last executing test programs: 15m4.751062697s ago: executing program 3 (id=631): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @private2, @mcast2, {[], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x8, 0xf, 0x32315559, 0x8, 0x943c, 0x11a, 0xb, 0x8000, 0x0, 0x6, 0x1, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) bind(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 14m54.12260135s ago: executing program 3 (id=652): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r10, r10], 0x2, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r11, &(0x7f0000000000)="170cf31f8e85bcdbb6ad484c26dfa6be3180020cc3ad083eb719a8495180e3411bca5a3904d99c037e2d8e3c1c72fa92fbc31f328a0634a228ba73fca36ab95455c2429a396c437ae822453d5dbfd246cfc6e49f4b77fbb58e3e23beae7970b5bdb6c5d6a4b76a6e910402706986d2c4da7f3cab1ec82c46628456875bad37ebb5c0bef76aeae81b5489235cc4a3533c44fae97f864aa56771761bf7b68f404289dfd955fc20d7c7eb05951df334942d46ba78c78f3c72a7e827134798ba9e611ff2de814c88b7ee20d6163a99b26f4756f5ed20986bfe8de8c2292656a566df0117b53931975aaafdc881", 0xeb, 0x4000810, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$sock_int(r11, 0x1, 0xa, &(0x7f0000000140)=0x3, 0x4) 14m52.302832239s ago: executing program 3 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x2, 0xd, 0x5, 0x4}, {0x87, 0x84, 0xf, 0x6}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m50.432285163s ago: executing program 3 (id=660): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000340)=[@register_looper, @clear_death], 0x0, 0x0, 0x0}) 14m49.140867668s ago: executing program 3 (id=663): semget$private(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, 0x0}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) gettid() socket(0x1e, 0x1, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 14m47.641706762s ago: executing program 3 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='module_load\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000011140100000000000000000008004a0001000000080003000100000008004b00130000000886722c100957d8255f8a4ba800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r5, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r6) r7 = syz_open_dev$evdev(0x0, 0x1, 0x0) syz_usb_disconnect(r7) 14m32.359654737s ago: executing program 32 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='module_load\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000011140100000000000000000008004a0001000000080003000100000008004b00130000000886722c100957d8255f8a4ba800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r5, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r6) r7 = syz_open_dev$evdev(0x0, 0x1, 0x0) syz_usb_disconnect(r7) 11m44.196249104s ago: executing program 4 (id=1008): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x7b7, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 11m43.063179717s ago: executing program 4 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 11m41.844765697s ago: executing program 4 (id=1013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') 11m40.761941536s ago: executing program 4 (id=1015): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x8, 0xf, 0x32315559, 0x8, 0x943c, 0x11a, 0xb, 0x8000, 0x0, 0x6, 0x1, 0x7}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) bind(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) 11m39.531794637s ago: executing program 4 (id=1017): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0xfffffffffffffff9}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86ee95", 0x5}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdir(0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x49, {}, {0xb289d58468e4db09, 0xc, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) 11m34.188593796s ago: executing program 4 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 11m18.42270695s ago: executing program 33 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m15.253753459s ago: executing program 2 (id=2047): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000200)='~', 0x1) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r11, r12, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r13, &(0x7f0000000000)="170cf31f8e85bcdbb6ad484c26dfa6be3180020cc3ad083eb719a8495180e3411bca5a3904d99c037e2d8e3c1c72fa92fbc31f328a0634a228ba73fca36ab95455c2429a396c437ae822453d5dbfd246cfc6e49f4b77fbb58e3e23beae7970b5bdb6c5d6a4b76a6e910402706986d2c4da7f3cab1ec82c46628456875bad37ebb5c0bef76aeae81b5489235cc4a3533c44fae97f864aa56771761bf7b68f404289dfd955fc20d7c7eb05951df334942d46ba78c78f3c72a7e827134798ba9e611ff2de814c88b7ee20d6163a99b26f4756f5ed20986bfe8de8c2292656a566df0117b53931975aaafdc881", 0xeb, 0x4000810, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) setsockopt$sock_int(r13, 0x1, 0xa, &(0x7f0000000140)=0x3, 0x4) 1m13.964931464s ago: executing program 2 (id=2049): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x4000000) 1m13.548422618s ago: executing program 2 (id=2051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x7, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982f4", 0x0, 0x0, 0x14, 0x0, 0x0}) 1m12.324604639s ago: executing program 2 (id=2053): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x1, 0x1af, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m11.784259223s ago: executing program 2 (id=2057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x2, 0xfffffc01, 0x6, 'syz1\x00', 0x2}, 0x1, [0xb, 0xfffffffffffffffd, 0x3, 0x9, 0x4, 0x6, 0x0, 0x6, 0x5, 0x8, 0x6, 0xb, 0x7, 0x8000000000000001, 0x8000001000, 0x101, 0x5, 0x4, 0x8, 0x18, 0xfffffffffffffffe, 0xfffffffffffffff6, 0x5, 0x9, 0x1000000, 0x9, 0x3, 0x6, 0xfffffffffffffbff, 0x8, 0x3, 0x7, 0x9, 0xe6, 0x8, 0x1, 0x4, 0x27, 0x10000, 0xfffffffffffffffd, 0x8, 0x3, 0x800, 0x0, 0x9, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffff7f, 0x5, 0xfc, 0x2, 0x2, 0x3, 0xffffffff8b2fe5d4, 0x6, 0x7, 0x5, 0x8, 0x6, 0x9, 0x4, 0xffffffffffffff00, 0x2, 0x8, 0x4, 0x7, 0x1, 0x1, 0x40, 0x2, 0x4, 0x1, 0x10, 0x1, 0x3, 0x100000000, 0x3ff, 0x80000000, 0x2, 0x4, 0x61, 0x1, 0x5564, 0x5, 0x7fff, 0x4531, 0x400, 0x5, 0x7fffffffffffffff, 0x13b, 0x401, 0x7, 0x8, 0x8001, 0x3, 0x100000001, 0x6, 0x6, 0x2c, 0xf31e, 0x1, 0xffffffffffffff5f, 0x8, 0x8, 0x306dc643, 0x9, 0x0, 0x8000000000000001, 0x1, 0x3, 0x3, 0x8, 0x9, 0x8, 0x1ff, 0x2, 0x7, 0x2, 0x34, 0x1f, 0x2, 0xc, 0x5c4, 0x4, 0x789, 0x9]}) 1m10.473947181s ago: executing program 2 (id=2061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x7, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982f4", 0x0, 0x0, 0x14, 0x0, 0x0}) 1m9.808827615s ago: executing program 34 (id=2061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x7, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982f4", 0x0, 0x0, 0x14, 0x0, 0x0}) 11.723590142s ago: executing program 6 (id=2175): socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)}, 0x2}], 0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000e0000000000000002000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000610000008500000050000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r3, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) 10.598313464s ago: executing program 1 (id=2177): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f00000005c0)=""/241, 0xf1}, {0x0}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000000380)=""/80, 0x50}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x9}, 0x40000100) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) shutdown(r3, 0x1) fanotify_init(0x8, 0x101000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2600a, 0x5000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xf001}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}}, 0x8000) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 8.704380549s ago: executing program 6 (id=2179): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="e6", 0x94, 0x1, 0x10cf, 0x4, 0x8b, 0x2, 0x20000007, 'syz1\x00'}) 8.458429869s ago: executing program 1 (id=2180): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 8.424075482s ago: executing program 6 (id=2181): r0 = socket$isdn(0x22, 0x3, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0xd21, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20040000) mount(&(0x7f0000000380)=@sg0, 0x0, &(0x7f0000000400)='minix\x00', 0x2000, &(0x7f0000000440)='&/#%&-\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x1c1240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[0x0], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) mkdir(0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000000280)='./file0\x00', 0x200) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000440)=[{r5, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) 8.20324215s ago: executing program 5 (id=2182): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="1241d03e00e4"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 7.004062758s ago: executing program 5 (id=2183): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e20000000052001000000000000", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.98369658s ago: executing program 0 (id=2184): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) 6.876275928s ago: executing program 0 (id=2185): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x2604c410}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xff0e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r8, @ANYBLOB="e781ffffffffffff00003b040008080040", @ANYRES8=r6, @ANYBLOB="2a003300d000000008021100000108021100000050505050505000000404000000"], 0x48}}, 0x0) dup3(0xffffffffffffffff, r4, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_fscache}]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) 6.605719351s ago: executing program 6 (id=2186): r0 = syz_create_resource$binfmt(0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r2, 0x5) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="b13f300bb3faee71e2be302b87", 0xd}, {&(0x7f0000000240)="720d97638bd2b733ba1d1897a646700b7bc929c679e97ad8cbebd9a3ff15a4bcbcd26fa8fff0dfb6879a9e537b57d0f8affe97db7a56948f6f9d9a8b933f87c6fe1705a70d2d1fa633307712f5da0b216441cef42d97e43eb6d3abc628016a75b1f40679a24eabfa9245f55e539ed59232ec60ea4b0b4686c2d990d44c1c6686e262b350e4cc3f4444a991ac950884270d7b53a5d22baeb2a347a4fab80485c5183655e4bae1331beaa86df57edfdb2c484460cac1428f557f07cf4f41d3f5d80e155e2ece90799ecbb19643882e", 0xce}, {&(0x7f0000000340)="58147e9ed570f702c17f225e62d674e17ad8ba1894871f958f91605b47e958c75cea96b12aa2894b2fabc03c4998c84a", 0x30}, {&(0x7f0000000380)="bb26b5552b59dfb8efad36d50b8b3968d34048b7b8a734c5bf00d33906b9eab868b714a56b7307000000c4deca984d509f1295962ed95041286748f56ec412c0b0d74d5711149239cea37ff2f6251216da990116274d9a0b58ad7ffea7f64382574d18db3e94143b7062ec92370ddff165a3ecddd73b0ff341d12efb6e136a6f419414a740ad05d47a2dbc1d2520173d83eb9c36be85eaea49b868f2b2a878ebb8656901545807d5498ba2482dd139562bf39363ddde6b6645c0976f99a1bd57804cf9c8c5cf1e39f6cf2d694d894f", 0xcf}], 0x4, &(0x7f0000000540)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x50, 0x41}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x80000006) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x3, 0x4c, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x2, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@broadcast, 0x40}, {@remote, 0x8002}]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6079, 0x0, 0x5}}}}}}, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1cb) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) userfaultfd(0x1) 5.888894029s ago: executing program 0 (id=2187): socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)}, 0x2}], 0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000e0000000000000002000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000610000008500000050000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r3, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) 5.888446489s ago: executing program 1 (id=2188): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f00000005c0)=""/241, 0xf1}, {0x0}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000000380)=""/80, 0x50}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x9}, 0x40000100) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) shutdown(r3, 0x1) fanotify_init(0x8, 0x101000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2600a, 0x5000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xf001}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}}, 0x8000) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 4.620323753s ago: executing program 5 (id=2189): syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}}}}}}, 0x0) 4.575656016s ago: executing program 6 (id=2190): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0xc, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) 4.550957878s ago: executing program 0 (id=2191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000200)='~', 0x1) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r13, r13], 0x2, r11, r12, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r14 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r14, &(0x7f0000000000)="170cf31f8e85bcdbb6ad484c26dfa6be3180020cc3ad083eb719a8495180e3411bca5a3904d99c037e2d8e3c1c72fa92fbc31f328a0634a228ba73fca36ab95455c2429a396c437ae822453d5dbfd246cfc6e49f4b77fbb58e3e23beae7970b5bdb6c5d6a4b76a6e910402706986d2c4da7f3cab1ec8", 0x76, 0x4000810, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) setsockopt$sock_int(r14, 0x1, 0xa, &(0x7f0000000140)=0x3, 0x4) 3.30941794s ago: executing program 0 (id=2192): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d40)={0x0}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timerslack_ns\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 3.287463482s ago: executing program 5 (id=2193): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0x8000, 0x1000, 0x8001, 0x8}}) 3.053474141s ago: executing program 1 (id=2194): r0 = socket$isdn(0x22, 0x3, 0x3) pidfd_getfd(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0xd21, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20040000) mount(&(0x7f0000000380)=@sg0, 0x0, &(0x7f0000000400)='minix\x00', 0x2000, &(0x7f0000000440)='&/#%&-\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x1c1240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[r4], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) mkdir(0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x200) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000440)=[{r6, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) 2.968337948s ago: executing program 6 (id=2195): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[], 0x1, 0x5dd, &(0x7f0000000680)="$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") setxattr$security_ima(&(0x7f0000000340)='./file1\x00', &(0x7f0000000000), &(0x7f0000000180)=@v2={0x5, 0x1, 0xc, 0x4}, 0x9, 0x1) 2.253511506s ago: executing program 5 (id=2196): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x2604c410}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xff0e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r8, @ANYBLOB="e781ffffffffffff00003b040008080040", @ANYRES8=r6, @ANYBLOB="2a003300d000000008021100000108021100000050505050505000000404000000"], 0x48}}, 0x0) dup3(0xffffffffffffffff, r4, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_fscache}]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) 1.401301716s ago: executing program 1 (id=2197): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e20000000052001000000000000", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.252947668s ago: executing program 0 (id=2198): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 1.252176028s ago: executing program 1 (id=2199): socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)}, 0x2}], 0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000e0000000000000002000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r3, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) 0s ago: executing program 5 (id=2200): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000080)=0x7e8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f0000000040)={0x8a0, 0x800800000000000c, 0x4}) kernel console output (not intermixed with test programs): 18ebe9 code=0x7ffc0000 [ 939.991690][ T28] audit: type=1326 audit(1754591278.935:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.0.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 940.016102][ T28] audit: type=1326 audit(1754591278.935:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.0.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 940.040057][ T28] audit: type=1326 audit(1754591278.935:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.0.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 940.064202][ T28] audit: type=1326 audit(1754591278.945:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.0.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 940.087957][ T28] audit: type=1326 audit(1754591278.945:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.0.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 940.120301][ T28] audit: type=1326 audit(1754591278.955:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.0.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 940.160323][ T28] audit: type=1326 audit(1754591278.955:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.0.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 940.223503][T12106] loop1: detected capacity change from 0 to 4096 [ 940.393863][T12106] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 940.518011][T12106] ntfs3: loop1: It is recommened to use chkdsk. [ 940.770756][T12114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1510'. [ 940.958489][T12114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1510'. [ 941.518871][T12116] loop0: detected capacity change from 0 to 8192 [ 941.545287][T12124] loop1: detected capacity change from 0 to 128 [ 941.580324][T12116] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 941.710139][T12116] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 941.737164][T12116] REISERFS (device loop0): using ordered data mode [ 941.745453][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 941.745468][ T28] audit: type=1326 audit(1754591281.355:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12121 comm="syz.2.1514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 941.804414][T12116] reiserfs: using flush barriers [ 941.866405][T12116] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 941.918771][T12116] REISERFS (device loop0): checking transaction log (loop0) [ 941.942303][T12116] REISERFS (device loop0): Using r5 hash to sort names [ 941.956206][T12116] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 943.675088][T12137] loop1: detected capacity change from 0 to 40427 [ 943.728173][T12137] F2FS-fs (loop1): invalid crc value [ 943.737937][T12137] F2FS-fs (loop1): Found nat_bits in checkpoint [ 943.792221][T12137] F2FS-fs (loop1): Start checkpoint disabled! [ 943.814465][T12137] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 943.875859][T12137] syz.1.1518: attempt to access beyond end of device [ 943.875859][T12137] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 943.891299][T12137] syz.1.1518: attempt to access beyond end of device [ 943.891299][T12137] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 943.905905][T12137] syz.1.1518: attempt to access beyond end of device [ 943.905905][T12137] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 943.920874][T12137] syz.1.1518: attempt to access beyond end of device [ 943.920874][T12137] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 943.935553][T12137] syz.1.1518: attempt to access beyond end of device [ 943.935553][T12137] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 943.950587][T12137] syz.1.1518: attempt to access beyond end of device [ 943.950587][T12137] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 943.964841][T12137] syz.1.1518: attempt to access beyond end of device [ 943.964841][T12137] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 943.979704][T12137] syz.1.1518: attempt to access beyond end of device [ 943.979704][T12137] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 943.995234][T12137] syz.1.1518: attempt to access beyond end of device [ 943.995234][T12137] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 944.010399][T12137] syz.1.1518: attempt to access beyond end of device [ 944.010399][T12137] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 944.077797][ T28] audit: type=1800 audit(1754591283.475:5734): pid=12137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1518" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 944.121137][T12143] nvme_fabrics: missing parameter 'transport=%s' [ 944.127560][T12143] nvme_fabrics: missing parameter 'nqn=%s' [ 944.301689][T12146] delete_channel: no stack [ 944.552325][ T1139] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 946.045064][T12158] ksmbd: Unknown IPC event: 6, ignore. [ 947.724218][ T8571] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 947.874344][ T28] audit: type=1326 audit(1754591287.485:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.2.1525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 948.679990][ T8571] usb 2-1: Using ep0 maxpacket: 16 [ 948.777326][ T8571] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 948.787779][ T8571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 948.814803][ T8571] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.851087][ T8571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.863708][ T8571] usb 2-1: Product: syz [ 948.868050][ T8571] usb 2-1: Manufacturer: syz [ 948.878165][ T8571] usb 2-1: SerialNumber: syz [ 949.101678][ T8571] usb 2-1: 0:2 : does not exist [ 949.106756][ T8571] usb 2-1: unit 6 not found! [ 949.904297][T12183] nvme_fabrics: missing parameter 'transport=%s' [ 949.911248][T12183] nvme_fabrics: missing parameter 'nqn=%s' [ 950.099552][ T8571] usb 2-1: USB disconnect, device number 12 [ 950.277760][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.884031][T12220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1538'. [ 954.563291][T12224] nvme_fabrics: missing parameter 'transport=%s' [ 954.570415][T12224] nvme_fabrics: missing parameter 'nqn=%s' [ 954.873428][ T28] audit: type=1326 audit(1754591294.435:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.2.1539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 954.922201][T12218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1538'. [ 955.975596][T12235] loop0: detected capacity change from 0 to 40427 [ 956.046707][T12235] F2FS-fs (loop0): invalid crc value [ 956.096933][T12235] F2FS-fs (loop0): Found nat_bits in checkpoint [ 956.134368][T12235] F2FS-fs (loop0): Start checkpoint disabled! [ 956.155717][T12235] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 956.254500][ T28] audit: type=1800 audit(1754591295.865:5737): pid=12235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1541" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 956.288621][T12235] bio_check_eod: 182 callbacks suppressed [ 956.288636][T12235] syz.0.1541: attempt to access beyond end of device [ 956.288636][T12235] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 956.309976][T12235] syz.0.1541: attempt to access beyond end of device [ 956.309976][T12235] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 956.324636][T12235] syz.0.1541: attempt to access beyond end of device [ 956.324636][T12235] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 956.339339][T12235] syz.0.1541: attempt to access beyond end of device [ 956.339339][T12235] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 956.354213][T12235] syz.0.1541: attempt to access beyond end of device [ 956.354213][T12235] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 956.369183][T12235] syz.0.1541: attempt to access beyond end of device [ 956.369183][T12235] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 956.384393][T12235] syz.0.1541: attempt to access beyond end of device [ 956.384393][T12235] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 956.399309][T12235] syz.0.1541: attempt to access beyond end of device [ 956.399309][T12235] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 956.413666][T12235] syz.0.1541: attempt to access beyond end of device [ 956.413666][T12235] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 956.427832][T12235] syz.0.1541: attempt to access beyond end of device [ 956.427832][T12235] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 957.021542][T12242] loop5: detected capacity change from 0 to 40427 [ 957.164996][T12242] F2FS-fs (loop5): invalid crc value [ 957.178809][T12242] F2FS-fs (loop5): Found nat_bits in checkpoint [ 957.222735][ T2964] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 957.235241][T12242] F2FS-fs (loop5): Start checkpoint disabled! [ 957.247373][ T2964] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 957.291548][T12242] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 957.580682][ T28] audit: type=1800 audit(1754591297.105:5738): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1542" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 961.924277][T12266] loop0: detected capacity change from 0 to 64 [ 961.944744][ T9119] bio_check_eod: 373 callbacks suppressed [ 961.944761][ T9119] kworker/u4:15: attempt to access beyond end of device [ 961.944761][ T9119] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 962.056603][ T9119] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 962.090396][ T9119] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 962.098455][ T9119] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 962.479156][T12266] minix_free_block (loop0:1): bit already cleared [ 962.610364][T12266] minix_free_block (loop0:4): bit already cleared [ 962.687816][T12270] nvme_fabrics: missing parameter 'transport=%s' [ 962.695715][T12270] nvme_fabrics: missing parameter 'nqn=%s' [ 962.744854][T12266] minix_free_block (loop0:3): bit already cleared [ 962.811269][T12266] minix_free_block (loop0:2): bit already cleared [ 962.860890][T12266] minix_free_block (loop0:1): bit already cleared [ 963.740049][ T28] audit: type=1326 audit(1754591303.335:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12274 comm="syz.2.1551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 963.797136][T12280] loop0: detected capacity change from 0 to 512 [ 963.866227][T12280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.049659][T12285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1553'. [ 964.099958][T12285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1553'. [ 964.554713][T12286] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 964.600063][T12286] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 964.608422][T12286] overlayfs: failed to verify upper root origin [ 964.998767][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.938225][T12294] loop2: detected capacity change from 0 to 40427 [ 965.967649][T12294] F2FS-fs (loop2): invalid crc value [ 966.045405][T12294] F2FS-fs (loop2): Found nat_bits in checkpoint [ 966.144634][T12294] F2FS-fs (loop2): Start checkpoint disabled! [ 966.271449][T12294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 966.380246][ T28] audit: type=1800 audit(1754591305.995:5740): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1556" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 966.437183][T12301] syz.2.1556: attempt to access beyond end of device [ 966.437183][T12301] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 966.453086][T12301] syz.2.1556: attempt to access beyond end of device [ 966.453086][T12301] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 966.579931][T12301] syz.2.1556: attempt to access beyond end of device [ 966.579931][T12301] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 966.596642][T12301] syz.2.1556: attempt to access beyond end of device [ 966.596642][T12301] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 966.613315][T12301] syz.2.1556: attempt to access beyond end of device [ 966.613315][T12301] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 966.631559][T12301] syz.2.1556: attempt to access beyond end of device [ 966.631559][T12301] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 966.646693][T12301] syz.2.1556: attempt to access beyond end of device [ 966.646693][T12301] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 966.663423][T12301] syz.2.1556: attempt to access beyond end of device [ 966.663423][T12301] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 966.681111][T12301] syz.2.1556: attempt to access beyond end of device [ 966.681111][T12301] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 966.950076][T12301] bio_check_eod: 166 callbacks suppressed [ 966.950097][T12301] syz.2.1556: attempt to access beyond end of device [ 966.950097][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 966.972388][T12301] syz.2.1556: attempt to access beyond end of device [ 966.972388][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 966.989023][T12301] syz.2.1556: attempt to access beyond end of device [ 966.989023][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 967.006373][T12301] syz.2.1556: attempt to access beyond end of device [ 967.006373][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 967.022996][T12301] syz.2.1556: attempt to access beyond end of device [ 967.022996][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 967.041502][T12301] syz.2.1556: attempt to access beyond end of device [ 967.041502][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 967.058215][T12301] syz.2.1556: attempt to access beyond end of device [ 967.058215][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 967.075096][T12301] syz.2.1556: attempt to access beyond end of device [ 967.075096][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 967.091431][T12301] syz.2.1556: attempt to access beyond end of device [ 967.091431][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 967.108345][T12301] syz.2.1556: attempt to access beyond end of device [ 967.108345][T12301] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 969.748877][T12307] loop5: detected capacity change from 0 to 512 [ 970.289224][T12307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.457653][T12307] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 970.764632][T12307] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.1558: invalid size [ 971.416279][T12316] nvme_fabrics: missing parameter 'transport=%s' [ 971.423458][T12316] nvme_fabrics: missing parameter 'nqn=%s' [ 971.762535][T10390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.787729][ T9134] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 971.829954][ T9134] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 971.837248][ T9134] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 972.074652][T12321] loop0: detected capacity change from 0 to 40427 [ 972.112210][T12321] F2FS-fs (loop0): invalid crc value [ 972.132097][T12321] F2FS-fs (loop0): Found nat_bits in checkpoint [ 972.201252][T12321] F2FS-fs (loop0): Start checkpoint disabled! [ 972.238072][T12321] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 972.389283][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1562'. [ 972.493182][T12325] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1562'. [ 972.787605][ T28] audit: type=1800 audit(1754591312.385:5741): pid=12327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1561" name="bus" dev="loop0" ino=14 res=0 errno=0 [ 972.958691][T12327] bio_check_eod: 7 callbacks suppressed [ 972.958726][T12327] syz.0.1561: attempt to access beyond end of device [ 972.958726][T12327] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 972.982517][T12327] syz.0.1561: attempt to access beyond end of device [ 972.982517][T12327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 973.000544][T12327] syz.0.1561: attempt to access beyond end of device [ 973.000544][T12327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 973.017620][T12327] syz.0.1561: attempt to access beyond end of device [ 973.017620][T12327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 973.034826][T12327] syz.0.1561: attempt to access beyond end of device [ 973.034826][T12327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 973.052202][T12327] syz.0.1561: attempt to access beyond end of device [ 973.052202][T12327] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 973.067749][T12327] syz.0.1561: attempt to access beyond end of device [ 973.067749][T12327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 973.085347][T12327] syz.0.1561: attempt to access beyond end of device [ 973.085347][T12327] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 973.102107][T12327] syz.0.1561: attempt to access beyond end of device [ 973.102107][T12327] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 973.120437][T12327] syz.0.1561: attempt to access beyond end of device [ 973.120437][T12327] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 977.014652][ T28] audit: type=1326 audit(1754591316.625:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.1.1564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd56cb8ebe9 code=0x0 [ 977.081676][T12337] tipc: Started in network mode [ 977.086661][T12337] tipc: Node identity 021e25448ff5, cluster identity 4711 [ 977.098251][T12337] tipc: Enabled bearer , priority 0 [ 977.109921][T12337] syzkaller0: entered promiscuous mode [ 977.115607][T12337] syzkaller0: entered allmulticast mode [ 977.190843][ T9119] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 977.205900][ T9119] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 977.248339][T12337] tipc: Resetting bearer [ 977.597452][T12339] tipc: Resetting bearer [ 977.661596][T12339] tipc: Disabling bearer [ 977.891704][T12343] ksmbd: Unknown IPC event: 6, ignore. [ 979.085420][T12352] nvme_fabrics: missing parameter 'transport=%s' [ 979.093204][T12352] nvme_fabrics: missing parameter 'nqn=%s' [ 981.137019][T12370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1572'. [ 981.159758][T12370] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1572'. [ 983.060127][ T28] audit: type=1326 audit(1754591322.655:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.2.1577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 983.928136][T12384] loop1: detected capacity change from 0 to 128 [ 983.998646][T12384] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 984.042333][T12384] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.904538][T12391] nvme_fabrics: missing parameter 'transport=%s' [ 984.912616][T12391] nvme_fabrics: missing parameter 'nqn=%s' [ 985.244408][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 985.650327][T12398] loop0: detected capacity change from 0 to 40427 [ 985.721680][T12398] F2FS-fs (loop0): invalid crc value [ 985.743521][T12398] F2FS-fs (loop0): Found nat_bits in checkpoint [ 985.810888][T12398] F2FS-fs (loop0): Start checkpoint disabled! [ 985.828260][T12398] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 985.903144][T12398] bio_check_eod: 182 callbacks suppressed [ 985.903158][T12398] syz.0.1580: attempt to access beyond end of device [ 985.903158][T12398] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 985.923770][T12398] syz.0.1580: attempt to access beyond end of device [ 985.923770][T12398] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 985.938093][T12398] syz.0.1580: attempt to access beyond end of device [ 985.938093][T12398] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 985.952656][T12398] syz.0.1580: attempt to access beyond end of device [ 985.952656][T12398] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 985.967691][T12398] syz.0.1580: attempt to access beyond end of device [ 985.967691][T12398] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 985.983492][T12398] syz.0.1580: attempt to access beyond end of device [ 985.983492][T12398] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 985.998049][T12398] syz.0.1580: attempt to access beyond end of device [ 985.998049][T12398] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 986.012707][T12398] syz.0.1580: attempt to access beyond end of device [ 986.012707][T12398] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 986.027379][T12398] syz.0.1580: attempt to access beyond end of device [ 986.027379][T12398] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 986.041967][T12398] syz.0.1580: attempt to access beyond end of device [ 986.041967][T12398] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 986.119858][ T28] audit: type=1800 audit(1754591325.505:5744): pid=12398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1580" name="bus" dev="loop0" ino=14 res=0 errno=0 [ 986.128698][T12405] netlink: 'syz.1.1581': attribute type 10 has an invalid length. [ 986.154207][T12406] loop2: detected capacity change from 0 to 1024 [ 986.184243][T12406] EXT4-fs: Ignoring removed bh option [ 986.251907][T12406] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 986.275292][T12405] syz_tun: entered promiscuous mode [ 986.327337][T12405] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 986.339003][T12406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.560228][T12414] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1583'. [ 987.026651][T12406] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 987.051024][T12406] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.1582: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 987.087077][T12406] EXT4-fs (loop2): Remounting filesystem read-only [ 987.268447][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.442395][ T9119] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 988.590131][ T9119] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 988.597206][ T9119] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 989.397252][T12437] loop5: detected capacity change from 0 to 512 [ 989.452086][T12434] nvme_fabrics: missing parameter 'transport=%s' [ 989.459380][T12434] nvme_fabrics: missing parameter 'nqn=%s' [ 989.636953][T12437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.692317][T12437] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 990.128513][T12444] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.1589: corrupted inode contents [ 990.144340][T12444] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #2: comm syz.5.1589: mark_inode_dirty error [ 990.161262][T12444] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.1589: corrupted inode contents [ 990.204056][T12445] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.1589: corrupted inode contents [ 990.228586][T12445] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #2: comm syz.5.1589: mark_inode_dirty error [ 990.243601][T12445] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.1589: corrupted inode contents [ 990.258313][T12445] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1589: mark_inode_dirty error [ 990.271781][T12445] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.1589: corrupted inode contents [ 990.293778][T12445] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #2: comm syz.5.1589: mark_inode_dirty error [ 990.320599][T12444] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.1589: corrupted inode contents [ 990.733106][T10390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.056772][T12453] netlink: 'syz.5.1594': attribute type 10 has an invalid length. [ 992.081710][T12453] syz_tun: entered promiscuous mode [ 992.276683][T12453] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 992.283973][T12456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1593'. [ 993.158268][T12461] tipc: Started in network mode [ 993.165481][T12461] tipc: Node identity aa8e584c9875, cluster identity 4711 [ 993.181719][T12461] tipc: Enabled bearer , priority 0 [ 993.206282][T12461] syzkaller0: entered promiscuous mode [ 993.213686][T12461] syzkaller0: entered allmulticast mode [ 993.357287][T12461] tipc: Resetting bearer [ 993.418954][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.426613][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.572692][T12459] tipc: Resetting bearer [ 993.901027][T12459] tipc: Disabling bearer [ 994.784609][T12471] No such timeout policy "syz1" [ 994.951679][T12475] nvme_fabrics: missing parameter 'transport=%s' [ 994.958171][T12475] nvme_fabrics: missing parameter 'nqn=%s' [ 997.529656][T12504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1605'. [ 998.623895][T12510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1608'. [ 999.466290][T12517] No such timeout policy "syz1" [ 1000.313079][T12524] nvme_fabrics: missing parameter 'transport=%s' [ 1000.320662][T12524] nvme_fabrics: missing parameter 'nqn=%s' [ 1005.040294][T12549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1616'. [ 1005.426988][T12547] Can't find ip_set type has [ 1005.808946][ T28] audit: type=1326 audit(1754591345.415:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.2.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 1006.507123][T12562] nvme_fabrics: missing parameter 'transport=%s' [ 1006.514947][T12562] nvme_fabrics: missing parameter 'nqn=%s' [ 1007.155252][T12575] No such timeout policy "syz1" [ 1008.014278][T12581] loop1: detected capacity change from 0 to 256 [ 1008.035104][T12581] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1008.083960][T12581] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1008.199887][T12587] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1628'. [ 1009.063951][T12586] Can't find ip_set type has [ 1009.071881][T12581] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1010.445101][T12603] loop5: detected capacity change from 0 to 64 [ 1011.304936][T12611] nvme_fabrics: missing parameter 'transport=%s' [ 1011.312008][T12611] nvme_fabrics: missing parameter 'nqn=%s' [ 1012.148930][T12625] loop2: detected capacity change from 0 to 40427 [ 1012.186537][T12627] No such timeout policy "syz1" [ 1012.301755][T12625] F2FS-fs (loop2): invalid crc value [ 1012.337999][T12625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1012.415511][T12625] F2FS-fs (loop2): Start checkpoint disabled! [ 1012.868207][T12625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1013.075767][T12633] bio_check_eod: 182 callbacks suppressed [ 1013.075828][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.075828][T12633] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1013.177527][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.177527][T12633] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1013.193363][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.193363][T12633] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1013.209255][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.209255][T12633] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1013.226832][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.226832][T12633] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1013.243960][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.243960][T12633] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1013.259017][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.259017][T12633] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1013.275553][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.275553][T12633] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1013.292391][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.292391][T12633] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1013.309362][T12633] syz.2.1637: attempt to access beyond end of device [ 1013.309362][T12633] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1015.779151][ T28] audit: type=1800 audit(1754591352.655:5746): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1637" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1017.072542][T12647] loop0: detected capacity change from 0 to 64 [ 1017.102282][ T9021] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1017.111246][ T9021] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1017.120148][ T9021] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1018.097046][T12653] nvme_fabrics: missing parameter 'transport=%s' [ 1018.104705][T12653] nvme_fabrics: missing parameter 'nqn=%s' [ 1018.835085][T12663] No such timeout policy "syz1" [ 1021.131503][T12681] loop1: detected capacity change from 0 to 40427 [ 1021.214379][T12681] F2FS-fs (loop1): invalid crc value [ 1021.230755][T12681] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1021.326760][T12681] F2FS-fs (loop1): Start checkpoint disabled! [ 1021.335582][T12681] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1022.028594][ T28] audit: type=1800 audit(1754591361.625:5747): pid=12694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1651" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 1022.185200][T12694] bio_check_eod: 182 callbacks suppressed [ 1022.185221][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.185221][T12694] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1022.208805][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.208805][T12694] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1022.226584][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.226584][T12694] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1022.243652][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.243652][T12694] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1022.262082][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.262082][T12694] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1022.281324][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.281324][T12694] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1022.297055][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.297055][T12694] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1022.314346][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.314346][T12694] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1022.332485][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.332485][T12694] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1022.351010][T12694] syz.1.1651: attempt to access beyond end of device [ 1022.351010][T12694] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1026.325518][T12705] nvme_fabrics: missing parameter 'transport=%s' [ 1026.332542][T12705] nvme_fabrics: missing parameter 'nqn=%s' [ 1027.059994][ T5879] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1027.723776][ T2964] bio_check_eod: 181 callbacks suppressed [ 1027.723804][ T2964] kworker/u4:7: attempt to access beyond end of device [ 1027.723804][ T2964] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1027.746836][ T2964] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1027.755596][ T2964] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1027.763200][ T2964] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1027.966204][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.978105][ T5879] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1027.988395][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.753617][ T5879] usb 3-1: config 0 descriptor?? [ 1028.763917][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 1028.940891][T12727] netlink: 'syz.0.1664': attribute type 10 has an invalid length. [ 1029.077568][T12729] tipc: Enabled bearer , priority 0 [ 1029.098266][T12729] syzkaller0: entered promiscuous mode [ 1029.109026][T12729] syzkaller0: entered allmulticast mode [ 1029.202774][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1029.220943][T12729] tipc: Resetting bearer [ 1029.238367][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 1029.322383][ T5879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1029.471077][T12728] tipc: Resetting bearer [ 1029.481712][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 1029.497069][ T5879] pwc: recv_control_msg error -32 req 04 val 1300 [ 1029.520431][ T5879] pwc: recv_control_msg error -32 req 04 val 1400 [ 1029.521426][T12728] tipc: Disabling bearer [ 1029.753254][ T5879] pwc: recv_control_msg error -71 req 02 val 2100 [ 1030.026004][ T5879] pwc: recv_control_msg error -71 req 04 val 1500 [ 1030.074602][T12734] nvme_fabrics: missing parameter 'transport=%s' [ 1030.082227][T12734] nvme_fabrics: missing parameter 'nqn=%s' [ 1030.150972][ T5879] pwc: recv_control_msg error -71 req 02 val 2500 [ 1030.192340][ T5879] pwc: recv_control_msg error -71 req 02 val 2400 [ 1030.233896][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 1030.296430][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 1030.365245][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 1030.396843][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 1030.412619][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 1030.720488][ T5879] pwc: Registered as video103. [ 1030.920641][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 1031.042326][ T5879] usb 3-1: USB disconnect, device number 12 [ 1031.504432][T12750] loop5: detected capacity change from 0 to 40427 [ 1031.639588][T12756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1671'. [ 1032.122430][T12755] Can't find ip_set type hash:ne [ 1032.133859][T12750] F2FS-fs (loop5): invalid crc value [ 1032.183236][T12750] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1032.257737][T12750] F2FS-fs (loop5): Start checkpoint disabled! [ 1032.288747][T12750] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1032.414707][ T28] audit: type=1800 audit(1754591372.025:5748): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1669" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1032.477204][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.477204][T12762] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1032.493143][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.493143][T12762] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1032.623992][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.623992][T12762] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1032.640805][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.640805][T12762] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1032.657546][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.657546][T12762] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1032.675945][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.675945][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.690857][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.690857][T12762] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1032.707596][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.707596][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.724316][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.724316][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.740210][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.740210][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.757319][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.757319][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.774830][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.774830][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.789645][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.789645][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.806735][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.806735][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.823631][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.823631][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.842025][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.842025][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.858817][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.858817][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.876313][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.876313][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1032.894277][T12762] syz.5.1669: attempt to access beyond end of device [ 1032.894277][T12762] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1035.799997][T12769] netlink: 'syz.1.1674': attribute type 10 has an invalid length. [ 1036.033944][T12776] tipc: Started in network mode [ 1036.040330][T12776] tipc: Node identity 0a6453df2674, cluster identity 4711 [ 1036.047806][T12776] tipc: Enabled bearer , priority 0 [ 1036.057886][T12776] syzkaller0: entered promiscuous mode [ 1036.064252][T12776] syzkaller0: entered allmulticast mode [ 1036.170445][T12776] tipc: Resetting bearer [ 1036.235967][ T5923] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1036.245979][T12775] tipc: Resetting bearer [ 1036.277829][ T9021] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1036.290464][ T9021] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1036.297509][ T9021] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1036.321167][T12775] tipc: Disabling bearer [ 1036.449295][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 1036.457474][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1037.052743][ T5923] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1037.070021][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.089858][ T5923] usb 3-1: Product: syz [ 1037.094128][ T5923] usb 3-1: Manufacturer: syz [ 1037.098779][ T5923] usb 3-1: SerialNumber: syz [ 1037.157226][ T5923] usb 3-1: config 0 descriptor?? [ 1037.441736][T12787] loop0: detected capacity change from 0 to 40427 [ 1037.494263][ T5923] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1037.515394][T12787] F2FS-fs (loop0): invalid crc value [ 1037.525086][ T5923] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1037.551348][T12787] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1037.614149][T12787] F2FS-fs (loop0): Start checkpoint disabled! [ 1037.640654][T12787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1037.762302][ T28] audit: type=1800 audit(1754591377.375:5749): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1682" name="bus" dev="loop0" ino=14 res=0 errno=0 [ 1037.984287][T12790] bio_check_eod: 173 callbacks suppressed [ 1037.984394][T12790] syz.0.1682: attempt to access beyond end of device [ 1037.984394][T12790] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1038.007669][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.007669][T12790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1038.025206][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.025206][T12790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1038.042845][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.042845][T12790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1038.059935][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.059935][T12790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1038.077645][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.077645][T12790] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1038.092710][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.092710][T12790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1038.111386][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.111386][T12790] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1038.128064][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.128064][T12790] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1038.144815][T12790] syz.0.1682: attempt to access beyond end of device [ 1038.144815][T12790] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1041.132053][ T5923] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1041.157660][T12798] loop5: detected capacity change from 0 to 128 [ 1041.217183][T12798] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1041.245294][ T5923] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1041.256234][T12798] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.267750][ T5923] em28xx 3-1:0.0: board has no eeprom [ 1041.487468][ T5923] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1041.496412][ T5923] em28xx 3-1:0.0: dvb set to bulk mode. [ 1041.503108][ T5172] em28xx 3-1:0.0: Binding DVB extension [ 1041.527121][ T5923] usb 3-1: USB disconnect, device number 13 [ 1041.538345][ T5923] em28xx 3-1:0.0: Disconnecting em28xx [ 1042.238935][T10390] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1046.794521][ T5172] em28xx 3-1:0.0: Registering input extension [ 1046.904423][ T5923] em28xx 3-1:0.0: Closing input extension [ 1047.050549][ T5923] em28xx 3-1:0.0: Freeing device [ 1047.095145][ T9125] bio_check_eod: 181 callbacks suppressed [ 1047.095163][ T9125] kworker/u4:18: attempt to access beyond end of device [ 1047.095163][ T9125] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1047.190384][ T9125] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1047.197439][ T9125] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1047.213881][ T9125] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1051.218854][ T28] audit: type=1326 audit(1754591390.825:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.2.1695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 1052.744026][T12852] netlink: 'syz.0.1687': attribute type 10 has an invalid length. [ 1053.163725][T12863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1701'. [ 1054.856694][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.864413][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.087217][ T28] audit: type=1326 audit(1754591395.945:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12880 comm="syz.1.1706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd56cb8ebe9 code=0x0 [ 1057.855900][T12891] netlink: 'syz.0.1710': attribute type 10 has an invalid length. [ 1059.300912][T12902] loop1: detected capacity change from 0 to 128 [ 1059.903661][T12902] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1059.970804][T12902] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.344889][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1062.503540][T12926] xt_connbytes: Forcing CT accounting to be enabled [ 1062.511737][T12926] Cannot find add_set index 0 as target [ 1062.772014][T12929] No such timeout policy "syz1" [ 1063.409963][ T28] audit: type=1326 audit(1754591403.025:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.1.1717" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd56cb8ebe9 code=0x0 [ 1064.073354][T12939] loop0: detected capacity change from 0 to 40427 [ 1064.226496][T12939] F2FS-fs (loop0): invalid crc value [ 1064.258377][T12939] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1064.299794][T12939] F2FS-fs (loop0): Start checkpoint disabled! [ 1064.387057][T12939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1065.151005][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.151005][T12952] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1065.171935][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'. [ 1065.220774][ T28] audit: type=1800 audit(1754591404.715:5753): pid=12952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1721" name="bus" dev="loop0" ino=14 res=0 errno=0 [ 1065.318730][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.318730][T12952] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1065.335846][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.335846][T12952] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1065.353203][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.353203][T12952] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1065.372331][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.372331][T12952] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1065.392081][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.392081][T12952] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1065.407751][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.407751][T12952] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1065.425897][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.425897][T12952] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1065.444357][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.444357][T12952] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1065.462619][T12952] syz.0.1721: attempt to access beyond end of device [ 1065.462619][T12952] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1070.438766][T12967] No such timeout policy "syz1" [ 1071.381044][T12971] ksmbd: Unknown IPC event: 6, ignore. [ 1072.182634][ T28] audit: type=1326 audit(1754591411.795:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.5.1732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bbd78ebe9 code=0x0 [ 1072.204556][ C0] vkms_vblank_simulate: vblank timer overrun [ 1072.910669][ T1139] bio_check_eod: 181 callbacks suppressed [ 1072.910684][ T1139] kworker/u4:6: attempt to access beyond end of device [ 1072.910684][ T1139] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1073.026425][ T1139] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1073.037860][ T1139] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1073.052817][ T1139] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1078.349556][T13017] loop0: detected capacity change from 0 to 764 [ 1078.439312][T13017] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1078.483681][ T28] audit: type=1326 audit(1754591418.075:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.1.1742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd56cb8ebe9 code=0x0 [ 1081.319334][T13044] No such timeout policy "syz1" [ 1083.362271][T13053] loop2: detected capacity change from 0 to 2048 [ 1083.405819][T13053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.350364][ T28] audit: type=1326 audit(1754591425.755:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.0.1756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c0f18ebe9 code=0x0 [ 1087.607465][T13078] tipc: Started in network mode [ 1087.643315][T13078] tipc: Node identity 0686a7fa857a, cluster identity 4711 [ 1087.676296][T13078] tipc: Enabled bearer , priority 0 [ 1087.712996][T13083] syzkaller0: entered promiscuous mode [ 1087.718560][T13083] syzkaller0: entered allmulticast mode [ 1087.759741][T13078] tipc: Resetting bearer [ 1087.801000][T13078] tipc: Resetting bearer [ 1087.832203][T13078] tipc: Disabling bearer [ 1088.024355][T13085] No such timeout policy "syz1" [ 1094.131626][T13121] tipc: Enabled bearer , priority 0 [ 1094.148719][T13121] syzkaller0: entered promiscuous mode [ 1094.164820][T13121] syzkaller0: entered allmulticast mode [ 1094.298118][T13125] tipc: Resetting bearer [ 1094.446476][T13121] tipc: Resetting bearer [ 1095.146161][T13129] loop1: detected capacity change from 0 to 128 [ 1095.161214][T13121] tipc: Disabling bearer [ 1095.302600][T13129] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1095.402514][T13129] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.443679][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1098.783765][T13156] ksmbd: Unknown IPC event: 6, ignore. [ 1099.819325][T13169] loop0: detected capacity change from 0 to 128 [ 1099.918865][T13169] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1099.937307][T13169] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.852190][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1104.070475][T13193] tipc: Enabled bearer , priority 0 [ 1104.115911][T13193] syzkaller0: entered promiscuous mode [ 1104.157733][T13193] syzkaller0: entered allmulticast mode [ 1104.430335][T13193] tipc: Resetting bearer [ 1105.133132][ T5879] tipc: Node number set to 739267551 [ 1105.195438][T13193] tipc: Resetting bearer [ 1105.313891][T13193] tipc: Disabling bearer [ 1105.347647][T13209] loop2: detected capacity change from 0 to 128 [ 1105.597520][T13209] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1106.004209][T13209] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.230206][T13214] loop1: detected capacity change from 0 to 4096 [ 1107.636313][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1107.684756][T13223] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1108.599779][T13232] No such timeout policy "syz1" [ 1111.544599][T13248] tipc: Enabled bearer , priority 0 [ 1111.736670][T13248] syzkaller0: entered promiscuous mode [ 1111.752651][T13248] syzkaller0: entered allmulticast mode [ 1112.642749][T13259] tipc: Resetting bearer [ 1112.750511][T13248] tipc: Resetting bearer [ 1112.816470][T13263] loop0: detected capacity change from 0 to 128 [ 1112.855123][T13248] tipc: Disabling bearer [ 1112.890359][T10705] tipc: Node number set to 2380997956 [ 1112.891448][T13263] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1112.933755][T13263] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.095894][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1116.700158][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.706548][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.261886][T13303] loop1: detected capacity change from 0 to 128 [ 1117.448157][T13303] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1117.561458][T13303] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.338709][T13313] loop0: detected capacity change from 0 to 512 [ 1118.476129][T13313] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1822: casefold flag without casefold feature [ 1118.497298][T13313] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1822: couldn't read orphan inode 15 (err -117) [ 1118.531254][T13313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.568134][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1118.600937][T13316] loop2: detected capacity change from 0 to 128 [ 1118.728171][T13316] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1118.772308][T13316] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.981317][T13322] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1825'. [ 1119.102439][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.973670][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1122.123819][ T28] audit: type=1326 audit(1754591461.725:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 1122.404547][T13349] loop2: detected capacity change from 0 to 512 [ 1122.484961][T13349] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1834: casefold flag without casefold feature [ 1122.511804][T13349] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1834: couldn't read orphan inode 15 (err -117) [ 1122.762868][T13349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.397053][T13363] loop0: detected capacity change from 0 to 128 [ 1123.496051][T13363] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1123.598614][T13363] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.624467][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.018594][T13372] input: syz0 as /devices/virtual/input/input25 [ 1124.118571][T13373] loop2: detected capacity change from 0 to 16 [ 1124.272382][T13373] erofs: (device loop2): mounted with root inode @ nid 36. [ 1124.763226][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1125.782644][ T28] audit: type=1326 audit(1754591465.355:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13379 comm="syz.1.1842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd56cb8ebe9 code=0x0 [ 1126.644293][T13389] loop1: detected capacity change from 0 to 512 [ 1126.714529][T13389] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1845: casefold flag without casefold feature [ 1126.736837][T13389] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1845: couldn't read orphan inode 15 (err -117) [ 1126.838534][T13389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.873595][T13395] ksmbd: Unknown IPC event: 6, ignore. [ 1127.584213][T13398] loop0: detected capacity change from 0 to 128 [ 1127.653183][T13398] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1127.820226][T13398] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.886985][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.684133][T13410] input: syz0 as /devices/virtual/input/input26 [ 1129.211211][T13412] loop5: detected capacity change from 0 to 16 [ 1129.607169][T13412] erofs: (device loop5): mounted with root inode @ nid 36. [ 1130.790329][ T5879] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1131.090614][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 1131.257874][ T5879] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1131.275849][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1132.140683][ T28] audit: type=1326 audit(1754591471.045:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.2.1853" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ce58ebe9 code=0x0 [ 1132.167229][ T5879] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1132.200783][ T5879] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1132.260106][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1132.340161][ T5879] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1132.362633][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1132.420310][ T5879] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1132.463494][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.506893][ T5879] usb 2-1: config 0 descriptor?? [ 1133.022715][ T5879] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1133.053887][ T5879] usb 2-1: USB disconnect, device number 13 [ 1133.097964][ T5879] usblp0: removed [ 1134.106105][ T5879] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1135.554940][T13444] loop2: detected capacity change from 0 to 40427 [ 1135.588010][T13446] No such timeout policy "syz1" [ 1135.712006][T13444] F2FS-fs (loop2): invalid crc value [ 1135.742802][T13444] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1135.798138][T13444] F2FS-fs (loop2): Start checkpoint disabled! [ 1135.821243][T13444] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1136.102400][ T28] audit: type=1800 audit(1754591475.715:5760): pid=13444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1861" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1136.130669][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.130669][T13444] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1136.145340][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.145340][T13444] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1136.160238][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.160238][T13444] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1136.175253][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.175253][T13444] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1136.190541][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.190541][T13444] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1136.205995][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.205995][T13444] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1136.220607][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.220607][T13444] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1136.235254][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.235254][T13444] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1136.250200][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.250200][T13444] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1136.264838][T13444] syz.2.1861: attempt to access beyond end of device [ 1136.264838][T13444] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1137.004674][T13457] input: syz0 as /devices/virtual/input/input27 [ 1137.090809][T13458] loop5: detected capacity change from 0 to 16 [ 1139.045200][T13458] erofs: (device loop5): mounted with root inode @ nid 36. [ 1139.327723][ T28] audit: type=1326 audit(1754591478.935:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.1.1863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd56cb8ebe9 code=0x0 [ 1139.966690][ T9021] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1139.976762][ T9021] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1139.986091][ T9021] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1141.232142][T13479] loop1: detected capacity change from 0 to 512 [ 1141.669817][T13479] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1870: casefold flag without casefold feature [ 1141.915608][T13479] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1870: couldn't read orphan inode 15 (err -117) [ 1142.115511][T13479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.541899][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.996187][T13494] loop5: detected capacity change from 0 to 40427 [ 1144.191442][T13496] loop1: detected capacity change from 0 to 40427 [ 1144.441809][T13503] input: syz0 as /devices/virtual/input/input28 [ 1144.545576][T13494] F2FS-fs (loop5): invalid crc value [ 1144.556512][T13496] F2FS-fs (loop1): invalid crc value [ 1144.645822][T13504] loop0: detected capacity change from 0 to 16 [ 1146.596227][T13494] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 1146.703716][T13496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1146.757085][T13504] erofs: (device loop0): mounted with root inode @ nid 36. [ 1149.109959][T13496] F2FS-fs (loop1): Start checkpoint disabled! [ 1149.255423][T13516] loop2: detected capacity change from 0 to 128 [ 1149.313879][T13516] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1149.546245][T13516] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1150.874202][T13529] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1880'. [ 1151.572873][T13537] loop5: detected capacity change from 0 to 512 [ 1151.773385][T13537] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1883: casefold flag without casefold feature [ 1151.804950][T13537] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1883: couldn't read orphan inode 15 (err -117) [ 1151.851898][T13537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.048484][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1152.284100][T10390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.395674][T13560] No such timeout policy "syz1" [ 1157.706310][T13569] input: syz0 as /devices/virtual/input/input29 [ 1157.795048][T13570] loop2: detected capacity change from 0 to 16 [ 1157.855260][T13570] erofs: (device loop2): mounted with root inode @ nid 36. [ 1158.710821][T13574] loop2: detected capacity change from 0 to 128 [ 1158.771809][T13574] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1159.398604][T13574] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.224795][T13595] No such timeout policy "syz1" [ 1162.171853][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1162.380716][T13605] input: syz0 as /devices/virtual/input/input30 [ 1162.973277][T13603] loop1: detected capacity change from 0 to 16 [ 1163.207720][T13603] erofs: (device loop1): mounted with root inode @ nid 36. [ 1164.188055][T13616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1906'. [ 1164.372897][T13624] loop0: detected capacity change from 0 to 128 [ 1164.563714][T13624] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1164.651204][T13629] No such timeout policy "syz1" [ 1165.436997][T13624] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.342135][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1166.947997][T13641] loop0: detected capacity change from 0 to 40427 [ 1167.006431][T13641] F2FS-fs (loop0): invalid crc value [ 1167.028637][T13641] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1167.093482][T13641] F2FS-fs (loop0): Start checkpoint disabled! [ 1167.136367][T13641] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1167.262625][ T28] audit: type=1800 audit(1754591506.855:5762): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1913" name="bus" dev="loop0" ino=14 res=0 errno=0 [ 1167.413251][T13646] bio_check_eod: 182 callbacks suppressed [ 1167.413305][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.413305][T13646] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1167.436947][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.436947][T13646] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1167.453402][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.453402][T13646] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1167.471807][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.471807][T13646] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1167.488469][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.488469][T13646] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1167.515923][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.515923][T13646] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1167.530904][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.530904][T13646] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1167.548846][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.548846][T13646] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1167.566300][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.566300][T13646] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1167.584343][T13646] syz.0.1913: attempt to access beyond end of device [ 1167.584343][T13646] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1169.896461][ T1139] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1169.918855][ T1139] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1169.936174][ T1139] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1175.487538][T13683] loop2: detected capacity change from 0 to 512 [ 1175.885972][T13683] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1927: casefold flag without casefold feature [ 1176.265408][T13683] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1927: couldn't read orphan inode 15 (err -117) [ 1176.413984][T13683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.736313][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.376836][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.996328][T13713] No such timeout policy "syz1" [ 1179.803947][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.892610][T13732] loop5: detected capacity change from 0 to 4096 [ 1181.938615][T13732] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1182.166654][T13732] ntfs3: loop5: Failed to load root (-22). [ 1182.196391][T13736] loop0: detected capacity change from 0 to 16 [ 1182.205438][T13736] erofs: (device loop0): mounted with root inode @ nid 36. [ 1183.097824][T13739] loop2: detected capacity change from 0 to 128 [ 1183.144053][T13739] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1183.362833][T13739] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.075862][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1186.571230][T13766] loop5: detected capacity change from 0 to 16 [ 1187.356232][T13766] erofs: (device loop5): mounted with root inode @ nid 36. [ 1189.110545][T13788] No such timeout policy "syz1" [ 1189.760454][T13792] loop1: detected capacity change from 0 to 128 [ 1192.692670][T13792] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1192.693055][T13792] EXT4-fs: failed to create workqueue [ 1192.710425][T13792] EXT4-fs (loop1): mount failed [ 1193.450481][T13812] loop5: detected capacity change from 0 to 16 [ 1193.485283][T13812] erofs: (device loop5): mounted with root inode @ nid 36. [ 1196.663852][T13833] loop2: detected capacity change from 0 to 128 [ 1196.780224][T13836] No such timeout policy "syz1" [ 1196.838244][T13833] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1197.115603][T13833] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.101132][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1198.442991][T13848] loop1: detected capacity change from 0 to 16 [ 1200.461689][T13848] erofs: (device loop1): mounted with root inode @ nid 36. [ 1204.858592][T13876] loop5: detected capacity change from 0 to 128 [ 1204.915741][T13876] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1204.948077][T13876] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.973803][T13879] No such timeout policy "syz1" [ 1205.928105][T10390] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1208.487528][T13890] loop5: detected capacity change from 0 to 4096 [ 1208.556093][T13890] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1209.971543][T13890] ntfs3: loop5: Failed to load root (-22). [ 1212.265925][T13902] syz.0.1985 uses obsolete (PF_INET,SOCK_PACKET) [ 1213.538289][T13912] loop2: detected capacity change from 0 to 128 [ 1213.596732][T13912] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1213.890264][T13912] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1216.025721][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1217.312834][ T28] audit: type=1326 audit(1754591556.925:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.028256][ T28] audit: type=1326 audit(1754591556.945:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.155087][ T28] audit: type=1326 audit(1754591556.955:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.178835][ T28] audit: type=1326 audit(1754591556.955:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.202524][ T28] audit: type=1326 audit(1754591556.955:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.226676][ T28] audit: type=1326 audit(1754591556.955:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.250519][ T28] audit: type=1326 audit(1754591556.965:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.274393][ T28] audit: type=1326 audit(1754591556.965:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.298529][ T28] audit: type=1326 audit(1754591556.965:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.352441][ T28] audit: type=1326 audit(1754591556.965:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1218.392637][T13948] No such timeout policy "syz1" [ 1218.774765][T13938] loop1: detected capacity change from 0 to 40427 [ 1218.923842][T13938] F2FS-fs (loop1): invalid crc value [ 1218.970280][T13938] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1219.215689][T13938] F2FS-fs (loop1): Start checkpoint disabled! [ 1219.262792][T13938] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1220.632271][T13964] No such timeout policy "syz1" [ 1221.588275][T13971] loop1: detected capacity change from 0 to 512 [ 1222.405064][T13971] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2005: casefold flag without casefold feature [ 1222.560131][T13971] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2005: couldn't read orphan inode 15 (err -117) [ 1222.611518][T13971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.772821][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1222.772838][ T28] audit: type=1326 audit(1754591562.385:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1223.507484][ T28] audit: type=1326 audit(1754591562.415:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1223.529975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.537740][ T28] audit: type=1326 audit(1754591562.415:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1223.560322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.570147][ T28] audit: type=1326 audit(1754591562.415:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1223.594588][ T28] audit: type=1326 audit(1754591562.425:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1223.844279][ T28] audit: type=1326 audit(1754591562.435:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1223.868538][ T28] audit: type=1326 audit(1754591562.435:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1223.892516][ T28] audit: type=1326 audit(1754591562.435:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1223.916406][ T28] audit: type=1326 audit(1754591562.435:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1224.024486][ T28] audit: type=1326 audit(1754591562.435:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1224.081790][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.358946][T13991] tipc: Enabled bearer , priority 0 [ 1224.423097][T13991] syzkaller0: entered promiscuous mode [ 1224.455991][T13991] syzkaller0: entered allmulticast mode [ 1225.332663][T13995] tipc: Resetting bearer [ 1225.352950][T13985] loop5: detected capacity change from 0 to 40427 [ 1225.374647][T13985] F2FS-fs (loop5): invalid crc value [ 1225.405294][T13985] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1225.531220][T13996] tipc: Resetting bearer [ 1225.596547][T13985] F2FS-fs (loop5): Start checkpoint disabled! [ 1225.641248][T13996] tipc: Disabling bearer [ 1225.663743][T13985] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1225.930624][T14002] bio_check_eod: 182 callbacks suppressed [ 1225.930639][T14002] syz.5.2006: attempt to access beyond end of device [ 1225.930639][T14002] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1226.039880][T14002] syz.5.2006: attempt to access beyond end of device [ 1226.039880][T14002] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1226.055232][T14002] syz.5.2006: attempt to access beyond end of device [ 1226.055232][T14002] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1226.072958][T14002] syz.5.2006: attempt to access beyond end of device [ 1226.072958][T14002] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1226.134495][T14002] syz.5.2006: attempt to access beyond end of device [ 1226.134495][T14002] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1226.621446][T14002] syz.5.2006: attempt to access beyond end of device [ 1226.621446][T14002] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1226.647442][T14002] syz.5.2006: attempt to access beyond end of device [ 1226.647442][T14002] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1226.790385][T14002] syz.5.2006: attempt to access beyond end of device [ 1226.790385][T14002] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1226.844919][T13987] loop0: detected capacity change from 0 to 40427 [ 1226.861188][T13987] F2FS-fs (loop0): invalid crc value [ 1226.875650][T14002] syz.5.2006: attempt to access beyond end of device [ 1226.875650][T14002] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1226.912108][T13987] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1227.316228][T14002] syz.5.2006: attempt to access beyond end of device [ 1227.316228][T14002] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1227.767950][T13987] F2FS-fs (loop0): Start checkpoint disabled! [ 1227.784790][T13987] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1228.777639][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1228.777690][ T28] audit: type=1326 audit(1754591568.365:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.241157][ T28] audit: type=1326 audit(1754591568.365:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.483261][ T28] audit: type=1326 audit(1754591568.365:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.506968][ T28] audit: type=1326 audit(1754591568.365:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.530700][ T28] audit: type=1326 audit(1754591568.375:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.554525][ T28] audit: type=1326 audit(1754591568.425:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.586124][ T28] audit: type=1326 audit(1754591568.425:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.610248][ T28] audit: type=1326 audit(1754591568.425:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.621123][ T9021] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1229.653115][T14020] loop2: detected capacity change from 0 to 512 [ 1229.686294][ T9021] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1229.695250][ T28] audit: type=1326 audit(1754591568.425:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.720990][ T28] audit: type=1326 audit(1754591568.425:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1229.747863][ T9021] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1229.761995][T14020] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2019: casefold flag without casefold feature [ 1229.826075][T14020] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2019: couldn't read orphan inode 15 (err -117) [ 1229.866255][T14020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.510239][T14027] tipc: Enabled bearer , priority 0 [ 1230.520485][T14026] syzkaller0: entered promiscuous mode [ 1230.526043][T14026] syzkaller0: entered allmulticast mode [ 1230.532237][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.664963][T14027] tipc: Resetting bearer [ 1230.990803][T14026] tipc: Resetting bearer [ 1231.034850][T14026] tipc: Disabling bearer [ 1231.667226][T14043] No such timeout policy "syz1" [ 1234.185234][T14062] loop0: detected capacity change from 0 to 512 [ 1234.616466][T14062] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2030: casefold flag without casefold feature [ 1234.784663][T14062] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2030: couldn't read orphan inode 15 (err -117) [ 1234.956884][T14062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.411530][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.663176][T14086] No such timeout policy "syz1" [ 1239.177495][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.185659][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.405259][T14098] loop5: detected capacity change from 0 to 40427 [ 1241.460535][T14098] F2FS-fs (loop5): invalid crc value [ 1241.622953][T14098] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1241.877348][T14129] No such timeout policy "syz1" [ 1242.495524][T14098] F2FS-fs (loop5): Start checkpoint disabled! [ 1244.364050][T14153] loop2: detected capacity change from 0 to 64 [ 1244.513262][T14153] overlayfs: upper fs needs to support d_type. [ 1244.582118][T14153] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1244.599727][T14153] overlayfs: failed to set xattr on upper [ 1244.620214][T14153] overlayfs: ...falling back to redirect_dir=nofollow. [ 1244.633993][T14153] overlayfs: ...falling back to index=off. [ 1244.649894][T14153] overlayfs: ...falling back to uuid=null. [ 1244.684034][T14157] Driver unsupported XDP return value 0 on prog (id 244) dev N/A, expect packet loss! [ 1244.808053][ T5787] Bad inode number on dev loop2: 4160749571 is out of range [ 1244.831204][ T5787] Bad inode number on dev loop2: 4160749571 is out of range [ 1245.294613][ T5787] bond0: (slave syz_tun): Releasing backup interface [ 1245.606082][T14167] No such timeout policy "syz1" [ 1246.154127][T12945] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.710474][T12945] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.090113][T14180] loop5: detected capacity change from 0 to 4096 [ 1247.686301][T14180] ntfs3: loop5: Unsupported bytes per MFT record 8192. [ 1247.694527][T14180] ntfs3: loop5: try to read out of volume at offset 0x1ffe00 [ 1247.747573][T12945] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.848218][T14182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2065'. [ 1248.073082][T12945] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.817843][T12945] tipc: Left network mode [ 1249.455648][T14203] No such timeout policy "syz1" [ 1250.357022][ T9480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1250.390374][ T9480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1250.407121][ T9480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1250.417659][ T9480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1250.426873][ T9480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1250.435075][ T9480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1252.632314][ T9480] Bluetooth: hci2: command tx timeout [ 1254.689840][ T9480] Bluetooth: hci2: command tx timeout [ 1255.136684][T14206] chnl_net:caif_netlink_parms(): no params data found [ 1256.770446][ T9480] Bluetooth: hci2: command tx timeout [ 1256.836302][T14283] loop1: detected capacity change from 0 to 128 [ 1257.095821][T14283] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1257.399910][T14283] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.656496][T12945] hsr_slave_0: left promiscuous mode [ 1257.694856][T12945] hsr_slave_1: left promiscuous mode [ 1257.715154][T12945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.736269][T12945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.792086][T12945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.800419][T12945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.830492][T12945] bridge_slave_1: left allmulticast mode [ 1257.836221][T12945] bridge_slave_1: left promiscuous mode [ 1257.904822][T12945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.935740][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1257.948169][T12945] bridge_slave_0: left allmulticast mode [ 1257.955362][T12945] bridge_slave_0: left promiscuous mode [ 1257.962128][T12945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.222309][T12945] veth1_macvtap: left promiscuous mode [ 1258.239953][T12945] veth0_macvtap: left promiscuous mode [ 1258.245711][T12945] veth1_vlan: left promiscuous mode [ 1258.267914][T12945] veth0_vlan: left promiscuous mode [ 1258.850165][ T9480] Bluetooth: hci2: command tx timeout [ 1259.789927][T12945] team0 (unregistering): Port device team_slave_1 removed [ 1259.858310][T12945] team0 (unregistering): Port device team_slave_0 removed [ 1259.934342][T12945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.015595][T12945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.701509][T12945] bond0 (unregistering): Released all slaves [ 1260.783926][T14206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.792854][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.802281][T14206] bridge_slave_0: entered allmulticast mode [ 1260.810238][T14206] bridge_slave_0: entered promiscuous mode [ 1260.824211][T14206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.838080][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.846721][T14206] bridge_slave_1: entered allmulticast mode [ 1260.860607][T14206] bridge_slave_1: entered promiscuous mode [ 1261.696424][T14206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.720314][T14206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.015593][T14333] loop0: detected capacity change from 0 to 128 [ 1262.070503][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 1262.113699][T14333] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1262.147275][T14206] team0: Port device team_slave_0 added [ 1262.177408][T14333] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.204453][T14206] team0: Port device team_slave_1 added [ 1262.498629][T14206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.559941][T14206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.590333][T14206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.631314][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 1262.696941][ T28] audit: type=1326 audit(1754591602.225:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1262.830871][T14206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.059864][T14206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.096725][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1263.186108][ T28] audit: type=1326 audit(1754591602.225:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1263.311561][T14206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.346702][ T28] audit: type=1326 audit(1754591602.225:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1263.370333][ T28] audit: type=1326 audit(1754591602.225:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1263.394469][ T28] audit: type=1326 audit(1754591602.235:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1263.459802][ T28] audit: type=1326 audit(1754591602.255:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1263.501291][T12945] IPVS: stop unused estimator thread 0... [ 1263.514915][T14206] hsr_slave_0: entered promiscuous mode [ 1263.523076][T14206] hsr_slave_1: entered promiscuous mode [ 1263.524466][ T28] audit: type=1326 audit(1754591602.275:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1263.574189][ T28] audit: type=1326 audit(1754591602.275:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1263.656323][ T28] audit: type=1326 audit(1754591602.275:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1263.739872][ T28] audit: type=1326 audit(1754591602.275:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.5.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1265.643701][T14379] ksmbd: Unknown IPC event: 6, ignore. [ 1265.809237][T14206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1266.102469][T14206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1266.435418][T14206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1266.783300][T14206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1266.857461][T14389] loop0: detected capacity change from 0 to 128 [ 1266.924184][T14389] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1266.956076][T14389] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1267.295851][T14206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.351809][T14206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.404310][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.411573][ T9132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.460950][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.468263][ T9132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.057959][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1268.637230][T14428] ksmbd: Unknown IPC event: 6, ignore. [ 1268.660597][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 1268.660613][ T28] audit: type=1326 audit(1754591608.275:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.431555][ T28] audit: type=1326 audit(1754591608.275:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.454953][ T28] audit: type=1326 audit(1754591608.305:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.478252][ T28] audit: type=1326 audit(1754591608.305:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.501810][ T28] audit: type=1326 audit(1754591608.305:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.525818][ T28] audit: type=1326 audit(1754591608.305:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.576424][ T28] audit: type=1326 audit(1754591608.305:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.684457][ T28] audit: type=1326 audit(1754591608.315:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.780051][ T28] audit: type=1326 audit(1754591608.315:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1269.947820][T14441] loop5: detected capacity change from 0 to 128 [ 1270.002400][ T28] audit: type=1326 audit(1754591608.315:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1270.557987][T14445] loop0: detected capacity change from 0 to 764 [ 1270.581070][T14441] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1270.613370][T14445] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1270.659924][T14441] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.823225][T14206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.136124][T14462] No such timeout policy "syz1" [ 1273.022026][T14467] loop1: detected capacity change from 0 to 256 [ 1273.076184][T14467] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1273.143574][T14467] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1273.196418][T10390] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1273.257845][T14467] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1273.672809][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1273.672862][ T28] audit: type=1326 audit(1754591613.285:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1274.563553][T14481] loop1: detected capacity change from 0 to 40427 [ 1274.618200][T14481] F2FS-fs (loop1): invalid crc value [ 1274.624765][ T28] audit: type=1326 audit(1754591613.315:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1274.674711][T14481] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1274.696904][T14486] loop0: detected capacity change from 0 to 764 [ 1274.737569][T14481] F2FS-fs (loop1): Start checkpoint disabled! [ 1274.750157][T14481] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1274.770304][ T28] audit: type=1326 audit(1754591613.315:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1274.795207][ T28] audit: type=1326 audit(1754591613.325:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1274.840901][T14486] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1274.923140][T14489] bio_check_eod: 1 callbacks suppressed [ 1274.923175][T14489] syz.1.2133: attempt to access beyond end of device [ 1274.923175][T14489] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1274.945067][T14489] syz.1.2133: attempt to access beyond end of device [ 1274.945067][T14489] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1274.961789][T14489] syz.1.2133: attempt to access beyond end of device [ 1274.961789][T14489] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1274.978028][T14489] syz.1.2133: attempt to access beyond end of device [ 1274.978028][T14489] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1274.994116][T14489] syz.1.2133: attempt to access beyond end of device [ 1274.994116][T14489] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1275.014659][T14489] syz.1.2133: attempt to access beyond end of device [ 1275.014659][T14489] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1275.029975][T14489] syz.1.2133: attempt to access beyond end of device [ 1275.029975][T14489] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1275.046030][T14489] syz.1.2133: attempt to access beyond end of device [ 1275.046030][T14489] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1275.062210][T14489] syz.1.2133: attempt to access beyond end of device [ 1275.062210][T14489] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1275.078572][T14489] syz.1.2133: attempt to access beyond end of device [ 1275.078572][T14489] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1275.856373][ T28] audit: type=1326 audit(1754591613.325:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1276.253484][ T28] audit: type=1326 audit(1754591613.325:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1276.463647][ T28] audit: type=1326 audit(1754591613.325:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1276.673314][ T28] audit: type=1326 audit(1754591613.325:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1277.100779][ T28] audit: type=1326 audit(1754591613.325:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1278.711608][ T28] audit: type=1326 audit(1754591613.325:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1279.055381][ T28] audit: type=1326 audit(1754591613.325:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1279.078656][ T28] audit: type=1326 audit(1754591613.325:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1279.102268][ T28] audit: type=1326 audit(1754591613.335:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1279.125380][ T28] audit: type=1326 audit(1754591613.335:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1279.150284][ T28] audit: type=1326 audit(1754591613.335:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1279.175998][ T28] audit: type=1326 audit(1754591613.335:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1279.216895][ T28] audit: type=1326 audit(1754591613.335:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f9bbd78ebe9 code=0x7ffc0000 [ 1279.263151][T14206] veth0_vlan: entered promiscuous mode [ 1279.297907][ T28] audit: type=1326 audit(1754591613.335:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bbd785ba7 code=0x7ffc0000 [ 1279.328265][ T28] audit: type=1326 audit(1754591613.335:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bbd72add9 code=0x7ffc0000 [ 1279.353501][T14206] veth1_vlan: entered promiscuous mode [ 1279.427284][T14500] loop0: detected capacity change from 0 to 128 [ 1279.572043][T14500] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1279.592595][T14206] veth0_macvtap: entered promiscuous mode [ 1279.656318][T14206] veth1_macvtap: entered promiscuous mode [ 1279.686211][T14500] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.742994][T14506] No such timeout policy "syz1" [ 1280.177648][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.252578][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.499527][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.511069][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.522203][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.549205][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.568694][T14206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.786506][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.806185][ T9021] bio_check_eod: 181 callbacks suppressed [ 1280.806205][ T9021] kworker/u4:14: attempt to access beyond end of device [ 1280.806205][ T9021] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1280.855879][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.886975][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.900346][ T9021] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1280.907295][ T9021] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1280.941679][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.962150][ T9021] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1280.983474][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.062428][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.122668][T14206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.214922][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1281.247392][T14206] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.274766][T14206] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.329533][T14206] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.338419][T14206] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.625918][ T9125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.659868][ T9125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.840749][ T9134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.848658][ T9134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.675188][T14543] tipc: Enabled bearer , priority 0 [ 1283.724358][T14543] syzkaller0: entered promiscuous mode [ 1283.837606][T14540] loop5: detected capacity change from 0 to 40427 [ 1283.871251][T14543] syzkaller0: entered allmulticast mode [ 1283.908073][T14540] F2FS-fs (loop5): invalid crc value [ 1283.931138][T14540] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1283.995897][T14540] F2FS-fs (loop5): Start checkpoint disabled! [ 1284.009663][T14540] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1284.109045][T14554] No such timeout policy "syz1" [ 1284.731643][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 1284.731659][ T28] audit: type=1800 audit(1754591624.345:6320): pid=14540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2145" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1284.952423][T14558] syz.5.2145: attempt to access beyond end of device [ 1284.952423][T14558] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1285.077509][ T28] audit: type=1800 audit(1754591624.515:6321): pid=14558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2145" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1285.115203][T14558] syz.5.2145: attempt to access beyond end of device [ 1285.115203][T14558] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1285.134232][T14558] syz.5.2145: attempt to access beyond end of device [ 1285.134232][T14558] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1285.150593][T14558] syz.5.2145: attempt to access beyond end of device [ 1285.150593][T14558] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1285.166912][T14558] syz.5.2145: attempt to access beyond end of device [ 1285.166912][T14558] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1285.184537][T14558] syz.5.2145: attempt to access beyond end of device [ 1285.184537][T14558] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1285.199915][T14558] syz.5.2145: attempt to access beyond end of device [ 1285.199915][T14558] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1285.217349][T14558] syz.5.2145: attempt to access beyond end of device [ 1285.217349][T14558] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1285.234218][T14558] syz.5.2145: attempt to access beyond end of device [ 1285.234218][T14558] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1285.287142][T14556] tipc: Resetting bearer [ 1286.486392][T14563] loop0: detected capacity change from 0 to 128 [ 1286.651465][T14556] tipc: Disabling bearer [ 1287.096787][T14563] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1287.323426][T14563] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1289.360819][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1289.680597][ T28] audit: type=1326 audit(1754591629.295:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1289.895738][ T28] audit: type=1326 audit(1754591629.295:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.378040][ T28] audit: type=1326 audit(1754591629.315:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.454033][ T28] audit: type=1326 audit(1754591629.315:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.478170][ T28] audit: type=1326 audit(1754591629.315:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.501712][ T28] audit: type=1326 audit(1754591629.315:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.525332][ T28] audit: type=1326 audit(1754591629.325:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.549798][ T28] audit: type=1326 audit(1754591629.335:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.573642][ T28] audit: type=1326 audit(1754591629.335:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.597716][ T28] audit: type=1326 audit(1754591629.335:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.622706][ T28] audit: type=1326 audit(1754591629.335:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1290.698241][ T9132] bio_check_eod: 182 callbacks suppressed [ 1290.698260][ T9132] kworker/u4:21: attempt to access beyond end of device [ 1290.698260][ T9132] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1290.798088][ T9132] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1290.834414][ T9132] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1290.842750][ T9132] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1291.494835][T14599] No such timeout policy "syz1" [ 1292.361856][T14603] tipc: Started in network mode [ 1292.366925][T14603] tipc: Node identity 9ae8c30c9163, cluster identity 4711 [ 1292.403711][T14603] tipc: Enabled bearer , priority 0 [ 1292.430721][T14603] syzkaller0: entered promiscuous mode [ 1292.436296][T14603] syzkaller0: entered allmulticast mode [ 1292.461661][T14607] loop0: detected capacity change from 0 to 128 [ 1292.526842][T14607] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1292.553441][T14603] tipc: Resetting bearer [ 1292.683926][T14603] tipc: Disabling bearer [ 1292.854365][T14607] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1293.182065][T14612] loop1: detected capacity change from 0 to 65 [ 1294.165427][T14612] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1294.193668][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1294.260965][T14612] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 1295.304674][T14612] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2156'. [ 1295.541080][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1295.541134][ T28] audit: type=1326 audit(1754591635.155:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1296.407063][ T28] audit: type=1326 audit(1754591635.155:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1296.600309][ T28] audit: type=1326 audit(1754591635.155:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1296.632225][ T28] audit: type=1326 audit(1754591635.155:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1296.660785][ T28] audit: type=1326 audit(1754591635.185:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1296.706968][T14638] No such timeout policy "syz1" [ 1299.768619][ T28] audit: type=1326 audit(1754591635.195:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1299.792391][ T28] audit: type=1326 audit(1754591635.205:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1299.816315][ T28] audit: type=1326 audit(1754591635.205:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1299.840588][ T28] audit: type=1326 audit(1754591635.205:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1299.864353][ T28] audit: type=1326 audit(1754591635.205:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14630 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1300.616607][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.624305][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.049943][T14659] loop5: detected capacity change from 0 to 65 [ 1301.379767][T14658] loop0: detected capacity change from 0 to 128 [ 1301.851071][T14659] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1301.900359][T14658] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1302.431985][T14659] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop5 [ 1302.532647][T14658] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.451396][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1306.596663][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 1306.596682][ T28] audit: type=1326 audit(1754591645.565:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.086171][ T28] audit: type=1326 audit(1754591645.565:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.167502][ T28] audit: type=1326 audit(1754591645.565:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.341240][ T28] audit: type=1326 audit(1754591645.565:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.365184][ T28] audit: type=1326 audit(1754591645.565:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.388663][ T28] audit: type=1326 audit(1754591645.565:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.413566][ T28] audit: type=1326 audit(1754591645.585:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.470745][ T28] audit: type=1326 audit(1754591645.585:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.620219][ T28] audit: type=1326 audit(1754591645.585:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1307.668618][ T28] audit: type=1326 audit(1754591645.585:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78898ebe9 code=0x7ffc0000 [ 1308.033945][ T5878] hid-generic 0005:10CF:0004.0001: item fetching failed at offset 0/1 [ 1308.051641][ T5878] hid-generic: probe of 0005:10CF:0004.0001 failed with error -22 [ 1308.254727][T14718] loop1: detected capacity change from 0 to 128 [ 1308.324596][T14718] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1308.671455][T14718] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1310.744530][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1311.686963][ T28] kauditd_printk_skb: 281 callbacks suppressed [ 1311.686983][ T28] audit: type=1326 audit(1754591651.215:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c0f185ba7 code=0x7ffc0000 [ 1311.724037][ T28] audit: type=1326 audit(1754591651.215:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c0f12add9 code=0x7ffc0000 [ 1311.748561][ T28] audit: type=1326 audit(1754591651.215:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4c0f18ebe9 code=0x7ffc0000 [ 1312.616383][T14765] No such timeout policy "syz1" [ 1315.442449][T14777] loop6: detected capacity change from 0 to 1024 [ 1315.563784][ T28] audit: type=1326 audit(1754591655.135:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1316.547093][T14777] ------------[ cut here ]------------ [ 1316.554060][T14777] kernel BUG at fs/hfsplus/xattr.c:175! [ 1316.583407][T14795] loop0: detected capacity change from 0 to 128 [ 1316.617612][ T28] audit: type=1326 audit(1754591655.135:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1316.652283][T14777] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1316.658459][T14777] CPU: 1 PID: 14777 Comm: syz.6.2195 Not tainted 6.6.101-syzkaller #0 [ 1316.666679][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1316.676867][T14777] RIP: 0010:__hfsplus_setxattr+0x1edd/0x1ef0 [ 1316.682928][T14777] Code: a8 87 ff e9 96 fb ff ff e8 00 62 30 ff 4c 89 e7 48 c7 c6 20 c0 c0 8a e8 11 23 70 ff 0f 0b e8 ea 61 30 ff 0f 0b e8 e3 61 30 ff <0f> 0b e8 dc 61 30 ff e9 fa f4 ff ff 0f 1f 80 00 00 00 00 41 56 53 [ 1316.702765][T14777] RSP: 0000:ffffc9000b6c75a0 EFLAGS: 00010283 [ 1316.708891][T14777] RAX: ffffffff825533ad RBX: ffff88807b87a000 RCX: 0000000000080000 [ 1316.716910][T14777] RDX: ffffc9000fbc1000 RSI: 000000000000981f RDI: 0000000000009820 [ 1316.724908][T14777] RBP: ffffc9000b6c7a38 R08: ffff88805ed5f50b R09: 1ffff1100bdabea1 [ 1316.732909][T14777] R10: dffffc0000000000 R11: ffffed100bdabea2 R12: ffff88805ed5f470 [ 1316.741004][T14777] R13: 1ffff920016d8ecc R14: 0000000000010000 R15: dffffc0000000000 [ 1316.749004][T14777] FS: 00007fe7898bf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1316.758040][T14777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1316.764662][T14777] CR2: 000056550defa4b0 CR3: 000000005ed6b000 CR4: 00000000003506e0 [ 1316.772676][T14777] Call Trace: [ 1316.775974][T14777] [ 1316.778957][T14777] ? schedule_preempt_disabled+0x20/0x20 [ 1316.784614][T14777] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1316.790295][T14777] ? hfsplus_delete_all_attrs+0x410/0x410 [ 1316.796037][T14777] ? preempt_schedule_thunk+0x1a/0x30 [ 1316.801441][T14777] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1316.807369][T14777] ? stack_trace_save+0x9c/0xe0 [ 1316.812273][T14777] ? hfsplus_setxattr+0x102/0x170 [ 1316.817333][T14777] hfsplus_setxattr+0x11e/0x170 [ 1316.822233][T14777] hfsplus_security_setxattr+0x40/0x50 [ 1316.827815][T14777] ? hfsplus_security_getxattr+0x50/0x50 [ 1316.833569][T14777] __vfs_setxattr+0x431/0x470 [ 1316.838287][T14777] __vfs_setxattr_noperm+0x12d/0x5e0 [ 1316.843605][T14777] vfs_setxattr+0x16c/0x2f0 [ 1316.848138][T14777] ? xattr_permission+0x470/0x470 [ 1316.853187][T14777] ? __mnt_want_write+0x223/0x2a0 [ 1316.858240][T14777] ? path_setxattr+0x314/0x550 [ 1316.863058][T14777] path_setxattr+0x362/0x550 [ 1316.867708][T14777] ? simple_xattrs_free+0x150/0x150 [ 1316.872935][T14777] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1316.878949][T14777] ? lock_chain_count+0x20/0x20 [ 1316.883831][T14777] __x64_sys_setxattr+0xbb/0xd0 [ 1316.888703][T14777] do_syscall_64+0x55/0xb0 [ 1316.893164][T14777] ? clear_bhb_loop+0x40/0x90 [ 1316.897857][T14777] ? clear_bhb_loop+0x40/0x90 [ 1316.902549][T14777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1316.908474][T14777] RIP: 0033:0x7fe78898ebe9 [ 1316.912922][T14777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.932569][T14777] RSP: 002b:00007fe7898bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1316.941025][T14777] RAX: ffffffffffffffda RBX: 00007fe788bb5fa0 RCX: 00007fe78898ebe9 [ 1316.949117][T14777] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000200000000340 [ 1316.957113][T14777] RBP: 00007fe788a11e19 R08: 0000000000000001 R09: 0000000000000000 [ 1316.965129][T14777] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1316.973118][T14777] R13: 00007fe788bb6038 R14: 00007fe788bb5fa0 R15: 00007ffe112f51f8 [ 1316.981123][T14777] [ 1316.984165][T14777] Modules linked in: [ 1316.990353][ T28] audit: type=1326 audit(1754591655.145:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.030627][T14795] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1317.043320][ T28] audit: type=1326 audit(1754591655.145:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.043369][ T28] audit: type=1326 audit(1754591655.145:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.043411][ T28] audit: type=1326 audit(1754591655.145:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.043461][ T28] audit: type=1326 audit(1754591655.155:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.043503][ T28] audit: type=1326 audit(1754591655.155:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.043544][ T28] audit: type=1326 audit(1754591655.165:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.043584][ T28] audit: type=1326 audit(1754591655.175:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.043625][ T28] audit: type=1326 audit(1754591655.175:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.043667][ T28] audit: type=1326 audit(1754591655.175:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56cb8ebe9 code=0x7ffc0000 [ 1317.062588][T14777] ---[ end trace 0000000000000000 ]--- [ 1317.159375][T14795] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.309998][T14777] RIP: 0010:__hfsplus_setxattr+0x1edd/0x1ef0 [ 1317.329557][T14777] Code: a8 87 ff e9 96 fb ff ff e8 00 62 30 ff 4c 89 e7 48 c7 c6 20 c0 c0 8a e8 11 23 70 ff 0f 0b e8 ea 61 30 ff 0f 0b e8 e3 61 30 ff <0f> 0b e8 dc 61 30 ff e9 fa f4 ff ff 0f 1f 80 00 00 00 00 41 56 53 [ 1317.357127][T14777] RSP: 0000:ffffc9000b6c75a0 EFLAGS: 00010283 [ 1317.364319][T14777] RAX: ffffffff825533ad RBX: ffff88807b87a000 RCX: 0000000000080000 [ 1317.373218][T14777] RDX: ffffc9000fbc1000 RSI: 000000000000981f RDI: 0000000000009820 [ 1317.382340][T14777] RBP: ffffc9000b6c7a38 R08: ffff88805ed5f50b R09: 1ffff1100bdabea1 [ 1317.391733][T14777] R10: dffffc0000000000 R11: ffffed100bdabea2 R12: ffff88805ed5f470 [ 1317.401004][T14777] R13: 1ffff920016d8ecc R14: 0000000000010000 R15: dffffc0000000000 [ 1317.410147][T14777] FS: 00007fe7898bf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1317.419791][T14777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1317.435447][T14777] CR2: 000056550df2d660 CR3: 000000005ed6b000 CR4: 00000000003506f0 [ 1317.562055][T14777] Kernel panic - not syncing: Fatal exception [ 1317.568673][T14777] Kernel Offset: disabled [ 1317.573017][T14777] Rebooting in 86400 seconds..