last executing test programs: 4m35.421973883s ago: executing program 2 (id=232): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) rt_sigsuspend(0x0, 0x0) 4m34.294086099s ago: executing program 2 (id=235): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_read_part_table(0x5d7, &(0x7f0000000600)="$eJzs3L+rHFUUB/DvzO7sD4g+KyvBhRQGBZ9g62Is9JkuiHaCthZPJFYWsruoWKh/QHotjEKItYWCBDGdlQgPLUTsLUxhvPLmx+4DtdqgCJ9PsXPuufeec4eZdjb8v5WDpFTJrbPJcd0HPyfvNMnmpaeSaZdq+qkqyQvXnn7m0uJyNd3mTrPrfna6KzgZCmfRR5+P88G1o3fbeJ0qq/Rhmk8nGbdH6/Zd/euhb1dtLf5zF74o3YOY5Nt8luS4GrUPP9nko+S+zNrBYZJR+p91Mj+NJvv3v768uXmyj+fp37SmG63yUHmsn2tSSil1VueHnaPkgScOr/xd0aY7/lmllObcsLdO/ujD4zuT4T18/OsfV9k8uK3ediylG5/Mk9dOnnu0rVV1NZr9bx8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLvswusPf1kPg4vtb7WNn/049W7pOvl9iBezu9T/+vLmwVtvX6nzxvKV715986ejX/JrklEOj84l0+26l7vLjffay7jP3j/ft//xnXryyYdf7er0pavkm/Pf3y6jPn2yXbA7U5b1vu0BAAAAAAAAAAAAAAAAAACgdSOXFpfrPJ9UeTG7z/1LZklVDcNZUkopv5XW8PH/5Oq9fXTrh1Snm1Kqs9UvJgf3JGX6/iPt3wp0G0sp47ZF9e/cI//szwAAAP//HfdkCg==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfe, 0x56c, &(0x7f0000000740)="$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") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f00000002c0)='./file1\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") 4m33.477247894s ago: executing program 2 (id=242): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 4m32.3391252s ago: executing program 32 (id=244): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x300, 0x0, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) 4m32.089533271s ago: executing program 3 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) timer_create(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r1, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x1, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 4m32.068673242s ago: executing program 2 (id=249): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[], 0xe, 0x2b3, &(0x7f0000000200)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000340), 0x0) 4m31.799079123s ago: executing program 3 (id=251): r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000000c0)=""/188, 0xbc}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001e00e501000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00000000000000000000000086dd000037e2aca6322a2c66f2"], 0x38}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x100000000, 0x3}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x40000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000d00)={[{@noquota}, {@sysvgroups}, {@noquota}, {@init_itable}, {@data_err_abort}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x1, 0x4db, &(0x7f00000007c0)="$eJzs3dFrHFsZAPBvJtnbtM01uerD9YL3XrxX0qLdTRrbBh9qBbFPBWt9rzHZhJBNNmQ3bROKpPiuIKKCTz75IvgHCNI/QYSCvksVRbTVBxF1ZWdnaxJ3m6ibnd7k94PpnDNnd7/vNOzMnJnDTgCn1rsRcSMiRiLiYkRM5NvTfLnZbr/ded3zZw8X2ksSrdadPyaR5Nu6n5Xk6/MRsRsRYxHx5ZsRX0v+M25je2d1vlarbub1SnNto9LY3rm0sja/XF2urs/OzlyduzZ3ZW56IP2cjIjrX/jtd7/1oy9e/9mn7//67u8vfL2d1njevrcfg9Tpein7v+gajYjN4whWgJF8XerT/s2RISYDAMCh2uf4H46IT2Tn/xMxkp2dAgAAACdJ63Pj8fckogUAAACcWGk2BzZJy/lcgPFI03K5M4f3o3EurdUbzU8t1bfWFztzZSejlC6t1KrT+VzhySgl7fpMPse2W798oD4bEW9ExHcmzmb18kK9tlj0xQ8AAAA4Jc4fGP//ZSIb/58pOi8AAABgwCaLTgAAAAA4dsb/AAAAcPIZ/wMAAMCJ9qVbt9pLq/v868V721ur9XuXFquN1fLa1kJ5ob65UV6u15ez3+xbO+zzavX6xmdifetBpVltNCuN7Z27a/Wt9ebdlX2PwN7zpHEAAADguL3xzuNfJRGx+9mz2dL2WtFJAUORHNKePSTkaV75zRASAoZmpOgEgMKMFp0AUJhS0QkAhTvsOsBYv4afDz4XAADgeEx9rP/9f9cG4GRLi04AABg69//h9CrtnwF4pbhMgKJ86JD2///+f6v1XyUEAAAM3Hi2JGk5vxc4HmlaLke8nj0WoJQsrdSq0/n44JcTpTPt+kz2zuTQOcMAAAAAAAAAAAAAAAAAAAAAAAAAQEerlUQLAAAAONEi0t8l2a/5R0xNvD9+8PrAa8lfJ7J1RNz/wZ3vPZhvNjdn2tv/9GJ78/v59stFXMEAAAAADuqO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpOfPHi50l2HG/cPnI2KyZ/x3xrLVWJQi4tyfkxjd874kIkYGEH/3UUS82St+0k4rJqOTRa/4ZwuMn0bE+QHEh9PscXv/c6PX9y+Nd7N17+/f31qxr/6/6r//S6O7/xvps/95/Ygx3nryk0rf+I8i3hrtvf/pxk/6xH/viPG/+pWdnX5trR9GTPU8/iT7YlWaaxuVxvbOpZW1+eXqcnV9dnbm6ty1uStz05WllVo1/7dnjG9//Kf/fFn/z/WJP3lI/98/Yv//8eTBs490iqVe8S+81/v4+2af+Gl+7PtkXm63T3XLu53yXm//+Bdvv6z/i336/+Lv3+NA24554Yj9v3j7G0+P+FIAYAga2zur87VadfODWEjjlUhDYSCFM69GGgqdQtF7JgAAYND+fdJfdCYAAAAAAAAAAAAAAAAAAABweg3j58QOxtwtpqsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/1rwAAAP//jMvbfg==") 4m31.404677495s ago: executing program 2 (id=254): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 4m30.683429579s ago: executing program 2 (id=257): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @info_request={0xf, 0x0, 0x0, 0x20f, 0x778}}}}}, 0x0) 4m30.193973792s ago: executing program 33 (id=257): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @info_request={0xf, 0x0, 0x0, 0x20f, 0x778}}}}}, 0x0) 4m28.901115369s ago: executing program 3 (id=262): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x20000000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1000000, 0x0, 0x0, 0x5000000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4m27.399429298s ago: executing program 3 (id=263): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[], 0xe, 0x2b3, &(0x7f0000000200)="$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") sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000340), 0x0) 4m27.026053939s ago: executing program 3 (id=265): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000b00)={[{@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x47}}, {@errors_remount}, {@lazytime}, {@i_version}, {@debug}, {@noacl}, {@test_dummy_encryption_v1}, {@noquota}, {@dioread_lock}, {@oldalloc}]}, 0xff, 0x493, &(0x7f0000000640)="$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") 4m25.871366986s ago: executing program 1 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000001b80)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6001070000641100fc010000000000000000000000000000ff020000000000000000000000000001"], 0x0) 4m25.849469906s ago: executing program 1 (id=269): r0 = open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1f00000000000080040000000600000041030100", @ANYRES32=r0, @ANYBLOB="faffffff000000000000000000000000008e3532281cd24cdff129b3d7000000d621b863219406fd7afa5df82b82965a3c9005d4d60011f01260", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000200"/24, @ANYRES32=r0, @ANYBLOB], 0x50) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x6c00, 0x0, 0x3) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000500)={r2}) 4m25.812622887s ago: executing program 3 (id=270): r0 = open(&(0x7f00000000c0)='.\x00', 0x48000, 0x0) getdents(r0, 0x0, 0x0) 4m25.767233307s ago: executing program 1 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 4m25.510438488s ago: executing program 34 (id=270): r0 = open(&(0x7f00000000c0)='.\x00', 0x48000, 0x0) getdents(r0, 0x0, 0x0) 4m24.296583675s ago: executing program 1 (id=273): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[], 0xe, 0x2b3, &(0x7f0000000200)="$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") sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000340), 0x0) 4m24.054212816s ago: executing program 1 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0xa4, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x5, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa4, 0x5}}]}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000001280)=ANY=[@ANYBLOB="2c020000", @ANYRES16, @ANYRES16, @ANYRESOCT], 0x22c}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 4m23.511265059s ago: executing program 1 (id=276): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x526, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00'}) bind$xdp(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x8013, r2, 0x100000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='mctp_key_acquire\x00', r4, 0x0, 0x400000000}, 0x4) 4m23.26641103s ago: executing program 35 (id=276): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x526, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00'}) bind$xdp(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x8013, r2, 0x100000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='mctp_key_acquire\x00', r4, 0x0, 0x400000000}, 0x4) 4m22.767779973s ago: executing program 4 (id=278): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000b00)={[{@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x47}}, {@errors_remount}, {@lazytime}, {@i_version}, {@debug}, {@noacl}, {@test_dummy_encryption_v1}, {@noquota}, {@dioread_lock}, {@oldalloc}]}, 0xff, 0x493, &(0x7f0000000640)="$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") 4m22.571527814s ago: executing program 4 (id=279): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f0000000700)="$eJzs3c1rG2caAPBHUuzYjnfzscuSZGETyEL2g1j+YIm9u7DsaXcPgWUDe9mF1LUVN7VsGUtOY5OD095y6KG0tFB66L1/QS/NqaFQem7ptfRQUtrUhbZQUNFISvwhOWrqSInn94OJ3nlH0fO+Es/r0TszmgBS63Ttn0zEcER8EBGH66tbn3C6/rBx9/pMbclEtXrxi0zyvNp686nN/3coItYjYiAi/vOPiKczO+OWV9fmp4vFwnJjPV9ZWMqXV9fOXVmYnivMFRbHJs9PTU2OToxP7Vlfb7747M0Lb/+r/61vXrhz+6V336k1a7ixbXM/9lK9631xdFPdgYj466MI1gO5Rn8Ge90QHkrt8/tFRJxJ8v9w5JJPE0iDarVa/b56sN3m9Sqwb2WTfeBMdiQi6uVsdmSkvg//yxjKFkvlyh8vl1YWZ+v7ykeiL3v5SrEw2viucCT6MrX1saR8f3182/pERLIP/HJuMFkfmSkVZ7s71AHbHNqW/1/n6vkPpISv/JBe8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kF7yH9Jrt/zv72I7gK7694ULtaXavP599urqynzp6rnZQnl+ZGFlZmSmtLw0MlcqzSXX7Cw86PWKpdLS2J9i5Vq+UihX8uXVtUsLpZXFyqXkuv5Lhb6u9AroxNFTtz7KRMT6nweTJTb9yZersL9Vq5no9TXIQG/kej0AAT1j6h/S60d8x2/7I2HAk63FT/RuMdC6+m+x9ChaA3RDttcNAHrm7AnH/yCtzP9Depn/h/Syjw885Px/mP+HJ5f5f0iv4Tb3//rZpnt3jUbEzyPiw1zfwea9voD9IPtZprH/f/bwb4e3b+3PfJscIuiPiOdev/jqtelKZXmsVv/lvfrKa4368V60H+hUM0+beQwApNfG3eszzaWbcT//e/0khJ3xDzTmJgeSY5RDG5kt5ypk9ujchfUbEXG8VfxM437n9SMfQxu5HfGPNR4z9ZdI2nsguW96d+Kf2BT/N5vin/zJ7wqkw63a+DPaKv+ySU7HvfzbMv5kh/fo3In241/23viXazP+neowxjNvPP9p2/g3Ik62jN+MN5DE2h6/1razHca/8////qrdtuqb9ddpFb+pVspXFpby5dW1c8nvyM0VFscmz09NTY5OjE/lkznqfHOmeqe/HH//9m79H2oTv97fj1v2v1b3+w77/92v3/vf6V3i/+5M68//WPLY+v0fjIg/dBj/q/FPnmq3rRZ/tk3/s7vEr9VNdBi//Mo/XTsMAI+R8ura/HSxWFhWUEgKBx+PZij0uPCgkWO9OwMU8MjcT/petwQAAAAAAAAAAADoVDdOJ+51HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9oMfAgAA//+H4NeR") mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) 4m21.369093381s ago: executing program 4 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 4m21.155110182s ago: executing program 4 (id=281): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[], 0xe, 0x2b3, &(0x7f0000000200)="$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") sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000340), 0x0) 4m20.996131512s ago: executing program 4 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffefd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x2000e881) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xdb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0xffbb) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r2 = epoll_create1(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000540)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x60000017}) 4m20.608210004s ago: executing program 4 (id=283): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) 4m20.368740976s ago: executing program 36 (id=283): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) 4m15.002976625s ago: executing program 5 (id=285): epoll_create(0x2a) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xdd218) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) prlimit64(0x0, 0xb, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/247, 0xf7}], 0x1, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m14.00028711s ago: executing program 5 (id=286): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f0000000700)="$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") mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) 4m12.827249267s ago: executing program 5 (id=287): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x0, 0x500, &(0x7f0000000f40)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") 4m11.598537414s ago: executing program 5 (id=288): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[], 0xe, 0x2b3, &(0x7f0000000200)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) 4m11.175446466s ago: executing program 5 (id=289): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd28, 0x25dfdbfc, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0x9, 0xa, 0x20, 0xa0, 0x6c}, 0x6e6bb5, 0x1}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000840)="09028a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f9111a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfeec, 0x20008005, 0x0, 0xfffffffffffffe93) 4m10.698980149s ago: executing program 5 (id=290): r0 = socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x80, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5, 0xc00}, [@RTA_TABLE={0x8, 0xf, 0xffff}]}, 0x24}}, 0x90ddc0a679ff07b8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) utimes(&(0x7f0000000380)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getrlimit(0x3, &(0x7f0000000240)) bind$netlink(r0, 0x0, 0x0) 4m10.4416948s ago: executing program 37 (id=290): r0 = socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x80, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5, 0xc00}, [@RTA_TABLE={0x8, 0xf, 0xffff}]}, 0x24}}, 0x90ddc0a679ff07b8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) utimes(&(0x7f0000000380)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getrlimit(0x3, &(0x7f0000000240)) bind$netlink(r0, 0x0, 0x0) 13.798223244s ago: executing program 0 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 13.415429436s ago: executing program 0 (id=961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000280)='./file0\x00', 0x0) 13.260545267s ago: executing program 0 (id=962): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0xfffffffe}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="0212ef0002"], 0x10}}, 0x0) 10.644227491s ago: executing program 0 (id=968): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, 0x0) 10.511212182s ago: executing program 8 (id=970): gettid() timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x28380080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 10.123398414s ago: executing program 9 (id=972): openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/stat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 8.184430095s ago: executing program 7 (id=974): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x4, @rand_addr, 0x200000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) rename(0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8.015546116s ago: executing program 9 (id=975): timer_getoverrun(0x0) 8.006258316s ago: executing program 6 (id=976): prctl$PR_SET_THP_DISABLE(0x29, 0x0) 7.865815187s ago: executing program 9 (id=977): r0 = epoll_create(0x8) close_range(r0, 0xffffffffffffffff, 0x2) epoll_wait(r0, 0x0, 0x0, 0xcccf) 7.811392407s ago: executing program 6 (id=978): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x80000001) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x62040200) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 7.742181327s ago: executing program 8 (id=979): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x0, 0x4}}) 7.687382338s ago: executing program 9 (id=980): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ed430000000000001090224"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setuid(0x0) 7.475846039s ago: executing program 0 (id=981): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020d0000000000000000000000030006000b0a000002000000ac141436000000000000000002000100000000000000090000000000030005000000000002000000ac1414aa0000000000000000020008000800000034"], 0x68}, 0x1, 0x7}, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) io_setup(0x7, &(0x7f0000000c80)=0x0) socket$netlink(0x10, 0x3, 0x0) io_submit(r7, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 6.431393345s ago: executing program 7 (id=982): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001400b59501000004f2ffffff0a400400", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ff"], 0x2c}}, 0x4000) 6.388872704s ago: executing program 6 (id=983): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="726f6469722c726f6469722c696f636861727365743d63703433372c696f636861727365743d63703733372c726f6469722c636f6465706167653d313235312c73686f72746e616d653d77696e39352c726f6469722c757466383d312c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c757466383d302c726f6469722c696f636861727365743d63703836332c00de9784e4d49a8900bd2595c7467be73cb2", @ANYRES16=0x0], 0x1, 0x2e8, &(0x7f0000000640)="$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") r0 = creat(&(0x7f0000000440)='./file1\x00', 0x0) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x3) 5.39340162s ago: executing program 7 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000c63289eec99cc0c210210eb176ffcb365d1a98c5a287642d6daa6177323b1a0458b5aba33bef60cb0335210874efe02c05b2aedfca25fa959c05c7ce3926e0312ab507c611b372fea4bc709a2348137c7655bf811a"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000740)=""/188) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffffe, 0x204001) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x700, 0x12) 5.306012411s ago: executing program 0 (id=985): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@discard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 5.075328322s ago: executing program 6 (id=986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setsig(r2, 0xa, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) r4 = dup2(r2, r3) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x20004814) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.249999286s ago: executing program 7 (id=987): timer_getoverrun(0x0) 4.063281718s ago: executing program 7 (id=988): prctl$PR_SET_THP_DISABLE(0x29, 0x0) 3.779458239s ago: executing program 7 (id=989): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}, {&(0x7f00000005c0)="c2c10b270d21", 0x6}], 0x2) 3.750361869s ago: executing program 9 (id=990): r0 = epoll_create(0x8) close_range(r0, 0xffffffffffffffff, 0x2) epoll_wait(r0, 0x0, 0x0, 0xcccf) 3.324196662s ago: executing program 9 (id=991): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.983816744s ago: executing program 6 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) 2.791389715s ago: executing program 8 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) 2.646296445s ago: executing program 6 (id=994): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001400b59501000004f2ffffff0a400400", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ff"], 0x2c}}, 0x4000) 2.436667836s ago: executing program 8 (id=995): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020d0000000000000000000000030006000b0a000002000000ac141436000000000000000002000100000000000000090000000000030005000000000002000000ac1414aa0000000000000000020008000800000034"], 0x68}, 0x1, 0x7}, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) io_setup(0x7, &(0x7f0000000c80)) socket$netlink(0x10, 0x3, 0x0) 1.136483464s ago: executing program 8 (id=996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) sendmsg$nl_route(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") 0s ago: executing program 8 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000c63289eec99cc0c210210eb176ffcb365d1a98c5a287642d6daa6177323b1a0458b5aba33bef60cb0335210874efe02c05b2aedfca25fa959c05c7ce3926e0312ab507c611b372fea4bc709a2348137c7655bf811a"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000740)=""/188) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffffe, 0x204001) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x700, 0x12) kernel console output (not intermixed with test programs): ersion = 48b305e5 [ 186.787422][ T4514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.852954][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 187.081849][ T5721] loop8: detected capacity change from 0 to 128 [ 187.160555][ T5721] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 187.229935][ T5721] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.116128][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 188.255928][ T5704] overlayfs: failed to resolve './file0': -2 [ 188.345035][ T4730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.353314][ T4730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.537773][ T4514] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.178873][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.183691][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.187478][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.248990][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.364292][ T4730] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 189.416517][ T4730] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 189.441920][ T4514] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.455572][ T4291] usbhid 8-1:0.0: can't add hid device: -71 [ 189.461585][ T4291] usbhid: probe of 8-1:0.0 failed with error -71 [ 189.517302][ T4291] usb 8-1: USB disconnect, device number 2 [ 189.638891][ T4514] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.782959][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 189.782974][ T26] audit: type=1326 audit(1732649849.913:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 189.881079][ T5750] binder: BINDER_SET_CONTEXT_MGR already set [ 189.887237][ T5750] binder: 5742:5750 ioctl 4018620d 20004a80 returned -16 [ 190.048853][ T26] audit: type=1326 audit(1732649849.923:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 190.347370][ T26] audit: type=1326 audit(1732649849.923:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 190.442280][ T26] audit: type=1326 audit(1732649849.923:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 190.483542][ T26] audit: type=1326 audit(1732649849.973:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 190.512602][ T26] audit: type=1326 audit(1732649849.983:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 190.639487][ T26] audit: type=1326 audit(1732649849.983:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 190.679705][ T4514] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.712908][ T5757] netlink: 76 bytes leftover after parsing attributes in process `syz.7.318'. [ 190.730737][ T26] audit: type=1326 audit(1732649849.983:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 190.790209][ T5759] bridge0: port 3(syz_tun) entered blocking state [ 190.835957][ T26] audit: type=1326 audit(1732649849.983:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.9.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 190.860194][ T5759] bridge0: port 3(syz_tun) entered disabled state [ 190.898332][ T5759] device syz_tun entered promiscuous mode [ 190.916339][ T5759] bridge0: port 3(syz_tun) entered blocking state [ 190.923869][ T5759] bridge0: port 3(syz_tun) entered forwarding state [ 190.976624][ T5763] device syz_tun left promiscuous mode [ 190.983149][ T5763] bridge0: port 3(syz_tun) entered disabled state [ 191.036306][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.055954][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.073706][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.082898][ T5763] device bridge_slave_0 left promiscuous mode [ 191.104798][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.124441][ T5763] device bridge_slave_1 left promiscuous mode [ 191.151660][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.185174][ T5763] bond0: (slave bond_slave_0): Releasing backup interface [ 191.213067][ T5763] bond0: (slave bond_slave_1): Releasing backup interface [ 191.293462][ T4292] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 191.297639][ T5763] team0: Port device team_slave_0 removed [ 191.344392][ T5763] team0: Port device team_slave_1 removed [ 191.364846][ T5763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.383561][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.419618][ T5763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.438864][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.486896][ T4292] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 191.508235][ T4292] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 64 [ 191.525356][ T4292] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 191.566889][ T4292] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.596402][ T4292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 191.617440][ T4292] usb 8-1: SerialNumber: syz [ 191.636668][ T5766] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 191.644496][ T5766] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 191.838951][ T5573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.857218][ T5766] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 191.864554][ T5766] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 191.886283][ T5770] loop6: detected capacity change from 0 to 40427 [ 191.888258][ T5573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.927014][ T5770] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 191.942905][ T5775] syz.8.323[5775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.943006][ T5775] syz.8.323[5775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.953436][ T5770] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 191.956390][ T5573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.994523][ T26] audit: type=1326 audit(1732649852.133:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.8.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 192.041822][ T5770] F2FS-fs (loop6): invalid crc value [ 192.059921][ T5573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.172687][ T5770] F2FS-fs (loop6): Found nat_bits in checkpoint [ 192.337573][ T5770] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 192.353151][ T5770] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 192.395033][ T5793] loop8: detected capacity change from 0 to 512 [ 192.460781][ T4292] cdc_ether 8-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.7-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 192.485619][ T5793] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.325: corrupted inode contents [ 192.524659][ T5793] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #16: comm syz.8.325: mark_inode_dirty error [ 192.544316][ T5793] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.325: corrupted inode contents [ 192.571726][ T5793] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.325: mark_inode_dirty error [ 192.595931][ T5793] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.325: corrupted inode contents [ 192.618967][ T5793] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 192.628565][ T5793] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.325: corrupted inode contents [ 192.663509][ T5793] EXT4-fs error (device loop8): ext4_truncate:4311: inode #16: comm syz.8.325: mark_inode_dirty error [ 192.675344][ T5793] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 192.690157][ T5793] EXT4-fs (loop8): 1 truncate cleaned up [ 192.696082][ T5793] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 192.705246][ T5793] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.743824][ T4470] EXT4-fs error (device loop8): ext4_release_dquot:6824: comm kworker/u4:13: Failed to release dquot type 1 [ 194.169926][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176304][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.290368][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 194.297126][ T4730] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 194.334155][ T4730] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 194.360360][ T22] usb 8-1: USB disconnect, device number 3 [ 194.374464][ T22] cdc_ether 8-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.7-1, Mobile Broadband Network Device [ 194.786391][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.948585][ T5573] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.993156][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.014182][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.157065][ T3518] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 195.159902][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.190497][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.217670][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.224893][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.263086][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.304300][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.342009][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.349221][ T4730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.427160][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.511543][ T5830] binder: BINDER_SET_CONTEXT_MGR already set [ 195.517778][ T5830] binder: 5825:5830 ioctl 4018620d 20004a80 returned -16 [ 195.627333][ T3518] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 195.672182][ T3518] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.937134][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.095524][ T3518] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 196.200659][ T3518] usb 9-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.00 [ 196.241493][ T3518] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.251544][ T5833] loop6: detected capacity change from 0 to 256 [ 196.297843][ T3518] usb 9-1: config 0 descriptor?? [ 196.415558][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.448597][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.459602][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.477458][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.498092][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.537772][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.705098][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.717812][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.731729][ T5841] loop7: detected capacity change from 0 to 512 [ 196.733743][ T3518] usb 9-1: language id specifier not provided by device, defaulting to English [ 196.770272][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.771814][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 196.771827][ T26] audit: type=1326 audit(1732649856.903:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 196.785771][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.865345][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.887361][ T5789] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.933604][ T26] audit: type=1326 audit(1732649856.953:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 196.979380][ T3518] usbhid 9-1:0.0: can't add hid device: -71 [ 196.986014][ T3518] usbhid: probe of 9-1:0.0 failed with error -71 [ 197.052237][ T3518] usb 9-1: USB disconnect, device number 2 [ 197.098510][ T26] audit: type=1326 audit(1732649856.953:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 197.187322][ T26] audit: type=1326 audit(1732649856.953:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 197.233750][ T26] audit: type=1326 audit(1732649856.953:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 197.313971][ T26] audit: type=1326 audit(1732649856.953:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 197.373331][ T26] audit: type=1326 audit(1732649856.953:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 197.486752][ T26] audit: type=1326 audit(1732649856.953:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.9.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 198.642964][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.665489][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.678613][ T5573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.764156][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.802656][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.999347][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.024748][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.052013][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.084688][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.105161][ T5573] device veth0_vlan entered promiscuous mode [ 199.159639][ T5573] device veth1_vlan entered promiscuous mode [ 199.227819][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.247825][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.484507][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.558747][ T5869] binder: BINDER_SET_CONTEXT_MGR already set [ 199.564860][ T5869] binder: 5866:5869 ioctl 4018620d 20004a80 returned -16 [ 200.148114][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.689709][ T5880] loop9: detected capacity change from 0 to 512 [ 200.753288][ T5573] device veth0_macvtap entered promiscuous mode [ 200.776821][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.815413][ T5573] device veth1_macvtap entered promiscuous mode [ 200.843730][ T5880] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 200.982399][ T5880] EXT4-fs (loop9): 1 truncate cleaned up [ 201.103698][ T5880] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 201.337949][ T5890] cgroup: noprefix used incorrectly [ 202.465632][ T22] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 203.480169][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 203.481424][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.502851][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.513080][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.533427][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.544244][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.587556][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.607569][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.633431][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.663444][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.685818][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.724467][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.782781][ T5902] tipc: Started in network mode [ 203.814668][ T5902] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 203.832154][ T5902] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 203.863894][ T5902] tipc: Enabled bearer , priority 10 [ 203.870281][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.925046][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.049373][ T4514] device hsr_slave_0 left promiscuous mode [ 204.092887][ T4514] device hsr_slave_1 left promiscuous mode [ 204.103060][ T5910] loop9: detected capacity change from 0 to 1024 [ 204.112944][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.139423][ T5910] EXT4-fs: Ignoring removed orlov option [ 204.185348][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.202364][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.217772][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.236273][ T4514] device bridge_slave_1 left promiscuous mode [ 204.255531][ T5910] EXT4-fs (loop9): Test dummy encryption mode enabled [ 204.308953][ T5910] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 204.318952][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.416123][ T5917] binder: BINDER_SET_CONTEXT_MGR already set [ 204.422205][ T5917] binder: 5911:5917 ioctl 4018620d 20004a80 returned -16 [ 204.853280][ T4514] device bridge_slave_0 left promiscuous mode [ 204.983155][ T4291] tipc: Node number set to 1 [ 205.034779][ T26] audit: type=1800 audit(1732649865.173:260): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.353" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 205.059165][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.248179][ T4514] device hsr_slave_0 left promiscuous mode [ 205.258974][ T4514] device hsr_slave_1 left promiscuous mode [ 205.268949][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.283236][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.606183][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.785245][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.887354][ T4514] device veth1_macvtap left promiscuous mode [ 205.992392][ T4514] device veth0_macvtap left promiscuous mode [ 206.086447][ T4514] device veth1_vlan left promiscuous mode [ 206.161923][ T5923] loop8: detected capacity change from 0 to 1024 [ 206.183675][ T4514] device veth0_vlan left promiscuous mode [ 206.210646][ T5923] EXT4-fs: Ignoring removed orlov option [ 206.242196][ T5923] EXT4-fs (loop8): Test dummy encryption mode enabled [ 206.399466][ T5923] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 206.411021][ T4514] device veth1_macvtap left promiscuous mode [ 206.419875][ T4514] device veth0_macvtap left promiscuous mode [ 206.443556][ T4514] device veth1_vlan left promiscuous mode [ 206.461618][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 206.541924][ T4514] device veth0_vlan left promiscuous mode [ 206.795770][ T5939] netlink: 20 bytes leftover after parsing attributes in process `syz.8.357'. [ 207.382173][ T5949] cgroup: noprefix used incorrectly [ 207.716584][ T4344] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 207.915872][ T4344] usb 8-1: Using ep0 maxpacket: 16 [ 207.962033][ T4514] team0 (unregistering): Port device team_slave_1 removed [ 208.001833][ T4514] team0 (unregistering): Port device team_slave_0 removed [ 208.041804][ T4514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.092323][ T4514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.499451][ T4514] bond0 (unregistering): Released all slaves [ 208.929630][ T4514] team0 (unregistering): Port device team_slave_1 removed [ 208.971378][ T4514] team0 (unregistering): Port device team_slave_0 removed [ 209.008908][ T4514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.052319][ T4514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.366838][ T4344] usb 8-1: unable to get BOS descriptor or descriptor too short [ 209.376146][ T4344] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 209.384430][ T4344] usb 8-1: can't read configurations, error -71 [ 209.533240][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.7.364'. [ 209.646832][ T4514] bond0 (unregistering): Released all slaves [ 209.683132][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.702556][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.712464][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.734555][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.750695][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.762521][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.782340][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.888847][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.899094][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.919087][ T5573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.936478][ T5573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.019731][ T5960] binder: BINDER_SET_CONTEXT_MGR already set [ 210.025837][ T5960] binder: 5957:5960 ioctl 4018620d 20004a80 returned -16 [ 210.613712][ T5573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.656569][ T5573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.676324][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 210.783104][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 211.372809][ T5967] loop9: detected capacity change from 0 to 256 [ 211.506432][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.596399][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.620722][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.708923][ T5663] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.958298][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.186941][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.627153][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.586809][ T6004] binder: BINDER_SET_CONTEXT_MGR already set [ 213.592900][ T6004] binder: 5996:6004 ioctl 4018620d 20004a80 returned -16 [ 217.074711][ T6037] loop0: detected capacity change from 0 to 1024 [ 217.081940][ T6037] EXT4-fs: Ignoring removed orlov option [ 217.143458][ T6037] EXT4-fs (loop0): Test dummy encryption mode enabled [ 217.222820][ T6037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.474712][ T26] audit: type=1800 audit(1732649877.613:261): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.387" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 218.273680][ T6060] binder: BINDER_SET_CONTEXT_MGR already set [ 218.279770][ T6060] binder: 6055:6060 ioctl 4018620d 20004a80 returned -16 [ 218.521507][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 220.583585][ T4292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 220.926725][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.182941][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.193535][ T4292] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 221.202594][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.212693][ T4292] usb 1-1: config 0 descriptor?? [ 221.350086][ T6097] loop8: detected capacity change from 0 to 512 [ 221.398924][ T6097] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 221.426310][ T6097] EXT4-fs (loop8): invalid journal inode [ 221.470651][ T6097] EXT4-fs (loop8): can't get journal size [ 221.524927][ T6097] EXT4-fs (loop8): 1 truncate cleaned up [ 221.537324][ T6097] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 221.785583][ T4292] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 221.795763][ T4292] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 221.926150][ T6105] loop9: detected capacity change from 0 to 1024 [ 221.962204][ T6105] EXT4-fs: Ignoring removed orlov option [ 221.979612][ T6105] EXT4-fs (loop9): Test dummy encryption mode enabled [ 221.985409][ T3894] usb 1-1: USB disconnect, device number 2 [ 222.018591][ T6105] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 222.060534][ T26] audit: type=1800 audit(1732649882.193:262): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.403" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 222.259129][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 222.259649][ T6079] loop6: detected capacity change from 0 to 40427 [ 222.294957][ T6079] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 222.815993][ T6079] F2FS-fs (loop6): invalid crc value [ 222.823718][ T6079] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12) [ 222.982727][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 223.366391][ T6121] binder: BINDER_SET_CONTEXT_MGR already set [ 223.372468][ T6121] binder: 6116:6121 ioctl 4018620d 20004a80 returned -16 [ 226.994407][ T6156] loop8: detected capacity change from 0 to 512 [ 227.063608][ T6156] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 227.133856][ T6156] EXT4-fs (loop8): invalid journal inode [ 227.139603][ T6156] EXT4-fs (loop8): can't get journal size [ 227.293797][ T6156] EXT4-fs (loop8): 1 truncate cleaned up [ 227.326078][ T6156] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 227.592271][ T6167] loop9: detected capacity change from 0 to 1024 [ 227.862099][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 227.994345][ T6167] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 228.306959][ T6177] syz.0.418[6177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.307057][ T6177] syz.0.418[6177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.615048][ T6184] netlink: 'syz.6.419': attribute type 3 has an invalid length. [ 229.588071][ T6180] loop8: detected capacity change from 0 to 1024 [ 229.626080][ T6180] EXT4-fs: Ignoring removed orlov option [ 229.658137][ T6180] EXT4-fs (loop8): Test dummy encryption mode enabled [ 229.693511][ T6180] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 229.735130][ T26] audit: type=1800 audit(1732649889.873:263): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.417" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 229.883155][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 230.709937][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 231.036227][ T6213] loop9: detected capacity change from 0 to 4096 [ 231.584509][ T6213] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 232.052207][ T6226] loop8: detected capacity change from 0 to 512 [ 232.084132][ T6226] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 232.184992][ T6226] EXT4-fs (loop8): invalid journal inode [ 232.190735][ T6226] EXT4-fs (loop8): can't get journal size [ 232.948293][ T6194] loop0: detected capacity change from 0 to 256 [ 233.273601][ T6226] EXT4-fs (loop8): 1 truncate cleaned up [ 233.291248][ T6226] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 234.563526][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 234.698956][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 234.777213][ T6245] device syzkaller0 entered promiscuous mode [ 235.586892][ T6248] netlink: 'syz.7.430': attribute type 3 has an invalid length. [ 237.611929][ T6278] loop9: detected capacity change from 0 to 40427 [ 237.628449][ T6278] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 237.659246][ T6278] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 237.677756][ T26] audit: type=1326 audit(1732649897.803:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.6.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 237.732978][ T6278] F2FS-fs (loop9): Found nat_bits in checkpoint [ 237.757188][ T26] audit: type=1326 audit(1732649897.803:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.6.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 237.794223][ T26] audit: type=1326 audit(1732649897.803:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.6.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 237.830291][ T6278] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 237.837729][ T6278] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 238.255688][ T6308] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 238.264735][ T6308] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 238.273113][ T6308] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.754998][ T6316] loop9: detected capacity change from 0 to 512 [ 239.761977][ T6316] EXT4-fs: Ignoring removed i_version option [ 239.775982][ T6316] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 239.801741][ T6316] EXT4-fs (loop9): 1 truncate cleaned up [ 239.807775][ T6316] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 239.932352][ T6319] Bluetooth: MGMT ver 1.22 [ 240.868610][ T6312] netlink: 'syz.6.442': attribute type 3 has an invalid length. [ 241.125903][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 241.473176][ T6330] loop9: detected capacity change from 0 to 512 [ 241.531305][ T6330] EXT4-fs: inline encryption not supported [ 242.003634][ T4257] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 242.014721][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.311083][ T6330] Quota error (device loop9): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 242.321252][ T6330] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 242.331280][ T6330] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.445: Failed to acquire dquot type 1 [ 242.357091][ T6330] EXT4-fs (loop9): 1 truncate cleaned up [ 242.373467][ T6330] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 242.392604][ T6330] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.666324][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 247.198119][ T6393] binder: BINDER_SET_CONTEXT_MGR already set [ 247.204261][ T6393] binder: 6383:6393 ioctl 4018620d 20004a80 returned -16 [ 247.974559][ T26] audit: type=1326 audit(1732649908.113:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.7.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 248.063516][ T26] audit: type=1326 audit(1732649908.113:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.7.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 248.133766][ T26] audit: type=1326 audit(1732649908.113:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.7.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 248.225868][ T26] audit: type=1326 audit(1732649908.113:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.7.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 248.301090][ T26] audit: type=1326 audit(1732649908.113:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.7.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 248.365102][ T26] audit: type=1326 audit(1732649908.113:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.7.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 248.463663][ T26] audit: type=1326 audit(1732649908.113:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.7.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 248.533644][ T26] audit: type=1326 audit(1732649908.113:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.7.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 248.736879][ T6378] loop8: detected capacity change from 0 to 40427 [ 248.775148][ T6378] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 248.781541][ T6378] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 248.939049][ T6378] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 249.627365][ T6378] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 249.647615][ T6378] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 250.542020][ T6409] loop0: detected capacity change from 0 to 40427 [ 250.632838][ T6409] F2FS-fs (loop0): invalid crc value [ 250.725455][ T6409] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.975689][ T6409] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 251.090695][ T6409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 251.102367][ T6458] binder: BINDER_SET_CONTEXT_MGR already set [ 251.108489][ T6458] binder: 6452:6458 ioctl 4018620d 20004a80 returned -16 [ 252.533137][ T26] audit: type=1326 audit(1732649912.663:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 253.211615][ T26] audit: type=1326 audit(1732649912.663:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 253.343442][ T26] audit: type=1326 audit(1732649912.683:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bd9d758e7 code=0x7ffc0000 [ 253.396938][ T6481] loop7: detected capacity change from 0 to 1024 [ 253.411410][ T6481] EXT4-fs: Ignoring removed orlov option [ 253.419718][ T6481] EXT4-fs (loop7): Test dummy encryption mode enabled [ 253.439306][ T6481] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 253.458604][ T26] audit: type=1326 audit(1732649912.683:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bd9d1a289 code=0x7ffc0000 [ 253.611501][ T26] audit: type=1326 audit(1732649912.683:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 253.752674][ T26] audit: type=1326 audit(1732649912.783:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bd9d758e7 code=0x7ffc0000 [ 254.485993][ T5365] EXT4-fs (loop7): unmounting filesystem. [ 254.613517][ T26] audit: type=1326 audit(1732649912.783:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bd9d1a289 code=0x7ffc0000 [ 254.662956][ T6496] loop7: detected capacity change from 0 to 512 [ 254.695038][ T26] audit: type=1326 audit(1732649912.783:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 254.732648][ T6496] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 254.779324][ T6496] EXT4-fs (loop7): invalid journal inode [ 254.799528][ T6496] EXT4-fs (loop7): can't get journal size [ 254.813486][ T26] audit: type=1326 audit(1732649912.793:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bd9d758e7 code=0x7ffc0000 [ 254.870227][ T6496] EXT4-fs (loop7): 1 truncate cleaned up [ 254.928337][ T6496] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 254.940217][ T26] audit: type=1326 audit(1732649912.793:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bd9d1a289 code=0x7ffc0000 [ 254.976940][ T26] audit: type=1326 audit(1732649912.793:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 255.680590][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.704322][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.966582][ T5365] EXT4-fs (loop7): unmounting filesystem. [ 257.148624][ T6529] loop9: detected capacity change from 0 to 1024 [ 257.164304][ T6529] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.875743][ T6529] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 258.855057][ T6547] binder: BINDER_SET_CONTEXT_MGR already set [ 258.861085][ T6547] binder: 6520:6547 ioctl 4018620d 20004a80 returned -16 [ 259.590221][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 259.739624][ T6558] syz.6.495[6558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.739727][ T6558] syz.6.495[6558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.964301][ T6564] loop8: detected capacity change from 0 to 512 [ 260.352171][ T6568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.370309][ T6564] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 260.620025][ T6568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.641475][ T6564] EXT4-fs (loop8): invalid journal inode [ 260.673501][ T6564] EXT4-fs (loop8): can't get journal size [ 260.684365][ T6568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.794126][ T6564] EXT4-fs (loop8): 1 truncate cleaned up [ 260.799827][ T6564] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 261.863565][ T6584] loop9: detected capacity change from 0 to 128 [ 262.245033][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 262.652215][ T6606] loop0: detected capacity change from 0 to 2048 [ 262.845108][ T6606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.929926][ T6606] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.049176][ T6615] binder: BINDER_SET_CONTEXT_MGR already set [ 263.055284][ T6615] binder: 6608:6615 ioctl 4018620d 20004a80 returned -16 [ 263.557513][ T6606] fs-verity: sha512 using implementation "sha512-avx2" [ 263.859788][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 263.859802][ T26] audit: type=1326 audit(1732649923.993:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 263.935836][ T26] audit: type=1326 audit(1732649924.023:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 263.990939][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 264.106715][ T26] audit: type=1326 audit(1732649924.023:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 264.182899][ T26] audit: type=1326 audit(1732649924.023:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 265.373788][ T6638] loop0: detected capacity change from 0 to 512 [ 266.140726][ T6638] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 266.153031][ T6638] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 266.205326][ T6638] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 266.213568][ T26] audit: type=1326 audit(1732649924.023:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 266.215972][ T6638] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 266.244928][ T6638] System zones: 0-2, 18-18, 34-34 [ 266.280473][ T6638] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 266.298700][ T6638] EXT4-fs (loop0): 1 truncate cleaned up [ 266.304523][ T6638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 266.333856][ T26] audit: type=1326 audit(1732649924.023:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 266.362319][ T26] audit: type=1326 audit(1732649924.023:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 266.653678][ T6648] loop6: detected capacity change from 0 to 16 [ 266.700188][ T6648] erofs: (device loop6): mounted with root inode @ nid 36. [ 267.204018][ T26] audit: type=1326 audit(1732649924.043:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 267.232080][ T6649] loop9: detected capacity change from 0 to 512 [ 267.250801][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 267.303622][ T26] audit: type=1326 audit(1732649924.043:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 267.348930][ T6649] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 267.364982][ T26] audit: type=1326 audit(1732649924.043:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.8.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 267.405705][ T6649] EXT4-fs (loop9): invalid journal inode [ 267.411551][ T6649] EXT4-fs (loop9): can't get journal size [ 267.738532][ T6649] EXT4-fs (loop9): 1 truncate cleaned up [ 267.766975][ T6649] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 268.368924][ T6668] hub 6-0:1.0: USB hub found [ 268.377158][ T6668] hub 6-0:1.0: 1 port detected [ 268.807162][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 268.827796][ T6671] loop6: detected capacity change from 0 to 512 [ 268.846725][ T6671] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 268.911814][ T6671] EXT4-fs (loop6): 1 truncate cleaned up [ 268.934075][ T6671] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 269.210890][ T6684] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 269.222262][ T6684] F2FS-fs (loop19): Unable to read 1th superblock [ 269.229903][ T6684] I/O error, dev loop19, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 269.239204][ T6684] F2FS-fs (loop19): Unable to read 2th superblock [ 271.219915][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 272.053442][ T126] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 272.266117][ T126] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.295656][ T126] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.333579][ T126] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.383462][ T126] usb 10-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 272.425705][ T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.455437][ T126] usb 10-1: config 0 descriptor?? [ 272.792274][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 272.792289][ T26] audit: type=1326 audit(1732649932.923:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.8.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 272.897372][ T126] gt683r_led 0003:1770:FF00.0004: item fetching failed at offset 1/5 [ 272.920038][ T126] gt683r_led 0003:1770:FF00.0004: hid parsing failed [ 272.937774][ T26] audit: type=1326 audit(1732649932.973:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.8.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 272.963496][ T126] gt683r_led: probe of 0003:1770:FF00.0004 failed with error -22 [ 273.009806][ T26] audit: type=1326 audit(1732649932.973:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.8.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 273.051204][ T6693] loop6: detected capacity change from 0 to 40427 [ 273.098590][ T6722] loop8: detected capacity change from 0 to 512 [ 273.111315][ T126] usb 10-1: USB disconnect, device number 2 [ 273.121509][ T6693] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 273.138089][ T6722] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 273.157521][ T6693] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 273.184777][ T6722] EXT4-fs (loop8): invalid journal inode [ 273.200803][ T6722] EXT4-fs (loop8): can't get journal size [ 273.244592][ T6722] EXT4-fs (loop8): 1 truncate cleaned up [ 273.244983][ T6693] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 273.283714][ T6722] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 273.504698][ T6693] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 273.515445][ T6693] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 273.638175][ T6693] syz.6.525[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.638271][ T6693] syz.6.525[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.680786][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 274.045863][ T6747] device pim6reg1 entered promiscuous mode [ 274.603563][ T5486] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 274.800601][ T5486] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.857274][ T5486] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.921574][ T5486] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.940705][ T6761] loop0: detected capacity change from 0 to 512 [ 274.947822][ T6761] EXT4-fs: Ignoring removed i_version option [ 274.953925][ T6761] ext4: Unknown parameter 'noacl' [ 275.013748][ T5486] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 275.043957][ T5486] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.287245][ T5486] usb 9-1: config 0 descriptor?? [ 276.988345][ T5486] usbhid 9-1:0.0: can't add hid device: -71 [ 276.997128][ T5486] usbhid: probe of 9-1:0.0 failed with error -71 [ 277.056101][ T5486] usb 9-1: USB disconnect, device number 3 [ 277.102513][ T6792] loop0: detected capacity change from 0 to 1024 [ 277.165206][ T6792] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.242411][ T6800] loop9: detected capacity change from 0 to 256 [ 277.280451][ T6792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 277.437427][ T6807] loop6: detected capacity change from 0 to 128 [ 277.737252][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 277.932203][ T6815] loop6: detected capacity change from 0 to 1024 [ 277.975519][ T6815] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.243524][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 278.423210][ T6815] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 280.259064][ T26] audit: type=1326 audit(1732649940.383:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.8.555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd02d7e919 code=0x0 [ 280.360466][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 280.692883][ T6853] loop0: detected capacity change from 0 to 512 [ 280.739734][ T6853] EXT4-fs: inline encryption not supported [ 280.795506][ T6853] Quota error (device loop0): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 280.815875][ T6853] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 280.854446][ T6853] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.559: Failed to acquire dquot type 1 [ 280.934793][ T6853] EXT4-fs (loop0): 1 truncate cleaned up [ 280.940494][ T6853] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 280.973600][ T6853] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.463694][ T6879] loop7: detected capacity change from 0 to 256 [ 283.283721][ T4259] Bluetooth: hci4: command 0x0406 tx timeout [ 283.292003][ T4257] Bluetooth: hci0: command 0x0406 tx timeout [ 283.825950][ T6863] loop8: detected capacity change from 0 to 40427 [ 285.395660][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 285.757147][ T6900] loop6: detected capacity change from 0 to 512 [ 285.957606][ T6900] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 286.191059][ T6900] EXT4-fs (loop6): invalid journal inode [ 286.200931][ T6900] EXT4-fs (loop6): can't get journal size [ 286.225512][ T6908] loop0: detected capacity change from 0 to 1024 [ 286.262253][ T6908] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.520979][ T26] audit: type=1326 audit(1732649946.653:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.9.572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x0 [ 286.607293][ T6900] EXT4-fs (loop6): 1 truncate cleaned up [ 286.620601][ T6900] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 286.632878][ T6908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 286.832458][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 286.845786][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 287.038368][ T6933] loop8: detected capacity change from 0 to 512 [ 287.189032][ T6933] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 287.216530][ T6933] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.453276][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 288.582002][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 288.876119][ T6958] loop8: detected capacity change from 0 to 512 [ 288.916534][ T6958] EXT4-fs: inline encryption not supported [ 289.781683][ T6958] Quota error (device loop8): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 289.809189][ T6958] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 289.819343][ T6958] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.578: Failed to acquire dquot type 1 [ 289.840385][ T6968] loop7: detected capacity change from 0 to 256 [ 289.848167][ T6958] EXT4-fs (loop8): 1 truncate cleaned up [ 289.854056][ T6958] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 289.865287][ T6958] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.993774][ T6970] loop9: detected capacity change from 0 to 512 [ 290.014687][ T6972] loop6: detected capacity change from 0 to 1024 [ 290.021862][ T6972] EXT4-fs: Ignoring removed orlov option [ 290.070585][ T5663] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.095339][ T6970] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 290.161793][ T6972] EXT4-fs (loop6): Test dummy encryption mode enabled [ 290.425131][ T6970] EXT4-fs (loop9): invalid journal inode [ 290.483626][ T6970] EXT4-fs (loop9): can't get journal size [ 290.539013][ T6970] EXT4-fs (loop9): 1 truncate cleaned up [ 290.591043][ T6970] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 290.607845][ T6972] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 291.033478][ T26] audit: type=1800 audit(1732649951.153:331): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.582" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 291.832280][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 292.052940][ T6997] loop8: detected capacity change from 0 to 1024 [ 292.092980][ T6997] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.150533][ T6997] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 292.282905][ T7001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.437150][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 292.765570][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 293.873770][ T4344] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 294.455220][ T4344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 294.473467][ T4344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.520275][ T4344] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 294.599048][ T4344] usb 9-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.00 [ 295.338723][ T4344] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.348480][ T4344] usb 9-1: config 0 descriptor?? [ 295.409131][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 295.658430][ T4344] usb 9-1: string descriptor 0 read error: -71 [ 295.676749][ T4344] usbhid 9-1:0.0: can't add hid device: -71 [ 295.682755][ T4344] usbhid: probe of 9-1:0.0 failed with error -71 [ 295.737900][ T4344] usb 9-1: USB disconnect, device number 4 [ 296.743929][ T5486] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 296.924571][ T5486] usb 9-1: Using ep0 maxpacket: 8 [ 296.940173][ T5486] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.980093][ T5486] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 297.005365][ T5486] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 297.026268][ T5486] usb 9-1: SerialNumber: syz [ 297.042530][ T5486] usb 9-1: config 0 descriptor?? [ 297.068665][ T5486] usb 9-1: Found UVC 0.00 device (05ac:8501) [ 297.077171][ T7058] loop9: detected capacity change from 0 to 512 [ 297.089695][ T5486] usb 9-1: No valid video chain found. [ 297.110918][ T7058] ext4: Unknown parameter 'rootcontext' [ 297.185322][ T5789] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.669298][ T7073] loop6: detected capacity change from 0 to 1024 [ 297.704257][ T7073] EXT4-fs: Ignoring removed orlov option [ 297.905787][ T7073] EXT4-fs (loop6): Test dummy encryption mode enabled [ 298.440957][ T7073] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 298.646204][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 298.699632][ T7084] loop0: detected capacity change from 0 to 512 [ 298.739356][ T7084] EXT4-fs: Ignoring removed i_version option [ 298.745915][ T26] audit: type=1800 audit(1732649958.773:332): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.600" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 300.352738][ T22] usb 9-1: USB disconnect, device number 5 [ 300.385315][ T7084] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 300.465482][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 300.503857][ T7084] System zones: 0-2, 18-18, 34-34 [ 300.526192][ T7084] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 300.650465][ T7084] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 300.706879][ T7084] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.601: Failed to acquire dquot type 0 [ 300.774882][ T7084] EXT4-fs (loop0): Remounting filesystem read-only [ 300.781550][ T7084] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 300.792091][ T7084] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 300.801643][ T7084] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.601: Failed to acquire dquot type 0 [ 301.298913][ T7084] EXT4-fs (loop0): Remounting filesystem read-only [ 301.655040][ T7084] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 301.705808][ T7102] binder: 7100:7102 ioctl 4018620d 0 returned -22 [ 301.749576][ T7084] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 301.832873][ T7084] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.601: Failed to acquire dquot type 0 [ 301.970133][ T7084] EXT4-fs (loop0): Remounting filesystem read-only [ 302.031850][ T7084] EXT4-fs (loop0): 1 orphan inode deleted [ 302.103667][ T7084] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 302.112667][ T7084] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.451530][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 302.899344][ T7134] loop0: detected capacity change from 0 to 512 [ 302.913758][ T7134] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 302.943938][ T7134] EXT4-fs (loop0): invalid journal inode [ 302.949669][ T7134] EXT4-fs (loop0): can't get journal size [ 303.769994][ T7134] EXT4-fs (loop0): 1 truncate cleaned up [ 303.779951][ T7134] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 306.228198][ T7172] overlayfs: failed to clone upperpath [ 310.211249][ T7230] loop9: detected capacity change from 0 to 512 [ 310.318072][ T7230] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 310.373546][ T7230] EXT4-fs (loop9): invalid journal inode [ 310.379291][ T7230] EXT4-fs (loop9): can't get journal size [ 310.428970][ T7230] EXT4-fs (loop9): 1 truncate cleaned up [ 310.473516][ T7230] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 311.434674][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 311.499355][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 313.508297][ T7274] loop6: detected capacity change from 0 to 1024 [ 313.813674][ T7274] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 313.827370][ T7274] EXT4-fs (loop6): orphan cleanup on readonly fs [ 313.844265][ T7274] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 313.853742][ T7274] EXT4-fs warning (device loop6): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 313.868393][ T7274] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 313.895509][ T7274] EXT4-fs (loop6): 1 truncate cleaned up [ 313.901661][ T7274] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 314.374644][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 315.279356][ T7297] loop0: detected capacity change from 0 to 512 [ 315.333833][ T7297] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 315.422303][ T7297] EXT4-fs (loop0): invalid journal inode [ 315.449680][ T7297] EXT4-fs (loop0): can't get journal size [ 315.895920][ T7297] EXT4-fs (loop0): 1 truncate cleaned up [ 315.901685][ T7297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 317.223773][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.230100][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.384340][ T7312] loop9: detected capacity change from 0 to 512 [ 317.400980][ T7312] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 317.443985][ T7312] EXT4-fs (loop9): invalid journal inode [ 317.449743][ T7312] EXT4-fs (loop9): can't get journal size [ 317.611841][ T7312] EXT4-fs (loop9): 1 truncate cleaned up [ 317.660493][ T7312] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 318.411988][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 318.746243][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 319.099921][ T7339] loop6: detected capacity change from 0 to 512 [ 319.427824][ T7339] EXT4-fs: Ignoring removed i_version option [ 319.652394][ T7339] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 319.878292][ T7339] EXT4-fs (loop6): 1 truncate cleaned up [ 319.918496][ T7339] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 320.243556][ T7] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 320.444982][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 320.455111][ T7] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.483070][ T7] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.513461][ T7] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.553898][ T7] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 320.583489][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.770761][ T7] usb 10-1: config 0 descriptor?? [ 321.188493][ T7] acrux 0003:1A34:0802.0005: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.9-1/input0 [ 321.197945][ T7348] loop8: detected capacity change from 0 to 40427 [ 321.210589][ T7] acrux 0003:1A34:0802.0005: no inputs found [ 321.217449][ T7] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19 [ 321.250539][ T7348] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 321.279226][ T7348] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 321.339133][ T7348] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 321.421689][ T7348] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 321.437834][ T7348] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 321.550336][ T4344] usb 10-1: USB disconnect, device number 3 [ 321.571736][ T26] audit: type=1804 audit(1732649981.703:333): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.655" name="/newroot/70/file1/file1" dev="loop8" ino=10 res=1 errno=0 [ 321.611024][ T26] audit: type=1326 audit(1732649981.743:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 321.646141][ T26] audit: type=1326 audit(1732649981.743:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 321.679307][ T26] audit: type=1326 audit(1732649981.743:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 321.769429][ T26] audit: type=1326 audit(1732649981.743:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 321.820746][ T26] audit: type=1326 audit(1732649981.743:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 321.894200][ T26] audit: type=1326 audit(1732649981.773:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 321.967519][ T26] audit: type=1326 audit(1732649981.773:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 322.053671][ T26] audit: type=1326 audit(1732649981.773:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 322.085210][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.091536][ T4259] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 322.246975][ T26] audit: type=1326 audit(1732649981.773:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.7.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 322.402399][ T7402] loop7: detected capacity change from 0 to 512 [ 322.814448][ T7402] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #3: comm syz.7.661: corrupted inode contents [ 322.830377][ T7402] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #3: comm syz.7.661: mark_inode_dirty error [ 322.851539][ T7402] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #3: comm syz.7.661: corrupted inode contents [ 322.858614][ T7401] loop6: detected capacity change from 0 to 512 [ 322.864175][ T7402] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.661: mark_inode_dirty error [ 322.882222][ T7402] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.661: Failed to acquire dquot type 0 [ 322.897987][ T7402] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.661: corrupted inode contents [ 322.910315][ T7402] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #16: comm syz.7.661: mark_inode_dirty error [ 322.937822][ T7408] device vcan0 entered promiscuous mode [ 322.955804][ T7402] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.661: corrupted inode contents [ 322.975172][ T7402] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.661: mark_inode_dirty error [ 323.013058][ T7402] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.661: corrupted inode contents [ 323.034452][ T7402] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 323.045593][ T7402] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.661: corrupted inode contents [ 323.058710][ T7402] EXT4-fs error (device loop7): ext4_truncate:4311: inode #16: comm syz.7.661: mark_inode_dirty error [ 323.072218][ T7402] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 323.085521][ T7402] EXT4-fs (loop7): 1 truncate cleaned up [ 323.091205][ T7402] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 323.100313][ T7402] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.138263][ T7408] device vlan2 entered promiscuous mode [ 323.188342][ T7401] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 323.202572][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 323.265430][ T7401] EXT4-fs (loop6): invalid journal inode [ 323.705570][ T7408] device vcan0 left promiscuous mode [ 323.750064][ T5365] EXT4-fs (loop7): unmounting filesystem. [ 323.756212][ T7401] EXT4-fs (loop6): can't get journal size [ 323.770873][ T7412] loop9: detected capacity change from 0 to 16 [ 323.784068][ T7412] erofs: (device loop9): mounted with root inode @ nid 36. [ 323.797206][ T7412] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 323.798791][ T5399] syz-executor: attempt to access beyond end of device [ 323.798791][ T5399] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.882066][ T7401] EXT4-fs (loop6): 1 truncate cleaned up [ 323.901672][ T7401] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 325.506235][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 325.675474][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.669'. [ 325.933670][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 326.296543][ T7436] 9pnet_fd: Insufficient options for proto=fd [ 328.145232][ T7468] loop7: detected capacity change from 0 to 512 [ 328.181761][ T7468] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 328.201761][ T7472] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.222097][ T7468] EXT4-fs (loop7): invalid journal inode [ 328.232029][ T7472] FAT-fs (loop0): unable to read boot sector [ 328.237893][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.8.680'. [ 328.247112][ T7468] EXT4-fs (loop7): can't get journal size [ 328.330367][ T7468] EXT4-fs (loop7): 1 truncate cleaned up [ 328.375990][ T7468] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 329.746156][ T5365] EXT4-fs (loop7): unmounting filesystem. [ 329.766065][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 329.766077][ T26] audit: type=1326 audit(1732649989.903:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 329.818387][ T26] audit: type=1326 audit(1732649989.943:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 329.841198][ T26] audit: type=1326 audit(1732649989.943:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd02d7e953 code=0x7ffc0000 [ 330.453538][ T26] audit: type=1326 audit(1732649990.573:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efd02d7d3ff code=0x7ffc0000 [ 331.295974][ T7528] fuse: root generation should be zero [ 331.600898][ T7535] loop0: detected capacity change from 0 to 2048 [ 331.882752][ T7535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 332.923717][ T22] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 333.133598][ T22] usb 8-1: Using ep0 maxpacket: 16 [ 333.140730][ T22] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.225745][ T22] usb 8-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 333.307424][ T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.373510][ T22] usb 8-1: Product: syz [ 333.398763][ T22] usb 8-1: Manufacturer: syz [ 333.428409][ T22] usb 8-1: SerialNumber: syz [ 333.612489][ T22] usb 8-1: config 0 descriptor?? [ 334.046507][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 334.053106][ T22] usb 8-1: Found UVC 0.00 device syz (045e:0721) [ 334.195699][ T22] usb 8-1: No valid video chain found. [ 334.515494][ T7561] device syzkaller0 entered promiscuous mode [ 334.527312][ T5486] usb 8-1: USB disconnect, device number 7 [ 334.623179][ T7564] loop9: detected capacity change from 0 to 512 [ 334.681546][ T7564] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 334.699122][ T7564] EXT4-fs (loop9): invalid journal inode [ 334.733577][ T7564] EXT4-fs (loop9): can't get journal size [ 334.797266][ T7564] EXT4-fs (loop9): 1 truncate cleaned up [ 334.802989][ T7564] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 334.862127][ T4438] kernel write not supported for file bpf-prog (pid: 4438 comm: kworker/1:8) [ 334.996897][ T7547] loop6: detected capacity change from 0 to 40427 [ 335.069225][ T7547] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 335.107734][ T7547] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 335.158645][ T7547] F2FS-fs (loop6): Found nat_bits in checkpoint [ 335.253522][ T4293] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 335.321184][ T7547] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 335.343345][ T7547] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 335.430388][ T26] audit: type=1804 audit(1732649995.563:349): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.697" name="/newroot/93/bus/file0" dev="loop6" ino=10 res=1 errno=0 [ 335.462281][ T4293] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 335.483727][ T4293] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.523569][ T4293] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 335.552167][ T4293] usb 8-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.00 [ 335.573462][ T4293] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.618943][ T4293] usb 8-1: config 0 descriptor?? [ 336.966538][ T4293] usb 8-1: string descriptor 0 read error: -71 [ 337.003131][ T4293] usbhid 8-1:0.0: can't add hid device: -71 [ 337.017393][ T4293] usbhid: probe of 8-1:0.0 failed with error -71 [ 337.051342][ T4293] usb 8-1: USB disconnect, device number 8 [ 337.334544][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 338.528658][ T7639] loop8: detected capacity change from 0 to 512 [ 338.727101][ T7647] loop7: detected capacity change from 0 to 256 [ 339.160109][ T7657] loop8: detected capacity change from 0 to 512 [ 339.967026][ T26] audit: type=1326 audit(1732650000.103:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.9.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 340.009181][ T26] audit: type=1326 audit(1732650000.103:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.9.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 340.032086][ T26] audit: type=1326 audit(1732650000.103:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.9.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 340.037116][ T7657] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 340.056254][ T26] audit: type=1326 audit(1732650000.103:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.9.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 340.091098][ T26] audit: type=1326 audit(1732650000.103:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.9.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 340.113809][ T26] audit: type=1326 audit(1732650000.103:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.9.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 340.136597][ T26] audit: type=1326 audit(1732650000.123:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.9.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8af7e919 code=0x7ffc0000 [ 340.248131][ T7657] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 340.293458][ T7657] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.721: Failed to acquire dquot type 0 [ 340.345452][ T7657] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.721: Failed to acquire dquot type 0 [ 340.364189][ T7672] loop6: detected capacity change from 0 to 512 [ 340.404449][ T7657] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.721: Failed to acquire dquot type 0 [ 340.428456][ T7672] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 340.454712][ T7657] EXT4-fs (loop8): 1 orphan inode deleted [ 340.465457][ T7672] EXT4-fs (loop6): invalid journal inode [ 340.484431][ T7657] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 340.504378][ T7672] EXT4-fs (loop6): can't get journal size [ 340.513044][ T7657] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.533606][ T7672] EXT4-fs (loop6): 1 truncate cleaned up [ 340.539469][ T7672] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 341.207329][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 341.334126][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 343.692024][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 344.379814][ T7737] loop6: detected capacity change from 0 to 512 [ 344.491618][ T7737] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.500862][ T7737] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 344.761998][ T7737] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 344.773702][ T7737] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 344.781785][ T7737] System zones: 0-2, 18-18, 34-34 [ 344.860397][ T7737] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 344.882718][ T7737] EXT4-fs (loop6): 1 truncate cleaned up [ 344.888481][ T7737] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 344.910731][ T7741] loop7: detected capacity change from 0 to 256 [ 345.110752][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 346.572421][ T7768] loop0: detected capacity change from 0 to 512 [ 346.632248][ T7768] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 346.714147][ T7768] EXT4-fs (loop0): invalid journal inode [ 346.719895][ T7768] EXT4-fs (loop0): can't get journal size [ 346.880156][ T7768] EXT4-fs (loop0): 1 truncate cleaned up [ 346.908863][ T7768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 346.971081][ T7779] loop9: detected capacity change from 0 to 2048 [ 347.044735][ T7779] EXT4-fs error (device loop9): __ext4_fill_super:5400: inode #2: comm syz.9.747: casefold flag without casefold feature [ 347.079473][ T7779] EXT4-fs (loop9): get root inode failed [ 347.103676][ T7779] EXT4-fs (loop9): mount failed [ 347.235666][ T5663] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 348.138798][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 348.138814][ T26] audit: type=1326 audit(1732650008.273:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 348.302003][ T26] audit: type=1326 audit(1732650008.303:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 348.417561][ T26] audit: type=1326 audit(1732650008.373:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 348.475189][ T7805] xt_l2tp: invalid flags combination: 0 [ 348.515687][ T26] audit: type=1326 audit(1732650008.373:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 348.580077][ T7808] loop9: detected capacity change from 0 to 1024 [ 348.619531][ T26] audit: type=1326 audit(1732650008.373:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.7.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 348.626222][ T7808] EXT4-fs: Ignoring removed orlov option [ 348.688087][ T7808] EXT4-fs (loop9): Test dummy encryption mode enabled [ 348.718270][ T7808] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 348.794562][ T7809] loop8: detected capacity change from 0 to 256 [ 348.858593][ T26] audit: type=1800 audit(1732650008.993:366): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.753" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 349.188449][ T7821] loop7: detected capacity change from 0 to 256 [ 349.467820][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 349.892918][ T7818] loop6: detected capacity change from 0 to 512 [ 349.924605][ T7818] EXT4-fs: Ignoring removed i_version option [ 349.930663][ T7818] ext4: Unknown parameter 'noacl' [ 350.310489][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 350.867169][ T7851] loop9: detected capacity change from 0 to 1024 [ 351.021730][ T7851] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 351.035638][ T7851] EXT4-fs (loop9): orphan cleanup on readonly fs [ 351.047050][ T7851] Quota error (device loop9): v2_read_file_info: Can't read info structure [ 351.056473][ T7851] EXT4-fs warning (device loop9): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 351.071129][ T7851] EXT4-fs (loop9): Cannot turn on quotas: error -5 [ 351.086973][ T7851] EXT4-fs (loop9): 1 truncate cleaned up [ 351.092825][ T7851] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 351.483462][ T26] audit: type=1326 audit(1732650011.503:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.7.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 351.534545][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 351.617133][ T26] audit: type=1326 audit(1732650011.513:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.7.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 351.767812][ T26] audit: type=1326 audit(1732650011.513:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.7.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 352.111521][ T7866] netlink: 'syz.9.764': attribute type 3 has an invalid length. [ 352.248376][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.7.766'. [ 353.198981][ T7879] loop9: detected capacity change from 0 to 16 [ 353.283315][ T7879] erofs: (device loop9): mounted with root inode @ nid 36. [ 353.884574][ T7882] loop7: detected capacity change from 0 to 512 [ 353.927568][ T7882] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 353.970703][ T7882] EXT4-fs (loop7): invalid journal inode [ 353.995536][ T7882] EXT4-fs (loop7): can't get journal size [ 354.063313][ T7882] EXT4-fs (loop7): 1 truncate cleaned up [ 354.148685][ T7882] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 355.288955][ T5365] EXT4-fs (loop7): unmounting filesystem. [ 355.935577][ T7919] loop0: detected capacity change from 0 to 512 [ 355.963474][ T7919] EXT4-fs: Ignoring removed i_version option [ 355.969959][ T7919] ext4: Unknown parameter 'noacl' [ 356.752648][ T7888] loop9: detected capacity change from 0 to 40427 [ 356.789747][ T7888] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 356.828455][ T7888] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 356.955745][ T7888] F2FS-fs (loop9): Found nat_bits in checkpoint [ 357.018154][ T7929] loop6: detected capacity change from 0 to 2048 [ 357.438454][ T7929] loop6: p1 < > p3 [ 357.734858][ T7929] loop6: p3 size 134217728 extends beyond EOD, truncated [ 358.027281][ T5663] udevd[5663]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 358.081083][ T7946] loop0: detected capacity change from 0 to 128 [ 358.108808][ T5663] udevd[5663]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 358.153107][ T7946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 358.314014][ T7946] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.609180][ T7963] loop6: detected capacity change from 0 to 512 [ 359.672113][ T7963] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 359.719031][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 359.749199][ T7963] EXT4-fs (loop6): invalid journal inode [ 359.763743][ T7963] EXT4-fs (loop6): can't get journal size [ 359.836084][ T7963] EXT4-fs (loop6): 1 truncate cleaned up [ 359.888399][ T7963] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 360.119854][ T7971] loop9: detected capacity change from 0 to 512 [ 360.216684][ T7971] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 360.246753][ T7971] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.874578][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 360.972278][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 360.972294][ T26] audit: type=1326 audit(1732650021.103:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 361.068181][ T26] audit: type=1326 audit(1732650021.103:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 361.150161][ T26] audit: type=1326 audit(1732650021.103:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 361.321163][ T26] audit: type=1326 audit(1732650021.153:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 361.373644][ T7995] loop7: detected capacity change from 0 to 512 [ 361.404579][ T7995] EXT4-fs: inline encryption not supported [ 361.438044][ T26] audit: type=1326 audit(1732650021.163:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 361.484685][ T7995] Quota error (device loop7): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 361.524374][ T26] audit: type=1326 audit(1732650021.203:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 361.589577][ T7995] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 361.643611][ T7995] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.792: Failed to acquire dquot type 1 [ 361.707714][ T26] audit: type=1326 audit(1732650021.203:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 361.746454][ T7995] EXT4-fs (loop7): 1 truncate cleaned up [ 361.769329][ T7995] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 361.788577][ T26] audit: type=1326 audit(1732650021.203:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd9d7e919 code=0x7ffc0000 [ 361.823614][ T7995] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.880482][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 362.058576][ T8007] loop9: detected capacity change from 0 to 8192 [ 362.219743][ T8007] loop9: p1 p2 p4[EZD] [ 362.252642][ T8007] loop9: p1 size 16128 extends beyond EOD, truncated [ 362.504009][ T8007] loop9: p2 size 2130728454 extends beyond EOD, truncated [ 362.553188][ T8007] loop9: p4 size 65536 extends beyond EOD, truncated [ 364.033458][ T7965] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 364.147091][ T5365] EXT4-fs (loop7): unmounting filesystem. [ 364.783945][ T8043] device veth0_to_team entered promiscuous mode [ 365.041590][ T8051] loop9: detected capacity change from 0 to 2048 [ 365.163345][ T8051] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 365.403628][ T126] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 365.448246][ T8070] loop6: detected capacity change from 0 to 128 [ 365.596839][ T126] usb 9-1: unable to get BOS descriptor or descriptor too short [ 365.616643][ T126] usb 9-1: not running at top speed; connect to a high speed hub [ 365.654686][ T126] usb 9-1: config 129 has an invalid interface number: 135 but max is 0 [ 365.678773][ T126] usb 9-1: config 129 has an invalid interface number: 5 but max is 0 [ 365.709168][ T126] usb 9-1: config 129 descriptor has 1 excess byte, ignoring [ 365.727977][ T126] usb 9-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 365.746338][ T126] usb 9-1: config 129 has no interface number 0 [ 366.506417][ T126] usb 9-1: config 129 has no interface number 1 [ 366.513102][ T126] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 366.526937][ T126] usb 9-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 366.537903][ T126] usb 9-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 366.564090][ T126] usb 9-1: config 129 interface 135 has no altsetting 0 [ 366.571085][ T126] usb 9-1: config 129 interface 5 has no altsetting 0 [ 366.618443][ T126] usb 9-1: string descriptor 0 read error: -22 [ 366.631838][ T126] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 366.655556][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.657113][ T8080] loop6: detected capacity change from 0 to 128 [ 366.712809][ T126] usb 9-1: MIDIStreaming interface descriptor not found [ 366.725293][ T8080] FAT-fs (loop6): invalid media value (0x00) [ 366.736203][ T8080] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 366.759435][ T8080] FAT-fs (loop6): Can't find a valid FAT filesystem [ 366.992815][ T7] usb 9-1: USB disconnect, device number 6 [ 370.389200][ T8143] loop6: detected capacity change from 0 to 256 [ 370.479860][ T8144] loop7: detected capacity change from 0 to 128 [ 370.836126][ T8152] loop0: detected capacity change from 0 to 512 [ 370.888704][ T8152] EXT4-fs: Ignoring removed i_version option [ 370.896052][ T8152] ext4: Unknown parameter 'noacl' [ 371.043914][ T4292] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 371.255311][ T4292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.286686][ T4292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.321228][ T4292] usb 8-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 371.357046][ T4292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.387803][ T4292] usb 8-1: config 0 descriptor?? [ 371.964327][ T4292] usbhid 8-1:0.0: can't add hid device: -71 [ 371.970564][ T4292] usbhid: probe of 8-1:0.0 failed with error -71 [ 371.990523][ T4292] usb 8-1: USB disconnect, device number 9 [ 372.776068][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 373.173289][ T8190] loop0: detected capacity change from 0 to 512 [ 373.209193][ T8190] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 373.218845][ T8190] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 373.385772][ T8190] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 373.396706][ T8190] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 373.406429][ T8190] System zones: 0-2, 18-18, 34-34 [ 373.492355][ T8190] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 373.519533][ T8190] EXT4-fs (loop0): 1 truncate cleaned up [ 373.525894][ T8190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 374.322349][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 374.733471][ T4344] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 374.993756][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 374.993775][ T26] audit: type=1326 audit(1732650035.123:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 375.026948][ T8218] loop0: detected capacity change from 0 to 2048 [ 375.104935][ T4344] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.123456][ T4344] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.133342][ T4344] usb 10-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 375.161057][ T26] audit: type=1326 audit(1732650035.123:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 375.208905][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.840'. [ 375.281804][ T4344] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.391586][ T4344] usb 10-1: config 0 descriptor?? [ 375.424437][ T26] audit: type=1326 audit(1732650035.123:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 375.753647][ T8218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 375.756933][ T26] audit: type=1326 audit(1732650035.123:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 375.953815][ T26] audit: type=1326 audit(1732650035.123:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 375.956407][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 375.990313][ T4344] wacom 0003:056A:00D0.0006: unknown main item tag 0x0 [ 376.029591][ T4344] wacom 0003:056A:00D0.0006: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 376.110877][ T4344] wacom 0003:056A:00D0.0006: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.9-1/input0 [ 376.160816][ T4344] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:00D0.0006/input/input11 [ 376.333618][ T4344] usb 10-1: USB disconnect, device number 4 [ 376.415282][ T8244] loop6: detected capacity change from 0 to 512 [ 376.449796][ T8244] EXT4-fs: Ignoring removed i_version option [ 376.474745][ T8244] ext4: Unknown parameter 'noacl' [ 377.596084][ T8265] loop0: detected capacity change from 0 to 512 [ 377.668773][ T8265] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 377.982715][ T8265] EXT4-fs (loop0): invalid journal inode [ 377.988884][ T8265] EXT4-fs (loop0): can't get journal size [ 378.034976][ T8265] EXT4-fs (loop0): 1 truncate cleaned up [ 378.040686][ T8265] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 378.111459][ T8282] loop9: detected capacity change from 0 to 1024 [ 378.119040][ T8282] journal_path: Lookup failure for './file1' [ 378.125247][ T8282] EXT4-fs: error: could not find journal device path [ 378.441567][ T126] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 378.489731][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.497510][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.557100][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.855'. [ 379.237985][ T126] usb 10-1: Using ep0 maxpacket: 8 [ 379.259808][ T126] usb 10-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 379.336320][ T126] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 379.365604][ T126] usb 10-1: Product: syz [ 379.373835][ T126] usb 10-1: Manufacturer: syz [ 379.383674][ T126] usb 10-1: SerialNumber: syz [ 379.414192][ T126] usb 10-1: config 0 descriptor?? [ 380.606679][ T126] usb 10-1: USB disconnect, device number 5 [ 380.774961][ T8314] loop8: detected capacity change from 0 to 256 [ 380.791666][ T8314] FAT-fs (loop8): Unrecognized mount option "" or missing value [ 380.893589][ T5789] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 380.895682][ T8318] loop9: detected capacity change from 0 to 512 [ 381.008514][ T8318] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 381.052091][ T8318] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.084424][ T8318] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #2: comm syz.9.860: corrupted inode contents [ 381.102931][ T8318] EXT4-fs error (device loop9): ext4_dirty_inode:6089: inode #2: comm syz.9.860: mark_inode_dirty error [ 381.124408][ T8318] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #2: comm syz.9.860: corrupted inode contents [ 381.200024][ T8318] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.860: mark_inode_dirty error [ 381.317964][ T26] audit: type=1800 audit(1732650041.453:398): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.860" name="file0" dev="loop9" ino=20 res=0 errno=0 [ 381.457991][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 381.604672][ T8334] device pim6reg1 entered promiscuous mode [ 381.656112][ T8337] loop9: detected capacity change from 0 to 512 [ 381.674806][ T8337] EXT4-fs: inline encryption not supported [ 381.763027][ T8337] Quota error (device loop9): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 381.809526][ T8337] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 381.873300][ T8337] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.863: Failed to acquire dquot type 1 [ 382.013138][ T8337] EXT4-fs (loop9): 1 truncate cleaned up [ 382.039617][ T8337] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 382.162228][ T8337] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.180372][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 382.635793][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.866'. [ 383.228777][ T8279] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 385.215445][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 386.211305][ T8411] loop7: detected capacity change from 0 to 512 [ 386.244144][ T8411] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 386.289591][ T8411] EXT4-fs (loop7): invalid journal inode [ 386.305649][ T8415] loop6: detected capacity change from 0 to 512 [ 386.347260][ T8411] EXT4-fs (loop7): can't get journal size [ 386.354351][ T8415] EXT4-fs: inline encryption not supported [ 386.363472][ T8404] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 386.431874][ T8411] EXT4-fs (loop7): 1 truncate cleaned up [ 386.443755][ T8411] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 386.490866][ T8415] Quota error (device loop6): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 386.540699][ T8415] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 386.609104][ T8415] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.882: Failed to acquire dquot type 1 [ 386.625740][ T8415] EXT4-fs (loop6): 1 truncate cleaned up [ 386.631734][ T8415] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 386.642939][ T8415] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.133834][ T8450] loop0: detected capacity change from 0 to 512 [ 388.221713][ T8450] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 388.272059][ T8450] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.430778][ T8458] loop8: detected capacity change from 0 to 256 [ 389.157312][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 390.807670][ T8421] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 391.093031][ T8497] loop0: detected capacity change from 0 to 2048 [ 391.172862][ T5365] EXT4-fs (loop7): unmounting filesystem. [ 391.511312][ T8497] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 391.668886][ T8497] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.024477][ T26] audit: type=1326 audit(1732650052.163:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 392.120868][ T26] audit: type=1326 audit(1732650052.163:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 392.173279][ T26] audit: type=1326 audit(1732650052.163:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 392.234719][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 392.281848][ T26] audit: type=1326 audit(1732650052.163:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 392.395776][ T26] audit: type=1326 audit(1732650052.163:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 393.868270][ T26] audit: type=1326 audit(1732650054.003:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 394.648886][ T26] audit: type=1326 audit(1732650054.783:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 394.723534][ T26] audit: type=1326 audit(1732650054.783:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 394.813466][ T26] audit: type=1326 audit(1732650054.783:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 394.883784][ T26] audit: type=1326 audit(1732650054.783:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 394.921907][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 394.965155][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 394.997195][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 395.070160][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 395.097227][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 395.122442][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 395.223922][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 395.277283][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 395.324747][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 395.349248][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.914'. [ 395.387206][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.416479][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.443890][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.100485][ T8592] loop9: detected capacity change from 0 to 512 [ 398.175956][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 398.175971][ T26] audit: type=1326 audit(1732650058.313:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.237342][ T26] audit: type=1326 audit(1732650058.373:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.289204][ T26] audit: type=1326 audit(1732650058.423:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.325198][ T8592] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 398.334613][ T8592] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.429765][ T26] audit: type=1326 audit(1732650058.423:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.545962][ T26] audit: type=1326 audit(1732650058.423:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.629034][ T26] audit: type=1326 audit(1732650058.423:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.700305][ T26] audit: type=1326 audit(1732650058.483:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.755157][ T26] audit: type=1326 audit(1732650058.483:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.794723][ T8608] loop7: detected capacity change from 0 to 256 [ 398.846984][ T26] audit: type=1326 audit(1732650058.643:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.910481][ T26] audit: type=1326 audit(1732650058.643:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d4d7e919 code=0x7ffc0000 [ 398.959704][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 399.212489][ T8601] loop0: detected capacity change from 0 to 16 [ 399.306107][ T5663] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.347537][ T8601] loop0: detected capacity change from 0 to 512 [ 399.395690][ T8601] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 399.428293][ T8601] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.925: corrupted in-inode xattr [ 399.455508][ T8601] EXT4-fs (loop0): Remounting filesystem read-only [ 399.476592][ T8601] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.925: couldn't read orphan inode 15 (err -117) [ 399.510525][ T8601] EXT4-fs (loop0): Remounting filesystem read-only [ 399.529991][ T8601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 399.885436][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 399.917492][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 400.286431][ T8647] loop0: detected capacity change from 0 to 512 [ 400.330549][ T8647] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 400.356442][ T8647] EXT4-fs (loop0): invalid journal inode [ 400.392748][ T8647] EXT4-fs (loop0): can't get journal size [ 400.522697][ T8647] EXT4-fs (loop0): 1 truncate cleaned up [ 400.547754][ T8647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 401.508743][ T8645] overlayfs: failed to resolve './file0': -2 [ 401.583279][ T5573] EXT4-fs (loop0): unmounting filesystem. [ 403.682680][ T8688] loop7: detected capacity change from 0 to 512 [ 403.743331][ T8688] EXT4-fs: inline encryption not supported [ 403.819929][ T8692] loop8: detected capacity change from 0 to 512 [ 403.851747][ T8692] EXT4-fs: Ignoring removed i_version option [ 403.861383][ T8692] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 403.921493][ T8692] EXT4-fs (loop8): 1 truncate cleaned up [ 403.930593][ T8692] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 403.940470][ T8688] __quota_error: 1 callbacks suppressed [ 403.940485][ T8688] Quota error (device loop7): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 403.963970][ T8688] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 403.993809][ T8688] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.941: Failed to acquire dquot type 1 [ 404.004384][ T8699] loop6: detected capacity change from 0 to 1024 [ 404.057373][ T8688] EXT4-fs (loop7): 1 truncate cleaned up [ 404.061429][ T8699] EXT4-fs: Ignoring removed bh option [ 404.063174][ T8688] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 404.080286][ T8688] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.269547][ T8699] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 404.953322][ T5399] EXT4-fs (loop8): unmounting filesystem. [ 405.066183][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 405.700802][ T8727] loop0: detected capacity change from 0 to 128 [ 405.738155][ T8727] FAT-fs (loop0): invalid media value (0x00) [ 405.770571][ T8727] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 405.801074][ T8727] FAT-fs (loop0): Can't find a valid FAT filesystem [ 406.496367][ T4259] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 406.504896][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.644610][ T5365] EXT4-fs (loop7): unmounting filesystem. [ 408.104258][ T26] audit: type=1326 audit(1732650068.243:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 408.142465][ T8773] loop8: detected capacity change from 0 to 256 [ 408.174573][ T8773] exfat: Bad value for 'uid' [ 408.184188][ T26] audit: type=1326 audit(1732650068.263:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 408.281640][ T26] audit: type=1326 audit(1732650068.263:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 408.355932][ T26] audit: type=1326 audit(1732650068.263:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 408.443725][ T26] audit: type=1326 audit(1732650068.263:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 408.536572][ T26] audit: type=1326 audit(1732650068.263:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 408.599152][ T26] audit: type=1326 audit(1732650068.263:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 408.640281][ T8787] loop9: detected capacity change from 0 to 128 [ 408.698860][ T8787] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 408.728704][ T8787] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.739551][ T26] audit: type=1326 audit(1732650068.263:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 409.257070][ T26] audit: type=1326 audit(1732650068.263:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 409.665744][ T26] audit: type=1326 audit(1732650068.263:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 409.689623][ T26] audit: type=1326 audit(1732650068.263:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 409.791195][ T26] audit: type=1326 audit(1732650068.263:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd02d7e51b code=0x7ffc0000 [ 409.816418][ T5447] EXT4-fs (loop9): unmounting filesystem. [ 409.994712][ T26] audit: type=1326 audit(1732650068.263:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 410.149156][ T26] audit: type=1326 audit(1732650068.263:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 410.490928][ T26] audit: type=1326 audit(1732650068.263:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 411.497531][ T26] audit: type=1326 audit(1732650068.263:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efd02d7e919 code=0x7ffc0000 [ 411.520502][ T26] audit: type=1326 audit(1732650068.263:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd02d7e953 code=0x7ffc0000 [ 411.553671][ T26] audit: type=1326 audit(1732650068.263:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.8.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efd02d7d3ff code=0x7ffc0000 [ 411.647933][ T8816] loop6: detected capacity change from 0 to 512 [ 411.815372][ T8816] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 411.852066][ T8816] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.235244][ T8837] loop7: detected capacity change from 0 to 16 [ 413.760767][ T8837] erofs: (device loop7): mounted with root inode @ nid 36. [ 413.776693][ T8835] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 413.867869][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 413.940524][ T8842] device vlan2 entered promiscuous mode [ 413.963664][ T8842] device syz_tun entered promiscuous mode [ 413.994496][ T8842] device syz_tun left promiscuous mode [ 414.097221][ T8846] tmpfs: Unknown parameter 'nolazytime˙˙' [ 414.521678][ T8863] loop6: detected capacity change from 0 to 512 [ 414.582894][ T8863] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 414.646663][ T8863] EXT4-fs (loop6): invalid journal inode [ 414.652442][ T8863] EXT4-fs (loop6): can't get journal size [ 414.697459][ T8863] EXT4-fs (loop6): 1 truncate cleaned up [ 414.719858][ T8863] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 414.900546][ T5485] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 415.754193][ T5485] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.805699][ T5485] usb 10-1: config 0 has no interfaces? [ 415.864365][ T5485] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 415.911749][ T5485] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.963022][ T5323] EXT4-fs (loop6): unmounting filesystem. [ 415.996428][ T5485] usb 10-1: config 0 descriptor?? [ 416.775087][ T8890] loop6: detected capacity change from 0 to 256 [ 416.811021][ T8890] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 416.853797][ T8890] FAT-fs (loop6): Filesystem has been set read-only [ 417.081313][ T8898] loop0: detected capacity change from 0 to 512 [ 417.326884][ T8905] loop7: detected capacity change from 0 to 16 [ 417.491258][ T8905] erofs: (device loop7): mounted with root inode @ nid 36. [ 418.455005][ T4292] usb 10-1: USB disconnect, device number 6 [ 418.571135][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 418.571152][ T26] audit: type=1326 audit(1732650078.703:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 418.693183][ T26] audit: type=1326 audit(1732650078.773:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 418.843569][ T26] audit: type=1326 audit(1732650078.793:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 418.959728][ T26] audit: type=1326 audit(1732650078.793:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 419.106651][ T26] audit: type=1326 audit(1732650078.793:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 419.203341][ T26] audit: type=1326 audit(1732650078.793:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 419.328623][ T26] audit: type=1326 audit(1732650078.793:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 419.509375][ T26] audit: type=1326 audit(1732650078.793:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 419.673480][ T26] audit: type=1326 audit(1732650078.793:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 419.794512][ T26] audit: type=1326 audit(1732650078.793:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8557e919 code=0x7ffc0000 [ 421.103693][ T8947] binder: BINDER_SET_CONTEXT_MGR already set [ 421.122478][ T8947] binder: 8925:8947 ioctl 4018620d 20000100 returned -16 [ 421.540060][ T8953] loop8: detected capacity change from 0 to 256 [ 422.243585][ T8901] ------------[ cut here ]------------ [ 422.249721][ T8901] kernel BUG at fs/buffer.c:2666! [ 422.296866][ T8901] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 422.302995][ T8901] CPU: 1 PID: 8901 Comm: kmmpd-loop0 Not tainted 6.1.119-syzkaller #0 [ 422.311222][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.321383][ T8901] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 422.326772][ T8901] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 81 49 e0 ff e9 b1 fe ff ff e8 67 c0 88 ff 0f 0b e8 60 c0 88 ff <0f> 0b e8 59 c0 88 ff 0f 0b e8 52 c0 88 ff 0f 0b e8 4b c0 88 ff 0f [ 422.346484][ T8901] RSP: 0018:ffffc9000dab7c40 EFLAGS: 00010293 [ 422.352659][ T8901] RAX: ffffffff8201db90 RBX: 0000000000000000 RCX: ffff888057d1d940 [ 422.360660][ T8901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.368692][ T8901] RBP: ffffc9000dab7d50 R08: ffffffff8201d76d R09: ffffed100e493923 [ 422.376682][ T8901] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e493922 [ 422.384670][ T8901] R13: ffff88807249c910 R14: 0000000000000000 R15: 0000000000003801 [ 422.392657][ T8901] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 422.401613][ T8901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.408216][ T8901] CR2: 00007efd03a656c0 CR3: 000000005a766000 CR4: 00000000003506e0 [ 422.416210][ T8901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.424194][ T8901] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.432181][ T8901] Call Trace: [ 422.435482][ T8901] [ 422.438424][ T8901] ? __die_body+0x5e/0xa0 [ 422.442771][ T8901] ? die+0x83/0xb0 [ 422.446509][ T8901] ? do_trap+0x11e/0x350 [ 422.450762][ T8901] ? submit_bh_wbc+0x4c0/0x4e0 [ 422.455539][ T8901] ? submit_bh_wbc+0x4c0/0x4e0 [ 422.460316][ T8901] ? do_error_trap+0x13d/0x1e0 [ 422.465101][ T8901] ? submit_bh_wbc+0x4c0/0x4e0 [ 422.469875][ T8901] ? do_int3+0x30/0x30 [ 422.473965][ T8901] ? report_bug+0x3e0/0x500 [ 422.478494][ T8901] ? rcu_is_watching+0x11/0xb0 [ 422.483280][ T8901] ? handle_invalid_op+0x2c/0x40 [ 422.488246][ T8901] ? submit_bh_wbc+0x4c0/0x4e0 [ 422.493017][ T8901] ? exc_invalid_op+0x2f/0x40 [ 422.497709][ T8901] ? asm_exc_invalid_op+0x16/0x20 [ 422.502749][ T8901] ? submit_bh_wbc+0x9d/0x4e0 [ 422.507442][ T8901] ? submit_bh_wbc+0x4c0/0x4e0 [ 422.512229][ T8901] ? submit_bh_wbc+0x4c0/0x4e0 [ 422.517005][ T8901] write_mmp_block_thawed+0x3b6/0x5a0 [ 422.522396][ T8901] ? read_mmp_block+0x7e0/0x7e0 [ 422.527258][ T8901] ? update_process_times+0x1b0/0x1b0 [ 422.532643][ T8901] ? kmmpd+0x40c/0xa70 [ 422.536723][ T8901] write_mmp_block+0x13f/0x390 [ 422.541498][ T8901] kmmpd+0x40c/0xa70 [ 422.545411][ T8901] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 422.550968][ T8901] ? __kthread_parkme+0x168/0x1c0 [ 422.556015][ T8901] kthread+0x28d/0x320 [ 422.560095][ T8901] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 422.565652][ T8901] ? kthread_blkcg+0xd0/0xd0 [ 422.570251][ T8901] ret_from_fork+0x1f/0x30 [ 422.574690][ T8901] [ 422.577713][ T8901] Modules linked in: [ 422.908403][ T8957] loop8: detected capacity change from 0 to 16 [ 422.916234][ T8957] erofs: (device loop8): mounted with root inode @ nid 36. [ 422.936040][ T8957] PM: Image not found (code -22) [ 423.473451][ T8901] ---[ end trace 0000000000000000 ]--- [ 423.479001][ T8901] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 423.513469][ T8901] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 81 49 e0 ff e9 b1 fe ff ff e8 67 c0 88 ff 0f 0b e8 60 c0 88 ff <0f> 0b e8 59 c0 88 ff 0f 0b e8 52 c0 88 ff 0f 0b e8 4b c0 88 ff 0f [ 423.593502][ T8901] RSP: 0018:ffffc9000dab7c40 EFLAGS: 00010293 [ 423.600021][ T8901] RAX: ffffffff8201db90 RBX: 0000000000000000 RCX: ffff888057d1d940 [ 423.653616][ T8901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.661653][ T8901] RBP: ffffc9000dab7d50 R08: ffffffff8201d76d R09: ffffed100e493923 [ 423.712806][ T8901] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e493922 [ 423.733582][ T8901] R13: ffff88807249c910 R14: 0000000000000000 R15: 0000000000003801 [ 423.741602][ T8901] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 423.803585][ T8901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.810228][ T8901] CR2: 00007f0a8b109ab8 CR3: 000000005aaa9000 CR4: 00000000003506e0 [ 423.853519][ T8901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.861630][ T8901] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 423.921363][ T8901] Kernel panic - not syncing: Fatal exception [ 423.927715][ T8901] Kernel Offset: disabled [ 423.932029][ T8901] Rebooting in 86400 seconds..