 failed with error -5 [ 592.686720][ T6452] loop3: detected capacity change from 0 to 512 [ 592.931755][ T6452] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 592.948653][ T6452] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 593.044564][ T6452] EXT4-fs error (device loop3): ext4_do_update_inode:5234: inode #2: comm syz.3.1478: corrupted inode contents [ 593.057498][ T6452] EXT4-fs error (device loop3): ext4_dirty_inode:6070: inode #2: comm syz.3.1478: mark_inode_dirty error [ 593.070685][ T6452] EXT4-fs error (device loop3): ext4_do_update_inode:5234: inode #2: comm syz.3.1478: corrupted inode contents [ 593.084087][ T6452] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.1478: mark_inode_dirty error [ 593.879110][ T26] usb 2-1: USB disconnect, device number 2 [ 593.900560][ T6460] loop3: detected capacity change from 0 to 512 [ 593.976411][ T6460] EXT4-fs (loop3): 1 orphan inode deleted [ 593.985534][ T6460] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 593.999056][ T6460] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.175366][ T6465] loop2: detected capacity change from 0 to 1024 [ 594.243033][ T6465] EXT4-fs (loop2): dax option not supported [ 594.811505][ T6476] loop1: detected capacity change from 0 to 512 [ 594.917066][ T6476] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 594.917066][ T6476] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 594.917066][ T6476] [ 594.958109][ T6476] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 594.965428][ T6476] EXT4-fs (loop1): Unrecognized mount option "obj_type=/dev/net/tun" or missing value [ 595.101681][ T6482] loop2: detected capacity change from 0 to 256 [ 595.112449][ T6483] overlayfs: failed to resolve './file1': -2 [ 595.141875][ T6484] loop1: detected capacity change from 0 to 512 [ 595.157655][ T6482] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 595.274138][ T6484] EXT4-fs (loop1): 1 orphan inode deleted [ 595.280647][ T6484] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 595.295095][ T6484] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.449564][ T6496] loop0: detected capacity change from 0 to 512 [ 598.522022][ T6494] loop3: detected capacity change from 0 to 512 [ 599.876546][ T6494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 600.506285][ T6496] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 600.528370][ T6494] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1487: bg 0: block 248: padding at end of block bitmap is not set [ 600.544142][ T6494] Quota error (device loop3): write_blk: dquota write failed [ 600.551653][ T6494] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 600.561696][ T6494] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.1487: Failed to acquire dquot type 1 [ 600.580751][ T6494] EXT4-fs (loop3): 1 truncate cleaned up [ 600.681205][ T6502] loop2: detected capacity change from 0 to 256 [ 600.741343][ T6504] loop0: detected capacity change from 0 to 1024 [ 600.752844][ T6502] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 600.848244][ T6494] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,bsdgroups,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 600.931369][ T6504] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 601.388889][ T6525] loop3: detected capacity change from 0 to 512 [ 602.331514][ T6525] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 602.630926][ T6538] loop1: detected capacity change from 0 to 1024 [ 602.722046][ T6527] loop4: detected capacity change from 0 to 40427 [ 602.730543][ T6542] loop2: detected capacity change from 0 to 256 [ 602.805877][ T6538] EXT4-fs (loop1): dax option not supported [ 602.817158][ T6542] FAT-fs (loop2): Directory bread(block 64) failed [ 602.824127][ T6542] FAT-fs (loop2): Directory bread(block 65) failed [ 602.831400][ T6542] FAT-fs (loop2): Directory bread(block 66) failed [ 602.838068][ T6542] FAT-fs (loop2): Directory bread(block 67) failed [ 602.845254][ T6542] FAT-fs (loop2): Directory bread(block 68) failed [ 602.852790][ T6527] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 602.872863][ T6542] FAT-fs (loop2): Directory bread(block 69) failed [ 602.879883][ T6527] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 603.147151][ T6527] F2FS-fs (loop4): invalid crc value [ 603.185605][ T6542] FAT-fs (loop2): Directory bread(block 70) failed [ 603.355861][ T6527] F2FS-fs (loop4): Found nat_bits in checkpoint [ 603.538498][ T6542] FAT-fs (loop2): Directory bread(block 71) failed [ 603.899404][ T6527] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 603.904493][ T6542] FAT-fs (loop2): Directory bread(block 72) failed [ 603.906513][ T6527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 603.930673][ T6542] FAT-fs (loop2): Directory bread(block 73) failed [ 604.049158][ T2410] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 604.114215][ T6556] loop0: detected capacity change from 0 to 256 [ 604.205728][ T6556] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 604.592266][ T2410] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 604.608983][ T2410] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 604.617762][ T2410] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.698840][ T6562] loop1: detected capacity change from 0 to 512 [ 604.705360][ T2410] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 604.792488][ T6562] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 604.792488][ T6562] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 604.792488][ T6562] [ 604.822732][ T6562] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 604.837359][ T6562] EXT4-fs (loop1): Unrecognized mount option "obj_type=/dev/net/tun" or missing value [ 604.974814][ T2410] usb 4-1: string descriptor 0 read error: -22 [ 604.981410][ T2410] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 604.995933][ T6563] loop1: detected capacity change from 0 to 512 [ 605.002301][ T2410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.011972][ T2410] usb 4-1: config 0 descriptor?? [ 605.039795][ T6565] device vlan2 entered promiscuous mode [ 605.045503][ T6565] device syz_tun entered promiscuous mode [ 605.051956][ T2410] hub 4-1:0.0: bad descriptor, ignoring hub [ 605.059149][ T2410] hub: probe of 4-1:0.0 failed with error -5 [ 605.117744][ T6563] EXT4-fs (loop1): 1 orphan inode deleted [ 605.131933][ T6563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 605.160524][ T6563] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.380931][ T6577] loop0: detected capacity change from 0 to 512 [ 605.574734][ T6577] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 605.591598][ T6577] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 605.653740][ T6577] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1506: corrupted inode contents [ 605.666935][ T6577] EXT4-fs error (device loop0): ext4_dirty_inode:6070: inode #2: comm syz.0.1506: mark_inode_dirty error [ 605.680316][ T6577] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #2: comm syz.0.1506: corrupted inode contents [ 605.693865][ T6577] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1506: mark_inode_dirty error [ 606.463775][ T2410] usb 4-1: USB disconnect, device number 2 [ 606.541725][ T6587] loop0: detected capacity change from 0 to 512 [ 606.558151][ T6576] loop2: detected capacity change from 0 to 40427 [ 606.658146][ T6587] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 606.658146][ T6587] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 606.658146][ T6587] [ 606.677565][ T6576] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 606.714016][ T6576] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 606.725969][ T6587] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 606.733231][ T6587] EXT4-fs (loop0): Unrecognized mount option "obj_type=/dev/net/tun" or missing value [ 606.739221][ T6576] F2FS-fs (loop2): invalid crc value [ 607.081702][ T6595] loop1: detected capacity change from 0 to 512 [ 607.243042][ T6595] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 607.261082][ T6595] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 608.163321][ T6595] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.1508: corrupted inode contents [ 608.177648][ T6595] EXT4-fs error (device loop1): ext4_dirty_inode:6070: inode #2: comm syz.1.1508: mark_inode_dirty error [ 608.190317][ T6595] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.1508: corrupted inode contents [ 608.202985][ T6595] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1508: mark_inode_dirty error [ 608.272100][ T6576] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 608.766347][ T6605] loop4: detected capacity change from 0 to 1024 [ 608.886787][ T6607] loop0: detected capacity change from 0 to 512 [ 608.905257][ T6605] EXT4-fs (loop4): dax option not supported [ 608.920876][ T6609] loop1: detected capacity change from 0 to 1024 [ 609.023199][ T6609] EXT4-fs (loop1): dax option not supported [ 609.148880][ T6607] EXT4-fs (loop0): 1 orphan inode deleted [ 609.245976][ T6607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 609.264423][ T6607] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.837479][ T6629] loop4: detected capacity change from 0 to 256 [ 611.033699][ T4520] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 611.076593][ T6629] FAT-fs (loop4): Directory bread(block 64) failed [ 611.083425][ T6629] FAT-fs (loop4): Directory bread(block 65) failed [ 611.109784][ T6629] FAT-fs (loop4): Directory bread(block 66) failed [ 611.708650][ T6629] FAT-fs (loop4): Directory bread(block 67) failed [ 611.715323][ T6629] FAT-fs (loop4): Directory bread(block 68) failed [ 611.721898][ T6629] FAT-fs (loop4): Directory bread(block 69) failed [ 611.728452][ T6629] FAT-fs (loop4): Directory bread(block 70) failed [ 611.734999][ T6629] FAT-fs (loop4): Directory bread(block 71) failed [ 611.741578][ T6629] FAT-fs (loop4): Directory bread(block 72) failed [ 611.748098][ T6629] FAT-fs (loop4): Directory bread(block 73) failed [ 612.382077][ T6637] loop0: detected capacity change from 0 to 256 [ 612.482053][ T6637] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 612.701095][ T6642] loop4: detected capacity change from 0 to 512 [ 612.920124][ T6642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 613.065750][ T4520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.076763][ T4520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.086570][ T4520] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 613.099457][ T4520] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 613.108538][ T4520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.140851][ T4520] usb 2-1: config 0 descriptor?? [ 613.159500][ T4520] usb 2-1: can't set config #0, error -71 [ 613.181911][ T4520] usb 2-1: USB disconnect, device number 3 [ 613.250113][ T6642] EXT4-fs (loop4): 1 truncate cleaned up [ 613.255909][ T6642] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mb_optimize_scan=0x0000000000000001,debug_want_extra_isize=0x0000000000000068,nombcache,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 613.841961][ T6642] syz.4.1522[6642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.842043][ T6642] syz.4.1522[6642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.952192][ T6659] loop4: detected capacity change from 0 to 1024 [ 614.082269][ T6659] EXT4-fs (loop4): dax option not supported [ 614.198783][ T6666] loop2: detected capacity change from 0 to 512 [ 614.200451][ T6665] loop1: detected capacity change from 0 to 1024 [ 614.330327][ T6665] EXT4-fs (loop1): Ignoring removed orlov option [ 614.337088][ T6665] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 614.496297][ T6666] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 614.514140][ T6666] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 615.246823][ T6666] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.1526: corrupted inode contents [ 615.261788][ T6666] EXT4-fs error (device loop2): ext4_dirty_inode:6070: inode #2: comm syz.2.1526: mark_inode_dirty error [ 615.274498][ T6666] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.1526: corrupted inode contents [ 615.287408][ T6666] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1526: mark_inode_dirty error [ 615.368225][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'. [ 616.001729][ T6665] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 617.339046][ T6685] loop4: detected capacity change from 0 to 1024 [ 617.351020][ T6689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1534'. [ 617.435151][ T6694] loop2: detected capacity change from 0 to 256 [ 617.457164][ T6685] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 618.438687][ T6694] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 619.630506][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 619.689493][ T6707] loop0: detected capacity change from 0 to 1024 [ 619.755067][ T6707] EXT4-fs (loop0): dax option not supported [ 619.783300][ T6710] loop1: detected capacity change from 0 to 1024 [ 619.811031][ T6710] EXT4-fs (loop1): dax option not supported [ 620.267341][ T6714] overlayfs: failed to resolve './file1': -2 [ 621.182775][ T6722] loop4: detected capacity change from 0 to 512 [ 621.489184][ T6722] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 621.506087][ T6722] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 621.562740][ T6722] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #2: comm syz.4.1541: corrupted inode contents [ 621.575616][ T6722] EXT4-fs error (device loop4): ext4_dirty_inode:6070: inode #2: comm syz.4.1541: mark_inode_dirty error [ 621.588160][ T6722] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #2: comm syz.4.1541: corrupted inode contents [ 621.601310][ T6722] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.1541: mark_inode_dirty error [ 621.886110][ T6730] loop1: detected capacity change from 0 to 1024 [ 622.180998][ T6730] EXT4-fs (loop1): Ignoring removed orlov option [ 622.187408][ T6730] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 622.359084][ T6718] loop0: detected capacity change from 0 to 40427 [ 622.368458][ T6730] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 622.400534][ T6740] loop4: detected capacity change from 0 to 256 [ 622.411067][ T6718] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 622.424007][ T6718] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 622.440801][ T6718] F2FS-fs (loop0): invalid crc value [ 622.447732][ T6740] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 622.474994][ T6718] F2FS-fs (loop0): Found nat_bits in checkpoint [ 622.598363][ T6748] loop2: detected capacity change from 0 to 256 [ 622.626852][ T6718] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 622.638989][ T6718] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 622.866692][ T6748] FAT-fs (loop2): Directory bread(block 64) failed [ 622.898640][ T6748] FAT-fs (loop2): Directory bread(block 65) failed [ 623.148265][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1549'. [ 623.206148][ T6748] FAT-fs (loop2): Directory bread(block 66) failed [ 623.244561][ T6748] FAT-fs (loop2): Directory bread(block 67) failed [ 623.271270][ T6748] FAT-fs (loop2): Directory bread(block 68) failed [ 623.917222][ T6748] FAT-fs (loop2): Directory bread(block 69) failed [ 623.934116][ T6748] FAT-fs (loop2): Directory bread(block 70) failed [ 625.009214][ T6748] FAT-fs (loop2): Directory bread(block 71) failed [ 625.015912][ T6748] FAT-fs (loop2): Directory bread(block 72) failed [ 626.462326][ T6748] FAT-fs (loop2): Directory bread(block 73) failed [ 628.164145][ T6783] loop4: detected capacity change from 0 to 512 [ 628.472051][ T6784] loop1: detected capacity change from 0 to 1024 [ 628.511998][ T6783] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 628.529336][ T6783] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 628.586691][ T6783] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #2: comm syz.4.1555: corrupted inode contents [ 628.599884][ T6783] EXT4-fs error (device loop4): ext4_dirty_inode:6070: inode #2: comm syz.4.1555: mark_inode_dirty error [ 628.612564][ T6783] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #2: comm syz.4.1555: corrupted inode contents [ 628.626051][ T6783] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.1555: mark_inode_dirty error [ 628.909568][ T6789] loop3: detected capacity change from 0 to 512 [ 629.013349][ T6789] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 629.044809][ T6784] EXT4-fs (loop1): dax option not supported [ 629.083527][ T6789] EXT4-fs (loop3): 1 truncate cleaned up [ 629.100674][ T6789] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,mb_optimize_scan=0x0000000000000001,debug_want_extra_isize=0x0000000000000068,nombcache,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 629.265978][ T6789] syz.3.1557[6789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 629.266064][ T6789] syz.3.1557[6789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 629.433162][ T6797] loop0: detected capacity change from 0 to 512 [ 629.505505][ T6797] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 630.759029][ T6800] loop3: detected capacity change from 0 to 1024 [ 630.767503][ T6808] loop1: detected capacity change from 0 to 512 [ 630.791251][ T6800] EXT4-fs (loop3): dax option not supported [ 630.900369][ T6808] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 630.900369][ T6808] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 630.900369][ T6808] [ 630.938972][ T6808] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 630.946253][ T6808] EXT4-fs (loop1): Unrecognized mount option "obj_type=/dev/net/tun" or missing value [ 631.268445][ T6812] loop2: detected capacity change from 0 to 1024 [ 631.299387][ T6812] EXT4-fs (loop2): dax option not supported [ 631.516950][ T6816] overlayfs: failed to resolve './file1': -2 [ 631.657938][ T6820] loop3: detected capacity change from 0 to 512 [ 631.697499][ T6819] loop1: detected capacity change from 0 to 512 [ 631.801879][ T6820] EXT4-fs error (device loop3): ext4_do_update_inode:5234: inode #3: comm syz.3.1563: corrupted inode contents [ 631.822622][ T6819] EXT4-fs (loop1): 1 orphan inode deleted [ 631.830602][ T6819] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 631.842168][ T6820] EXT4-fs error (device loop3): ext4_dirty_inode:6070: inode #3: comm syz.3.1563: mark_inode_dirty error [ 631.860079][ T6819] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.871131][ T6820] EXT4-fs error (device loop3): ext4_do_update_inode:5234: inode #3: comm syz.3.1563: corrupted inode contents [ 631.894566][ T6820] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1563: mark_inode_dirty error [ 631.908176][ T6820] Quota error (device loop3): write_blk: dquota write failed [ 631.916026][ T6820] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 631.926374][ T6820] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.1563: Failed to acquire dquot type 0 [ 631.951301][ T6820] EXT4-fs (loop3): 1 orphan inode deleted [ 631.957187][ T6820] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 631.968474][ T6820] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.972013][ T6826] loop4: detected capacity change from 0 to 2048 [ 632.036128][ T6826] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 632.056987][ T6826] EXT4-fs (loop4): dax option not supported [ 632.689850][ T6836] loop2: detected capacity change from 0 to 512 [ 632.924403][ T6836] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 632.941200][ T6836] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 633.029817][ T6836] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.1566: corrupted inode contents [ 633.043470][ T6836] EXT4-fs error (device loop2): ext4_dirty_inode:6070: inode #2: comm syz.2.1566: mark_inode_dirty error [ 633.056664][ T6836] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.1566: corrupted inode contents [ 633.069951][ T6836] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1566: mark_inode_dirty error [ 633.168147][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1566'. [ 633.765781][ T6843] loop3: detected capacity change from 0 to 1024 [ 633.779603][ T6842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1568'. [ 633.900358][ T6843] EXT4-fs (loop3): dax option not supported [ 633.921942][ T6846] 8021q: VLANs not supported on ip6gre0 [ 634.322067][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 634.476134][ T6853] mmap: syz.4.1573 (6853) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 634.579583][ T30] audit: type=1400 audit(1749689972.132:219): avc: denied { write } for pid=6864 comm="syz.0.1576" name="vlan0" dev="proc" ino=4026532798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 634.635412][ T6867] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 634.648869][ T6870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=6870 comm=syz.0.1578 [ 634.654005][ T30] audit: type=1400 audit(1749689972.162:220): avc: denied { ioctl } for pid=6864 comm="syz.0.1576" path="socket:[37117]" dev="sockfs" ino=37117 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 634.692547][ T6870] netlink: 'syz.0.1578': attribute type 13 has an invalid length. [ 634.735736][ T30] audit: type=1400 audit(1749689972.282:221): avc: denied { name_bind } for pid=6874 comm="syz.2.1579" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 634.804185][ T30] audit: type=1400 audit(1749689972.352:222): avc: denied { name_bind } for pid=6879 comm="syz.3.1583" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 634.874802][ T30] audit: type=1400 audit(1749689972.422:223): avc: denied { ioctl } for pid=6884 comm="syz.3.1585" path="socket:[37224]" dev="sockfs" ino=37224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 635.005108][ T30] audit: type=1326 audit(1749689972.542:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.2.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb46d78ab19 code=0x7ffc0000 [ 635.036310][ T30] audit: type=1326 audit(1749689972.582:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.2.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb46d78ab19 code=0x7ffc0000 [ 635.115355][ T30] audit: type=1326 audit(1749689972.582:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.2.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb46d78ab19 code=0x7ffc0000 [ 635.606293][ T6933] tipc: Started in network mode [ 635.611214][ T6933] tipc: Node identity , cluster identity 4711 [ 635.617335][ T6933] tipc: Failed to set node id, please configure manually [ 635.624432][ T6933] tipc: Enabling of bearer rejected, failed to enable media [ 635.828982][ T20] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 635.858955][ T6215] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 636.068962][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 636.098916][ T6215] usb 2-1: Using ep0 maxpacket: 16 [ 636.189151][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 636.200451][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.210290][ T20] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 636.219381][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.228316][ T20] usb 4-1: config 0 descriptor?? [ 636.233481][ T6215] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 636.242134][ T6215] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.252289][ T6215] usb 2-1: config 0 has no interface number 0 [ 636.409110][ T6215] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 636.418678][ T6215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.426900][ T6215] usb 2-1: Product: syz [ 636.431662][ T6215] usb 2-1: Manufacturer: syz [ 636.436641][ T6215] usb 2-1: SerialNumber: syz [ 636.442142][ T6215] usb 2-1: config 0 descriptor?? [ 636.480094][ T6215] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 636.486614][ T6215] usb 2-1: No valid video chain found. [ 636.526600][ T6969] tipc: Started in network mode [ 636.531574][ T6969] tipc: Node identity , cluster identity 4711 [ 636.537766][ T6969] tipc: Failed to set node id, please configure manually [ 636.544897][ T6969] tipc: Enabling of bearer rejected, failed to enable media [ 636.683529][ T6215] usb 2-1: USB disconnect, device number 4 [ 636.727343][ T7001] bridge0: port 3(syz_tun) entered blocking state [ 636.734213][ T7001] bridge0: port 3(syz_tun) entered disabled state [ 636.743770][ T7001] bridge0: port 3(syz_tun) entered disabled state [ 636.820679][ T20] hid-generic 0003:060B:0001.0001: unknown main item tag 0x0 [ 636.828685][ T20] hid-generic 0003:060B:0001.0001: unknown main item tag 0x0 [ 636.842723][ T20] hid-generic 0003:060B:0001.0001: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.3-1/input0 [ 637.021199][ T1659] usb 4-1: USB disconnect, device number 3 [ 637.543483][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 637.553159][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 637.588348][ T7034] fuse: Bad value for 'fd' [ 637.686778][ T30] kauditd_printk_skb: 2887 callbacks suppressed [ 637.686796][ T30] audit: type=1400 audit(1749689975.224:3111): avc: denied { write } for pid=7043 comm="syz.0.1655" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 637.868958][ T1659] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 637.954518][ T30] audit: type=1400 audit(1749689975.494:3112): avc: denied { ioctl } for pid=7062 comm="syz.0.1663" path="socket:[37626]" dev="sockfs" ino=37626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 638.228992][ T1659] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 638.237208][ T1659] usb 4-1: config 0 has no interface number 0 [ 638.243548][ T1659] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 638.254831][ T1659] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 638.264841][ T1659] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 638.276151][ T1659] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 638.439024][ T1659] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 638.448163][ T1659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.456418][ T1659] usb 4-1: Product: syz [ 638.460893][ T1659] usb 4-1: Manufacturer: syz [ 638.465541][ T1659] usb 4-1: SerialNumber: syz [ 638.475938][ T1659] usb 4-1: config 0 descriptor?? [ 638.476867][ T30] audit: type=1400 audit(1749689976.024:3113): avc: denied { read } for pid=7080 comm="syz.2.1670" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 638.504483][ T30] audit: type=1400 audit(1749689976.034:3114): avc: denied { open } for pid=7080 comm="syz.2.1670" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 638.530357][ T1659] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 638.541072][ T1659] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input4 [ 638.551898][ T30] audit: type=1400 audit(1749689976.104:3115): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=2910 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 638.574445][ T30] audit: type=1400 audit(1749689976.104:3116): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2910 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 638.732515][ T20] usb 4-1: USB disconnect, device number 4 [ 638.738830][ T20] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 638.889891][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 638.902082][ T30] audit: type=1400 audit(1749689976.444:3117): avc: denied { bind } for pid=7084 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 638.930493][ T7085] netlink: 'syz.0.1672': attribute type 3 has an invalid length. [ 638.969024][ T1659] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 639.001892][ T30] audit: type=1400 audit(1749689976.544:3118): avc: denied { read } for pid=7092 comm="syz.0.1675" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 639.025366][ T30] audit: type=1400 audit(1749689976.544:3119): avc: denied { open } for pid=7092 comm="syz.0.1675" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 639.050119][ T30] audit: type=1400 audit(1749689976.544:3120): avc: denied { ioctl } for pid=7092 comm="syz.0.1675" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 639.171252][ T7104] process 'syz.0.1680' launched './file0' with NULL argv: empty string added [ 639.214269][ T7110] capability: warning: `syz.1.1683' uses deprecated v2 capabilities in a way that may be insecure [ 639.227009][ T1659] usb 3-1: Using ep0 maxpacket: 8 [ 639.241557][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1684'. [ 639.348986][ T1659] usb 3-1: unable to get BOS descriptor or descriptor too short [ 639.408992][ T1659] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 639.416603][ T1659] usb 3-1: can't read configurations, error -71 [ 639.803844][ T7136] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1694'. [ 639.845352][ T7140] syz.1.1695 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 640.222283][ T7159] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 640.558987][ T3006] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 640.798953][ T3006] usb 1-1: Using ep0 maxpacket: 8 [ 640.919024][ T3006] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 640.927714][ T3006] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.937824][ T3006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.957679][ T3006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.968927][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 640.979940][ T3006] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.993507][ T3006] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 641.002928][ T3006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.076703][ T7190] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1716'. [ 641.184288][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1718'. [ 641.228976][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 641.349067][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.359394][ T6215] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 641.366928][ T20] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 641.376124][ T20] usb 3-1: config 0 interface 0 has no altsetting 0 [ 641.479253][ T4520] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 641.539000][ T20] usb 3-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 641.548111][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.556188][ T20] usb 3-1: Product: syz [ 641.560432][ T20] usb 3-1: Manufacturer: syz [ 641.565019][ T20] usb 3-1: SerialNumber: syz [ 641.570538][ T20] usb 3-1: config 0 descriptor?? [ 641.598935][ T6215] usb 4-1: Using ep0 maxpacket: 32 [ 641.719020][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 641.726606][ T6215] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 641.734739][ T6215] usb 4-1: config 0 has no interface number 0 [ 641.811956][ T20] usb 3-1: USB disconnect, device number 4 [ 641.899019][ T6215] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 641.908186][ T6215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.916416][ T6215] usb 4-1: Product: syz [ 641.920673][ T6215] usb 4-1: Manufacturer: syz [ 641.925278][ T6215] usb 4-1: SerialNumber: syz [ 641.931062][ T6215] usb 4-1: config 0 descriptor?? [ 641.959070][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 641.969703][ T6215] smsc95xx v2.0.0 [ 642.079034][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.090024][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.099791][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.112761][ T6] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 642.121961][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.130863][ T6] usb 2-1: config 0 descriptor?? [ 642.409026][ T6215] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 642.419859][ T6215] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 642.469005][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 642.475897][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 642.487086][ T6] usb 2-1: USB disconnect, device number 5 [ 642.679024][ T6215] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 642.690696][ T6215] smsc95xx: probe of 4-1:0.67 failed with error -61 [ 642.785206][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 642.785224][ T30] audit: type=1400 audit(1749689980.324:3129): avc: denied { execute_no_trans } for pid=7257 comm="syz.2.1746" path="/357/file0" dev="tmpfs" ino=2349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 642.822668][ T30] audit: type=1400 audit(1749689980.364:3130): avc: denied { write } for pid=7259 comm="syz.2.1747" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 643.206657][ T30] audit: type=1400 audit(1749689980.744:3131): avc: denied { rename } for pid=7280 comm="syz.1.1756" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 643.270039][ T30] audit: type=1400 audit(1749689980.814:3132): avc: denied { relabelfrom } for pid=7306 comm="syz.2.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 643.289990][ T30] audit: type=1400 audit(1749689980.814:3133): avc: denied { relabelto } for pid=7306 comm="syz.2.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 643.310806][ T7308] netlink: 'syz.3.1717': attribute type 8 has an invalid length. [ 643.311580][ T6215] usb 1-1: USB disconnect, device number 2 [ 643.400998][ T7318] device bridge2 entered promiscuous mode [ 643.675310][ T7330] loop0: detected capacity change from 0 to 512 [ 643.923986][ T7330] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #3: comm syz.0.1776: corrupted inode contents [ 643.936861][ T7330] EXT4-fs error (device loop0): ext4_dirty_inode:6070: inode #3: comm syz.0.1776: mark_inode_dirty error [ 643.951483][ T7330] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #3: comm syz.0.1776: corrupted inode contents [ 643.965368][ T7330] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1776: mark_inode_dirty error [ 643.979433][ T7330] Quota error (device loop0): write_blk: dquota write failed [ 643.987097][ T7330] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 643.997233][ T7330] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.1776: Failed to acquire dquot type 0 [ 644.016227][ T7330] EXT4-fs (loop0): 1 orphan inode deleted [ 644.022384][ T7330] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 644.033879][ T7330] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.484665][ T6215] usb 4-1: USB disconnect, device number 5 [ 644.518737][ T30] audit: type=1400 audit(1749689982.054:3134): avc: denied { read } for pid=7337 comm="syz.3.1779" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 644.591150][ T30] audit: type=1400 audit(1749689982.094:3135): avc: denied { open } for pid=7337 comm="syz.3.1779" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 644.658785][ T7343] kvm: emulating exchange as write [ 644.712861][ T30] audit: type=1400 audit(1749689982.094:3136): avc: denied { ioctl } for pid=7337 comm="syz.3.1779" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 644.838717][ T7356] loop2: detected capacity change from 0 to 512 [ 644.872693][ T7356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 644.883998][ T7356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 644.892030][ T7356] System zones: 1-12 [ 644.896965][ T7356] EXT4-fs (loop2): 1 truncate cleaned up [ 644.902726][ T7356] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 644.922719][ T7356] futex_wake_op: syz.2.1786 tries to shift op by -1; fix this program [ 644.982972][ T7351] loop3: detected capacity change from 0 to 40427 [ 645.041126][ T7351] F2FS-fs (loop3): invalid crc value [ 645.334206][ T7351] F2FS-fs (loop3): Found nat_bits in checkpoint [ 645.404653][ T7351] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 645.436062][ T282] attempt to access beyond end of device [ 645.436062][ T282] loop3: rw=524288, want=45072, limit=40427 [ 645.448475][ T282] attempt to access beyond end of device [ 645.448475][ T282] loop3: rw=0, want=45072, limit=40427 [ 645.455679][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 645.481471][ T6497] attempt to access beyond end of device [ 645.481471][ T6497] loop3: rw=2049, want=40984, limit=40427 [ 645.772032][ T7384] loop2: detected capacity change from 0 to 512 [ 645.782629][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.790007][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.800135][ T7377] device bridge_slave_0 entered promiscuous mode [ 645.807222][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.814748][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.823691][ T7377] device bridge_slave_1 entered promiscuous mode [ 645.832276][ T7384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 645.844404][ T7384] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.865043][ T7386] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 645.944743][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.951829][ T7377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.959274][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.966315][ T7377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.028711][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.044980][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.054522][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.103619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.113193][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.120318][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.130759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.140769][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.147846][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.228812][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.237206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.254207][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 646.276119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.284761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.293120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 646.302215][ T7377] device veth0_vlan entered promiscuous mode [ 646.310134][ T6497] device bridge_slave_1 left promiscuous mode [ 646.316403][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.324350][ T6497] device bridge_slave_0 left promiscuous mode [ 646.337970][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.347524][ T6497] device veth1_macvtap left promiscuous mode [ 646.359922][ T6497] device veth0_vlan left promiscuous mode [ 646.428979][ T1659] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 646.517701][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 646.527980][ T7377] device veth1_macvtap entered promiscuous mode [ 646.539716][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.553798][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.580299][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 646.588869][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 646.898377][ T7407] loop2: detected capacity change from 0 to 512 [ 646.906054][ T1659] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 646.954269][ T1659] usb 2-1: config 0 has no interface number 0 [ 647.032551][ T1659] usb 2-1: config 0 interface 106 has no altsetting 0 [ 647.048002][ T7407] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 647.059697][ T7407] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.459658][ T1659] usb 2-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 647.481432][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.860639][ T1659] usb 2-1: Product: syz [ 647.864865][ T1659] usb 2-1: Manufacturer: syz [ 647.869754][ T1659] usb 2-1: SerialNumber: syz [ 647.897734][ T1659] usb 2-1: config 0 descriptor?? [ 648.046992][ T7422] loop2: detected capacity change from 0 to 256 [ 648.059443][ T7422] exfat: Deprecated parameter 'utf8' [ 648.067509][ T7422] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 648.124560][ T7428] loop5: detected capacity change from 0 to 2048 [ 648.151362][ T7428] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 648.200012][ T1659] usb 2-1: USB disconnect, device number 6 [ 648.268958][ T20] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 648.409012][ T2410] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 648.629081][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 648.640356][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 240, setting to 64 [ 648.651383][ T2410] usb 3-1: Using ep0 maxpacket: 16 [ 648.656554][ T20] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 648.665689][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.680210][ T20] usb 1-1: config 0 descriptor?? [ 648.699041][ T7418] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 648.769084][ T2410] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 648.777390][ T2410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.787559][ T2410] usb 3-1: config 0 has no interface number 0 [ 648.949060][ T2410] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 648.958253][ T2410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.966306][ T2410] usb 3-1: Product: syz [ 648.970622][ T2410] usb 3-1: Manufacturer: syz [ 648.975213][ T2410] usb 3-1: SerialNumber: syz [ 648.980764][ T2410] usb 3-1: config 0 descriptor?? [ 649.019563][ T2410] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 649.026265][ T2410] usb 3-1: No valid video chain found. [ 649.160713][ T20] hid-generic 0003:057E:200E.0002: hidraw0: USB HID v0.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 649.220988][ T1659] usb 3-1: USB disconnect, device number 5 [ 649.360702][ T2410] usb 1-1: USB disconnect, device number 3 [ 649.888612][ T7444] kvm [7443]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 649.897653][ T7444] kvm [7443]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 649.907273][ T7444] kvm [7443]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 649.916522][ T7444] kvm [7443]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 649.940811][ T7444] kvm [7443]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 649.949121][ T7444] kvm [7443]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x4000 [ 649.958091][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.962502][ T7444] kvm [7443]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 649.969663][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.981948][ T7444] kvm [7443]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 650.004293][ T7446] device bridge_slave_0 entered promiscuous mode [ 650.031831][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.044826][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.059448][ T7446] device bridge_slave_1 entered promiscuous mode [ 650.253946][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.261214][ T7446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.268592][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.275696][ T7446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.598273][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 650.625444][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.759658][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.912218][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 650.951612][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.958705][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.104900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 651.123248][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.130381][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.181548][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 651.195354][ T7468] loop2: detected capacity change from 0 to 256 [ 651.202879][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.250168][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 651.250184][ T30] audit: type=1400 audit(1749689988.794:3144): avc: denied { mount } for pid=7467 comm="syz.2.1823" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 651.288332][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 651.314710][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 651.336391][ T7446] device veth0_vlan entered promiscuous mode [ 651.351529][ T7446] device veth1_macvtap entered promiscuous mode [ 651.364339][ T6497] device bridge_slave_1 left promiscuous mode [ 651.378635][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.386474][ T6497] device bridge_slave_0 left promiscuous mode [ 651.393101][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.449464][ T30] audit: type=1400 audit(1749689988.994:3145): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 651.471232][ T6497] device veth1_macvtap left promiscuous mode [ 651.477283][ T6497] device veth0_vlan left promiscuous mode [ 651.582312][ T7473] loop0: detected capacity change from 0 to 40427 [ 651.592534][ T7473] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 651.606421][ T7473] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 651.636694][ T7473] F2FS-fs (loop0): Found nat_bits in checkpoint [ 651.691172][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.704964][ T7473] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 651.712980][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.722813][ T7473] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 651.736251][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.764646][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.776172][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 651.784975][ T7473] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 651.784997][ T7473] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 651.793139][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 651.804658][ T7473] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 651.810219][ T7473] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 651.818648][ T7473] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 651.826581][ T7473] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 651.829146][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 651.835397][ T7473] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 651.849412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 651.866683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 651.875415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.883121][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.894368][ T30] audit: type=1400 audit(1749689989.444:3146): avc: denied { create } for pid=7469 comm="syz.5.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 651.917837][ T30] audit: type=1400 audit(1749689989.454:3147): avc: denied { getopt } for pid=7469 comm="syz.5.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 651.951828][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1825'. [ 651.987968][ T30] audit: type=1400 audit(1749689989.474:3148): avc: denied { read } for pid=7469 comm="syz.5.1824" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 651.991248][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 652.046150][ T30] audit: type=1400 audit(1749689989.474:3149): avc: denied { open } for pid=7469 comm="syz.5.1824" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 652.072191][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 652.104570][ T30] audit: type=1400 audit(1749689989.484:3150): avc: denied { ioctl } for pid=7469 comm="syz.5.1824" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 652.161241][ T30] audit: type=1326 audit(1749689989.524:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46d7ee929 code=0x7ffc0000 [ 652.216774][ T30] audit: type=1326 audit(1749689989.524:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46d7ee929 code=0x7ffc0000 [ 652.288927][ T30] audit: type=1326 audit(1749689989.524:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb46d7ee929 code=0x7ffc0000 [ 652.400480][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1832'. [ 652.411425][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1832'. [ 652.436118][ T7501] fuse: Bad value for 'fd' [ 652.898956][ T2410] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 652.994308][ T7515] loop2: detected capacity change from 0 to 256 [ 653.018839][ T7515] FAT-fs (loop2): Directory bread(block 64) failed [ 653.025479][ T7515] FAT-fs (loop2): Directory bread(block 65) failed [ 653.032193][ T7515] FAT-fs (loop2): Directory bread(block 66) failed [ 653.038934][ T7515] FAT-fs (loop2): Directory bread(block 67) failed [ 653.045532][ T7515] FAT-fs (loop2): Directory bread(block 68) failed [ 653.052095][ T7515] FAT-fs (loop2): Directory bread(block 69) failed [ 653.058664][ T7515] FAT-fs (loop2): Directory bread(block 70) failed [ 653.065226][ T7515] FAT-fs (loop2): Directory bread(block 71) failed [ 653.071827][ T7515] FAT-fs (loop2): Directory bread(block 72) failed [ 653.078350][ T7515] FAT-fs (loop2): Directory bread(block 73) failed [ 653.249034][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 653.269016][ T2410] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 653.277471][ T2410] usb 1-1: config 0 has no interface number 0 [ 653.284029][ T2410] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 653.295816][ T2410] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 653.388855][ T2410] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 653.400648][ T2410] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 653.498929][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 653.612562][ T7523] loop5: detected capacity change from 0 to 256 [ 653.952015][ T7523] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 653.962911][ T7523] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 653.987055][ T7523] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 654.511597][ T7527] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1839'. [ 654.849119][ T2410] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 654.861740][ T2410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.869941][ T2410] usb 1-1: Product: syz [ 654.874253][ T2410] usb 1-1: Manufacturer: syz [ 654.878873][ T2410] usb 1-1: SerialNumber: syz [ 654.889050][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 654.900579][ T2410] usb 1-1: config 0 descriptor?? [ 654.909227][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.920652][ T20] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 654.930065][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.942214][ T20] usb 2-1: config 0 descriptor?? [ 654.957458][ T2410] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 654.963797][ T7537] loop5: detected capacity change from 0 to 512 [ 654.976399][ T2410] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input5 [ 654.994098][ T7537] EXT4-fs (loop5): Test dummy encryption mode enabled [ 655.002230][ T7537] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 655.013546][ T7537] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1844: bad orphan inode 131083 [ 655.024297][ T7537] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,minixdf,,errors=continue. Quota mode: none. [ 655.159778][ T1659] usb 1-1: USB disconnect, device number 4 [ 655.168145][ T1659] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 655.271781][ T7543] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1844: iget: bad extra_isize 1312 (inode size 256) [ 655.914869][ T7553] loop5: detected capacity change from 0 to 512 [ 655.945786][ T7555] futex_wake_op: syz.0.1849 tries to shift op by -1; fix this program [ 656.020068][ T7553] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 656.100010][ T7553] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 656.116124][ T7553] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.219026][ T347] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 656.532387][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 657.483407][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 657.491281][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 657.500530][ T20] usb 2-1: USB disconnect, device number 7 [ 657.596003][ T7569] loop2: detected capacity change from 0 to 512 [ 657.611524][ T7572] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 657.764462][ T7569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 657.786183][ T7569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 657.797625][ T7569] System zones: 1-12 [ 657.802911][ T7569] EXT4-fs (loop2): 1 truncate cleaned up [ 658.142103][ T347] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 658.154423][ T7569] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 658.172452][ T347] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 658.181796][ T347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.204289][ T7569] futex_wake_op: syz.2.1851 tries to shift op by -1; fix this program [ 658.378625][ T347] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 658.746550][ T347] usb 7-1: USB disconnect, device number 2 [ 658.783755][ T7587] loop5: detected capacity change from 0 to 128 [ 658.791353][ T20] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 658.983816][ T7593] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 658.997880][ T7593] FAT-fs (loop5): Filesystem has been set read-only [ 659.092390][ T7595] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 659.459052][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.478945][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.488840][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 659.501972][ T20] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 659.511497][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.525003][ T20] usb 2-1: config 0 descriptor?? [ 659.669014][ T6215] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 659.770638][ T7600] loop5: detected capacity change from 0 to 40427 [ 659.840919][ T7600] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 659.859028][ T7600] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 659.875790][ T7600] F2FS-fs (loop5): Found nat_bits in checkpoint [ 660.082526][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 660.082548][ T30] audit: type=1400 audit(1749689997.504:3358): avc: denied { setopt } for pid=7601 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 660.110765][ T20] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 660.118931][ T6215] usb 7-1: Using ep0 maxpacket: 32 [ 660.137066][ T20] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 660.150137][ T7600] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 660.158932][ T30] audit: type=1400 audit(1749689997.504:3359): avc: denied { write } for pid=7601 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 660.158981][ T7600] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 660.236818][ T7600] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 660.236847][ T7600] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 660.245192][ T7600] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 660.252985][ T7600] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 660.260820][ T7600] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 660.268489][ T7600] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 660.276610][ T7600] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 660.279067][ T6215] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 660.287462][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1861'. [ 660.299046][ T6215] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.321776][ T6215] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 660.341886][ T6215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.360886][ T6215] usb 7-1: config 0 descriptor?? [ 660.384976][ T30] audit: type=1400 audit(1749689997.924:3360): avc: denied { read } for pid=7611 comm="syz.0.1863" path="socket:[41062]" dev="sockfs" ino=41062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 660.656810][ T7615] device syzkaller0 entered promiscuous mode [ 660.922766][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 661.089064][ T7629] loop5: detected capacity change from 0 to 512 [ 661.125248][ T7629] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 661.136250][ T7629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 661.144321][ T7629] System zones: 1-12 [ 661.149696][ T7629] EXT4-fs (loop5): 1 truncate cleaned up [ 661.155426][ T7629] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 661.176837][ T7629] futex_wake_op: syz.5.1868 tries to shift op by -1; fix this program [ 661.799154][ T39] usb 2-1: USB disconnect, device number 8 [ 661.882158][ T30] audit: type=1400 audit(1749689999.424:3361): avc: denied { read } for pid=7640 comm="syz.1.1871" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 661.963717][ T1573] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 663.258837][ T7649] loop5: detected capacity change from 0 to 512 [ 663.269131][ T7649] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 663.280163][ T30] audit: type=1326 audit(1749690000.074:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc0e9b929 code=0x7ffc0000 [ 663.923804][ T7649] EXT4-fs (loop5): 1 truncate cleaned up [ 663.929810][ T7649] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 664.454117][ T30] audit: type=1326 audit(1749690000.074:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc0e9b929 code=0x7ffc0000 [ 664.478100][ T30] audit: type=1326 audit(1749690000.174:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dc0e9b929 code=0x7ffc0000 [ 664.503142][ T30] audit: type=1326 audit(1749690000.174:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc0e9b929 code=0x7ffc0000 [ 664.528275][ T30] audit: type=1326 audit(1749690000.174:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc0e9b929 code=0x7ffc0000 [ 664.577544][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 664.587198][ T30] audit: type=1326 audit(1749690000.274:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dc0e9b929 code=0x7ffc0000 [ 664.660466][ T7667] loop5: detected capacity change from 0 to 128 [ 664.689114][ T6215] usbhid 7-1:0.0: can't add hid device: -71 [ 664.695409][ T6215] usbhid: probe of 7-1:0.0 failed with error -71 [ 664.703322][ T7667] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 664.705067][ T6215] usb 7-1: USB disconnect, device number 3 [ 664.729562][ T7667] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 665.444753][ T7683] syz.2.1886[7683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.444850][ T7683] syz.2.1886[7683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.458787][ T7683] loop2: detected capacity change from 0 to 128 [ 665.478694][ T1573] usb 3-1: device not accepting address 6, error -71 [ 665.502268][ T7680] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 665.515133][ T7680] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 665.605037][ T7683] EXT4-fs (loop2): Test dummy encryption mode enabled [ 665.612675][ T7683] EXT4-fs (loop2): Test dummy encryption mode enabled [ 665.649076][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 665.649108][ T30] audit: type=1400 audit(1749690003.064:3395): avc: denied { create } for pid=7666 comm="syz.5.1882" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 665.758951][ T7683] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 665.774826][ T7683] ext4 filesystem being mounted at /400/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 666.693087][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.727094][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.736270][ T7691] device bridge_slave_0 entered promiscuous mode [ 666.743442][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.750869][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.758410][ T7691] device bridge_slave_1 entered promiscuous mode [ 666.777882][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 666.872363][ T7711] loop2: detected capacity change from 0 to 512 [ 666.906063][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.913181][ T7691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.920534][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.927764][ T7691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.954547][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.965684][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.974109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.982253][ T7711] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 666.989936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.009373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.018067][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.025446][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.034275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.037027][ T7711] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 667.052488][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.057995][ T7711] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.064741][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.103996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.114158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.202610][ T7691] device veth0_vlan entered promiscuous mode [ 667.217809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 667.226716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 667.235504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.243763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.253084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.263680][ T7691] device veth1_macvtap entered promiscuous mode [ 667.377093][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 667.417457][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.776531][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 669.162825][ T7738] fuse: Bad value for 'fd' [ 669.344893][ T7747] ------------[ cut here ]------------ [ 669.351097][ T7747] trace type BPF program uses run-time allocation [ 669.357618][ T7747] WARNING: CPU: 0 PID: 7747 at kernel/bpf/verifier.c:11701 check_map_prog_compatibility+0x6cd/0x870 [ 669.368677][ T7747] Modules linked in: [ 669.372726][ T7747] CPU: 0 PID: 7747 Comm: syz.0.1908 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 669.382892][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 669.393355][ T7747] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870 [ 669.400564][ T7747] Code: ee ff 48 c7 c6 c0 e0 47 85 4c 8b 65 d0 e9 fd fc ff ff e8 f6 4b ee ff c6 05 f3 6d 6b 05 01 48 c7 c7 20 dd 47 85 e8 83 12 22 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff [ 669.432128][ T7747] RSP: 0018:ffffc900009f7428 EFLAGS: 00010246 [ 669.438311][ T7747] RAX: d5b35a854f927200 RBX: 0000000000000001 RCX: 0000000000080000 [ 669.451580][ T7747] RDX: ffffc9000174c000 RSI: 0000000000002c1c RDI: 0000000000002c1d [ 669.465580][ T7747] RBP: ffffc900009f7470 R08: dffffc0000000000 R09: ffffed103ee04e93 [ 669.477770][ T7747] R10: ffffed103ee04e93 R11: 1ffff1103ee04e92 R12: ffff888117d98000 [ 669.487652][ T7747] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff8881103fb000 [ 669.497422][ T7747] FS: 00007f9468d666c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 669.507539][ T7747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.514395][ T7747] CR2: 00007f9468d459c8 CR3: 0000000126c1f000 CR4: 00000000003506b0 [ 669.515709][ T7753] loop5: detected capacity change from 0 to 128 [ 669.523120][ T7747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 669.539437][ T7753] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 669.554117][ T7747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 669.562974][ T7753] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 669.573692][ T7747] Call Trace: [ 669.577058][ T7747] [ 669.580560][ T7747] resolve_pseudo_ldimm64+0x685/0x11d0 [ 669.586241][ T7747] ? check_attach_btf_id+0xde0/0xde0 [ 669.591737][ T7747] ? __mark_reg_known+0x1b0/0x1b0 [ 669.596862][ T7747] ? security_capable+0x87/0xb0 [ 669.602099][ T7747] bpf_check+0x2c44/0xf330 [ 669.606656][ T7747] ? is_bpf_text_address+0x177/0x190 [ 669.610920][ T30] audit: type=1400 audit(1749690007.154:3396): avc: denied { setattr } for pid=7752 comm="syz.5.1910" path="/29/mnt" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 669.612100][ T7747] ? bpf_get_btf_vmlinux+0x60/0x60 [ 669.644788][ T7747] ? unwind_get_return_address+0x4d/0x90 [ 669.651081][ T7747] ? stack_trace_save+0xe0/0xe0 [ 669.656121][ T7747] ? arch_stack_walk+0xee/0x140 [ 669.661250][ T7747] ? stack_trace_save+0x98/0xe0 [ 669.666296][ T7747] ? __stack_depot_save+0x34/0x480 [ 669.671715][ T7747] ? __kasan_slab_alloc+0x69/0xf0 [ 669.676821][ T7747] ? _find_next_bit+0x1fa/0x200 [ 669.682003][ T7747] ? __kasan_kmalloc+0xec/0x110 [ 669.686932][ T7747] ? __kasan_kmalloc+0xda/0x110 [ 669.692122][ T7747] ? kmem_cache_alloc_trace+0x119/0x270 [ 669.697749][ T7747] ? selinux_bpf_prog_alloc+0x51/0x140 [ 669.709940][ T7747] ? security_bpf_prog_alloc+0x62/0x90 [ 669.719340][ T30] audit: type=1400 audit(1749690007.264:3397): avc: denied { map } for pid=7757 comm="syz.5.1911" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 669.722348][ T7747] ? bpf_prog_load+0x97c/0x1550 [ 669.757078][ T7758] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 669.762106][ T7747] ? __sys_bpf+0x4c3/0x730 [ 669.769132][ T7747] ? __x64_sys_bpf+0x7c/0x90 [ 669.773818][ T7747] ? x64_sys_call+0x4b9/0x9a0 [ 669.784763][ T7747] ? do_syscall_64+0x4c/0xa0 [ 669.792801][ T7747] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 669.801913][ T7747] ? check_stack_object+0x81/0x140 [ 669.807414][ T7747] ? memset+0x35/0x40 [ 669.812111][ T7747] ? bpf_obj_name_cpy+0x193/0x1e0 [ 669.817325][ T7747] bpf_prog_load+0x1042/0x1550 [ 669.829464][ T7747] ? __anon_inode_getfd+0x34b/0x3b0 [ 669.839088][ T7747] ? map_freeze+0x360/0x360 [ 669.847161][ T7747] ? selinux_bpf+0xc7/0xf0 [ 669.856777][ T7747] ? security_bpf+0x82/0xa0 [ 669.864837][ T7747] __sys_bpf+0x4c3/0x730 [ 669.873985][ T7747] ? bpf_link_show_fdinfo+0x310/0x310 [ 669.879525][ T7747] ? __kasan_check_write+0x14/0x20 [ 669.884776][ T7747] ? switch_fpu_return+0x15d/0x2c0 [ 669.889992][ T7747] __x64_sys_bpf+0x7c/0x90 [ 669.894474][ T7747] x64_sys_call+0x4b9/0x9a0 [ 669.899137][ T7747] do_syscall_64+0x4c/0xa0 [ 669.903723][ T7747] ? clear_bhb_loop+0x50/0xa0 [ 669.908478][ T7747] ? clear_bhb_loop+0x50/0xa0 [ 669.914728][ T7747] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 669.924255][ T7762] bridge: RTM_NEWNEIGH with invalid ether address [ 669.930912][ T7747] RIP: 0033:0x7f946a6fd929 [ 669.935459][ T7747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.961627][ T7747] RSP: 002b:00007f9468d66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 669.970264][ T7747] RAX: ffffffffffffffda RBX: 00007f946a924fa0 RCX: 00007f946a6fd929 [ 669.978398][ T7747] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 669.995213][ T7747] RBP: 00007f946a77fb39 R08: 0000000000000000 R09: 0000000000000000 [ 670.010991][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.025581][ T7747] R13: 0000000000000000 R14: 00007f946a924fa0 R15: 00007ffca155e798 [ 670.043975][ T7747] [ 670.047053][ T7747] ---[ end trace ed772a083a226de8 ]--- [ 670.080803][ T7756] loop2: detected capacity change from 0 to 40427 [ 670.159902][ T7756] F2FS-fs (loop2): Invalid log sectorsize (131081) [ 670.166548][ T7756] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 670.179034][ T7756] F2FS-fs (loop2): invalid crc value [ 670.185988][ T7756] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 670.221046][ T7756] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 670.228286][ T7756] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 670.235436][ T7756] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 673.850394][ T7774] loop6: detected capacity change from 0 to 128 [ 673.890540][ T7783] device pim6reg1 entered promiscuous mode [ 673.919803][ T7774] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 673.948739][ T7774] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 674.016755][ T7790] loop7: detected capacity change from 0 to 512 [ 674.069270][ T7790] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 674.108845][ T7790] EXT4-fs (loop7): 1 truncate cleaned up [ 674.116709][ T7790] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,minixdf,. Quota mode: none. [ 674.318978][ T1573] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 674.438078][ T7806] loop7: detected capacity change from 0 to 512 [ 674.466138][ T7806] EXT4-fs (loop7): Ignoring removed nobh option [ 674.541226][ T7806] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback. [ 675.785109][ T7824] loop5: detected capacity change from 0 to 8192 [ 675.819240][ T6215] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 675.822656][ T7824] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 676.322862][ T30] audit: type=1400 audit(1749690013.624:3398): avc: denied { remount } for pid=7821 comm="syz.5.1932" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 676.399008][ T1573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.410466][ T1573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.420832][ T1573] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 676.430838][ T1573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.441316][ T1573] usb 1-1: config 0 descriptor?? [ 676.489171][ T6215] usb 7-1: config 0 has an invalid interface number: 156 but max is 0 [ 676.502337][ T6215] usb 7-1: config 0 has no interface number 0 [ 676.509108][ T6215] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 676.521097][ T6215] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 676.531314][ T6215] usb 7-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.544830][ T6215] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 676.584982][ T6215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.626726][ T6215] usb 7-1: config 0 descriptor?? [ 676.670000][ T6215] usb 7-1: MIDIStreaming interface descriptor not found [ 676.679121][ T7837] loop2: detected capacity change from 0 to 40427 [ 676.695985][ T7839] loop7: detected capacity change from 0 to 16 [ 676.724286][ T7837] F2FS-fs (loop2): Found nat_bits in checkpoint [ 676.739690][ T7839] erofs: (device loop7): mounted with root inode @ nid 36. [ 676.799028][ T7837] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 676.882768][ T20] usb 7-1: USB disconnect, device number 4 [ 676.949613][ T1573] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 676.961555][ T1573] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 676.980731][ T7841] loop5: detected capacity change from 0 to 40427 [ 677.054722][ T7848] attempt to access beyond end of device [ 677.054722][ T7848] loop2: rw=2049, want=45104, limit=40427 [ 677.150363][ T7841] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 677.166289][ T7841] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 677.218584][ T7841] F2FS-fs (loop5): Unrecognized mount option "checkpoint=merge" or missing value [ 677.329007][ T1573] cp2112 0003:10C4:EA90.0004: error requesting version [ 677.383330][ T1573] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71 [ 677.402952][ T1573] usb 1-1: USB disconnect, device number 5 [ 677.430073][ T285] attempt to access beyond end of device [ 677.430073][ T285] loop2: rw=2049, want=45112, limit=40427 [ 677.511163][ T7854] fido_id[7854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 677.629469][ T7857] loop7: detected capacity change from 0 to 2048 [ 677.682319][ T7853] loop6: detected capacity change from 0 to 512 [ 677.744962][ T7857] loop7: detected capacity change from 0 to 2048 [ 677.754453][ T7853] EXT4-fs (loop6): Ignoring removed orlov option [ 677.763105][ T7853] EXT4-fs (loop6): orphan cleanup on readonly fs [ 677.770437][ T7853] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1941: bg 0: block 248: padding at end of block bitmap is not set [ 677.786111][ T7853] Quota error (device loop6): write_blk: dquota write failed [ 677.794261][ T7853] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 677.805212][ T7853] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.1941: Failed to acquire dquot type 1 [ 677.819418][ T7853] EXT4-fs (loop6): 1 truncate cleaned up [ 677.826005][ T7853] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,journal_dev=0x0000000000000008,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 677.880354][ T7864] loop5: detected capacity change from 0 to 256 [ 677.911010][ T7864] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 677.921729][ T7864] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 677.941547][ T7864] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 678.626056][ T30] audit: type=1400 audit(1749690016.164:3399): avc: denied { remount } for pid=7852 comm="syz.6.1941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 678.645861][ T7853] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 678.656256][ T7857] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 678.696824][ T7853] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: writeback. [ 678.729390][ T7853] ext4 filesystem being remounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 678.803212][ T30] audit: type=1400 audit(1749690016.344:3400): avc: denied { connect } for pid=7855 comm="syz.7.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 678.859967][ T7881] loop2: detected capacity change from 0 to 256 [ 678.873524][ T7881] exfat: Deprecated parameter 'utf8' [ 678.880287][ T7881] exfat: Deprecated parameter 'utf8' [ 678.956958][ T7885] netlink: 'syz.5.1948': attribute type 6 has an invalid length. [ 679.028344][ T7881] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 679.330046][ T7884] loop7: detected capacity change from 0 to 8192 [ 679.360013][ T7887] loop6: detected capacity change from 0 to 2048 [ 679.380506][ T7884] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 679.502367][ T30] audit: type=1400 audit(1749690017.044:3401): avc: denied { mounton } for pid=7878 comm="syz.2.1950" path="/417/file0/file0" dev="loop2" ino=1048711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 679.502655][ T347] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 679.539290][ T7889] 9pnet: Insufficient options for proto=fd [ 679.586117][ T7887] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none. [ 680.524521][ T7902] loop5: detected capacity change from 0 to 40427 [ 680.678652][ T7902] F2FS-fs (loop5): invalid crc value [ 680.684050][ T7902] F2FS-fs (loop5): Wrong cp_pack_start_sum: 1 [ 680.690750][ T7902] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 681.581007][ T30] audit: type=1400 audit(1749690019.124:3402): avc: denied { setopt } for pid=7910 comm="syz.5.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 681.609058][ T347] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 681.611872][ T7911] loop5: detected capacity change from 0 to 512 [ 681.628938][ T347] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 681.638822][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.709888][ T347] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 681.749501][ T7911] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 681.765434][ T7911] System zones: 0-2, 18-18, 34-35 [ 681.780709][ T7911] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 681.803799][ T7911] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.874903][ T6215] usb 1-1: USB disconnect, device number 6 [ 682.092473][ T30] audit: type=1400 audit(1749690019.624:3403): avc: denied { lock } for pid=7910 comm="syz.5.1959" path="socket:[42829]" dev="sockfs" ino=42829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 682.396352][ T30] audit: type=1400 audit(1749690019.934:3404): avc: denied { setopt } for pid=7930 comm="syz.0.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 682.587498][ T7933] loop6: detected capacity change from 0 to 8192 [ 682.621369][ T7933] loop6: p1 p2 p3 [ 682.625843][ T7933] loop6: p1 start 51379968 is beyond EOD, truncated [ 682.641308][ T7933] loop6: p3 size 100663552 extends beyond EOD, truncated [ 683.021608][ T30] audit: type=1400 audit(1749690020.184:3405): avc: denied { unmount } for pid=7377 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 683.313855][ T304] udevd[304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 683.341469][ T393] udevd[393]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 683.356143][ T7938] loop7: detected capacity change from 0 to 512 [ 683.364399][ T30] audit: type=1400 audit(1749690020.334:3406): avc: denied { write } for pid=7930 comm="syz.0.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 683.859030][ T7938] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 683.890748][ T393] udevd[393]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 683.917350][ T304] udevd[304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 684.007382][ T7938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 684.027439][ T7938] System zones: 1-12 [ 684.045439][ T7938] EXT4-fs (loop7): 1 truncate cleaned up [ 684.051325][ T7938] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 684.102250][ T7938] futex_wake_op: syz.7.1968 tries to shift op by -1; fix this program [ 685.296147][ T7969] futex_wake_op: syz.7.1977 tries to shift op by -1; fix this program [ 686.466858][ T7994] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 687.230954][ T8012] loop7: detected capacity change from 0 to 256 [ 688.892517][ T30] audit: type=1400 audit(1749690479.438:3407): avc: denied { getopt } for pid=8014 comm="syz.2.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 688.929184][ T8017] loop5: detected capacity change from 0 to 2048 [ 689.364846][ T8012] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 689.375588][ T8012] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 689.386701][ T8012] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 689.811983][ T8020] loop2: detected capacity change from 0 to 512 [ 690.010370][ T3006] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 690.015455][ T8025] xt_hashlimit: size too large, truncated to 1048576 [ 690.177435][ T8020] ================================================================== [ 690.185571][ T8020] BUG: KASAN: use-after-free in __ext4_iget+0x2b5/0x3cb0 [ 690.192715][ T8020] Read of size 8 at addr ffff888111782f78 by task syz.2.1993/8020 [ 690.200608][ T8020] [ 690.202945][ T8020] CPU: 0 PID: 8020 Comm: syz.2.1993 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 690.214495][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 690.224555][ T8020] Call Trace: [ 690.227838][ T8020] [ 690.230787][ T8020] __dump_stack+0x21/0x30 [ 690.235125][ T8020] dump_stack_lvl+0xee/0x150 [ 690.239807][ T8020] ? show_regs_print_info+0x20/0x20 [ 690.245008][ T8020] ? load_image+0x3a0/0x3a0 [ 690.249518][ T8020] print_address_description+0x7f/0x2c0 [ 690.255091][ T8020] ? __ext4_iget+0x2b5/0x3cb0 [ 690.259771][ T8020] kasan_report+0xf1/0x140 [ 690.264195][ T8020] ? __ext4_iget+0x2b5/0x3cb0 [ 690.268961][ T8020] __asan_report_load8_noabort+0x14/0x20 [ 690.274622][ T8020] __ext4_iget+0x2b5/0x3cb0 [ 690.279132][ T8020] ? preempt_schedule_common+0xbe/0xf0 [ 690.284597][ T8020] ? preempt_schedule+0xa7/0xb0 [ 690.289450][ T8020] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 690.295115][ T8020] ? ext4_get_projid+0x140/0x140 [ 690.300058][ T8020] ? _raw_write_unlock+0x3e/0x60 [ 690.305000][ T8020] ? ext4_orphan_file_block_trigger+0x400/0x400 [ 690.311420][ T8020] ext4_enable_quotas+0x33b/0x6d0 [ 690.316454][ T8020] ext4_fill_super+0x8761/0x9030 [ 690.321417][ T8020] ? ext4_mount+0x40/0x40 [ 690.325749][ T8020] ? set_blocksize+0x1fc/0x380 [ 690.330528][ T8020] ? sb_set_blocksize+0xaa/0xf0 [ 690.335675][ T8020] ? ext4_mount+0x40/0x40 [ 690.340129][ T8020] mount_bdev+0x2ae/0x3e0 [ 690.344475][ T8020] ? ext4_mount+0x40/0x40 [ 690.348898][ T8020] ext4_mount+0x34/0x40 [ 690.353143][ T8020] legacy_get_tree+0xed/0x190 [ 690.357852][ T8020] ? ext4_errno_to_code+0x160/0x160 [ 690.363057][ T8020] vfs_get_tree+0x89/0x260 [ 690.367571][ T8020] do_new_mount+0x25a/0xa20 [ 690.372195][ T8020] path_mount+0x675/0x1020 [ 690.376619][ T8020] ? user_path_at_empty+0x161/0x1c0 [ 690.381841][ T8020] __se_sys_mount+0x318/0x380 [ 690.386547][ T8020] ? __x64_sys_mount+0xd0/0xd0 [ 690.391318][ T8020] __x64_sys_mount+0xbf/0xd0 [ 690.396260][ T8020] x64_sys_call+0x6bf/0x9a0 [ 690.400804][ T8020] do_syscall_64+0x4c/0xa0 [ 690.405546][ T8020] ? clear_bhb_loop+0x50/0xa0 [ 690.410233][ T8020] ? clear_bhb_loop+0x50/0xa0 [ 690.414911][ T8020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 690.420942][ T8020] RIP: 0033:0x7fb46d7f00ca [ 690.425363][ T8020] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.445370][ T8020] RSP: 002b:00007fb46be14e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 690.453895][ T8020] RAX: ffffffffffffffda RBX: 00007fb46be14ef0 RCX: 00007fb46d7f00ca [ 690.461877][ T8020] RDX: 0000200000000100 RSI: 0000200000000200 RDI: 00007fb46be14eb0 [ 690.469852][ T8020] RBP: 0000200000000100 R08: 00007fb46be14ef0 R09: 0000000000000080 [ 690.477836][ T8020] R10: 0000000000000080 R11: 0000000000000246 R12: 0000200000000200 [ 690.485810][ T8020] R13: 00007fb46be14eb0 R14: 000000000000050d R15: 0000200000000240 [ 690.493801][ T8020] [ 690.496838][ T8020] [ 690.499161][ T8020] Allocated by task 6228: [ 690.503491][ T8020] __kasan_slab_alloc+0xbd/0xf0 [ 690.508354][ T8020] slab_post_alloc_hook+0x4f/0x2b0 [ 690.513476][ T8020] kmem_cache_alloc+0xf7/0x260 [ 690.518328][ T8020] f2fs_alloc_inode+0x26/0x330 [ 690.523091][ T8020] iget_locked+0x16c/0x7e0 [ 690.527509][ T8020] f2fs_iget+0x55/0x5130 [ 690.531751][ T8020] f2fs_fill_super+0x45c7/0x6d10 [ 690.536689][ T8020] mount_bdev+0x2ae/0x3e0 [ 690.541116][ T8020] f2fs_mount+0x34/0x40 [ 690.545416][ T8020] legacy_get_tree+0xed/0x190 [ 690.550104][ T8020] vfs_get_tree+0x89/0x260 [ 690.554545][ T8020] do_new_mount+0x25a/0xa20 [ 690.559069][ T8020] path_mount+0x675/0x1020 [ 690.563490][ T8020] __se_sys_mount+0x318/0x380 [ 690.568171][ T8020] __x64_sys_mount+0xbf/0xd0 [ 690.572761][ T8020] x64_sys_call+0x6bf/0x9a0 [ 690.577265][ T8020] do_syscall_64+0x4c/0xa0 [ 690.581683][ T8020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 690.587583][ T8020] [ 690.589907][ T8020] Last potentially related work creation: [ 690.595619][ T8020] kasan_save_stack+0x3a/0x60 [ 690.600331][ T8020] __kasan_record_aux_stack+0xd2/0x100 [ 690.605803][ T8020] kasan_record_aux_stack_noalloc+0xb/0x10 [ 690.611622][ T8020] call_rcu+0xf6/0xf60 [ 690.615707][ T8020] evict+0x7da/0x870 [ 690.619608][ T8020] iput+0x635/0x7c0 [ 690.623420][ T8020] f2fs_put_super+0x643/0xc00 [ 690.628105][ T8020] generic_shutdown_super+0x151/0x330 [ 690.633563][ T8020] kill_block_super+0x7f/0xf0 [ 690.638243][ T8020] kill_f2fs_super+0x2e7/0x390 [ 690.643547][ T8020] deactivate_locked_super+0xa0/0x100 [ 690.648942][ T8020] deactivate_super+0xaf/0xe0 [ 690.653708][ T8020] cleanup_mnt+0x446/0x500 [ 690.658132][ T8020] __cleanup_mnt+0x19/0x20 [ 690.662560][ T8020] task_work_run+0x127/0x190 [ 690.667152][ T8020] exit_to_user_mode_loop+0xd0/0xe0 [ 690.672352][ T8020] exit_to_user_mode_prepare+0x5a/0xa0 [ 690.677957][ T8020] syscall_exit_to_user_mode+0x1a/0x30 [ 690.683462][ T8020] do_syscall_64+0x58/0xa0 [ 690.687896][ T8020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 690.693801][ T8020] [ 690.696122][ T8020] Second to last potentially related work creation: [ 690.702700][ T8020] kasan_save_stack+0x3a/0x60 [ 690.707382][ T8020] __kasan_record_aux_stack+0xd2/0x100 [ 690.712853][ T8020] kasan_record_aux_stack_noalloc+0xb/0x10 [ 690.718662][ T8020] call_rcu+0xf6/0xf60 [ 690.722731][ T8020] evict+0x7da/0x870 [ 690.726628][ T8020] iput+0x635/0x7c0 [ 690.730522][ T8020] f2fs_fill_super+0x53ce/0x6d10 [ 690.735556][ T8020] mount_bdev+0x2ae/0x3e0 [ 690.739911][ T8020] f2fs_mount+0x34/0x40 [ 690.744070][ T8020] legacy_get_tree+0xed/0x190 [ 690.748749][ T8020] vfs_get_tree+0x89/0x260 [ 690.753164][ T8020] do_new_mount+0x25a/0xa20 [ 690.757671][ T8020] path_mount+0x675/0x1020 [ 690.762085][ T8020] __se_sys_mount+0x318/0x380 [ 690.766761][ T8020] __x64_sys_mount+0xbf/0xd0 [ 690.771347][ T8020] x64_sys_call+0x6bf/0x9a0 [ 690.775877][ T8020] do_syscall_64+0x4c/0xa0 [ 690.780291][ T8020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 690.786194][ T8020] [ 690.788513][ T8020] The buggy address belongs to the object at ffff888111782a70 [ 690.788513][ T8020] which belongs to the cache f2fs_inode_cache of size 1424 [ 690.803096][ T8020] The buggy address is located 1288 bytes inside of [ 690.803096][ T8020] 1424-byte region [ffff888111782a70, ffff888111783000) [ 690.816552][ T8020] The buggy address belongs to the page: [ 690.822196][ T8020] page:ffffea000445e000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888111786100 pfn:0x111780 [ 690.833777][ T8020] head:ffffea000445e000 order:3 compound_mapcount:0 compound_pincount:0 [ 690.842108][ T8020] flags: 0x4000000000010200(slab|head|zone=1) [ 690.848295][ T8020] raw: 4000000000010200 ffffea0004a65e00 0000000500000005 ffff8881081f7380 [ 690.856897][ T8020] raw: ffff888111786100 0000000080150002 00000001ffffffff 0000000000000000 [ 690.865668][ T8020] page dumped because: kasan: bad access detected [ 690.872074][ T8020] page_owner tracks the page as allocated [ 690.877788][ T8020] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 838, ts 66382899331, free_ts 62100563979 [ 690.899163][ T8020] post_alloc_hook+0x192/0x1b0 [ 690.903971][ T8020] prep_new_page+0x1c/0x110 [ 690.908582][ T8020] get_page_from_freelist+0x2cc5/0x2d50 [ 690.914134][ T8020] __alloc_pages+0x18f/0x440 [ 690.918731][ T8020] new_slab+0xa1/0x4d0 [ 690.922804][ T8020] ___slab_alloc+0x381/0x810 [ 690.927425][ T8020] __slab_alloc+0x49/0x90 [ 690.931855][ T8020] kmem_cache_alloc+0x138/0x260 [ 690.936712][ T8020] f2fs_alloc_inode+0x26/0x330 [ 690.941483][ T8020] iget_locked+0x16c/0x7e0 [ 690.945928][ T8020] f2fs_iget+0x55/0x5130 [ 690.950167][ T8020] f2fs_fill_super+0x45c7/0x6d10 [ 690.955210][ T8020] mount_bdev+0x2ae/0x3e0 [ 690.959544][ T8020] f2fs_mount+0x34/0x40 [ 690.963701][ T8020] legacy_get_tree+0xed/0x190 [ 690.968375][ T8020] vfs_get_tree+0x89/0x260 [ 690.972795][ T8020] page last free stack trace: [ 690.977660][ T8020] free_unref_page_prepare+0x542/0x550 [ 690.983121][ T8020] free_unref_page+0xa2/0x550 [ 690.987832][ T8020] __free_pages+0x6c/0x100 [ 690.992250][ T8020] __free_slab+0xe8/0x1e0 [ 690.996596][ T8020] __unfreeze_partials+0x160/0x190 [ 691.001707][ T8020] put_cpu_partial+0xc6/0x120 [ 691.006390][ T8020] __slab_free+0x1d4/0x290 [ 691.010810][ T8020] ___cache_free+0x104/0x120 [ 691.015403][ T8020] qlink_free+0x4d/0x90 [ 691.019619][ T8020] qlist_free_all+0x5f/0xb0 [ 691.024126][ T8020] kasan_quarantine_reduce+0x14a/0x170 [ 691.029589][ T8020] __kasan_slab_alloc+0x2f/0xf0 [ 691.034554][ T8020] slab_post_alloc_hook+0x4f/0x2b0 [ 691.039688][ T8020] kmem_cache_alloc+0xf7/0x260 [ 691.044454][ T8020] getname_flags+0xb9/0x500 [ 691.049052][ T8020] getname+0x19/0x20 [ 691.052946][ T8020] [ 691.055270][ T8020] Memory state around the buggy address: [ 691.060895][ T8020] ffff888111782e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 691.069043][ T8020] ffff888111782e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 691.077102][ T8020] >ffff888111782f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 691.085243][ T8020] ^ [ 691.093219][ T8020] ffff888111782f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 691.101281][ T8020] ffff888111783000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.109373][ T8020] ================================================================== [ 691.117516][ T8020] Disabling lock debugging due to kernel taint [ 691.123893][ T8020] EXT4-fs error (device loop2): ext4_quota_enable:6403: inode #3: comm syz.2.1993: unexpected EA_INODE flag [ 691.144273][ T30] audit: type=1400 audit(1749690481.688:3408): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 691.223660][ T8017] loop5: detected capacity change from 0 to 2048 [ 691.249836][ T30] audit: type=1400 audit(1749690481.708:3409): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.320823][ T8017] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 691.367411][ T30] audit: type=1400 audit(1749690481.708:3410): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.454705][ T30] audit: type=1400 audit(1749690481.708:3411): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.512229][ T30] audit: type=1400 audit(1749690481.708:3412): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 691.550140][ T8037] loop7: detected capacity change from 0 to 256 [ 691.557319][ T30] audit: type=1400 audit(1749690481.708:3413): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 691.580437][ T30] audit: type=1400 audit(1749690481.708:3414): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 692.009192][ T3006] usb 7-1: device descriptor read/all, error -71 [ 692.015693][ T8020] EXT4-fs error (device loop2): ext4_quota_enable:6406: comm syz.2.1993: Bad quota inode: 3, type: 0 [ 692.027023][ T8020] EXT4-fs warning (device loop2): ext4_enable_quotas:6447: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 692.042779][ T8020] EXT4-fs (loop2): mount failed