last executing test programs: 5.943059176s ago: executing program 0 (id=955): sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) 5.178936795s ago: executing program 4 (id=960): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10002, &(0x7f0000000300)={[{@noload}]}, 0x0, 0x639, &(0x7f0000000580)="$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") process_madvise(0xffffffffffffffff, &(0x7f0000002880), 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 4.990336032s ago: executing program 0 (id=961): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/297], 0x1, 0x54f9, &(0x7f000000ab40)="$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") r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1ff, &(0x7f00000001c0)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 4.274000709s ago: executing program 2 (id=964): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1f8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1a0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xd5}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x17c, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfffd}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_ct={0x94, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x7}]}, {0x61, 0x6, "4f7c4c3de260ed0e9f615a1449dd7d907ec954d5239b983e47d5292cefa9230c346fcd1b48ee9d65bac1903c9f1d0ee611f38e94143e277c417ab8b4be92b75c84c35dc7ebe90b97af72cd0609a14011ca616b70d66fb2094b33845824"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1f8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000300), 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x2}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.268396819s ago: executing program 4 (id=965): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x0, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@RTM_GETMDB={0x18, 0x56, 0x604, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x18}}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast1}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', r7, 0x0, 0x0, 0x2, 0x0, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x0, 0x0, 0x8000}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r9, 0x1, 0x0, 0x60, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) 3.875515004s ago: executing program 2 (id=966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='itimer_expire\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400240, 0x0) chdir(&(0x7f0000000200)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x3, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6003a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0x0, 0xee01) setsockopt$sock_int(r4, 0x1, 0x33, &(0x7f00000000c0), 0x4) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}], 0x1, 0x4000804) socket$xdp(0x2c, 0x3, 0x0) 3.821707376s ago: executing program 3 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000400000000000000088a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000026000701"], 0x20}}, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x8000, 0x0) 3.699725431s ago: executing program 0 (id=970): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='ext4_journal_start\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000580)=0xffffffff, 0x4) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r5}, 0x14) syz_io_uring_setup(0x2deb, &(0x7f0000001600)={0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000000)) 3.102538603s ago: executing program 4 (id=971): sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) 3.004561497s ago: executing program 3 (id=972): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000001740)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4YQeZ31Jlso1KWHUmgg0J6bGFkxqWUrWHKIjWkTSqGXQlt6ay859+el9Nofh17a/6MkpK0TmtJDcRn9sJVYcuTElpLm84Gx3pt50nvfeaOZJ81YE8Bjazz9k4k4EhFvJRGj9flJRPRXU9mImVq52xvr+XRKYnPzhR+TaplbG+v5aHpO6lA98/eI+Or1iKOZnfWWV9cWZovFwnI9P1lZvDBZXl07dn5xdr4wX1g6MTU9ffzk/06e2L9Yf/5u7fD1t5/998czv772t0/e/DqJmThcX9Ycx34Zj/H6OulPV+Edntnvynrms1c6KNS0BWQPsjHsUdoxffVeORKj0bdb/wx3s2UAwEF5NSI22+lruwQAeKQlteP/U71uBwDQLY3vAW5trOcbU2+/keiuG09HxFAt/sb5zdqSbP2c3VD1POjIreSOMyNJRIztQ/3jEfH+5y99mE5xQOchAVq5fCUizo6N79z/JzuuWdir/3RQZvyuvP0fdM8X6fjn/63Gf5mt8U+0GP8Mtnjv3o97v/8z1/ahmrbS8d+TTde23W6Kv26sr577U3XM15+cO18spPu2P0fERPQPpvmpXeqYuPnbzXbLmsd/P73z8gdp/enjdonMtezgnc+Zm63MPkjMzW5cifhHtlX8yVb/J23Gv6c7rOO5J954r92yNP403sa0M/6DtXk14l8t+z/ZKpPsen3iZHVzmGxsFC18OhMj7eofz273fzql9Tc+C3RD2v8ju8c/ljRfr1nu+KW3rhb79urol+0KNW//reNvvf0PJC9W0wP1eZdmK5XlqYiB5Pmd849vP7eRb5RP45/4Z+v3/27bf/qZ8GyHKyJ7/YeP7j/+g5XGP7en/t9zIoZuL/S1q7+z/p+upibqczrZ/3XawAdZdwAAAAAAAAAAAAAAAAAAAAAAAADQqUxEHI4kk9tKZzK5XO0e3n+NkUyxVK4cPVdaWZqL6r2yx6I/0/ipy9Gm30Odqv8efiN//K78fyPiLxHx7uBwNZ/Ll4pzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtbn/f+r7wV63DgA4MEN9vW4BANBlSTbb6yYAAN02tKfSwwfWDgCge/Z2/AcA/ggc/wHg8XOP479/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBBnT51Kp02f9lYz6f5uYurKwuli8fmCuWF3OJKPpcvLV/IzZdK88VCLl9abPtCl2sPxVLpwnQsrVyarBTKlcny6tqZxdLKUuXM+cXZ+cKZQn/XIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzpVX1xZmi8XCskRPEgvf1PrhYWmPxN4ScbnWfw9Le/YvEQPbe4nh3uycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4BvwcAAP//JJMi3A==") open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000a40)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x412102, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x800000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0xffdf}], 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_emit_ethernet(0x49, &(0x7f00000007c0)={@link_local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "84c9ed", 0x13, 0x21, 0x0, @mcast2, @ipv4, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96f888", 0x0, "e77534"}, "1c51c0"}}}}}}, 0x0) write$P9_RSTAT(r5, &(0x7f00000000c0)=ANY=[], 0x56) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015002d9313cc0000fcdbdf250a000000fe00000000080000b2aa1e5fa679d2ecb36c742ef62ebd8f9fb9373724851c1240633ab1ef900822bd2078a9e629f833ddc4707c6b1b5a645a968e096048d00da5aecbcca45b7427dfa79ef3317f6e0b2b7321c87f29f96ce039e035422f64caa6f8244c632d0e158ef95afa21d2dbbdc71209abc743b2c41d44b5bb9aa0e23862c43df1ccb0e787d7e80acbe1c0efe4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c080) 2.961464279s ago: executing program 2 (id=973): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141a42, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write(r0, &(0x7f0000004200)="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", 0x100) 2.489293206s ago: executing program 1 (id=975): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10002, &(0x7f0000000300)={[{@noload}]}, 0x0, 0x639, &(0x7f0000000580)="$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") process_madvise(0xffffffffffffffff, &(0x7f0000002880), 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 2.467482957s ago: executing program 0 (id=976): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0xfff, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r7}, 0x10) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) io_setup(0x9, &(0x7f0000000b80)=0x0) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x8, 0x2}}, 0x30) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766f7646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) mknodat(r1, &(0x7f0000000000)='./file0/file0\x00', 0x8, 0x2) read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0x2020) (async) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) r10 = dup2(r1, r1) ioctl$BTRFS_IOC_LOGICAL_INO(r10, 0xc0389424, &(0x7f0000000200)={0x100, 0x28, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) fcntl$setpipe(r1, 0x407, 0x7000000) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) 2.40113156s ago: executing program 0 (id=977): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @random="5f198721fa66", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a8b4ce", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x4, 0x0, 0x3, '\b'}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "880142f9c6141f00d94466d3fa13ba3a"}, @mptcp=@remove_addr={0x1e, 0x25, 0x0, 0x0, "aad9e5e6ef6133a49de01b51efc765a045e8f8d1aaccd9317ab1230e6e5cd350d979"}]}}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x10}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2.370287011s ago: executing program 2 (id=978): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000002000/0x1000)=nil) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18e19a7f5e00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r3}, 0x8) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005f8ffffff000000ab8600009500000100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0xf1, &(0x7f0000000300)=""/241, 0x41000, 0x7d, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400), &(0x7f0000000440)=[{0x2, 0x3, 0x6}, {0x4, 0x5, 0x2, 0x7}, {0x5, 0x4, 0x2, 0xb}, {0x0, 0x5, 0x2, 0x3}], 0x10, 0xe1}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x800, 0x1f, 0x2, 0x400, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x12, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000037039b4ca009b6906fc71cec0b5d46c2b7986fdbd75baa249df8c73550d8090719ae1442737fce4afebe2380251e6bda9178dc09cd50892a4d7871b99203ba8f9c0736887c2730c5b29c71090b14e9573d8b03f487d3a9212de141e48c3772748560e901026c7544b65da0db6838329fe3c768871c3611654c4ba2"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffff, 0x18}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001480)={{r4, 0xffffffffffffffff}, &(0x7f0000001400), &(0x7f0000001440)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x10, &(0x7f0000001200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500001848000008000000000000000000000018420000040000000000000000000000850000003d0000000fb8f0ff01004000"/120], &(0x7f0000001280)='GPL\x00', 0x1, 0x4d, &(0x7f0000001340)=""/77, 0x40f00, 0xd, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000012c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000013c0)={0x4, 0x0, 0x4, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000014c0)=[r5, r4, r4, r6], &(0x7f0000001500)=[{0x1, 0x5, 0x1, 0xc}, {0x4, 0x3, 0xf, 0x1}, {0x5, 0x2, 0x1, 0xc}, {0x0, 0x3, 0x9, 0xb}], 0x10, 0x3ff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r5, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0], 0x0, 0x8, &(0x7f0000000ac0)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000b40), 0x8, 0x10, 0x8, 0xfffffffffffffe39, &(0x7f0000000cc0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x8}, 0x48) 2.348901102s ago: executing program 3 (id=979): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000d00850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) write$cgroup_pid(r3, &(0x7f0000000340), 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000020000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='jbd2_update_log_tail\x00', r6}, 0x10) ioctl$TUNSETOFFLOAD(r5, 0x80087601, 0x20001419) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}, 0x1, 0x600000000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@empty, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) 2.226358496s ago: executing program 2 (id=980): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000617474722c616374697665c72c6191138918655f2c6f67733d342c9b756f74082c66b2d1c46f4b2a3d159dce99edb2a4ea6173670000000000dbb374615f666c7573682c70726a6a71756f74613d2d7b2c6a7166748dba745fe3616368652c66611d229b3547dadba6d8f9bfb74f705a8b2786d610d1f2335eb1dbbc87d1b7692ffe82e508d80bdcf88ebdd5523426b8a12703418316731cf8b17ccf39330769e5a4a505efbc7f3c5c2d958ffa4d22b0e082b7d907739b8adf1841440857364bd0ce880b4e382a53b6db010b536c4453c83641a4dbf3d147b6a4cced9500000000000000a9842380695333b8de7b86b28ca33d0553231dae70b0939ae315df79727bd626461089d02408b11aedcbf812b43ce60900"/297], 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1ff, &(0x7f00000001c0)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 2.166589828s ago: executing program 4 (id=981): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='bbr\x00', 0x4) 2.020581434s ago: executing program 3 (id=982): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x71020, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r2, 0x0) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r4, 0x0, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x22, &(0x7f0000937fed), &(0x7f0000000000)=0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000000280)="9949834c422ddba858353e5633616b0cfae0df093b6f020816ddc7cebf86fddcb2d0898141d6a2417bffcfcca4fa005154fb9404a1eb31e226bc98f8f51d52cf2ec9f9fd442b3c6073073e0391769cdd2ffebad96923219049e8b5a2e1c144c445e72d3015128d7365e62064b145d8977906eb950c9e7857298b1e2555bf23bdb0a657ba31b15d5fd3714dd9bad5e5f9a792a96b14667c19eea0879b4c5bb2d18dbe343db8f64729d330ba7d178fb3d1e8c6f2", 0xb3}, {&(0x7f0000000b00)="0bccfab2ecbb90b5036491141bc2349cbd30aaa7d5faf72dbc0203e26f8dd101bba6dd29558b19c67b550aa91ae5f2f57925bb09b494237c2b999d865658bb59311cefd1fa3372dfa67dae22267f1b40d3b288950ff1a67b64cab2c6ebb14f847a9aa3bc3fa8aa41b2affc4c8d087d031d1692a6fe768f602d24c7f42a22c0698ab7372634c356b29fc2287986f5029bca400b3ab6060fbb7ccd98c8d1b8511af120d13b51e45b7835594daed35dd1c3908f8583efc04fd1c16de98f139c93cebaa76bee01fbada1088a12fb58783d28ee1c3194fa87b189bd292976c010158550f0475684676bc2fcc3794e", 0xec}, {&(0x7f00000003c0)="d6a37fe15037a42ffc9c2170571cd3639f500174c2ee4a70fabd3d5afc42d70149e306b6deef49b94497c2e461ac1260173f86084ea7324780f3e8dd92892fc91cee1dcbb60bb235e25f91d0c69f6e938b9f7383a10d925d1d36cec1f0fb177f24c7cacf065fd9625424b01a1c8986dcacdb2a1f9d4cf858998bf4ce23b6d115d3bdc5b3acab3748fc01bfbe96", 0x8d}, {&(0x7f0000000c00)="6610df4f59f06527c435f38e3277ff216acb108a7a2a125304634b2ea334ac3a676dc2ec1d8326cd6f6e16161b1414e62cc34a5510918446c68530392db80ecdd4cca66d4d52af474dad743d72115472351035a73bbaa6f5adf35c85a6fffa636f0a15d8ca8defa50359ebf32373043c52e6c3f7855a15dd07a02cc13328ee1daf66ec6897f2196573c0e1089d8832e6f113b5e895269f8f4892364445924f7579a00d91", 0xa4}, {&(0x7f0000000100)="09dd0248693c1cddc4bd7613f7562762072c799a7a87fe9e964636ddbe5351570de7b3ed4f05045765dbb573a43e1e252111ef1f94b3a2b9038bf0c27dbcc1ef8e65b9b6", 0x44}, {&(0x7f0000000200)}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="dbef66be313c26dc782dd6c2a73c070594d62213e2d83b178b261f94d4180d459addc0866e8af5b3829e4811548e0747d1444eee5e1b9317fdf9123907b47a401d1672143fa3ff9959d977cc0d11a40ac952d4cd67ef24887c9355c5abd4cf98e8766c0bf94efcb5f39892c5c01d0ede9bffc7f9948b6b39ec63e284855d28ddc3547d22db8e792b19e1ea4fe80f3847d17222d7536582d5444d48ab09f9c4adadbe", 0xa2}, {&(0x7f0000001d80)="45eb15d1792c36d857379cd4bfa640b95fd32b6611ba66a74f68a91ae0958e8fbca497c5d966665b5d438d16eeadfabee9c484258cfcfcbc809a1c987629aaff7326d700967fba3968657b6b57a8de57c71aa53b44143480ab07acee6272ce56a859346e7fe3ff", 0x67}], 0x9, &(0x7f0000001ec0)="b6709c0cae3e1b06e72d8e13156f0c7b867e5cd2d5234036b57eb5d4a7f46e5df80472391dd0b936647e23faea8ec7ea0157bc8b9c18cccc35d98b27928d44a7a50277e23378dca6e663d84978abcc701358923544d6e485b5ce44535b7f0e98fb721110a44019c6c66817524cb57fe2e01151e81f491180911be85a330357e78f3ff627", 0x84, 0x20001880}, 0x4048010) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @auto="baa3275275c027686e99b3178dde2fe1"}}) 1.954384477s ago: executing program 4 (id=983): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='itimer_expire\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400240, 0x0) chdir(&(0x7f0000000200)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x3, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6003a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0x0, 0xee01) setsockopt$sock_int(r4, 0x1, 0x33, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}], 0x1, 0x4000804) socket$xdp(0x2c, 0x3, 0x0) 1.59119793s ago: executing program 1 (id=985): sendmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="480d00000000000000000000000000000f95fabbca1b8e9c7829ffc48cafb09362f02a84bf837bc05eb902f86b55f6cf0ad014f6f3aaf4ee1daac58e87f0f639227ce0cb141523911142f7796a0dcea9da8f4a12386f7a61dad4649f315ee9fc1cf61c1d8c1ed8819a2151e790fcfe3b0ce91985e02099541d2a725d55f209ffdaf8430f531db955075abf3bb4bb0a78f6938c39e95f8910da4f1eca91cb03fceaf0ee4724e919ee9de17c4313198841a45ea0daf8860f8c908f82cd57ccbc6a257193837d7bbcde54cbe6074f023916a58f8af6e537e78e83da41802f5f9c24639a34400ca77afaa1c6902961fb1d6581d31b4859d57e4edc3ce72d74df79c94621bb1d02447f4dd06301405b8db0eb0466adbfee86096a8c607f3820206101125c63fed0e2a301d4b027b1a79d9441a8bb0b394134254c9b0098597957da40076502807314e4a11f4af956ca19d33481d36e00e1969cc3b8ccb442d3408cbb3155c51dd62b460cb0a2373570e3f5bf77a18d4cde3dd91bce64ff29dc72ee86af7120c9e2cfc436f244141269d9206132a0a1b37cd9554b855c317e322d047adc1baf153b8afa7bc03b8cfc889c3767569210a77142b17874a2869c7f20bcad3ade329c1a8841ba8e5bc02148eca1627cd3928741a29f4813ba29ab3867d033aefa33e1e31169c31f6c7581197fb61f21da5d14b60a941800ca807c0b6adb26238d1825211725bed4e54348a1197b38b4fb3a1292751f3e81cb10787e23b4444800a2bf1b945a3a699009e2e61035bd94ce4f6b5e7c86b74249fb2ec13a2a4e21dd266c30a19627f3e4f916bca0d685520f454203d60a4f4e9672a9b96dd820bebd27e0ce3d071b477ff187e1d8c79c502b118f3964c8bf35af67c4e5217757afa1254dd05afd37d5d15c6a7ed341f957c4671373d7bee2e1b7d29c02601243de136bb5c99f6a678d7cd59b8b01d7df09272de885b5ecd54f24dbbe5b7199535d72b09cc549c34b9ac68917987d5cc896546413bcb4dc5ee400b8161452eb7c5bbfe2e5a5fbf8a6a3d3f5dd6743e0c7c63b341d416d2244133d37064d1c7ca10f0f2181fecff831f97d0d949694ac8085c46811ac30a4b64d57b29b145d84a1a9477eb78e4e54740a68d35f7ab73959d4d3f787f70223de15aa11384182349957c90e5c12d976277ed2725d29dea0ab223c268041afef7263db116ef536691da70e2d47868223dbb24fd6ce376959dc866b7d1566d7a8937cc6b811a842dadaf9b42ae171dc669c6f5d610e617a622013bbdb6681f5a698376d2ad5c25813485e5945db285778dd2ddb0d9db6d59494174d134d4b6663233342bfa8dc18bd0834ce440413cbc29c77875a4ba2503010f4ebbf8ed99f6492af99ef668986040c3ab71d47e381ebcea3f91222ef34b41e1cfd735fbffa467d03d551280b6bbdbde2765170a73be8e280a039bfa38483d23320b792c3af486dd480198db45241e65fb8608299eeea32110e78fb87b6c000743ccfbf5a2d97682e33140bc74beae75407b4db9960c6424a8a2c2ab8f8a15673b4ddc466a6f177f1fe4f7ec70505c4383b624797676dc357a723b387716e1d18e221bfbda6c1a5a6c2c855f1ebaea2dd292b98aac111122485a99e22dd006ea8481f885df794a8e56a8c22498cc984fd3a270c07171c9a7d3084e77699de6658a49b48b132a6c6749f84c70b8ef653523e2de28b5381aaa325caa181a3b40d34455e7e69dc8af84cdf4b406c19a8e0b21a388fe9d7d639630b046e3acb7f5bd0a2cb911ea264cc86769615820277923188b23cfe2a61d4fad870dc29e24bc7e4105ed625941138075c5e94313cd8e145e4bd7ddb86fae2335e97b10b101bd83bc3cb1d36764ccf33c9248c4e72321cbf572274ba52d43b3b24117b4fa813b1238824f649bba5d980829179463599b1669535dc945ed8eaf4ff92e51274868a88a14d0e773b1dbb1a0a4238110b1218659699af0e121acb0d7922430c2a458275d5b1229bce9f27bc35bdeb2156775837b7a53262d31e127b58c7b600e937ebc024ba69bbf78a80758e9f791edfb6867485eb22cbd50d59164b6dbb31656b7cbed05494ba34e6fd715b3672e35b7dadc25e27cf5acf78f956adedadbacf3abb9c8e81b98490700da78ee1c6c74e13deb5157df3e8968091a794134ceb17978edf45d6fea2624d9517ba814cf4e6ea8095291472a1e83089c061a700e5624dcdcc0572961c4019aa7c23c421380f1d558f590aaf9f2145f0c946ec14c002914f1932b6e26e01d0d7108d4c1ce70c65f52774f9cc32319d2679b94134feca08cdd21d27f98cdccbac6a0d8c4738545be542e923e6fc626e2fc99206c9eed20b86553455f4dda57a49ff2185e98ef7129a8a2ab14a836110eab1e85f76e3c2aceb0c157b0bd9534a0f11cbd78fbb06ad7026236b51d028bae228994226ea8dfdce689544a8c88d7ab31cdea05ea7df0749a5e968fe55cc460a831bf95850e4ca26f6e2e784c6ef785e64e2d03639835338f5c49a88d1a12aed3e2b76575fa6b46c82515e2f258f5df4312b5b1fdbe16ae9cd0d276251240df1bae15b02f0a9f41fc6f3a77e4e2be17d680ca2141a8d4300e704945c6ef27a7cb58092feecb86bedf75aea295203edcb675f5b6e163894c2d7cc6eb50dd0d5caaf806976fe32d34905864a1e60436aa482d74e7371d6ab4eb18f9a038087bfff0a02be9758542c96a80e07595d4931a1f9ee1f543c20eecbdd78a81047b2e1b66d119cd492a1a93523af20fa05283a906c4262a6ab7d74128042f1106ab13e3e0ea4b1e903419036117332e38deee3d5ed6bd25432fca56264024553bbe359872d3e21ad89ed627d1f560c04ccf5f3034041061aafc73c01dd9b144957e501f3b72c98d120716f145caf2d55805c21a07cdea59437152d29f16e73290533e973409fe78c84475d29b921a1e19638227f4cf1533e5e6e56b67eedc3024dc725372b55b95de35448df8f69be19ecde00220b9647594cff962003754ed3c0d29595607aab4685adc67407aecb11175b65ec8531cd5e5ce9b269731af8eb0791cc2a0629d833d5bfa478532426b74499313b22cf23f7a775aabcefb3bda67ba23afbe7e502e056cd7008fd945a17111789f144b92d84e1f797d0a91c7b522ca34fb44aae776071b44a472fa83b7eed355da94c9bebe93e5f26d21f345a2f45fb1dad68f334c0263e83fb97baf623f8362d58a9b228afa49b87eca8d0a18f65dddfa4ec9fb7eadd5bb2481759a6ed9da2f412be8ebc54d7cee19637c801fe7e3a3e493abe048f2234e495be36163cb67fe70551e0fd8e6c8b900313221ff6addd43a59a4649a42328944d99657189f1c626891afb8cf3e1368d3ea329f28fba17cb3f4e82eea700016c197162a474621dc7c6c1bc9a8727f09794812f101d36254c1fcee034bd075108785d1a984716e90e3436a93ef2c118bf8c7ce78094aabf16e6bcb4cd10af1263a117dadc0faa696ea15a43531918eb9048d56c4968e7e7e23972ae2f2cb6b4419d56f33bdb969648d18c9921e9371d02fcd6caacbc05ac3568ab0b33443e6af5cfe1268ebe61483c169c874771e1150961733fca3ed5daec9a694687ba514dd1aa9bc8caa6b8a06e4ce74e466367526e328b0969119edbe103b66f77c0966704f30969ac8fed62102bb40c12378cc89748980489d22010071443728d877cce08af5a1f26ececa1e083e6a061f96b5f2a71e8adafc86ef2b9ddb5b3ccad65504beaeed17f72ebdcb7471df31625bd2d2a5d87e58ba9a74b900765a8491ece851951b52311a75558a49810221f922b5e088766201ce60e3b21398af00622470af84ef53a016d73aae1217d030e1a104632661765ad9de23ffecf1c0689d9c7df5f98f6a07e61c34dd4676a3f0c8c15691eb4b84ede426d62c14ffb64ccf7a8db955520fc81f05536e85837cf02dab9e826e5839fcd0a5ab37284fb9f689e3f511d07f5ce56dc555ecb315497ca68b2e91e7ac7171bf64a0755b8fa5fafb717b2999ddbc7875646fc842d9fa259b51fbd3a23286498f18a0a10781fe9cd397510c32e028f2782084d68b1c76c22322303bab17ffbaf8cc9cb46cd229e8b3f541ea841ca8f9a4c6b6305786b7108a47b46e682b3efd0fead2a26f1062283395aa1c3e9949e2242298e51e2e86337b5a95e882c74d519bf8499fe3fde5ac642bbc0aba1ecd7aa0eac34c53b3516e4e859d4489c78e7cabb843fea30a36bab0f1c7c5fa4c8bcd910baaa06c08bb68db1c95f73e1c707bdb4860f6ca2479ffd14de1ee27bcf5196f52c7b96f8f839568e106867113da1912bb06b1da40d05dfb1ec1c8a3dc05faf7774c954ccc84fb88189cf99f2743f373ec438983edf84c3811df486756e02f3b18d92d9e1521c48e6d41aaf706887838c037c653038d2e69720148d1c4ab71c11682821acff665baf4e7f71376ecdcdfc5cf5e8d2f74e267480f4ae567a4aa2682d38172d1b6802f391c250334a34a039284c67bce8e3319e0c7f3af0ec5f7fbd60bd56dafe19590f01f2ea5ced1e70425231a3945576eab384b20ee34c9ac10560651ce4df405331a1e531944e9ca0190166117aef02c34939a4be366df859b6973c860823ba91683d46d9e6895465805c4bb16b68d5d45c36e3b02904d9ae130c2ba87dc466312872e6a5489cec37a4314db520e9ff5c9d9808b75c4c3e0f05d6918d9ba81b20eff71f83a1a36efd91b7739871d351288060e9689092f3a0fa8b989f037dec11d9ea3ba83ec44d456000000000"], 0xd48}}], 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001439) close(r2) 1.529440663s ago: executing program 1 (id=986): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='ext4_journal_start\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000580)=0xffffffff, 0x4) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r5}, 0x14) syz_io_uring_setup(0x2deb, &(0x7f0000001600)={0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000000)) 1.429006546s ago: executing program 1 (id=987): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10002, &(0x7f0000000300)={[{@noload}]}, 0x0, 0x639, &(0x7f0000000580)="$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") process_madvise(0xffffffffffffffff, &(0x7f0000002880), 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.234469704s ago: executing program 2 (id=988): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141a42, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write(r0, &(0x7f0000004200)="74efc4c418fdb8d66bbba727f371d056ad6f44e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f510daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f09d21078e1852fc7c96413d9d65c52ce9baa6bc26de7f0287", 0x100) 1.128312317s ago: executing program 4 (id=989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002a0000009500008000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xb5, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x1c0e, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008200000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x100, 0x5, 0x8, 0x1000, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x48) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ac141400000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xec}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x8001) open_tree(r9, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 831.329269ms ago: executing program 3 (id=984): write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2008002, &(0x7f0000000400)={[{@usrquota}, {@discard}, {@i_version}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@lazytime}, {@auto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@bsdgroups}, {@grpid}]}, 0x1, 0x542, &(0x7f0000000fc0)="$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") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r4, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3d0, 0xe8, 0x1f8, 0x1f8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@private, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@random="458aec8c2261"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @multicast2}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team0\x00', 'batadv0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x20) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 502.286151ms ago: executing program 1 (id=990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='ext4_evict_inode\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0xf5, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x181200, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x791, 0xf6, &(0x7f0000000400)=""/246, 0x41100, 0x0, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0x8, 0xf0}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[r6, r0, r2], &(0x7f0000000900)=[{0x3, 0x1, 0xf, 0x7}, {0x3, 0x1, 0xd, 0x4}, {0x3, 0x1, 0xe, 0x8}, {0x2, 0x5, 0xc, 0x7}, {0x5, 0x9, 0x7, 0xe}, {0x0, 0x2, 0x4, 0x2}, {0x1, 0x1, 0xd, 0x3}, {0x1, 0x3, 0x10, 0x6}], 0x10, 0x4}, 0x90) 426.502424ms ago: executing program 1 (id=991): sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) 244.596021ms ago: executing program 3 (id=992): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x80086601, &(0x7f0000000000)=0x44) 0s ago: executing program 0 (id=993): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='bbr\x00', 0x4) kernel console output (not intermixed with test programs): ng state [ 78.479156][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.496978][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.499066][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 78.504918][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.528408][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.540758][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.549159][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 78.561230][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.569495][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.578634][ T2297] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 78.589236][ T2297] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.593744][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.601111][ T2297] F2FS-fs (loop3): invalid crc value [ 78.606535][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.615254][ T2297] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.626088][ T384] device bridge_slave_1 left promiscuous mode [ 78.633139][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.641141][ T384] device bridge_slave_0 left promiscuous mode [ 78.647205][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.679141][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.708052][ T2297] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.717596][ T2297] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.770048][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.780733][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.794595][ T2305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 78.805498][ T2305] ext4 filesystem being mounted at /root/syzkaller.yEqYsN/101/file0 supports timestamps until 2038 (0x7fffffff) [ 78.805517][ T23] audit: type=1400 audit(1719685569.360:366): avc: denied { relabelfrom } for pid=2296 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.832273][ T2297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 78.838012][ T2305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 78.861564][ T23] audit: type=1400 audit(1719685569.370:367): avc: denied { relabelto } for pid=2296 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.880370][ T2305] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 78.883704][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.899163][ T13] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 78.907847][ T13] usb 5-1: config 0 has no interfaces? [ 78.913006][ T2305] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 78.913318][ T13] usb 5-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 78.926349][ T2305] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.926349][ T2305] [ 78.934694][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.934708][ T5] usb 1-1: Product: syz [ 78.956880][ T5] usb 1-1: Manufacturer: syz [ 78.961471][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.969647][ T2305] EXT4-fs (loop2): Total free blocks count 0 [ 78.975621][ T2305] EXT4-fs (loop2): Free/Dirty block details [ 78.979034][ T5] usb 1-1: SerialNumber: syz [ 78.981704][ T2305] EXT4-fs (loop2): free_blocks=65281 [ 78.986921][ T13] usb 5-1: config 0 descriptor?? [ 78.994481][ T2305] EXT4-fs (loop2): dirty_blocks=512 [ 79.001330][ T2305] EXT4-fs (loop2): Block reservation details [ 79.009322][ T2305] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 79.009386][ T2019] attempt to access beyond end of device [ 79.009386][ T2019] loop3: rw=2049, want=45104, limit=40427 [ 79.188787][ T2318] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 79.198202][ T2318] ext4 filesystem being mounted at /root/syzkaller.yEqYsN/102/file0 supports timestamps until 2038 (0x7fffffff) [ 79.244698][ T74] usb 5-1: USB disconnect, device number 16 [ 79.577403][ T2277] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.604448][ T5] usb 1-1: USB disconnect, device number 9 [ 79.710648][ T2334] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 80.925142][ T2381] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 80.959209][ T2381] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/21/file0 supports timestamps until 2038 (0x7fffffff) [ 81.207256][ T2381] EXT4-fs error (device loop3): ext4_empty_dir:2996: inode #12: comm syz.3.526: Directory hole found for htree leaf block [ 81.404083][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 81.404092][ T23] audit: type=1400 audit(1719685571.960:371): avc: denied { write } for pid=2393 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.449058][ T74] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 81.733201][ T2404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 81.769082][ T5] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 81.848068][ T2397] F2FS-fs (loop2): Invalid log_blocksize (32), supports only 12 [ 81.855669][ T2397] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 81.864282][ T2397] F2FS-fs (loop2): Unrecognized mount option "fsync_mod" or missing value [ 81.949191][ T74] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.021514][ T2404] loop4: p1 p3 < p5 p6 > [ 82.029144][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 82.114512][ T2409] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.121036][ T74] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 82.129625][ T2409] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 82.130400][ T74] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.144828][ T2409] EXT4-fs (loop2): Remounting filesystem read-only [ 82.158861][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 82.170335][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 82.182693][ T2409] EXT4-fs error (device loop2): ext4_clear_blocks:858: inode #13: comm syz.2.538: attempt to clear invalid blocks 1024 len 1 [ 82.190666][ T74] usb 1-1: Product: syz [ 82.201321][ T74] usb 1-1: Manufacturer: syz [ 82.202893][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.207921][ T74] usb 1-1: SerialNumber: syz [ 82.215312][ T2409] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.538: invalid indirect mapped block 1819239214 (level 0) [ 82.221583][ T2415] request_module fs-hugetlbfs succeeded, but still no fs? [ 82.233330][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.248095][ T2409] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.538: invalid indirect mapped block 67174400 (level 2) [ 82.256690][ T5] usb 4-1: config 0 descriptor?? [ 82.266355][ T74] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 82.275064][ T383] udevd[383]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 82.277303][ T350] udevd[350]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 82.285791][ T409] udevd[409]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 82.306609][ T2409] EXT4-fs (loop2): 1 truncate cleaned up [ 82.319077][ T2409] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resgid=0x0000000000000000, [ 82.330362][ T2401] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 82.340928][ T5] hub 4-1:0.0: USB hub found [ 82.345868][ T2417] udevd[2417]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 82.498432][ T2433] syz.2.543 (pid 2433) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 82.569021][ T74] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 82.569092][ T5] hub 4-1:0.0: 2 ports detected [ 82.599090][ T5] hub 4-1:0.0: insufficient power available to use all downstream ports [ 82.623877][ T1759] usb 1-1: USB disconnect, device number 10 [ 82.665952][ T23] audit: type=1400 audit(1719685573.220:372): avc: denied { mount } for pid=2436 comm="syz.4.544" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 82.688766][ T23] audit: type=1400 audit(1719685573.240:373): avc: denied { unmount } for pid=556 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 82.770898][ T2441] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 82.780546][ T2441] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/105/file0 supports timestamps until 2038 (0x7fffffff) [ 82.795847][ T2441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 82.809092][ T74] usb 2-1: Using ep0 maxpacket: 16 [ 82.812151][ T2441] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 82.833988][ T2441] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 82.834104][ T2446] fscrypt: AES-128-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 82.846539][ T2441] EXT4-fs (loop4): This should not happen!! Data will be lost [ 82.846539][ T2441] [ 82.864595][ T2441] EXT4-fs (loop4): Total free blocks count 0 [ 82.870745][ T2441] EXT4-fs (loop4): Free/Dirty block details [ 82.876730][ T2441] EXT4-fs (loop4): free_blocks=65281 [ 82.882007][ T2441] EXT4-fs (loop4): dirty_blocks=512 [ 82.883716][ T2446] overlayfs: missing 'workdir' [ 82.887512][ T2441] EXT4-fs (loop4): Block reservation details [ 82.899218][ T2441] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 82.904188][ T2446] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 82.929158][ T74] usb 2-1: unable to get BOS descriptor set [ 83.009106][ T74] usb 2-1: config 0 has no interfaces? [ 83.085969][ T2462] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.093614][ T2462] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 83.108151][ T2462] EXT4-fs error (device loop4): ext4_clear_blocks:858: inode #13: comm syz.4.548: attempt to clear invalid blocks 1024 len 1 [ 83.121527][ T2462] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz.4.548: invalid indirect mapped block 1819239214 (level 0) [ 83.135744][ T2462] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz.4.548: invalid indirect mapped block 67174400 (level 2) [ 83.149843][ T2462] EXT4-fs (loop4): 1 truncate cleaned up [ 83.155322][ T2462] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 83.169104][ T74] usb 2-1: New USB device found, idVendor=176f, idProduct=720c, bcdDevice=51.90 [ 83.178288][ T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.186846][ T74] usb 2-1: Product: syz [ 83.191865][ T74] usb 2-1: Manufacturer: syz [ 83.196429][ T74] usb 2-1: SerialNumber: syz [ 83.210014][ T74] usb 2-1: config 0 descriptor?? [ 83.228582][ T23] audit: type=1400 audit(1719685573.780:374): avc: denied { execmem } for pid=2466 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.260630][ T23] audit: type=1400 audit(1719685573.800:375): avc: denied { create } for pid=2465 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.510458][ T74] usb 2-1: USB disconnect, device number 12 [ 83.759068][ T5] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 83.765412][ T5] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 83.869106][ T5] usbhid 4-1:0.0: can't add hid device: -32 [ 83.875780][ T5] usbhid: probe of 4-1:0.0 failed with error -32 [ 83.963638][ T2479] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 83.972668][ T2479] ext4 filesystem being mounted at /root/syzkaller.yEqYsN/111/bus supports timestamps until 2038 (0x7fffffff) [ 84.119060][ T371] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 84.128708][ T23] audit: type=1400 audit(1719685574.680:376): avc: denied { create } for pid=2483 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.245940][ T2492] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 84.255329][ T2492] ext4 filesystem being mounted at /root/syzkaller.yEqYsN/114/file0 supports timestamps until 2038 (0x7fffffff) [ 84.273332][ T2492] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 84.289658][ T2492] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 84.312117][ T2492] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 84.324914][ T2492] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.324914][ T2492] [ 84.334903][ T2492] EXT4-fs (loop2): Total free blocks count 0 [ 84.342878][ T2492] EXT4-fs (loop2): Free/Dirty block details [ 84.348584][ T2492] EXT4-fs (loop2): free_blocks=65281 [ 84.361637][ T2492] EXT4-fs (loop2): dirty_blocks=512 [ 84.367014][ T2492] EXT4-fs (loop2): Block reservation details [ 84.375730][ T2492] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 84.393629][ T23] audit: type=1400 audit(1719685574.950:377): avc: denied { map } for pid=2503 comm="syz.0.560" path="socket:[27031]" dev="sockfs" ino=27031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.431595][ T23] audit: type=1400 audit(1719685574.950:378): avc: denied { read } for pid=2503 comm="syz.0.560" path="socket:[27031]" dev="sockfs" ino=27031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.489170][ T371] usb 5-1: config 0 has no interfaces? [ 84.495402][ T371] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.504353][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.513068][ T371] usb 5-1: config 0 descriptor?? [ 84.573455][ T2507] device syzkaller0 entered promiscuous mode [ 84.629120][ T74] usb 4-1: USB disconnect, device number 9 [ 84.681474][ T23] audit: type=1400 audit(1719685575.240:379): avc: denied { unmount } for pid=1382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.712095][ T2510] incfs: Options parsing error. -22 [ 84.717477][ T2510] incfs: mount failed -22 [ 84.799636][ T23] audit: type=1400 audit(1719685575.360:380): avc: denied { map } for pid=2527 comm="syz.1.567" path="socket:[26362]" dev="sockfs" ino=26362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.801168][ T2528] fuse: Bad value for 'fd' [ 85.056356][ T74] usb 5-1: USB disconnect, device number 17 [ 85.274931][ T2538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.570'. [ 85.284125][ T2538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.570'. [ 85.299101][ T5] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 85.353957][ T2541] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 85.363981][ T2541] ext4 filesystem being mounted at /root/syzkaller.hCxIa8/21/file0 supports timestamps until 2038 (0x7fffffff) [ 85.385889][ T2541] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 85.410380][ T2541] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 85.434140][ T2541] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 85.446926][ T2541] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.446926][ T2541] [ 85.456664][ T2541] EXT4-fs (loop1): Total free blocks count 0 [ 85.462779][ T2541] EXT4-fs (loop1): Free/Dirty block details [ 85.468613][ T2541] EXT4-fs (loop1): free_blocks=65281 [ 85.474227][ T2541] EXT4-fs (loop1): dirty_blocks=512 [ 85.480408][ T2541] EXT4-fs (loop1): Block reservation details [ 85.486729][ T2541] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 85.549178][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 85.595491][ T2547] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 85.617127][ T2547] overlayfs: failed to resolve './file0': -2 [ 85.669359][ T5] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 85.682284][ T5] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 85.712951][ T5] usb 4-1: config 135 has no interface number 0 [ 85.733139][ T5] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.854562][ T2566] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 85.920234][ T2566] netlink: 'syz.1.577': attribute type 25 has an invalid length. [ 85.928157][ T5] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 85.944858][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.955595][ T2566] netlink: 'syz.1.577': attribute type 8 has an invalid length. [ 85.963369][ T5] usb 4-1: Product: syz [ 85.970517][ T2566] attempt to access beyond end of device [ 85.970517][ T2566] loop1: rw=0, want=1476395018, limit=128 [ 85.982542][ T5] usb 4-1: Manufacturer: syz [ 85.987092][ T5] usb 4-1: SerialNumber: syz [ 86.040024][ T5] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 86.046775][ T5] uvcvideo: No valid video chain found. [ 86.158819][ T2551] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.188538][ T2551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.246273][ T5] usb 4-1: USB disconnect, device number 10 [ 86.304882][ T2551] attempt to access beyond end of device [ 86.304882][ T2551] loop4: rw=0, want=45072, limit=40427 [ 86.473823][ T2584] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 86.490592][ T556] attempt to access beyond end of device [ 86.490592][ T556] loop4: rw=2049, want=45104, limit=40427 [ 86.510685][ T2578] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.554994][ T2578] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 86.561773][ T2578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.583301][ T2584] fuse: blksize only supported for fuseblk [ 86.591812][ T355] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 86.635258][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 86.635267][ T23] audit: type=1400 audit(1719685577.190:382): avc: denied { write } for pid=2577 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.664142][ T23] audit: type=1400 audit(1719685577.190:383): avc: denied { nlmsg_write } for pid=2577 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.685563][ T2595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.578'. [ 86.777876][ T23] audit: type=1400 audit(1719685577.330:384): avc: denied { read append } for pid=2597 comm="syz.3.584" name="file0" dev="sda1" ino=2010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 86.891904][ T2601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 86.901608][ T2601] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/110/file0 supports timestamps until 2038 (0x7fffffff) [ 86.915601][ T2601] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 86.974634][ T23] audit: type=1400 audit(1719685577.530:385): avc: denied { setopt } for pid=2607 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.040803][ T74] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 87.059819][ T2606] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 87.111524][ T2284] attempt to access beyond end of device [ 87.111524][ T2284] loop1: rw=2049, want=45104, limit=40427 [ 87.409166][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.420185][ T911] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 87.428332][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.438822][ T74] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 87.450555][ T74] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.475961][ T74] usb 4-1: config 0 descriptor?? [ 87.659010][ T911] usb 5-1: Using ep0 maxpacket: 32 [ 87.676449][ T2623] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 87.689122][ T2623] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.707838][ T2623] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.733496][ T2623] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.740826][ T2623] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.779559][ T911] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.793748][ T74] logitech-djreceiver 0003:046D:C71B.000B: unbalanced delimiter at end of report description [ 87.805684][ T74] logitech-djreceiver 0003:046D:C71B.000B: logi_dj_probe: parse failed [ 87.808300][ T2623] attempt to access beyond end of device [ 87.808300][ T2623] loop2: rw=2049, want=45112, limit=40427 [ 87.818412][ T911] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.831305][ T2623] attempt to access beyond end of device [ 87.831305][ T2623] loop2: rw=2049, want=45112, limit=40427 [ 87.836060][ T74] logitech-djreceiver: probe of 0003:046D:C71B.000B failed with error -22 [ 87.855361][ T911] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 87.864774][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.881928][ T2630] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 87.939710][ T911] hub 5-1:4.0: USB hub found [ 87.981920][ T1759] usb 4-1: USB disconnect, device number 11 [ 88.199338][ T911] hub 5-1:4.0: 7 ports detected [ 88.219229][ T911] hub 5-1:4.0: insufficient power available to use all downstream ports [ 88.289322][ T5] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 88.429629][ T2606] SELinux: Context : is not valid (left unmapped). [ 88.436398][ T23] audit: type=1400 audit(1719685578.990:386): avc: denied { relabelto } for pid=2605 comm="syz.4.585" name="rdma.current" dev="sda1" ino=2019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 88.443400][ T2642] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.460924][ T23] audit: type=1400 audit(1719685579.000:387): avc: denied { append } for pid=2605 comm="syz.4.585" path="/root/syzkaller.LnjxBC/111/rdma.current" dev="sda1" ino=2019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 88.506069][ T23] audit: type=1400 audit(1719685579.000:388): avc: denied { getopt } for pid=2605 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.526088][ T23] audit: type=1400 audit(1719685579.000:389): avc: denied { ioctl } for pid=2605 comm="syz.4.585" path="/root/syzkaller.LnjxBC/111/rdma.current" dev="sda1" ino=2019 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 88.530390][ T2642] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.553670][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 88.569124][ T911] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 88.575322][ T911] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 88.609847][ T911] usb 5-1: USB disconnect, device number 18 [ 88.643651][ T2642] attempt to access beyond end of device [ 88.643651][ T2642] loop2: rw=0, want=45072, limit=40427 [ 88.647257][ T2648] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 88.664433][ T2648] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/25/file0 supports timestamps until 2038 (0x7fffffff) [ 88.683185][ T2648] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 88.709104][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.719894][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.736785][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 88.746137][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.762511][ T2656] EXT4-fs (loop3): Unrecognized mount option "permit_directio" or missing value [ 88.764135][ T5] usb 2-1: config 0 descriptor?? [ 88.810263][ T355] attempt to access beyond end of device [ 88.810263][ T355] loop2: rw=2049, want=45104, limit=40427 [ 88.908590][ T23] audit: type=1326 audit(1719685579.460:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2662 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da5605b99 code=0x7ffc0000 [ 88.939243][ T23] audit: type=1326 audit(1719685579.460:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2662 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da5605b99 code=0x7ffc0000 [ 88.988958][ T2663] FAT-fs (loop0): Directory bread(block 64) failed [ 88.995458][ T2663] FAT-fs (loop0): Directory bread(block 65) failed [ 89.002828][ T2663] FAT-fs (loop0): Directory bread(block 66) failed [ 89.009927][ T2663] FAT-fs (loop0): Directory bread(block 67) failed [ 89.024623][ T2668] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 89.028126][ T2663] FAT-fs (loop0): Directory bread(block 68) failed [ 89.041738][ T2663] FAT-fs (loop0): Directory bread(block 69) failed [ 89.048191][ T2663] FAT-fs (loop0): Directory bread(block 70) failed [ 89.054998][ T2663] FAT-fs (loop0): Directory bread(block 71) failed [ 89.064190][ T2663] FAT-fs (loop0): Directory bread(block 72) failed [ 89.070868][ T2663] FAT-fs (loop0): Directory bread(block 73) failed [ 89.075320][ T2668] netlink: 'syz.3.600': attribute type 25 has an invalid length. [ 89.105791][ T2668] netlink: 'syz.3.600': attribute type 8 has an invalid length. [ 89.140273][ T2668] attempt to access beyond end of device [ 89.140273][ T2668] loop3: rw=0, want=1476395018, limit=128 [ 89.240433][ T5] wacom 0003:056A:4135.000C: unknown main item tag 0x0 [ 89.247483][ T5] wacom 0003:056A:4135.000C: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 89.444023][ T1759] usb 2-1: USB disconnect, device number 13 [ 89.447212][ T2690] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 89.460458][ T2690] FAT-fs (loop3): Filesystem has been set read-only [ 89.520892][ T2694] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 89.536628][ T2694] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/115/file0 supports timestamps until 2038 (0x7fffffff) [ 89.606131][ T2694] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 89.612236][ T2691] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 89.635035][ T2691] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 89.650998][ T2691] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.689220][ T2691] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 89.698756][ T2691] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.924591][ T2719] erofs: (device loop0): erofs_parse_options: Unrecognized mount option "" or missing value [ 90.143331][ T2691] attempt to access beyond end of device [ 90.143331][ T2691] loop2: rw=2049, want=40432, limit=40427 [ 90.262867][ T2726] netlink: 80 bytes leftover after parsing attributes in process `syz.1.613'. [ 90.296957][ T2728] EXT4-fs (loop0): Test dummy encryption mode enabled [ 90.313934][ T2728] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.339636][ T2728] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 90.357501][ T2728] EXT4-fs (loop0): 1 truncate cleaned up [ 90.363157][ T2728] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,test_dummy_encryption,nogrpid,,errors=continue [ 90.397718][ T2732] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 90.414898][ T2732] ext4 filesystem being mounted at /root/syzkaller.hCxIa8/29/file0 supports timestamps until 2038 (0x7fffffff) [ 90.494291][ T2737] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 90.579605][ T2732] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 90.699180][ T2745] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 90.876091][ T2745] netlink: 'syz.2.615': attribute type 25 has an invalid length. [ 90.884047][ T2745] netlink: 'syz.2.615': attribute type 8 has an invalid length. [ 90.950782][ T2750] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 90.993763][ T2750] fuse: Invalid rootmode [ 90.998207][ T2762] fuse: Bad value for 'fd' [ 91.202147][ T2769] EXT4-fs (loop0): Test dummy encryption mode enabled [ 91.212552][ T2769] EXT4-fs (loop0): Ignoring removed oldalloc option [ 91.237208][ T2769] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,stripe=0x0000000000000001,test_dummy_encryption,nobarrier,nodelalloc,minixdf,oldalloc,,errors=continue [ 91.370900][ T2781] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 91.397141][ T7] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.409030][ T13] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 91.421197][ T7] EXT4-fs (loop3): Remounting filesystem read-only [ 91.570476][ T2793] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 91.579434][ T2793] ext4 filesystem being mounted at /root/syzkaller.AL9ea9/65/file0 supports timestamps until 2038 (0x7fffffff) [ 91.621132][ T2793] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 91.829150][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.842483][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.852550][ T13] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.861680][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.880010][ T13] usb 3-1: config 0 descriptor?? [ 91.983716][ T2810] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 91.991389][ T2810] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 92.002132][ T2810] F2FS-fs (loop4): invalid crc value [ 92.008592][ T2810] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.037158][ T2810] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 92.044121][ T2810] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.057558][ T2810] handle_bad_sector: 1 callbacks suppressed [ 92.057567][ T2810] attempt to access beyond end of device [ 92.057567][ T2810] loop4: rw=2049, want=45104, limit=40427 [ 92.219082][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 92.224968][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 92.240572][ T13] usb 3-1: USB disconnect, device number 14 [ 92.645280][ T556] attempt to access beyond end of device [ 92.645280][ T556] loop4: rw=2049, want=45112, limit=40427 [ 92.669351][ T2835] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 93.225567][ T2846] IPv6: sit1: Disabled Multicast RS [ 93.681740][ T2857] FAT-fs (loop0): Unrecognized mount option "io{ha51" or missing value [ 93.701162][ T2853] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 93.711159][ T2853] ext4 filesystem being mounted at /root/syzkaller.hCxIa8/34/file0 supports timestamps until 2038 (0x7fffffff) [ 93.757886][ T2849] F2FS-fs (loop2): invalid crc value [ 93.764723][ T2849] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.787865][ T2849] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.859538][ T2853] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 93.868167][ T23] kauditd_printk_skb: 57 callbacks suppressed [ 93.868176][ T23] audit: type=1400 audit(1719685584.420:449): avc: denied { create } for pid=2848 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.074907][ T23] audit: type=1326 audit(1719685584.630:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2848 comm="syz.2.642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24430dbb99 code=0x0 [ 94.437040][ T355] attempt to access beyond end of device [ 94.437040][ T355] loop2: rw=2049, want=45104, limit=40427 [ 94.599736][ T2883] EXT4-fs error (device loop3): ext4_read_inode_bitmap:134: comm syz.3.652: Invalid inode bitmap blk 4 in block_group 0 [ 94.612398][ T2883] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue [ 94.635858][ T2883] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 94.650485][ T2883] EXT4-fs error (device loop3): ext4_read_inode_bitmap:134: comm syz.3.652: Invalid inode bitmap blk 4 in block_group 0 [ 94.663536][ T2883] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 94.672994][ T2883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 94.682594][ T23] audit: type=1400 audit(1719685585.240:451): avc: denied { ioctl } for pid=2882 comm="syz.3.652" path="socket:[29080]" dev="sockfs" ino=29080 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.691227][ T2881] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 94.754722][ T2881] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.771908][ T2881] F2FS-fs (loop0): invalid crc value [ 94.806209][ T2881] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.815932][ T2871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 94.995423][ T2881] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.002382][ T2881] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.119877][ T2907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 95.128892][ T2907] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/130/file0 supports timestamps until 2038 (0x7fffffff) [ 95.152491][ T2907] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.210173][ T2907] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 95.269990][ T23] audit: type=1400 audit(1719685585.790:452): avc: denied { execute_no_trans } for pid=2880 comm="syz.0.650" path="/root/syzkaller.AL9ea9/69/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.295767][ T23] audit: type=1400 audit(1719685585.800:453): avc: denied { block_suspend } for pid=2880 comm="syz.0.650" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.316579][ T2890] F2FS-fs (loop2): invalid crc value [ 95.326095][ T2890] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.337737][ T2897] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (67108865, 24) [ 95.355162][ T2907] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 95.379040][ T2907] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.379040][ T2907] [ 95.388578][ T2907] EXT4-fs (loop4): Total free blocks count 0 [ 95.394505][ T2897] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 95.405657][ T2897] F2FS-fs (loop3): invalid crc value [ 95.411571][ T2907] EXT4-fs (loop4): Free/Dirty block details [ 95.417329][ T2890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.419691][ T2907] EXT4-fs (loop4): free_blocks=65281 [ 95.440165][ T2897] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.441869][ T2907] EXT4-fs (loop4): dirty_blocks=512 [ 95.452148][ T2907] EXT4-fs (loop4): Block reservation details [ 95.453110][ T23] audit: type=1400 audit(1719685586.010:454): avc: denied { rename } for pid=2889 comm="syz.2.651" name="file1" dev="overlay" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.458641][ T2907] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 95.492415][ T23] audit: type=1400 audit(1719685586.040:455): avc: denied { link } for pid=2889 comm="syz.2.651" name="#23" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.493867][ T355] attempt to access beyond end of device [ 95.493867][ T355] loop2: rw=524288, want=45072, limit=40427 [ 95.514417][ T23] audit: type=1400 audit(1719685586.040:456): avc: denied { rename } for pid=2889 comm="syz.2.651" name="file1" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.525444][ T355] attempt to access beyond end of device [ 95.525444][ T355] loop2: rw=0, want=45072, limit=40427 [ 95.588134][ T7] attempt to access beyond end of device [ 95.588134][ T7] loop2: rw=2049, want=40992, limit=40427 [ 95.600655][ T23] audit: type=1400 audit(1719685586.040:457): avc: denied { rename } for pid=2889 comm="syz.2.651" name="#1" dev="loop2" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.623450][ T23] audit: type=1400 audit(1719685586.040:458): avc: denied { reparent } for pid=2889 comm="syz.2.651" name="#1" dev="loop2" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.625579][ T2897] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 95.653562][ T2897] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.711527][ T2019] attempt to access beyond end of device [ 95.711527][ T2019] loop3: rw=2049, want=45104, limit=40427 [ 95.760429][ T2929] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 95.777181][ T2929] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/131/file0 supports timestamps until 2038 (0x7fffffff) [ 95.821390][ T2929] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.836159][ T2929] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 95.848847][ T2929] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.848847][ T2929] [ 95.889230][ T2929] EXT4-fs (loop4): Total free blocks count 0 [ 95.895193][ T2929] EXT4-fs (loop4): Free/Dirty block details [ 95.905614][ T2929] EXT4-fs (loop4): free_blocks=65280 [ 95.910998][ T2929] EXT4-fs (loop4): dirty_blocks=1 [ 95.915995][ T2929] EXT4-fs (loop4): Block reservation details [ 95.922204][ T2929] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 95.928527][ T2933] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 10 with error 28 [ 95.941084][ T2933] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.941084][ T2933] [ 96.163144][ T2940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 96.180495][ T2935] F2FS-fs (loop0): invalid crc value [ 96.257824][ T2935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.507847][ T2935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.569445][ T9] device bridge_slave_1 left promiscuous mode [ 96.575589][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.593278][ T9] device bridge_slave_0 left promiscuous mode [ 96.609938][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.780659][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 96.838694][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.845623][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.853461][ T2957] device bridge_slave_0 entered promiscuous mode [ 96.853962][ T2956] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 96.860591][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.874281][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.874409][ T2956] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 96.881630][ T2957] device bridge_slave_1 entered promiscuous mode [ 96.891087][ T2956] F2FS-fs (loop3): invalid crc value [ 96.931431][ T2956] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.978023][ T2966] EXT4-fs (loop1): Mount option "dioread_lock" incompatible with ext3 [ 96.985312][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.992228][ T2956] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 96.993319][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.007422][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.007519][ T2956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.014365][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.077547][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.085190][ T1382] attempt to access beyond end of device [ 97.085190][ T1382] loop0: rw=2049, want=45104, limit=40427 [ 97.097286][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.121791][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.220136][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.231761][ T2972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 97.240835][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.241422][ T2972] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/133/file0 supports timestamps until 2038 (0x7fffffff) [ 97.249486][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.269599][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.278736][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.287359][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.294204][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.301984][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.310749][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.317563][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.418097][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.426326][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.462747][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.474377][ T2972] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 97.492432][ T2972] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 97.516491][ T2972] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 97.529095][ T2972] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.529095][ T2972] [ 97.538609][ T2972] EXT4-fs (loop4): Total free blocks count 0 [ 97.544853][ T2972] EXT4-fs (loop4): Free/Dirty block details [ 97.551482][ T2972] EXT4-fs (loop4): free_blocks=65281 [ 97.556616][ T2972] EXT4-fs (loop4): dirty_blocks=512 [ 97.562119][ T2972] EXT4-fs (loop4): Block reservation details [ 97.568053][ T2972] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 97.678435][ T2991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 97.685750][ T2984] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.698537][ T2984] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.669: bg 0: block 248: padding at end of block bitmap is not set [ 97.715242][ T2984] EXT4-fs (loop2): 1 truncate cleaned up [ 97.721573][ T2984] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 97.851485][ T3007] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 97.875263][ T2999] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 97.889674][ T2999] EXT4-fs (loop1): barriers disabled [ 97.894819][ T2999] JBD2: no valid journal superblock found [ 97.900608][ T2999] EXT4-fs (loop1): error loading journal [ 97.911330][ T3017] EXT4-fs error (device loop2): ext4_lookup:1818: inode #2: comm syz.2.669: deleted inode referenced: 12 [ 97.939361][ T3007] EXT4-fs (loop2): re-mounted. Opts: (null) [ 98.619892][ T3033] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 98.638905][ T3033] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/135/file0 supports timestamps until 2038 (0x7fffffff) [ 98.681136][ T3033] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 98.707085][ T3026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 98.715789][ T74] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 98.732093][ T3038] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 98.999012][ T74] usb 3-1: Using ep0 maxpacket: 16 [ 99.006891][ T3060] tmpfs: Unknown parameter 'huW' [ 99.049044][ T1145] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 99.119499][ T74] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.132356][ T74] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 99.135518][ T3062] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.144338][ T74] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 111, using maximum allowed: 30 [ 99.147609][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 99.147617][ T23] audit: type=1400 audit(1719685589.700:476): avc: denied { unlink } for pid=144 comm="syslogd" name="messages.0" dev="tmpfs" ino=9384 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.159034][ T74] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 99.165825][ T3062] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.694: bg 0: block 248: padding at end of block bitmap is not set [ 99.192815][ T74] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.204669][ T3062] Quota error (device loop3): write_blk: dquota write failed [ 99.219936][ T74] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 99.229449][ T3062] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.237453][ T74] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.250440][ T3062] EXT4-fs (loop3): 1 truncate cleaned up [ 99.278458][ T3062] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 99.319027][ T1145] usb 2-1: Using ep0 maxpacket: 16 [ 99.406401][ T3066] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 99.419703][ T3066] EXT4-fs (loop3): re-mounted. Opts: (null) [ 99.426123][ T3066] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.694: deleted inode referenced: 12 [ 99.439428][ T74] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.448336][ T74] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.456488][ T74] usb 3-1: Product: syz [ 99.460520][ T74] usb 3-1: Manufacturer: syz [ 99.464897][ T74] usb 3-1: SerialNumber: syz [ 99.479069][ T1145] usb 2-1: config 0 has no interfaces? [ 99.639109][ T1145] usb 2-1: New USB device found, idVendor=176f, idProduct=720c, bcdDevice=51.90 [ 99.648381][ T1145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.656778][ T1145] usb 2-1: Product: syz [ 99.660762][ T1145] usb 2-1: Manufacturer: syz [ 99.665141][ T1145] usb 2-1: SerialNumber: syz [ 99.674475][ T1145] usb 2-1: config 0 descriptor?? [ 99.816065][ T74] usb 3-1: USB disconnect, device number 15 [ 99.823871][ T767] udevd[767]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.920598][ T379] usb 2-1: USB disconnect, device number 14 [ 99.989182][ T1145] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 100.060421][ T3077] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 100.066344][ T3074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 100.070126][ T3077] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/45/file0 supports timestamps until 2038 (0x7fffffff) [ 100.103190][ T3077] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 100.119983][ T3077] overlayfs: unrecognized mount option "smackfstransmute=]" or missing value [ 100.139125][ T3077] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 100.152061][ T3077] EXT4-fs (loop3): This should not happen!! Data will be lost [ 100.152061][ T3077] [ 100.162274][ T3077] EXT4-fs (loop3): Total free blocks count 0 [ 100.168060][ T3077] EXT4-fs (loop3): Free/Dirty block details [ 100.173869][ T3077] EXT4-fs (loop3): free_blocks=65281 [ 100.179195][ T3077] EXT4-fs (loop3): dirty_blocks=512 [ 100.184269][ T3077] EXT4-fs (loop3): Block reservation details [ 100.190074][ T3077] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 100.254087][ T23] audit: type=1326 audit(1719685590.810:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3083 comm="syz.4.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8013b99 code=0x0 [ 100.474274][ T3094] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 100.511533][ T3096] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 100.539144][ T1145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.549911][ T1145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.559974][ T1145] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.565939][ T3094] blk_update_request: I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.574071][ T1145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.586107][ T3094] EXT4-fs (loop3): couldn't read superblock of external journal [ 100.589560][ T1145] usb 1-1: config 0 descriptor?? [ 100.713890][ T23] audit: type=1400 audit(1719685591.270:478): avc: denied { remount } for pid=3093 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 100.918305][ T3103] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 101.024818][ T23] audit: type=1400 audit(1719685591.580:479): avc: denied { nlmsg_read } for pid=3114 comm="syz.4.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 101.046234][ T1145] usbhid 1-1:0.0: can't add hid device: -71 [ 101.052556][ T1145] usbhid: probe of 1-1:0.0 failed with error -71 [ 101.074391][ T3115] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 101.080251][ T1145] usb 1-1: USB disconnect, device number 11 [ 101.087557][ T3115] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/144/file0 supports timestamps until 2038 (0x7fffffff) [ 101.404573][ T3117] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 0) [ 101.413213][ T3117] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.503512][ T3117] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x2010) [ 101.511488][ T3117] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 101.591845][ T3130] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 101.600864][ T3130] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/49/file0 supports timestamps until 2038 (0x7fffffff) [ 101.644709][ T3130] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 101.692231][ T3130] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 101.704977][ T3130] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.704977][ T3130] [ 101.714833][ T3130] EXT4-fs (loop3): Total free blocks count 0 [ 101.721114][ T3130] EXT4-fs (loop3): Free/Dirty block details [ 101.726843][ T3130] EXT4-fs (loop3): free_blocks=65281 [ 101.732256][ T3130] EXT4-fs (loop3): dirty_blocks=512 [ 101.737665][ T3130] EXT4-fs (loop3): Block reservation details [ 101.744034][ T3130] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 101.876454][ T3145] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 101.885512][ T3145] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/50/file0 supports timestamps until 2038 (0x7fffffff) [ 101.889076][ T1145] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 101.913057][ T3148] attempt to access beyond end of device [ 101.913057][ T3148] loop0: rw=0, want=276, limit=256 [ 101.929715][ T3148] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 101.937881][ T3148] FAT-fs (loop0): Filesystem has been set read-only [ 101.945135][ T3148] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 101.953773][ T23] audit: type=1400 audit(1719685592.510:480): avc: denied { create } for pid=3144 comm="syz.3.718" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.954901][ T3145] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 101.982869][ T3145] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3002: comm syz.3.718: Allocating blocks 18-19 which overlap fs metadata [ 101.998653][ T3145] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3002: comm syz.3.718: Allocating blocks 18-19 which overlap fs metadata [ 102.312157][ T3155] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 102.322671][ T3155] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/51/file0 supports timestamps until 2038 (0x7fffffff) [ 102.369016][ T1145] usb 3-1: device descriptor read/64, error 18 [ 102.529499][ T3173] F2FS-fs (loop3): invalid crc value [ 102.536775][ T3173] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.563563][ T3176] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 102.569515][ T3173] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.589092][ T74] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 102.714946][ T23] audit: type=1326 audit(1719685593.270:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3172 comm="syz.3.724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03ed096b99 code=0x0 [ 102.779042][ T1145] usb 3-1: device descriptor read/64, error 18 [ 102.829027][ T74] usb 5-1: Using ep0 maxpacket: 8 [ 103.069258][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.080010][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.089569][ T74] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 103.098615][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.107271][ T74] usb 5-1: config 0 descriptor?? [ 103.129117][ T1145] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 103.224543][ T2019] attempt to access beyond end of device [ 103.224543][ T2019] loop3: rw=2049, want=45104, limit=40427 [ 103.269111][ T911] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.412410][ T1145] usb 3-1: device descriptor read/64, error 18 [ 103.481069][ T3192] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 103.490104][ T3192] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/53/file0 supports timestamps until 2038 (0x7fffffff) [ 103.506113][ T3192] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 103.634773][ T3192] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 103.648811][ T3192] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.648811][ T3192] [ 103.659244][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.671718][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.682268][ T3192] EXT4-fs (loop3): Total free blocks count 0 [ 103.688117][ T911] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.697121][ T74] usbhid 5-1:0.0: can't add hid device: -71 [ 103.702928][ T74] usbhid: probe of 5-1:0.0 failed with error -71 [ 103.709096][ T3192] EXT4-fs (loop3): Free/Dirty block details [ 103.714701][ T3192] EXT4-fs (loop3): free_blocks=65281 [ 103.720793][ T74] usb 5-1: USB disconnect, device number 19 [ 103.725785][ T3192] EXT4-fs (loop3): dirty_blocks=512 [ 103.726883][ T911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.732952][ T3192] EXT4-fs (loop3): Block reservation details [ 103.745453][ T3192] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 103.752500][ T911] usb 1-1: config 0 descriptor?? [ 103.979013][ T1145] usb 3-1: device descriptor read/64, error 18 [ 104.099103][ T1145] usb usb3-port1: attempt power cycle [ 104.129576][ T911] usbhid 1-1:0.0: can't add hid device: -71 [ 104.137455][ T911] usbhid: probe of 1-1:0.0 failed with error -71 [ 104.151125][ T911] usb 1-1: USB disconnect, device number 12 [ 104.270495][ T3208] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 104.277744][ T3208] EXT4-fs (loop4): Unrecognized mount option "euid>00000000000000000000" or missing value [ 104.347102][ T7] attempt to access beyond end of device [ 104.347102][ T7] loop3: rw=1, want=544, limit=256 [ 104.359995][ T7] attempt to access beyond end of device [ 104.359995][ T7] loop3: rw=1, want=1024, limit=256 [ 104.382357][ T7] attempt to access beyond end of device [ 104.382357][ T7] loop3: rw=1, want=6056, limit=256 [ 104.396720][ T3208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.733'. [ 104.400350][ T7] attempt to access beyond end of device [ 104.400350][ T7] loop3: rw=1, want=17152, limit=256 [ 104.425079][ T7] attempt to access beyond end of device [ 104.425079][ T7] loop3: rw=1, want=29168, limit=256 [ 104.441311][ T7] attempt to access beyond end of device [ 104.441311][ T7] loop3: rw=1, want=32832, limit=256 [ 104.498339][ T3211] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 104.509214][ T3211] ext4 filesystem being mounted at /root/syzkaller.hCxIa8/51/file0 supports timestamps until 2038 (0x7fffffff) [ 104.520951][ T1145] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 104.829125][ T1145] usb 3-1: device descriptor read/8, error -61 [ 104.971624][ T3230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 104.980593][ T3230] ext4 filesystem being mounted at /root/syzkaller.AL9ea9/87/file0 supports timestamps until 2038 (0x7fffffff) [ 104.993850][ T3233] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 105.013681][ T23] audit: type=1400 audit(1719685595.570:482): avc: denied { create } for pid=3229 comm="syz.0.739" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 105.159324][ T3221] F2FS-fs (loop3): invalid crc value [ 105.172307][ T3221] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.206328][ T1145] usb 3-1: device descriptor read/8, error -61 [ 105.211813][ T3221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.479278][ T1145] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 105.511724][ T2019] attempt to access beyond end of device [ 105.511724][ T2019] loop3: rw=2049, want=45104, limit=40427 [ 105.525371][ T3240] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 105.548378][ T3240] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/152/file0 supports timestamps until 2038 (0x7fffffff) [ 105.572526][ T3240] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 105.600754][ T3240] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 105.613042][ T3240] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.613042][ T3240] [ 105.622786][ T3240] EXT4-fs (loop4): Total free blocks count 0 [ 105.629046][ T3240] EXT4-fs (loop4): Free/Dirty block details [ 105.634893][ T3240] EXT4-fs (loop4): free_blocks=65281 [ 105.640291][ T3240] EXT4-fs (loop4): dirty_blocks=512 [ 105.645346][ T3240] EXT4-fs (loop4): Block reservation details [ 105.651503][ T3240] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 105.679074][ T1145] usb 3-1: device descriptor read/8, error -61 [ 105.909182][ T1145] usb 3-1: device descriptor read/8, error -71 [ 106.029444][ T3252] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 106.038759][ T1145] usb usb3-port1: unable to enumerate USB device [ 106.069212][ T3252] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 106.101865][ T3252] F2FS-fs (loop0): invalid crc value [ 106.148169][ T3252] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.175786][ T23] audit: type=1400 audit(1719685596.730:483): avc: denied { setattr } for pid=3265 comm="syz.3.748" name="cpuset" dev="proc" ino=30670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 106.221336][ T23] audit: type=1400 audit(1719685596.730:484): avc: denied { ioctl } for pid=3265 comm="syz.3.748" path="socket:[30671]" dev="sockfs" ino=30671 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.247437][ T3252] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 106.256403][ T3252] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.681822][ T23] audit: type=1400 audit(1719685597.170:485): avc: denied { bind } for pid=3282 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.825345][ T3288] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 106.834780][ T3288] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/154/file0 supports timestamps until 2038 (0x7fffffff) [ 107.115242][ T3254] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.843134][ T3254] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.901001][ T3310] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.914749][ T3310] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.757: bg 0: block 248: padding at end of block bitmap is not set [ 108.008845][ T3299] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 108.015524][ T3310] Quota error (device loop1): write_blk: dquota write failed [ 108.028095][ T3310] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 108.028266][ T3299] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/155/file0 supports timestamps until 2038 (0x7fffffff) [ 108.040415][ T3310] EXT4-fs (loop1): 1 truncate cleaned up [ 108.059278][ T3310] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 108.103371][ T3319] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 108.119458][ T3299] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 108.159716][ T3319] EXT4-fs (loop3): barriers disabled [ 108.179039][ T3319] JBD2: no valid journal superblock found [ 108.185035][ T3319] EXT4-fs (loop3): error loading journal [ 108.216165][ T3299] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 108.229095][ T3299] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.229095][ T3299] [ 108.238724][ T3299] EXT4-fs (loop4): Total free blocks count 0 [ 108.245207][ T3299] EXT4-fs (loop4): Free/Dirty block details [ 108.251179][ T3299] EXT4-fs (loop4): free_blocks=65281 [ 108.256516][ T3299] EXT4-fs (loop4): dirty_blocks=512 [ 108.262213][ T3299] EXT4-fs (loop4): Block reservation details [ 108.268607][ T3299] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 108.275847][ T3325] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 108.321097][ T3325] EXT4-fs (loop1): re-mounted. Opts: (null) [ 108.669024][ T107] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 108.696470][ T3339] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 108.700670][ T3338] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 108.715539][ T3339] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/157/file0 supports timestamps until 2038 (0x7fffffff) [ 108.715807][ T3338] ext4 filesystem being mounted at /root/syzkaller.hCxIa8/62/file0 supports timestamps until 2038 (0x7fffffff) [ 108.949352][ T107] usb 4-1: Using ep0 maxpacket: 8 [ 108.955000][ T3349] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 109.018029][ T3322] F2FS-fs (loop0): invalid crc value [ 109.037353][ T3358] process 'syz.4.768' launched './file1' with NULL argv: empty string added [ 109.052530][ T3322] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.129274][ T3322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 109.197572][ T107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.207660][ T107] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.809129][ T107] usb 4-1: New USB device found, idVendor=1d6b, idProduct=00f2, bcdDevice= 0.40 [ 109.819138][ T107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.828420][ T107] usb 4-1: Product: syz [ 109.828440][ T23] audit: type=1326 audit(1719685600.380:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3321 comm="syz.0.760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5da5605b99 code=0x0 [ 109.834075][ T107] usb 4-1: Manufacturer: syz [ 109.871769][ T107] usb 4-1: SerialNumber: syz [ 109.905909][ T23] audit: type=1400 audit(1719685600.460:487): avc: denied { mounton } for pid=3380 comm="syz.2.773" path="/root/syzkaller.CboNFk/9/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 109.954232][ T3376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 109.963304][ T3376] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/161/file0 supports timestamps until 2038 (0x7fffffff) [ 109.980728][ T3376] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.004733][ T3376] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 110.017309][ T3376] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.017309][ T3376] [ 110.026768][ T3376] EXT4-fs (loop4): Total free blocks count 0 [ 110.032773][ T3376] EXT4-fs (loop4): Free/Dirty block details [ 110.038631][ T3376] EXT4-fs (loop4): free_blocks=65281 [ 110.043895][ T3376] EXT4-fs (loop4): dirty_blocks=512 [ 110.049155][ T3376] EXT4-fs (loop4): Block reservation details [ 110.055212][ T3376] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 110.210418][ T3394] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 110.219293][ T3394] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/163/file0 supports timestamps until 2038 (0x7fffffff) [ 110.232418][ T5] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 110.239334][ T107] usb 4-1: 0:2 : does not exist [ 110.247361][ T107] usb 4-1: USB disconnect, device number 12 [ 110.256701][ T767] udevd[767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.450073][ T3401] EXT4-fs (loop4): Invalid want_extra_isize 0 [ 110.537145][ T3401] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 110.551763][ T3401] overlayfs: filesystem on './bus' not supported as upperdir [ 110.609173][ T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 110.779251][ T5] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 110.788237][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.796435][ T5] usb 2-1: Product: syz [ 110.800691][ T5] usb 2-1: Manufacturer: syz [ 110.805689][ T5] usb 2-1: SerialNumber: syz [ 110.825779][ T5] usb 2-1: config 0 descriptor?? [ 110.841293][ T3415] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 110.859196][ T3388] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 110.869199][ T379] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 111.473729][ T5] usb 2-1: USB disconnect, device number 15 [ 111.625608][ T1145] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 111.734935][ T3427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 111.745788][ T3427] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/168/file0 supports timestamps until 2038 (0x7fffffff) [ 111.776070][ T3427] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 111.785614][ T3432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 111.799575][ T3432] ext4 filesystem being mounted at /root/syzkaller.CboNFk/12/file0 supports timestamps until 2038 (0x7fffffff) [ 111.802088][ T3427] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 111.811563][ T379] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 111.824577][ T3427] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.824577][ T3427] [ 111.842963][ T3427] EXT4-fs (loop4): Total free blocks count 0 [ 111.850103][ T3427] EXT4-fs (loop4): Free/Dirty block details [ 111.856661][ T3427] EXT4-fs (loop4): free_blocks=65281 [ 111.859279][ T379] usb 1-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config [ 111.863586][ T3427] EXT4-fs (loop4): dirty_blocks=512 [ 111.879817][ T3427] EXT4-fs (loop4): Block reservation details [ 111.885975][ T3427] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 111.893341][ T379] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 111.902490][ T1145] usb 4-1: device descriptor read/64, error 18 [ 111.909229][ T379] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 111.918250][ T379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.930288][ T379] usb 1-1: config 0 descriptor?? [ 111.970047][ T379] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 111.987413][ T23] audit: type=1400 audit(1719685602.540:488): avc: denied { read } for pid=3440 comm="syz.4.790" name="vga_arbiter" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.012195][ T23] audit: type=1400 audit(1719685602.540:489): avc: denied { open } for pid=3440 comm="syz.4.790" path="/dev/vga_arbiter" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.455736][ T911] usb 1-1: USB disconnect, device number 13 [ 112.601240][ T3445] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 0) [ 112.608653][ T3445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.617451][ T3445] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x2010) [ 112.626161][ T3445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 112.669034][ T1145] usb 4-1: device descriptor read/64, error 18 [ 112.919460][ T3467] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 112.955400][ T1145] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 113.101101][ T3464] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.310671][ T3464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.322873][ T3474] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 113.332443][ T3474] ext4 filesystem being mounted at /root/syzkaller.LnjxBC/173/file0 supports timestamps until 2038 (0x7fffffff) [ 113.349045][ T1145] usb 4-1: device descriptor read/64, error 18 [ 113.394860][ T3474] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 113.414935][ T2284] attempt to access beyond end of device [ 113.414935][ T2284] loop1: rw=2049, want=45104, limit=40427 [ 113.431594][ T3474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 113.445143][ T3474] EXT4-fs (loop4): This should not happen!! Data will be lost [ 113.445143][ T3474] [ 113.454820][ T3474] EXT4-fs (loop4): Total free blocks count 0 [ 113.456036][ T3477] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 113.460766][ T3474] EXT4-fs (loop4): Free/Dirty block details [ 113.475381][ T3474] EXT4-fs (loop4): free_blocks=65281 [ 113.480685][ T3474] EXT4-fs (loop4): dirty_blocks=512 [ 113.485016][ T3477] ext4 filesystem being mounted at /root/syzkaller.AL9ea9/96/file0 supports timestamps until 2038 (0x7fffffff) [ 113.485786][ T3474] EXT4-fs (loop4): Block reservation details [ 113.503685][ T3474] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 113.623403][ T3490] device lo entered promiscuous mode [ 113.645128][ T23] audit: type=1400 audit(1719685604.200:490): avc: denied { getopt } for pid=3489 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.669385][ T3489] device lo left promiscuous mode [ 113.700251][ T23] audit: type=1400 audit(1719685604.240:491): avc: denied { accept } for pid=3488 comm="syz.4.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 113.722334][ T23] audit: type=1326 audit(1719685604.240:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8013b99 code=0x7ffc0000 [ 113.746789][ T1145] usb 4-1: device descriptor read/64, error 18 [ 113.761092][ T23] audit: type=1326 audit(1719685604.240:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd8013b99 code=0x7ffc0000 [ 113.882702][ T1145] usb usb4-port1: attempt power cycle [ 114.286049][ T3499] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 114.299062][ T3499] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 114.318588][ T3499] F2FS-fs (loop0): invalid crc value [ 114.350947][ T3522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 114.360291][ T3499] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.372948][ T3522] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/64/file0 supports timestamps until 2038 (0x7fffffff) [ 114.415434][ T3522] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 114.449410][ T3499] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 114.456499][ T3499] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.468035][ T3522] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 114.481447][ T3522] EXT4-fs (loop3): This should not happen!! Data will be lost [ 114.481447][ T3522] [ 114.491591][ T3522] EXT4-fs (loop3): Total free blocks count 0 [ 114.497551][ T3522] EXT4-fs (loop3): Free/Dirty block details [ 114.504426][ T3522] EXT4-fs (loop3): free_blocks=65281 [ 114.510955][ T3522] EXT4-fs (loop3): dirty_blocks=512 [ 114.516367][ T3522] EXT4-fs (loop3): Block reservation details [ 114.526404][ T3522] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 114.580360][ T3501] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 114.588692][ T3501] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.599777][ T3501] F2FS-fs (loop1): invalid crc value [ 114.607909][ T3501] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.844554][ T3517] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.889337][ T3517] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.913953][ T3501] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.922028][ T3501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.999441][ T556] attempt to access beyond end of device [ 114.999441][ T556] loop4: rw=2049, want=45104, limit=40427 [ 115.100666][ T3538] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 115.110376][ T3538] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/65/file0 supports timestamps until 2038 (0x7fffffff) [ 115.636268][ T3560] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 115.659956][ T3560] blk_update_request: I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.689089][ T3560] EXT4-fs (loop3): couldn't read superblock of external journal [ 115.949273][ T3571] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 115.969685][ T3571] ext4 filesystem being mounted at /root/syzkaller.AL9ea9/102/file0 supports timestamps until 2038 (0x7fffffff) [ 115.983990][ T3571] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 116.394126][ T3571] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 116.419025][ T3571] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.419025][ T3571] [ 116.429593][ T3571] EXT4-fs (loop0): Total free blocks count 0 [ 116.435803][ T3571] EXT4-fs (loop0): Free/Dirty block details [ 116.442005][ T3571] EXT4-fs (loop0): free_blocks=65281 [ 116.447140][ T3571] EXT4-fs (loop0): dirty_blocks=512 [ 116.452513][ T3571] EXT4-fs (loop0): Block reservation details [ 116.470820][ T3571] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 116.512892][ T3594] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 116.521786][ T3594] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/67/file0 supports timestamps until 2038 (0x7fffffff) [ 116.625880][ T3592] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 116.640600][ T3592] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 116.651668][ T3592] F2FS-fs (loop2): invalid crc value [ 116.655583][ T3602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 116.662961][ T3592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.735546][ T3592] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 116.742550][ T3592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.767365][ T3609] netlink: 104 bytes leftover after parsing attributes in process `syz.3.831'. [ 116.843273][ T3616] 9pnet: Insufficient options for proto=fd [ 116.864265][ T23] audit: type=1400 audit(1719685607.420:494): avc: denied { mounton } for pid=3617 comm="syz.1.837" path="/root/syzkaller.hCxIa8/74/file0" dev="ramfs" ino=32605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 117.578112][ T3629] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 117.601327][ T3633] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 117.611213][ T3633] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/71/file0 supports timestamps until 2038 (0x7fffffff) [ 117.619560][ T3629] ext4 filesystem being mounted at /root/syzkaller.AL9ea9/107/file0 supports timestamps until 2038 (0x7fffffff) [ 117.644957][ T3629] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 117.721048][ T3629] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 117.753568][ T3629] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.753568][ T3629] [ 117.777826][ T3629] EXT4-fs (loop0): Total free blocks count 0 [ 117.789061][ T3629] EXT4-fs (loop0): Free/Dirty block details [ 117.794784][ T3629] EXT4-fs (loop0): free_blocks=65281 [ 117.829089][ T3629] EXT4-fs (loop0): dirty_blocks=512 [ 117.834110][ T3629] EXT4-fs (loop0): Block reservation details [ 117.851663][ T3629] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 117.877848][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.917434][ T3641] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.926837][ T3641] device bridge_slave_0 entered promiscuous mode [ 117.943151][ T3639] F2FS-fs (loop4): invalid crc value [ 117.945530][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.956535][ T3639] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.965666][ T3641] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.976326][ T3641] device bridge_slave_1 entered promiscuous mode [ 117.998091][ T3639] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.046982][ T3654] netlink: 277 bytes leftover after parsing attributes in process `syz.3.845'. [ 118.057828][ T556] attempt to access beyond end of device [ 118.057828][ T556] loop4: rw=2049, want=45104, limit=40427 [ 118.092611][ T3657] overlayfs: failed to resolve './file0': -2 [ 118.115630][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.122497][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.129625][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.136440][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.171713][ T3661] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 118.175214][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.189352][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.196683][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.219186][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.227721][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.234688][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.243728][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.252389][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.259242][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.267102][ T9] device bridge_slave_1 left promiscuous mode [ 118.273457][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.281117][ T9] device bridge_slave_0 left promiscuous mode [ 118.287041][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.052413][ T3673] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 119.062020][ T3673] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/75/file0 supports timestamps until 2038 (0x7fffffff) [ 119.075241][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.083487][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.091652][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.100259][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.106038][ T3689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 119.108111][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.123967][ T3689] ext4 filesystem being mounted at /root/syzkaller.AL9ea9/110/file0 supports timestamps until 2038 (0x7fffffff) [ 119.139508][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.148013][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.149236][ T3689] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 119.158851][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.189488][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.197550][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.221752][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.230997][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.240111][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.248363][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.339006][ T1145] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 119.400406][ T3700] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 119.438371][ T3700] EXT4-fs (loop1): 1 truncate cleaned up [ 119.444149][ T3700] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue [ 119.569966][ T3694] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 119.589023][ T1145] usb 3-1: Using ep0 maxpacket: 16 [ 119.596109][ T3694] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.611661][ T3694] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.654711][ T3694] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.666830][ T3694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.771537][ T3694] attempt to access beyond end of device [ 119.771537][ T3694] loop0: rw=2049, want=45112, limit=40427 [ 119.803673][ T3694] attempt to access beyond end of device [ 119.803673][ T3694] loop0: rw=2049, want=45232, limit=40427 [ 119.816185][ T3694] attempt to access beyond end of device [ 119.816185][ T3694] loop0: rw=2049, want=45104, limit=40427 [ 119.828586][ T3694] attempt to access beyond end of device [ 119.828586][ T3694] loop0: rw=0, want=45176, limit=40427 [ 119.841955][ T3694] attempt to access beyond end of device [ 119.841955][ T3694] loop0: rw=524288, want=45232, limit=40427 [ 119.854176][ T3694] attempt to access beyond end of device [ 119.854176][ T3694] loop0: rw=524288, want=45112, limit=40427 [ 119.865874][ T3694] attempt to access beyond end of device [ 119.865874][ T3694] loop0: rw=0, want=45192, limit=40427 [ 119.877736][ T3694] attempt to access beyond end of device [ 119.877736][ T3694] loop0: rw=0, want=45192, limit=40427 [ 119.888935][ T1145] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 119.899182][ T1145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.917367][ T1145] usb 3-1: Product: syz [ 119.921705][ T1145] usb 3-1: Manufacturer: syz [ 119.926145][ T1145] usb 3-1: SerialNumber: syz [ 119.936157][ T1145] usb 3-1: config 0 descriptor?? [ 119.974783][ T7] attempt to access beyond end of device [ 119.974783][ T7] loop0: rw=1, want=45128, limit=40427 [ 119.987503][ T1145] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 120.005309][ T1145] usb 3-1: Detected FT232H [ 120.010061][ T7] attempt to access beyond end of device [ 120.010061][ T7] loop0: rw=1, want=45152, limit=40427 [ 120.172260][ T3700] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 120.199203][ T1145] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 120.240000][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.246929][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.254553][ T3720] device bridge_slave_0 entered promiscuous mode [ 120.263031][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.270137][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.277460][ T3720] device bridge_slave_1 entered promiscuous mode [ 120.386747][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.393651][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.400734][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.407483][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.429603][ T911] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 120.450075][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.460411][ T1145] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 120.467640][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.479580][ T1145] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 120.496369][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.515005][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.523971][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.530954][ T488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.538463][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.547316][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.554212][ T488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.569943][ T3729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 120.580397][ T3729] ext4 filesystem being mounted at /root/syzkaller.Loe6FS/1/file0 supports timestamps until 2038 (0x7fffffff) [ 120.714108][ T3735] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.730773][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.735954][ T3729] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 120.755820][ T3735] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #17: comm syz.0.867: iget: bad i_size value: -6917529027641081756 [ 120.770984][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.779539][ T3735] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.867: couldn't read orphan inode 17 (err -117) [ 120.791566][ T3735] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 120.803129][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.819581][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.827561][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.848407][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.871948][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.931650][ T3746] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 120.979764][ T7] device bridge_slave_1 left promiscuous mode [ 120.985803][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.993238][ T7] device bridge_slave_0 left promiscuous mode [ 120.999300][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.009216][ T911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.022119][ T911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.033566][ T911] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 121.043977][ T911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.089774][ T911] usb 4-1: config 0 descriptor?? [ 121.528152][ T23] audit: type=1400 audit(1719685612.080:495): avc: denied { listen } for pid=3752 comm="syz.0.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.579463][ T911] hid (null): bogus close delimiter [ 121.789208][ T911] usb 4-1: string descriptor 0 read error: -22 [ 121.820793][ T13] usb 3-1: USB disconnect, device number 20 [ 121.828462][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 121.842368][ T13] ftdi_sio 3-1:0.0: device disconnected [ 121.877437][ T3772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3772 comm=syz.4.876 [ 121.892381][ T3770] EXT4-fs error (device loop1): ext4_quota_enable:6052: comm syz.1.875: Bad quota inum: 2, type: 2 [ 121.903595][ T3770] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 121.919044][ T3770] EXT4-fs (loop1): mount failed [ 121.940923][ T3776] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 121.949970][ T3776] ext4 filesystem being mounted at /root/syzkaller.CboNFk/25/file0 supports timestamps until 2038 (0x7fffffff) [ 121.959278][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.968709][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.976839][ T3774] device bridge_slave_0 entered promiscuous mode [ 121.983796][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.990858][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.998241][ T3774] device bridge_slave_1 entered promiscuous mode [ 122.025103][ T3776] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 122.051861][ T23] audit: type=1400 audit(1719685612.610:496): avc: denied { map } for pid=3769 comm="syz.1.875" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=9254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.104118][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.110996][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.118248][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.125128][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.156136][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.166179][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.173640][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.189720][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.198158][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.205447][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.221474][ T911] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000D/input/input28 [ 122.240091][ T3790] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.244619][ T3787] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 122.269241][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.270621][ T911] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 122.285160][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.296267][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.382102][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.401290][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.416929][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.432686][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.452761][ T342] usb 4-1: USB disconnect, device number 16 [ 122.462674][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.544420][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.556929][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.575435][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.587463][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.660190][ T7] device bridge_slave_1 left promiscuous mode [ 122.764077][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.804847][ T7] device bridge_slave_0 left promiscuous mode [ 122.923388][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.005114][ T3800] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 123.052321][ T3800] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.069711][ T3800] Trying to write to read-only block-device loop0 (partno 0) [ 123.077300][ T3800] EXT4-fs (loop0): Remounting filesystem read-only [ 123.091760][ T3774] Trying to write to read-only block-device loop0 (partno 0) [ 123.099349][ T3774] Trying to write to read-only block-device loop0 (partno 0) [ 123.106624][ T3774] Trying to write to read-only block-device loop0 (partno 0) [ 123.114745][ T3774] Trying to write to read-only block-device loop0 (partno 0) [ 123.124448][ T3812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.882'. [ 123.124855][ T3807] Trying to write to read-only block-device loop0 (partno 0) [ 123.466499][ T3819] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 123.546793][ T3817] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 123.546868][ T3819] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/78/file0 supports timestamps until 2038 (0x7fffffff) [ 123.578123][ T3819] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 123.618115][ T3830] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.625496][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.657340][ T3830] device bridge_slave_0 entered promiscuous mode [ 123.664523][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.671984][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.679859][ T3830] device bridge_slave_1 entered promiscuous mode [ 123.744373][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.751365][ T3830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.758431][ T3830] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.765508][ T3830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.913226][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.924457][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.933742][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.944576][ T3835] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 123.953581][ T3835] EXT4-fs (loop3): 1 truncate cleaned up [ 123.960290][ T3835] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue [ 123.995009][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.005795][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.013115][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.032285][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.041333][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.048482][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.162523][ T3842] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 124.344009][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.355997][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.396635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.415426][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.429438][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.447497][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.456697][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.585090][ T3862] fuse: Unknown parameter '' [ 124.592531][ T3852] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 124.602398][ T3862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.896'. [ 124.611539][ T3852] System zones: 0-1, 3-12 [ 124.616391][ T3852] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 124.627161][ T3862] fuse: Unknown parameter 'r_otmode' [ 124.728914][ T3849] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.768464][ T3849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.860864][ T3857] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 124.934119][ T3857] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.986243][ T23] audit: type=1400 audit(1719685615.390:497): avc: denied { lock } for pid=3864 comm="syz.4.899" path="socket:[35490]" dev="sockfs" ino=35490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 125.006227][ T3857] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.893: bg 0: block 248: padding at end of block bitmap is not set [ 125.013137][ T7] device bridge_slave_1 left promiscuous mode [ 125.073249][ T3857] Quota error (device loop2): write_blk: dquota write failed [ 125.090313][ T3857] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 125.094335][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.111436][ T3857] EXT4-fs (loop2): 1 truncate cleaned up [ 125.117217][ T7] device bridge_slave_0 left promiscuous mode [ 125.124938][ T3857] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,nodiscard,nomblk_io_submit,,errors=continue [ 125.140580][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.418852][ T3884] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 125.428950][ T3884] ext4 filesystem being mounted at /root/syzkaller.mDziQi/4/file0 supports timestamps until 2038 (0x7fffffff) [ 125.454746][ T3886] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 125.530051][ T3884] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 125.942130][ T3906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.905'. [ 126.113366][ T3907] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 126.128845][ T3907] EXT4-fs (loop0): 1 truncate cleaned up [ 126.134742][ T3907] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue [ 126.564892][ T3923] capability: warning: `syz.2.910' uses deprecated v2 capabilities in a way that may be insecure [ 126.597198][ T3924] EXT4-fs error (device loop1): ext4_quota_enable:6052: comm syz.1.909: Bad quota inum: 2, type: 2 [ 126.609610][ T3924] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 126.619632][ T3931] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 126.677570][ T3924] EXT4-fs (loop1): mount failed [ 126.700666][ T3933] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 126.828894][ T3933] input: syz1 as /devices/virtual/input/input29 [ 126.842207][ T3936] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 126.851395][ T3936] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/84/file0 supports timestamps until 2038 (0x7fffffff) [ 126.963733][ T3942] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 126.989118][ T3942] ext4 filesystem being mounted at /root/syzkaller.CboNFk/33/file0 supports timestamps until 2038 (0x7fffffff) [ 127.104054][ T3942] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 127.290562][ T3950] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 127.779563][ T3967] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 128.089727][ T3962] F2FS-fs (loop2): invalid crc value [ 128.105608][ T3962] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.159697][ T3974] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 128.165684][ T3962] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.169229][ T3974] ext4 filesystem being mounted at /root/syzkaller.mDziQi/8/file0 supports timestamps until 2038 (0x7fffffff) [ 128.321692][ T23] audit: type=1400 audit(1719685618.880:498): avc: denied { setattr } for pid=3990 comm="syz.3.924" name="" dev="pipefs" ino=35762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 128.347824][ T3991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3991 comm=syz.3.924 [ 128.360233][ T3991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=3991 comm=syz.3.924 [ 128.373669][ T3991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3991 comm=syz.3.924 [ 128.392557][ T3991] netlink: 13752 bytes leftover after parsing attributes in process `syz.3.924'. [ 128.403689][ T3991] netlink: 468 bytes leftover after parsing attributes in process `syz.3.924'. [ 128.424612][ T23] audit: type=1400 audit(1719685618.880:499): avc: denied { setopt } for pid=3990 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.511546][ T23] audit: type=1400 audit(1719685618.900:500): avc: denied { getopt } for pid=3990 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.549296][ T2957] attempt to access beyond end of device [ 128.549296][ T2957] loop2: rw=2049, want=45104, limit=40427 [ 128.565139][ T4004] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 128.652851][ T23] audit: type=1400 audit(1719685619.210:501): avc: denied { mount } for pid=3998 comm="syz.0.923" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.772527][ T23] audit: type=1400 audit(1719685619.210:502): avc: denied { remount } for pid=3998 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 129.190898][ T3995] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.232259][ T3995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.289886][ T23] audit: type=1400 audit(1719685619.850:503): avc: denied { unmount } for pid=3774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 129.317096][ T4000] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.372106][ T4020] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 129.386011][ T4020] ext4 filesystem being mounted at /root/syzkaller.CboNFk/35/file0 supports timestamps until 2038 (0x7fffffff) [ 129.398795][ T3641] attempt to access beyond end of device [ 129.398795][ T3641] loop1: rw=2049, want=45120, limit=40427 [ 129.443560][ T4000] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.462403][ T4027] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 129.472378][ T4020] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 129.571278][ T3830] attempt to access beyond end of device [ 129.571278][ T3830] loop4: rw=2049, want=45104, limit=40427 [ 129.650297][ T4027] input: syz1 as /devices/virtual/input/input32 [ 129.731214][ T372] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 129.764792][ T4035] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 130.050734][ T4039] FAT-fs (loop1): Unrecognized mount option "uni_xlate=0noname=lower" or missing value [ 130.109162][ T372] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 130.118662][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.131701][ T372] usb 4-1: config 0 descriptor?? [ 130.150389][ T4043] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 130.161304][ T4043] ext4 filesystem being mounted at /root/syzkaller.tLlvpj/7/file0 supports timestamps until 2038 (0x7fffffff) [ 130.547988][ T23] audit: type=1400 audit(1719685621.100:504): avc: denied { nlmsg_read } for pid=4053 comm="syz.4.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.610848][ T4046] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.626909][ T4046] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.630888][ T4065] fuse: Unknown parameter '' [ 130.637091][ T23] audit: type=1400 audit(1719685621.190:505): avc: denied { ioctl } for pid=4064 comm="syz.4.942" path="socket:[36998]" dev="sockfs" ino=36998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.655293][ T4046] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.666142][ T23] audit: type=1400 audit(1719685621.190:506): avc: denied { bind } for pid=4064 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.718899][ T4046] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.731890][ T4046] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.733169][ T4069] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 130.811117][ T4075] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 130.820347][ T4075] ext4 filesystem being mounted at /root/syzkaller.tLlvpj/11/file0 supports timestamps until 2038 (0x7fffffff) [ 130.839683][ T4046] attempt to access beyond end of device [ 130.839683][ T4046] loop1: rw=34817, want=77952, limit=40427 [ 130.953755][ T4075] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 131.034097][ T4031] input: syz1 as /devices/virtual/input/input34 [ 131.730762][ T4093] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 131.770362][ T4086] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.812292][ T4086] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.169192][ T372] usb 4-1: Cannot set autoneg [ 132.191855][ T4093] input: syz1 as /devices/virtual/input/input35 [ 132.198784][ T372] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 132.211910][ T372] usb 4-1: USB disconnect, device number 17 [ 132.264437][ T3830] attempt to access beyond end of device [ 132.264437][ T3830] loop4: rw=2049, want=45104, limit=40427 [ 132.332752][ T4114] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 132.529426][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 132.538092][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 132.720186][ T4120] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,discard,i_version,inode_readahead_blks=0x0000000000000020,lazytime,auto_da_alloc,init_itable=0x0000000000000008,bsdgroups,grpid,,errors=continue [ 132.741227][ T4120] ext4 filesystem being mounted at /root/syzkaller.CboNFk/41/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 133.066912][ T4120] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 133.120827][ T4120] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 133.252269][ T372] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 133.532285][ T4140] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 133.541365][ T4140] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/91/file0 supports timestamps until 2038 (0x7fffffff) [ 133.544346][ T4143] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 133.579364][ T4140] fscrypt (loop3, inode 13): Error -61 getting encryption context [ 133.649277][ T372] usb 2-1: config index 0 descriptor too short (expected 64575, got 68) [ 133.682786][ T372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.731661][ T372] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 133.794199][ T372] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 133.912735][ T372] usb 2-1: config index 1 descriptor too short (expected 64575, got 68) [ 133.921179][ T372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.947560][ T4156] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 133.948164][ T372] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 133.956869][ T4156] ext4 filesystem being mounted at /root/syzkaller.0EEU2S/92/file0 supports timestamps until 2038 (0x7fffffff) [ 133.967718][ T372] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 134.051500][ T4156] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 134.066066][ T372] usb 2-1: string descriptor 0 read error: -71 [ 134.088216][ T372] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.106660][ T4156] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 134.119601][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.127604][ T4156] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.127604][ T4156] [ 134.158528][ T4156] EXT4-fs (loop3): Total free blocks count 0 [ 134.164550][ T4156] EXT4-fs (loop3): Free/Dirty block details [ 134.170383][ T4156] EXT4-fs (loop3): free_blocks=65281 [ 134.175672][ T4156] EXT4-fs (loop3): dirty_blocks=1 [ 134.180751][ T4156] EXT4-fs (loop3): Block reservation details [ 134.186647][ T4156] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 134.190353][ T4152] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.199300][ T372] usb 2-1: can't set config #1, error -71 [ 134.211941][ T372] usb 2-1: USB disconnect, device number 16 [ 134.309272][ T4152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.487882][ T4187] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,discard,i_version,inode_readahead_blks=0x0000000000000020,lazytime,auto_da_alloc,init_itable=0x0000000000000008,bsdgroups,grpid,,errors=continue [ 135.508596][ T4187] ext4 filesystem being mounted at /root/syzkaller.Loe6FS/24/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 135.531389][ T4187] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 135.539639][ T4187] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 135.891013][ T4202] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 135.975436][ T23] audit: type=1400 audit(1719685626.530:507): avc: denied { map } for pid=4201 comm="syz.3.972" path="/root/syzkaller.0EEU2S/95/file0/bus" dev="devtmpfs" ino=9213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.004882][ T23] audit: type=1400 audit(1719685626.530:508): avc: denied { execute } for pid=4201 comm="syz.3.972" path="/root/syzkaller.0EEU2S/95/file0/bus" dev="devtmpfs" ino=9213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.009616][ T4202] EXT4-fs error (device loop3): ext4_xattr_ibody_get:601: inode #19: comm syz.3.972: corrupted in-inode xattr [ 136.040108][ T4207] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 136.045559][ T4202] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #19: comm syz.3.972: corrupted in-inode xattr [ 136.063219][ T4207] ext4 filesystem being mounted at /root/syzkaller.CboNFk/45/file0 supports timestamps until 2038 (0x7fffffff) [ 136.087741][ T4220] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 136.097280][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 136.104269][ T4207] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 136.124348][ T4207] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.136444][ T4207] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.136444][ T4207] [ 136.146036][ T4207] EXT4-fs (loop2): Total free blocks count 0 [ 136.152066][ T4207] EXT4-fs (loop2): Free/Dirty block details [ 136.158084][ T4207] EXT4-fs (loop2): free_blocks=65281 [ 136.163232][ T4207] EXT4-fs (loop2): dirty_blocks=1 [ 136.168049][ T4207] EXT4-fs (loop2): Block reservation details [ 136.174000][ T4207] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 136.190287][ T2019] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz-executor: deleted inode referenced: 11 [ 136.207689][ T2019] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz-executor: deleted inode referenced: 11 [ 136.824303][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.850290][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.876904][ T5] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.880851][ T4241] device bridge_slave_0 entered promiscuous mode [ 136.892895][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.899800][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.907197][ T4241] device bridge_slave_1 entered promiscuous mode [ 137.029489][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.036516][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.044130][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.050980][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.077457][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.085597][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.094001][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.115419][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.120059][ T4244] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.128454][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.136241][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.169293][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.177428][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.184506][ T488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.184562][ T4244] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.192721][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.204330][ T4258] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 137.206985][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.239104][ T5] usb 1-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 137.250952][ T5] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 137.262924][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.271992][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.280219][ T179] device bridge_slave_1 left promiscuous mode [ 137.286587][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.296040][ T179] device bridge_slave_0 left promiscuous mode [ 137.302163][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.356500][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.365447][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.373629][ T5] usb 1-1: SerialNumber: syz [ 137.634613][ T5] usb 1-1: USB disconnect, device number 14 [ 137.726187][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.735078][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.743463][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.752357][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.761224][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.770071][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.840692][ T4270] netlink: 156 bytes leftover after parsing attributes in process `syz.4.989'. [ 138.171060][ T4269] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,discard,i_version,inode_readahead_blks=0x0000000000000020,lazytime,auto_da_alloc,init_itable=0x0000000000000008,bsdgroups,grpid,,errors=continue [ 138.191969][ T4269] ext4 filesystem being mounted at /root/syzkaller.qCnVhi/0/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 138.215103][ T4269] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 138.223884][ T4269] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 138.274382][ T4272] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 138.283572][ T4272] ext4 filesystem being mounted at /root/syzkaller.CboNFk/48/file0 supports timestamps until 2038 (0x7fffffff) [ 138.535962][ T4272] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 138.567339][ T179] ================================================================== [ 138.575243][ T179] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xe2/0x280 [ 138.582601][ T179] Read of size 4 at addr 0000000000000010 by task kworker/u4:2/179 [ 138.590315][ T179] [ 138.592491][ T179] CPU: 1 PID: 179 Comm: kworker/u4:2 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 138.603603][ T179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 138.613588][ T179] Workqueue: netns cleanup_net [ 138.618173][ T179] Call Trace: [ 138.621311][ T179] dump_stack+0x1d8/0x241 [ 138.625474][ T179] ? panic+0x89d/0x89d [ 138.629479][ T179] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 138.635124][ T179] ? idr_get_next_ul+0x32a/0x3f0 [ 138.640080][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 138.645107][ T179] __kasan_report+0xe9/0x120 [ 138.649533][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 138.654567][ T179] kasan_report+0x30/0x60 [ 138.658751][ T179] check_memory_region+0x272/0x280 [ 138.663682][ T179] tcf_idrinfo_destroy+0xe2/0x280 [ 138.668539][ T179] ? tcf_idr_check_alloc+0x370/0x370 [ 138.673657][ T179] ? netdev_refcnt_read+0x1c0/0x1c0 [ 138.678685][ T179] ? gact_exit_net+0xef/0x140 [ 138.683203][ T179] police_exit_net+0xd7/0x140 [ 138.687717][ T179] ? police_init_net+0x1c0/0x1c0 [ 138.692493][ T179] cleanup_net+0x6e2/0xc90 [ 138.696742][ T179] ? ops_init+0x4a0/0x4a0 [ 138.701033][ T179] ? read_word_at_a_time+0xe/0x20 [ 138.705963][ T179] ? strscpy+0x89/0x220 [ 138.709961][ T179] process_one_work+0x765/0xd20 [ 138.714643][ T179] worker_thread+0xaef/0x1470 [ 138.719248][ T179] kthread+0x2da/0x360 [ 138.723267][ T179] ? worker_clr_flags+0x170/0x170 [ 138.728095][ T179] ? kthread_blkcg+0xd0/0xd0 [ 138.732525][ T179] ret_from_fork+0x1f/0x30 [ 138.736774][ T179] ================================================================== [ 138.744668][ T179] Disabling lock debugging due to kernel taint [ 138.753169][ T179] kasan: CONFIG_KASAN_INLINE enabled [ 138.758406][ T179] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 138.767255][ T179] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 138.774085][ T179] CPU: 0 PID: 179 Comm: kworker/u4:2 Tainted: G B W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 138.785224][ T179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 138.795177][ T179] Workqueue: netns cleanup_net [ 138.799860][ T179] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 138.805495][ T179] Code: ee e8 9b 9b b6 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 6e 55 00 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 bf 9f [ 138.825219][ T179] RSP: 0018:ffff8881e4dffb60 EFLAGS: 00010202 [ 138.831117][ T179] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881e7aeee40 [ 138.838928][ T179] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000ffffffff [ 138.846740][ T179] RBP: ffff8881e4dffc30 R08: ffffffff813ae585 R09: 0000000000000003 [ 138.854552][ T179] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103c9bff78 [ 138.862364][ T179] R13: ffff8881e4dffbc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 138.870173][ T179] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 138.879039][ T179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.885456][ T179] CR2: 0000555556a014a8 CR3: 00000001eb915000 CR4: 00000000003406b0 [ 138.893269][ T179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.901357][ T179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.909148][ T179] Call Trace: [ 138.912284][ T179] ? __die+0xb4/0x100 [ 138.916092][ T179] ? die+0x26/0x50 [ 138.919655][ T179] ? do_general_protection+0x266/0x3c0 [ 138.924946][ T179] ? ___preempt_schedule+0x16/0x20 [ 138.929892][ T179] ? do_trap+0x340/0x340 [ 138.933976][ T179] ? check_panic_on_warn+0x5e/0xa0 [ 138.938920][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 138.943959][ T179] ? general_protection+0x28/0x30 [ 138.948905][ T179] ? check_panic_on_warn+0x55/0xa0 [ 138.953885][ T179] ? tcf_idrinfo_destroy+0xe9/0x280 [ 138.959098][ T179] ? tcf_idr_check_alloc+0x370/0x370 [ 138.964196][ T179] ? netdev_refcnt_read+0x1c0/0x1c0 [ 138.969234][ T179] ? gact_exit_net+0xef/0x140 [ 138.973837][ T179] police_exit_net+0xd7/0x140 [ 138.978416][ T179] ? police_init_net+0x1c0/0x1c0 [ 138.983275][ T179] cleanup_net+0x6e2/0xc90 [ 138.987538][ T179] ? ops_init+0x4a0/0x4a0 [ 138.991876][ T179] ? read_word_at_a_time+0xe/0x20 [ 138.996723][ T179] ? strscpy+0x89/0x220 [ 139.000720][ T179] process_one_work+0x765/0xd20 [ 139.005407][ T179] worker_thread+0xaef/0x1470 [ 139.009928][ T179] kthread+0x2da/0x360 [ 139.013824][ T179] ? worker_clr_flags+0x170/0x170 [ 139.018702][ T179] ? kthread_blkcg+0xd0/0xd0 [ 139.023224][ T179] ret_from_fork+0x1f/0x30 [ 139.027467][ T179] Modules linked in: [ 139.062008][ T179] ---[ end trace e96b59158369d4a9 ]--- [ 139.067620][ T179] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 139.073461][ T179] Code: ee e8 9b 9b b6 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 6e 55 00 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 bf 9f [ 139.095715][ T179] RSP: 0018:ffff8881e4dffb60 EFLAGS: 00010202 [ 139.102792][ T179] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881e7aeee40 [ 139.110913][ T179] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000ffffffff [ 139.118765][ T179] RBP: ffff8881e4dffc30 R08: ffffffff813ae585 R09: 0000000000000003 [ 139.126898][ T179] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103c9bff78 [ 139.146171][ T179] R13: ffff8881e4dffbc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 139.154197][ T179] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 139.163117][ T179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.169565][ T179] CR2: 00007fb885c6daa8 CR3: 00000001ece60000 CR4: 00000000003406a0 [ 139.177413][ T179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.185832][ T179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.193716][ T1759] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 139.196760][ T179] Kernel panic - not syncing: Fatal exception [ 139.207495][ T179] Kernel Offset: disabled [ 139.211943][ T179] Rebooting in 86400 seconds..