last executing test programs: 5m20.987637228s ago: executing program 3 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000) 5m20.434209836s ago: executing program 3 (id=259): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000ac0)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@errors_remount}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 5m17.644034567s ago: executing program 3 (id=264): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000019080)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@noblock_validity}]}, 0x5, 0x795, &(0x7f0000000cc0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTsmgRwY2g4kLQTdf+qDu3/tjqf+FCWqqmxYoLidyZO+20mUmTNjOj5vOBmznn3js553vP/XHunMtMAHvWRPonF3EoIt5NIsay+UlEDNVTgxEnGuvdXl8rplMSGxuv/pzU17m1vlaMlvekDmSZ/0fEN29FHM415g+3lFtdWZ0vlMulpSw/VVs4P1VdWT1ybqEwV5orLR6bnpk5evyZ48d2L9Zfv189eP29l578/MTvb/7v6jvfJnEiDmbLWuPYLRMxkW2ToXQT3uPF3S6sz5J+V4CHkh6aA42jPA7FWAzUUx2M9LJmAEC3bAAAe1CiDwAAe0zzc4Bb62vF5tTfTyR668YLEbG/EX9zfLOxZDAbs9tfHwcdvZXcMzKSRMT4LpQ/EREff/n6p+kUWTu0G0szvgbstkuXI+LM+MTm83+y6ZmFnXpqq4UbjadBJu6bvdeuP9BPX6X9n2fb9f9yd/o/0ab/M9zm2H0YDz7+c9d2oZiO0v7f8y3Ptt1uiT8zPpDl/lXv8w0lZ8+VS+m57d8RMRlDw2l+ur5q+17a5M0/bnYqv7X/98v7b3ySlp++3l0jd21w+N73zA7XCo8ad9ONyxGPDbaLP7nT/kmH/u+pbZbx8nNvf9RpWRp/Gm9z2hx/d21ciXiibfvfbctky+cTp+q7w1Rzp2jjix8+HO1Ufmv7p1NafvNeoBfS9h/dOv7xpPV5zerOy/juytjXnZY9OP42+3+hVtiXvFZP78vmXSzUakvTEfuSVzbPP3r3vc18c/00/snH2x//jWLb7//pPeGZbcY/eP2nzx4+/u5K45/dUfvvPHH19vxAp/K31/4z9dRkNidt/wfFtd0KPsq2AwAAAAAAAAAAAAAAAAAAAAAAAIDtykXEwUhy+TvpXC6fb/yG939jNFeuVGuHz1aWF2ej/lvZ4zGUa37V5VjL96FOZ9+H38wfvS//dET8JyI+GB6p5/PFSnm238EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOZAh9//T/043O/aAQBds7/fFQAAes71HwD2np1d/0e6Vg8AoHfc/wPA3rPt6/+Z7tYDAOgd9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02amTJ9Np47f1tWKan72wsjxfuXBktlSdzy8sF/PFytL5/FylMlcu5YuVhY7/6FLjpVypnJ+JxeWLU7VStTZVXVk9vVBZXqydPrdQmCudLg31LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L7qyup8oVwuLUlsmRhJE4PZRvsL1KffiUEb4R+eaD1LjPTn5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwN/BnAAAA//+9uipa") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vlan1\x00', {}, 'hsr0\x00', {}, 0x1, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff000000, 0xff000000, 'veth0_to_batadv\x00', 'wlan0\x00', {0x1fe}, {0xff}, 0x6c, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x5, 0x0, 0x2, 0x5], 0x3, 0x7}, {0x2, [0x2, 0x5, 0x2, 0x1, 0x0, 0x3], 0x0, 0x5}}}}, {{@ip={@local, @empty, 0x0, 0xff000000, 'syzkaller1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x50}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x38, 0xfd, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x2, 0x2, 0x3, 0x0, 0x2], 0x4, 0x2}, {0xffffffffffffffff, [0x5, 0x7, 0x6, 0x4, 0x0, 0x4], 0x2, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 5m16.348845786s ago: executing program 3 (id=265): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="9a0fdb17b69d02ca523766ec42e8ebc5839cb9740dc9bb7d503c26c94b063850ce1a96c759fae5f64d0e8eb665a38d51d43400152d54a9291a0501ffb28e8f99c4913f5bf546b6263752ed11a70fcd110d68854052dc81bcd32d8c5dac7e426dc8f26cfb78891e3d4a81180f539d5d41c5dcc627fdd3", @ANYRESOCT=r1, @ANYRES64=0x0, @ANYRES32=r2], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r3, 0x58, &(0x7f0000000100)}, 0x87) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$key(0xf, 0x3, 0x2) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) io_submit(r6, 0x1, &(0x7f0000001140)=[0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x30, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5m14.646852432s ago: executing program 3 (id=268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x16, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0xf6ffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xd4, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x6007) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) sendfile(r2, r2, 0x0, 0x40008) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @private}, &(0x7f0000000180)=0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x30080, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100"/15, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="01000000050000000300"/28], 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 5m14.259580848s ago: executing program 3 (id=271): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40}, 0x0) r0 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m58.933016995s ago: executing program 32 (id=271): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40}, 0x0) r0 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m4.061582023s ago: executing program 0 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004404) 3m2.28601358s ago: executing program 0 (id=505): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fffffffe0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x72) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f00000024c0)="4b4fbd7e3687b10c1b57f6e1c4a6ee6d0bcd7cedfe470ca7698b97116f3d89e9a531bbe9b9981a99b72673948691358dbf23230f8678cda09bd08c34f16e0b2529c1db80c712730a9cd20e72f97d19ca39ebc9279bd9af0b9355f7cf117c309718af937df9c2cd2e5342877b7949971f9bff3076d31b8d3fd811c65029e46c2471ac7664afefb9cb62218a20c06b61d51fd092f3a68f9b8245d9acb6c1754f55bc32a52531c43b5e7c6e90371816376431ea797500c55123a922409dd3d944750a64550c6ea4770ff9d80f0add73c3d7b807089142315cf933006a6f9cd2403dae38729a41a4f0ee8f3e7435273710999ec81feb6715", 0xf6) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6d}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0xc0) r7 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/274, 0x112}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f00000009c0)=""/264, 0x108}, {&(0x7f0000000140)=""/16, 0x10}], 0x7}, 0x1008}], 0x1, 0x0, 0x0) 2m57.406332532s ago: executing program 0 (id=513): socket$nl_xfrm(0x10, 0x3, 0x6) inotify_init1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m56.157996841s ago: executing program 0 (id=516): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x5f, 0x0, 0x0, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/233, 0x1f, 0xe9, 0x1}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0xe) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12011001000000406a05270000000000000109022400010000c00009040000050300020009210000000122070009058103000000400065cb0c000316ecf15d3c389e5df9ee257c06b542bbd0436f0015b167b1f7a67351ad1e7869f109ec47069a033dd283d3a1e6943140b5ebb5f6ea1647978f3c23ca89d63d3612820b24404aed54aefcebc91f293981a5f3043dc7f561dc8521ad465a8802c9a8f138df20abc797948cd003c7062827b9aab2c1"], 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "65000200"}, @main=@item_012={0x1, 0x0, 0xb, "a8"}]}}, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000740)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x471, &(0x7f0000000200)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000001900)=""/192, 0x910ac0826553608f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 2m50.965895848s ago: executing program 0 (id=521): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x800003d, 0x7ff) lseek(r5, 0x0, 0x3) sendto$inet(r0, 0x0, 0x0, 0x814, 0x0, 0x0) 2m46.429632996s ago: executing program 0 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420b00000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 2m31.184468602s ago: executing program 33 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420b00000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 13.806753975s ago: executing program 1 (id=826): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1d, 0x3a8, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 13.691080967s ago: executing program 1 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) close_range(r2, 0xffffffffffffffff, 0x0) 12.498253925s ago: executing program 1 (id=830): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x4020, &(0x7f0000001f40)=ANY=[@ANYBLOB="757466382c696f636861727365743d63703836342c696f636861727365743d6b6f69382d72752cb7416d65636173653d312c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c6572726f72733d7265696f756e742d726f2c646d61736b3d30303030303030303030303030303f30306d655f6f66667365743d3078303030303030303030303030303030332c6572726f72733d72656d6f756e742d726f2c00"], 0x1, 0x152b, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r0, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 11.4381785s ago: executing program 1 (id=831): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 11.040754866s ago: executing program 1 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x6, 0x2, 0xfffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000140)=0x89c, 0x4) readv(r6, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/171, 0xab}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x301c40a, &(0x7f0000000740)={[{@rodir}, {@shortname_winnt}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}]}, 0x6, 0x2d5, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 10.748625211s ago: executing program 5 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) close_range(r2, 0xffffffffffffffff, 0x0) 8.002918301s ago: executing program 5 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r2) 7.058302185s ago: executing program 5 (id=843): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 6.796196979s ago: executing program 5 (id=846): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x280) 5.890341572s ago: executing program 2 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) close_range(r2, 0xffffffffffffffff, 0x0) 4.68569806s ago: executing program 2 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffef4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 4.452974594s ago: executing program 2 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 4.286152096s ago: executing program 2 (id=852): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) 3.150305983s ago: executing program 4 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x18, 0xd, 0x200cd, 0x6, 0x5}, 0x48) 2.773903479s ago: executing program 4 (id=856): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r0}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 2.403071925s ago: executing program 4 (id=857): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a8", 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 2.261999876s ago: executing program 5 (id=858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) close_range(r2, 0xffffffffffffffff, 0x0) 2.261595427s ago: executing program 2 (id=859): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.064813649s ago: executing program 1 (id=860): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x5f, 0x0, 0x0, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/233, 0x1f, 0xe9, 0x1}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0xe) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12011001000000406a05270000000000000109022400010000c00009040000050300020009210000000122070009058103000000400065cb0c000316ecf15d3c389e5df9ee257c06b542bbd0436f0015b167b1f7a67351ad1e7869f109ec47069a033dd283d3a1e6943140b5ebb5f6ea1647978f3c23ca89d63d3612820b24404aed54aefcebc91f293981a5f3043dc7f561dc8521ad465a8802c9a8f138df20abc797948cd003c7062827b9aab2c1"], 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "65000200"}, @main=@item_012={0x1, 0x0, 0xb, "a8"}]}}, 0x0}, 0x0) 1.275236781s ago: executing program 2 (id=861): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x64}}, 0x0) 1.224284072s ago: executing program 4 (id=862): socketpair$unix(0x1, 0x2, 0x0, 0x0) futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.160979423s ago: executing program 5 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000006000000000000000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="27dc20df79e1"}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2266"], 0x66) 215.211457ms ago: executing program 4 (id=864): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000010b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 0s ago: executing program 4 (id=865): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 294.033116][ T27] audit: type=1326 audit(1751024023.715:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 294.082211][ T27] audit: type=1326 audit(1751024023.715:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 294.151814][ T27] audit: type=1326 audit(1751024023.715:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 294.186738][ T27] audit: type=1326 audit(1751024023.795:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 294.209472][ T27] audit: type=1326 audit(1751024023.795:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 294.214391][ T6857] usb 3-1: USB disconnect, device number 2 [ 294.240993][ T27] audit: type=1326 audit(1751024023.795:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 294.507592][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 295.097829][ T27] audit: type=1326 audit(1751024023.795:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 295.489777][ T27] audit: type=1326 audit(1751024023.795:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb11e38e929 code=0x7ffc0000 [ 296.414014][ T5784] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 296.958057][ T7539] loop4: detected capacity change from 0 to 128 [ 298.148163][ T7546] ax25_connect(): syz.4.371 uses autobind, please contact jreuter@yaina.de [ 298.180580][ T7546] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 298.703894][ T5831] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 298.900930][ T5831] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 298.920602][ T5831] usb 1-1: config 0 has no interface number 0 [ 298.945453][ T5831] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 298.957065][ T5831] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 298.986108][ T5831] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 298.995673][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.005785][ T5831] usb 1-1: Product: syz [ 299.014003][ T5831] usb 1-1: Manufacturer: syz [ 299.019493][ T5831] usb 1-1: SerialNumber: syz [ 299.047411][ T5831] usb 1-1: config 0 descriptor?? [ 299.411306][ T5831] usb 1-1: USB disconnect, device number 5 [ 299.473358][ T6890] udevd[6890]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.975443][ T7571] loop1: detected capacity change from 0 to 256 [ 300.010819][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.019739][ T7571] FAT-fs (loop1): Filesystem has been set read-only [ 300.026539][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.035333][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.044240][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.053987][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.063109][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.071999][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.080984][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.089827][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.098712][ T7571] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 300.135496][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 300.135512][ T27] audit: type=1800 audit(1751024285.850:123): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.378" name="file1" dev="loop1" ino=1048630 res=0 errno=0 [ 300.307463][ T7571] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 301.144122][ T7579] ax25_connect(): syz.0.383 uses autobind, please contact jreuter@yaina.de [ 301.153418][ T7579] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 302.825842][ T7594] loop0: detected capacity change from 0 to 512 [ 302.851291][ T7594] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.387: invalid indirect mapped block 256 (level 2) [ 302.875669][ T7594] EXT4-fs (loop0): 2 truncates cleaned up [ 302.891341][ T7594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.049705][ T7594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.387: bg 0: block 5: invalid block bitmap [ 303.083962][ T7596] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 303.121995][ T7594] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 303.164099][ T7594] EXT4-fs (loop0): This should not happen!! Data will be lost [ 303.164099][ T7594] [ 303.194935][ T7594] EXT4-fs (loop0): Total free blocks count 0 [ 303.201085][ T7594] EXT4-fs (loop0): Free/Dirty block details [ 303.405387][ T7594] EXT4-fs (loop0): free_blocks=0 [ 303.410384][ T7594] EXT4-fs (loop0): dirty_blocks=184 [ 303.433647][ T7594] EXT4-fs (loop0): Block reservation details [ 303.439706][ T7594] EXT4-fs (loop0): i_reserved_data_blocks=184 [ 303.450069][ T7602] loop4: detected capacity change from 0 to 256 [ 303.470551][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.479395][ T7602] FAT-fs (loop4): Filesystem has been set read-only [ 303.486208][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.495169][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.503976][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.512795][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.521624][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.532005][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.540924][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.549714][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.558518][ T7602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 303.569785][ T27] audit: type=1800 audit(1751024289.310:124): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.389" name="file1" dev="loop4" ino=1048631 res=0 errno=0 [ 303.584272][ T7602] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 303.762088][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.058776][ T7613] ax25_connect(): syz.1.393 uses autobind, please contact jreuter@yaina.de [ 304.068674][ T7613] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 304.195383][ T7609] loop2: detected capacity change from 0 to 2048 [ 304.276439][ T7609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 304.412465][ T7609] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 305.056291][ T7609] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 305.342255][ T7609] EXT4-fs (loop2): This should not happen!! Data will be lost [ 305.342255][ T7609] [ 305.404690][ T7609] EXT4-fs (loop2): Total free blocks count 0 [ 305.411519][ T7609] EXT4-fs (loop2): Free/Dirty block details [ 305.418384][ T7609] EXT4-fs (loop2): free_blocks=2415919104 [ 305.424741][ T7609] EXT4-fs (loop2): dirty_blocks=32 [ 305.434027][ T7609] EXT4-fs (loop2): Block reservation details [ 305.477754][ T7609] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 305.606174][ T6040] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 305.663034][ T7633] loop1: detected capacity change from 0 to 128 [ 305.712751][ T7633] EXT4-fs (loop1): Test dummy encryption mode enabled [ 305.758973][ T7633] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.804534][ T7633] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.887098][ T7637] loop2: detected capacity change from 0 to 512 [ 306.007912][ T7637] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.399: invalid indirect mapped block 256 (level 2) [ 306.072031][ T7637] EXT4-fs (loop2): 2 truncates cleaned up [ 306.080871][ T7637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.211773][ T7633] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 306.235431][ T7637] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.399: bg 0: block 5: invalid block bitmap [ 306.324928][ T7637] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 184 with error 28 [ 306.383528][ T7637] EXT4-fs (loop2): This should not happen!! Data will be lost [ 306.383528][ T7637] [ 306.427237][ T7637] EXT4-fs (loop2): Total free blocks count 0 [ 306.433408][ T7637] EXT4-fs (loop2): Free/Dirty block details [ 306.442754][ T7633] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 306.454420][ T7633] overlayfs: upper fs does not support tmpfile. [ 306.464033][ T7637] EXT4-fs (loop2): free_blocks=0 [ 306.569443][ T7637] EXT4-fs (loop2): dirty_blocks=188 [ 306.575491][ T7637] EXT4-fs (loop2): Block reservation details [ 306.581618][ T7637] EXT4-fs (loop2): i_reserved_data_blocks=188 [ 306.733095][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.753198][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.381724][ T7654] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.911445][ T7659] syz.2.404[7659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.911592][ T7659] syz.2.404[7659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.126396][ T7684] loop0: detected capacity change from 0 to 256 [ 312.162492][ T7684] exfat: Bad value for 'uid' [ 312.225860][ T7686] loop4: detected capacity change from 0 to 1024 [ 312.243393][ T7686] EXT4-fs: Ignoring removed i_version option [ 312.265207][ T7686] EXT4-fs: quotafile must be on filesystem root [ 312.318510][ T7688] loop1: detected capacity change from 0 to 2048 [ 312.328587][ T6914] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.366459][ T7688] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.435373][ T7688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.218043][ T6040] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:9: bg 0: block 234: padding at end of block bitmap is not set [ 313.263634][ T6040] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 313.299124][ T6040] EXT4-fs (loop1): This should not happen!! Data will be lost [ 313.299124][ T6040] [ 313.330789][ T6040] EXT4-fs (loop1): Total free blocks count 0 [ 313.337224][ T6040] EXT4-fs (loop1): Free/Dirty block details [ 313.343500][ T6040] EXT4-fs (loop1): free_blocks=0 [ 313.363546][ T6040] EXT4-fs (loop1): dirty_blocks=1520 [ 313.369197][ T6040] EXT4-fs (loop1): Block reservation details [ 313.422470][ T6040] EXT4-fs (loop1): i_reserved_data_blocks=95 [ 313.449191][ T6040] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1491 with error 28 [ 314.920835][ T7718] loop4: detected capacity change from 0 to 256 [ 314.931516][ T7718] exfat: Deprecated parameter 'utf8' [ 314.943726][ T7718] exfat: Deprecated parameter 'namecase' [ 314.991920][ T7718] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 315.066147][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 315.317388][ T7730] loop0: detected capacity change from 0 to 256 [ 315.422991][ T7730] FAT-fs (loop0): Directory bread(block 64) failed [ 315.444320][ T7730] FAT-fs (loop0): Directory bread(block 65) failed [ 315.456422][ T7730] FAT-fs (loop0): Directory bread(block 66) failed [ 315.483915][ T7730] FAT-fs (loop0): Directory bread(block 67) failed [ 315.524727][ T7730] FAT-fs (loop0): Directory bread(block 68) failed [ 315.531321][ T7730] FAT-fs (loop0): Directory bread(block 69) failed [ 315.574883][ T7734] loop2: detected capacity change from 0 to 256 [ 315.579760][ T7730] FAT-fs (loop0): Directory bread(block 70) failed [ 315.590820][ T7730] FAT-fs (loop0): Directory bread(block 71) failed [ 315.607833][ T7730] FAT-fs (loop0): Directory bread(block 72) failed [ 315.643807][ T7730] FAT-fs (loop0): Directory bread(block 73) failed [ 315.725987][ T7734] FAT-fs (loop2): Directory bread(block 64) failed [ 315.732683][ T7734] FAT-fs (loop2): Directory bread(block 65) failed [ 315.751343][ T7734] FAT-fs (loop2): Directory bread(block 66) failed [ 315.903911][ T7734] FAT-fs (loop2): Directory bread(block 67) failed [ 315.942172][ T7734] FAT-fs (loop2): Directory bread(block 68) failed [ 315.973347][ T7734] FAT-fs (loop2): Directory bread(block 69) failed [ 315.988435][ T7734] FAT-fs (loop2): Directory bread(block 70) failed [ 315.995085][ T7734] FAT-fs (loop2): Directory bread(block 71) failed [ 316.001722][ T7734] FAT-fs (loop2): Directory bread(block 72) failed [ 316.008648][ T7734] FAT-fs (loop2): Directory bread(block 73) failed [ 317.125945][ T7748] syz.2.424[7748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.126593][ T7748] syz.2.424[7748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.177054][ T7748] loop2: detected capacity change from 0 to 256 [ 317.200963][ T7748] exfat: Deprecated parameter 'utf8' [ 317.206610][ T7748] exfat: Deprecated parameter 'utf8' [ 317.290155][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.329006][ T7748] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 317.390550][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.718235][ T7747] loop1: detected capacity change from 0 to 512 [ 317.788190][ T7747] EXT4-fs (loop1): Test dummy encryption mode enabled [ 317.852323][ T7747] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 319.000893][ T7747] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.426: bad orphan inode 131083 [ 319.077760][ T7747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.265248][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.472083][ T27] audit: type=1326 audit(1751024818.198:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 320.513707][ T27] audit: type=1326 audit(1751024818.208:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 320.573410][ T27] audit: type=1326 audit(1751024818.308:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 320.637177][ T27] audit: type=1326 audit(1751024818.308:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 320.680550][ T27] audit: type=1326 audit(1751024818.308:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 320.758354][ T27] audit: type=1326 audit(1751024818.338:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 320.901965][ T27] audit: type=1326 audit(1751024818.338:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 320.993451][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.429'. [ 321.281272][ T27] audit: type=1326 audit(1751024818.338:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 321.837861][ T27] audit: type=1326 audit(1751024818.338:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 321.861030][ T27] audit: type=1326 audit(1751024818.338:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 321.922143][ T7773] loop4: detected capacity change from 0 to 256 [ 321.951021][ T7773] FAT-fs (loop4): Directory bread(block 64) failed [ 321.959073][ T7773] FAT-fs (loop4): Directory bread(block 65) failed [ 321.970711][ T7773] FAT-fs (loop4): Directory bread(block 66) failed [ 321.979899][ T7773] FAT-fs (loop4): Directory bread(block 67) failed [ 321.988013][ T7773] FAT-fs (loop4): Directory bread(block 68) failed [ 321.995611][ T7773] FAT-fs (loop4): Directory bread(block 69) failed [ 322.007945][ T7773] FAT-fs (loop4): Directory bread(block 70) failed [ 322.029463][ T7773] FAT-fs (loop4): Directory bread(block 71) failed [ 322.040484][ T7773] FAT-fs (loop4): Directory bread(block 72) failed [ 322.056066][ T7773] FAT-fs (loop4): Directory bread(block 73) failed [ 322.607504][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'. [ 322.624510][ T7780] vlan2: entered promiscuous mode [ 322.630578][ T7780] ip6gretap0: entered promiscuous mode [ 322.761952][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 323.926351][ T7796] loop1: detected capacity change from 0 to 512 [ 323.964521][ T7796] EXT4-fs (loop1): Test dummy encryption mode enabled [ 323.971369][ T7796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 324.013068][ T7796] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.437: bad orphan inode 131083 [ 324.058915][ T7796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.125233][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.214673][ T7805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 325.226549][ T7805] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 326.518598][ T7817] loop0: detected capacity change from 0 to 512 [ 326.526695][ T7817] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 326.541109][ T7817] EXT4-fs (loop0): 1 truncate cleaned up [ 326.548370][ T7817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.862861][ T7823] loop2: detected capacity change from 0 to 256 [ 326.967051][ T7823] FAT-fs (loop2): Directory bread(block 64) failed [ 326.987275][ T7823] FAT-fs (loop2): Directory bread(block 65) failed [ 327.007643][ T7823] FAT-fs (loop2): Directory bread(block 66) failed [ 327.031222][ T7823] FAT-fs (loop2): Directory bread(block 67) failed [ 327.055190][ T7823] FAT-fs (loop2): Directory bread(block 68) failed [ 327.082246][ T7823] FAT-fs (loop2): Directory bread(block 69) failed [ 327.112986][ T7823] FAT-fs (loop2): Directory bread(block 70) failed [ 327.121818][ T7823] FAT-fs (loop2): Directory bread(block 71) failed [ 327.135008][ T7823] FAT-fs (loop2): Directory bread(block 72) failed [ 327.152279][ T7823] FAT-fs (loop2): Directory bread(block 73) failed [ 327.313541][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.746673][ T7832] loop4: detected capacity change from 0 to 512 [ 328.323705][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 328.625931][ T7835] loop2: detected capacity change from 0 to 128 [ 328.707436][ T7832] EXT4-fs (loop4): Test dummy encryption mode enabled [ 328.737363][ T7832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 328.872416][ T7832] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.447: bad orphan inode 131083 [ 329.066826][ T7832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.358811][ T7844] loop0: detected capacity change from 0 to 131072 [ 330.433878][ T7844] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 330.442021][ T7844] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 330.762570][ T7844] F2FS-fs (loop0): invalid crc value [ 332.704591][ T7844] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 333.017980][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.305018][ T7857] veth1_macvtap: left promiscuous mode [ 333.310625][ T7857] macsec0: entered promiscuous mode [ 333.525009][ T7859] loop0: detected capacity change from 0 to 512 [ 333.602475][ T7859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 333.813913][ T7859] EXT4-fs (loop0): 1 truncate cleaned up [ 333.826715][ T7859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.064830][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.393243][ T7874] vivid-000: disconnect [ 336.400292][ T7874] vivid-000: reconnect [ 336.953187][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 337.818673][ T7890] loop2: detected capacity change from 0 to 512 [ 337.848932][ T7890] EXT4-fs (loop2): Test dummy encryption mode enabled [ 337.868971][ T7890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 337.922725][ T7890] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.458: bad orphan inode 131083 [ 337.949282][ T7890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.738720][ T7898] loop4: detected capacity change from 0 to 128 [ 338.993887][ T6914] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.128959][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.931426][ T7902] loop4: detected capacity change from 0 to 256 [ 339.939952][ T7902] exfat: Deprecated parameter 'utf8' [ 339.945428][ T7902] exfat: Deprecated parameter 'namecase' [ 339.990795][ T7902] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 344.348129][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 345.181289][ T7953] loop4: detected capacity change from 0 to 512 [ 345.218762][ T7953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 345.276500][ T7953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.312078][ T7953] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.567233][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.680259][ T7938] loop0: detected capacity change from 0 to 40427 [ 345.711501][ T7938] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 345.723436][ T7938] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 345.736131][ T7938] F2FS-fs (loop0): invalid crc value [ 345.775224][ T7967] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 345.864509][ T7938] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 345.871840][ T7938] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 347.088685][ T5770] syz-executor: attempt to access beyond end of device [ 347.088685][ T5770] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 347.139103][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 347.174916][ T7980] loop4: detected capacity change from 0 to 512 [ 347.191246][ T7980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 347.222168][ T7980] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.479: corrupted in-inode xattr: e_name out of bounds [ 347.256855][ T7980] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.479: couldn't read orphan inode 15 (err -117) [ 347.296172][ T7980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.397135][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.190473][ T7996] vivid-000: disconnect [ 349.204261][ T7996] vivid-000: reconnect [ 349.385066][ T7999] syz.0.480 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 349.526378][ T7999] loop0: detected capacity change from 0 to 2048 [ 349.728417][ T7999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.389606][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.942756][ T8007] loop2: detected capacity change from 0 to 2048 [ 352.021392][ T8007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.354441][ T8007] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 352.391091][ T8007] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 274 with error 28 [ 352.413707][ T8007] EXT4-fs (loop2): This should not happen!! Data will be lost [ 352.413707][ T8007] [ 352.434315][ T8007] EXT4-fs (loop2): Total free blocks count 0 [ 352.445344][ T8007] EXT4-fs (loop2): Free/Dirty block details [ 352.451405][ T8007] EXT4-fs (loop2): free_blocks=2415919104 [ 352.484118][ T8007] EXT4-fs (loop2): dirty_blocks=288 [ 352.503710][ T8007] EXT4-fs (loop2): Block reservation details [ 352.509763][ T8007] EXT4-fs (loop2): i_reserved_data_blocks=18 [ 352.859362][ T8017] loop1: detected capacity change from 0 to 2048 [ 353.244802][ T8017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.551020][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.610855][ T2911] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 354.636042][ T8018] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 354.682706][ T8026] loop1: detected capacity change from 0 to 128 [ 355.064460][ T8032] loop1: detected capacity change from 0 to 256 [ 355.075351][ T8032] exfat: Deprecated parameter 'utf8' [ 355.080827][ T8032] exfat: Deprecated parameter 'namecase' [ 355.194076][ T8032] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 356.972133][ T8093] trusted_key: encrypted_key: insufficient parameters specified [ 357.612565][ T8098] block device autoloading is deprecated and will be removed. [ 357.676243][ T8099] vivid-000: disconnect [ 357.854376][ T8100] vivid-000: reconnect [ 358.213663][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 358.213679][ T27] audit: type=1326 audit(1751025367.953:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.272132][ T27] audit: type=1326 audit(1751025367.953:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.335279][ T27] audit: type=1326 audit(1751025367.953:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.378064][ T27] audit: type=1326 audit(1751025367.963:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.430987][ T27] audit: type=1326 audit(1751025367.963:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.467223][ T27] audit: type=1326 audit(1751025367.993:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.528564][ T27] audit: type=1326 audit(1751025368.043:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.591347][ T27] audit: type=1326 audit(1751025368.043:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.640387][ T27] audit: type=1326 audit(1751025368.043:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 358.684026][ T27] audit: type=1326 audit(1751025368.043:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c438e929 code=0x7ffc0000 [ 359.177612][ T6857] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 359.273470][ T8114] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 359.379701][ T6857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.417371][ T6857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.427863][ T6857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 359.445159][ T6857] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 359.454782][ T6857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.468781][ T6857] usb 2-1: config 0 descriptor?? [ 359.901560][ T6857] wacom 0003:056A:0027.0004: ignoring exceeding usage max [ 359.917583][ T6857] wacom 0003:056A:0027.0004: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 359.939398][ T6857] wacom 0003:056A:0027.0004: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 359.965892][ T6857] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.0004/input/input18 [ 360.173799][ T8106] loop1: detected capacity change from 0 to 512 [ 360.220559][ T8106] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.497: corrupted in-inode xattr: invalid ea_ino [ 360.289649][ T8106] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.497: couldn't read orphan inode 15 (err -117) [ 360.366669][ T8106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000001000000 r/w without journal. Quota mode: none. [ 362.487690][ T5773] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 362.517814][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000001000000. [ 362.758079][ T8158] loop1: detected capacity change from 0 to 1024 [ 362.800841][ T8158] EXT4-fs: Ignoring removed i_version option [ 362.844476][ T8158] EXT4-fs: quotafile must be on filesystem root [ 363.004208][ T8161] vivid-000: disconnect [ 363.011868][ T8161] vivid-000: reconnect [ 363.984296][ T5831] usb 2-1: USB disconnect, device number 7 [ 365.359524][ T8174] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 365.957666][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 366.947738][ T8192] loop4: detected capacity change from 0 to 128 [ 368.362690][ T8199] loop4: detected capacity change from 0 to 256 [ 368.369871][ T8199] exfat: Deprecated parameter 'utf8' [ 368.375278][ T8199] exfat: Deprecated parameter 'namecase' [ 369.013038][ T8201] vivid-000: disconnect [ 369.017855][ T8201] vivid-000: reconnect [ 369.524118][ T5154] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 369.571400][ T8199] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 369.806960][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.947639][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.963934][ T5154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 370.750295][ T8210] loop1: detected capacity change from 0 to 512 [ 370.925092][ T8210] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 371.073468][ T8210] EXT4-fs (loop1): 1 truncate cleaned up [ 371.089081][ T8210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.669144][ T5154] usb 1-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 371.678362][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.689873][ T5154] usb 1-1: config 0 descriptor?? [ 372.004396][ T6857] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 372.427247][ T6857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.635225][ T6857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 372.692486][ T5154] usb 1-1: can't set config #0, error -71 [ 372.700308][ T5154] usb 1-1: USB disconnect, device number 6 [ 373.078400][ T6857] usb 2-1: string descriptor 0 read error: -71 [ 373.084815][ T6857] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 373.094068][ T6857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.105933][ T6857] usb 2-1: config 0 descriptor?? [ 373.112975][ T6857] usb 2-1: can't set config #0, error -71 [ 373.120633][ T6857] usb 2-1: USB disconnect, device number 8 [ 373.736340][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.177546][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 375.228126][ T8228] loop4: detected capacity change from 0 to 256 [ 375.248262][ T8228] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 375.331498][ T8238] loop2: detected capacity change from 0 to 512 [ 375.485124][ T8238] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.526: invalid indirect mapped block 256 (level 2) [ 375.552664][ T8238] EXT4-fs (loop2): 2 truncates cleaned up [ 375.584830][ T8238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.747826][ T8217] loop0: detected capacity change from 0 to 40427 [ 375.768777][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 375.770781][ T8217] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 375.840110][ T8217] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 375.842991][ T8238] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.526: bg 0: block 5: invalid block bitmap [ 375.888917][ T8217] F2FS-fs (loop0): invalid crc value [ 375.907336][ T8238] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 360 with error 28 [ 375.953647][ T8238] EXT4-fs (loop2): This should not happen!! Data will be lost [ 375.953647][ T8238] [ 375.963379][ T8238] EXT4-fs (loop2): Total free blocks count 0 [ 376.013683][ T8238] EXT4-fs (loop2): Free/Dirty block details [ 376.019668][ T8238] EXT4-fs (loop2): free_blocks=0 [ 376.076740][ T8238] EXT4-fs (loop2): dirty_blocks=364 [ 376.082038][ T8238] EXT4-fs (loop2): Block reservation details [ 376.102749][ T8238] EXT4-fs (loop2): i_reserved_data_blocks=364 [ 376.240462][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.863945][ T8256] vivid-000: disconnect [ 376.870356][ T8256] vivid-000: reconnect [ 378.484178][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 378.484195][ T27] audit: type=1326 audit(1751025388.223:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 378.525402][ T27] audit: type=1326 audit(1751025388.273:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 378.599134][ T27] audit: type=1326 audit(1751025388.303:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 378.662591][ T27] audit: type=1326 audit(1751025388.303:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 378.729685][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.731587][ T27] audit: type=1326 audit(1751025388.323:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 378.739223][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.782016][ T27] audit: type=1326 audit(1751025388.323:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 378.806294][ T27] audit: type=1326 audit(1751025388.333:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 378.898328][ T27] audit: type=1326 audit(1751025388.333:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 378.969508][ T27] audit: type=1326 audit(1751025388.333:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 379.068182][ T27] audit: type=1326 audit(1751025388.363:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 379.754922][ T5784] block nbd13: Receive control failed (result -11) [ 380.137059][ T8285] loop1: detected capacity change from 0 to 512 [ 380.175610][ T8285] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.222877][ T8289] netlink: 'syz.4.535': attribute type 13 has an invalid length. [ 380.319714][ T8285] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 380.451492][ T5768] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 380.471682][ T8289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.006547][ T8298] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 382.094068][ T8305] vivid-000: disconnect [ 382.113292][ T8305] vivid-000: reconnect [ 384.266841][ T6857] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 384.487594][ T5784] block nbd14: Receive control failed (result -11) [ 384.500437][ T6857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.530309][ T6857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.547587][ T6857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 384.568262][ T6857] usb 5-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 384.578029][ T6857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.600128][ T6857] usb 5-1: config 0 descriptor?? [ 384.800298][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 384.800317][ T27] audit: type=1326 audit(1751025394.523:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 384.838983][ T27] audit: type=1326 audit(1751025394.523:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 384.879587][ T27] audit: type=1326 audit(1751025394.523:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 384.908956][ T27] audit: type=1326 audit(1751025394.523:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 384.940671][ T27] audit: type=1326 audit(1751025394.533:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 384.975840][ T27] audit: type=1326 audit(1751025394.533:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 385.000732][ T27] audit: type=1326 audit(1751025394.723:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 385.023810][ T27] audit: type=1326 audit(1751025394.723:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 385.790979][ T6857] wacom 0003:056A:0027.0005: ignoring exceeding usage max [ 385.796049][ T8327] loop4: detected capacity change from 0 to 512 [ 385.832652][ T6857] wacom 0003:056A:0027.0005: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 385.904860][ T6857] wacom 0003:056A:0027.0005: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.4-1/input0 [ 385.955436][ T8327] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.542: corrupted in-inode xattr: invalid ea_ino [ 385.997053][ T6857] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0027.0005/input/input23 [ 386.030900][ T8327] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.542: couldn't read orphan inode 15 (err -117) [ 386.214500][ T8327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000001000000 r/w without journal. Quota mode: none. [ 387.304106][ T5154] usb 5-1: USB disconnect, device number 4 [ 387.682136][ T8346] loop1: detected capacity change from 0 to 40427 [ 387.723446][ T8346] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1af [ 387.741674][ T8346] F2FS-fs (loop1): invalid crc value [ 387.754883][ T8346] F2FS-fs (loop1): Found nat_bits in checkpoint [ 387.871668][ T8346] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 387.904980][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000001000000. [ 388.466690][ T8356] loop2: detected capacity change from 0 to 512 [ 388.503621][ T8356] EXT4-fs (loop2): Test dummy encryption mode enabled [ 388.510472][ T8356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.533053][ T8356] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.552: bad orphan inode 131083 [ 388.550166][ T8356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.592279][ T8358] syzkaller0: entered promiscuous mode [ 388.596133][ T8362] vivid-000: disconnect [ 388.612761][ T8358] syzkaller0: entered allmulticast mode [ 388.654422][ T8362] vivid-000: reconnect [ 389.602876][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.283658][ T27] audit: type=1326 audit(1751025400.023:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.359513][ T27] audit: type=1326 audit(1751025400.023:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.422855][ T27] audit: type=1326 audit(1751025400.063:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.448425][ T27] audit: type=1326 audit(1751025400.063:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.478354][ T27] audit: type=1326 audit(1751025400.063:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.518124][ T27] audit: type=1326 audit(1751025400.073:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.546617][ T27] audit: type=1326 audit(1751025400.133:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.589099][ T27] audit: type=1326 audit(1751025400.133:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.630809][ T27] audit: type=1326 audit(1751025400.133:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 390.660085][ T27] audit: type=1326 audit(1751025400.133:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 392.287347][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.309341][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.329132][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.340308][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.357714][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 392.374790][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.193937][ T5831] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 394.216975][ T8391] chnl_net:caif_netlink_parms(): no params data found [ 394.239306][ T8401] loop4: detected capacity change from 0 to 128 [ 394.421411][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.473063][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.496255][ T5784] Bluetooth: hci4: command tx timeout [ 394.526727][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 394.540217][ T5831] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 394.550085][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.363798][ T8405] loop4: detected capacity change from 0 to 256 [ 395.366398][ T5831] usb 3-1: config 0 descriptor?? [ 395.370964][ T8405] exfat: Deprecated parameter 'utf8' [ 395.380557][ T8405] exfat: Deprecated parameter 'namecase' [ 395.396754][ T8405] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 395.553123][ T8408] loop1: detected capacity change from 0 to 2048 [ 395.640249][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.677747][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.716351][ T8391] bridge_slave_0: entered allmulticast mode [ 395.731160][ T8391] bridge_slave_0: entered promiscuous mode [ 395.742927][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.743211][ T8408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.750205][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.750443][ T8391] bridge_slave_1: entered allmulticast mode [ 395.781973][ T8391] bridge_slave_1: entered promiscuous mode [ 395.857313][ T5831] wacom 0003:056A:0027.0006: ignoring exceeding usage max [ 395.910644][ T5831] wacom 0003:056A:0027.0006: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 395.915610][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.946612][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.084409][ T8417] loop4: detected capacity change from 0 to 512 [ 396.177425][ T8417] EXT4-fs (loop4): Test dummy encryption mode enabled [ 396.236724][ T5831] wacom 0003:056A:0027.0006: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0 [ 396.297217][ T8417] EXT4-fs error (device loop4): __ext4_iget:5047: inode #11: block 1: comm syz.4.562: invalid block [ 396.333922][ T8417] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.562: couldn't read orphan inode 11 (err -117) [ 396.381469][ T8417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.574026][ T5784] Bluetooth: hci4: command tx timeout [ 397.087406][ T8411] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 397.173162][ T8395] loop2: detected capacity change from 0 to 512 [ 397.203679][ T5831] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.0006/input/input26 [ 397.326259][ T8395] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.559: corrupted in-inode xattr: invalid ea_ino [ 397.413129][ T8395] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.559: couldn't read orphan inode 15 (err -117) [ 397.541514][ T8395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000001000000 r/w without journal. Quota mode: none. [ 398.323955][ T8411] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 398.386507][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.462758][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 398.462774][ T27] audit: type=1326 audit(1751025408.203:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 398.512225][ T27] audit: type=1326 audit(1751025408.203:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 398.543897][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.563769][ T5831] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 398.628459][ T27] audit: type=1326 audit(1751025408.203:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 398.631633][ T8391] team0: Port device team_slave_0 added [ 398.663814][ T5784] Bluetooth: hci4: command tx timeout [ 398.683284][ T8391] team0: Port device team_slave_1 added [ 398.730030][ T27] audit: type=1326 audit(1751025408.203:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 398.790812][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.791816][ T27] audit: type=1326 audit(1751025408.203:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 398.803581][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.854307][ T8391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.867676][ T27] audit: type=1326 audit(1751025408.243:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 398.878872][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.931753][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.958200][ T27] audit: type=1326 audit(1751025408.243:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 398.989558][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000001000000. [ 398.999268][ T8391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.032079][ T27] audit: type=1326 audit(1751025408.243:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 399.104312][ T27] audit: type=1326 audit(1751025408.243:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 399.200310][ T8391] hsr_slave_0: entered promiscuous mode [ 399.270559][ T8391] hsr_slave_1: entered promiscuous mode [ 399.298335][ T8391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.325375][ T8391] Cannot create hsr debugfs directory [ 399.330973][ T27] audit: type=1326 audit(1751025408.243:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 399.442964][ T5154] usb 3-1: USB disconnect, device number 3 [ 399.632583][ T8436] loop2: detected capacity change from 0 to 512 [ 399.909939][ T8436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.923233][ T8436] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.733737][ T5784] Bluetooth: hci4: command tx timeout [ 402.238198][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.358083][ T8391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.410331][ T8391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.459067][ T8391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.504812][ T8391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.786444][ T8458] loop1: detected capacity change from 0 to 128 [ 402.799929][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.903051][ T8391] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.008377][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.015633][ T8080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.100989][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.108249][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.257028][ T8460] loop1: detected capacity change from 0 to 256 [ 403.268767][ T8460] exfat: Deprecated parameter 'utf8' [ 403.274348][ T8460] exfat: Deprecated parameter 'namecase' [ 403.357672][ T8460] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 403.865825][ T8391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.945848][ T8391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.735586][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.912844][ T8474] syzkaller0: entered promiscuous mode [ 404.950961][ T8474] syzkaller0: entered allmulticast mode [ 404.982103][ T8480] loop4: detected capacity change from 0 to 256 [ 405.074371][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.136896][ T8480] FAT-fs (loop4): Filesystem has been set read-only [ 405.161115][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.216244][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.267115][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.318046][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.357306][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.383787][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.396091][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.402590][ T8465] loop1: detected capacity change from 0 to 40427 [ 405.480164][ T8465] F2FS-fs (loop1): invalid crc value [ 405.490985][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.525387][ T8465] F2FS-fs (loop1): Found nat_bits in checkpoint [ 405.531800][ T8480] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 405.570550][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 405.570568][ T27] audit: type=1800 audit(1751025415.303:392): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.573" name="file1" dev="loop4" ino=1048641 res=0 errno=0 [ 405.603783][ T8480] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 405.613352][ T8480] syz.4.573 (8480) used greatest stack depth: 19312 bytes left [ 405.678528][ T8465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 406.217768][ T8488] syz.1.570: attempt to access beyond end of device [ 406.217768][ T8488] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 406.984525][ T5768] syz-executor: attempt to access beyond end of device [ 406.984525][ T5768] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 407.007532][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 407.016444][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 407.873953][ T8494] loop4: detected capacity change from 0 to 512 [ 408.065564][ T8494] EXT4-fs (loop4): 1 orphan inode deleted [ 408.078696][ T8494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.099335][ T8494] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.908566][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.944620][ T8509] loop2: detected capacity change from 0 to 128 [ 412.729088][ T8517] loop2: detected capacity change from 0 to 256 [ 412.740553][ T8517] exfat: Deprecated parameter 'utf8' [ 412.746184][ T8517] exfat: Deprecated parameter 'namecase' [ 413.262542][ T8517] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 413.471350][ T8391] veth0_vlan: entered promiscuous mode [ 413.637897][ T8391] veth1_vlan: entered promiscuous mode [ 413.776098][ T8524] loop2: detected capacity change from 0 to 128 [ 413.800657][ T8391] veth0_macvtap: entered promiscuous mode [ 413.831150][ T8391] veth1_macvtap: entered promiscuous mode [ 414.213180][ T8529] loop2: detected capacity change from 0 to 256 [ 414.224764][ T8529] exfat: Deprecated parameter 'utf8' [ 414.230253][ T8529] exfat: Deprecated parameter 'namecase' [ 414.785308][ T8529] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 414.888958][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.911211][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.966716][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.110272][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.120560][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.132329][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.154168][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.169721][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.182357][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.193403][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.242076][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.282027][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.318950][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.363739][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.411994][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.427968][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.473961][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.524727][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.551695][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.583437][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.603619][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.625392][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.706554][ T8537] loop2: detected capacity change from 0 to 256 [ 415.829817][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.838848][ T8537] FAT-fs (loop2): Filesystem has been set read-only [ 415.847315][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.856523][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.866374][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.875796][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.884965][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.893904][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.903228][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.912182][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.921189][ T8537] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 415.967990][ T27] audit: type=1800 audit(1751025425.693:393): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="file1" dev="loop2" ino=1048642 res=0 errno=0 [ 415.989065][ T8537] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 416.308040][ T8539] loop1: detected capacity change from 0 to 256 [ 416.379802][ T8539] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.406197][ T8391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.455599][ T8539] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 416.465370][ T8391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.474290][ T8391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.492821][ T8391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.493706][ T8539] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 416.965052][ T8544] xt_bpf: check failed: parse error [ 417.967452][ T8067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.005318][ T8067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.098323][ T8086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.110897][ T8550] loop4: detected capacity change from 0 to 16 [ 418.120841][ T8548] loop1: detected capacity change from 0 to 256 [ 418.127605][ T8086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.139739][ T8550] erofs: (device loop4): mounted with root inode @ nid 36. [ 418.154675][ T8548] exfat: Deprecated parameter 'utf8' [ 418.160074][ T8548] exfat: Deprecated parameter 'namecase' [ 418.183044][ T8548] exfat: Deprecated parameter 'utf8' [ 418.198563][ T8548] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 418.505888][ T8554] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 418.519791][ T8554] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 418.550776][ T8554] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 418.668077][ T8554] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 418.772439][ T8559] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 420.035627][ T8559] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 420.897142][ T8565] loop1: detected capacity change from 0 to 128 [ 420.943080][ T8559] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 421.199279][ T6890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 421.462137][ T8570] veth0_vlan: entered allmulticast mode [ 421.587116][ T8576] loop1: detected capacity change from 0 to 256 [ 421.598293][ T8576] exfat: Deprecated parameter 'utf8' [ 421.604378][ T8576] exfat: Deprecated parameter 'namecase' [ 422.374801][ T8576] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 423.395546][ T8586] loop5: detected capacity change from 0 to 256 [ 423.547187][ T8586] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 425.232196][ T8582] loop1: detected capacity change from 0 to 128 [ 425.393792][ T6890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 425.810006][ T5784] block nbd15: Receive control failed (result -11) [ 425.835326][ T8597] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 426.950375][ T27] audit: type=1326 audit(1751025436.693:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037458e929 code=0x7ffc0000 [ 428.645860][ T8611] vivid-000: disconnect [ 428.650514][ T8611] vivid-000: reconnect [ 429.386835][ T27] audit: type=1326 audit(1751025436.953:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037458e929 code=0x7ffc0000 [ 429.409031][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.692623][ T27] audit: type=1326 audit(1751025436.953:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f037458e929 code=0x7ffc0000 [ 429.783820][ T27] audit: type=1326 audit(1751025436.953:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037458e929 code=0x7ffc0000 [ 429.822837][ T27] audit: type=1326 audit(1751025436.953:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037458e929 code=0x7ffc0000 [ 429.907003][ T27] audit: type=1326 audit(1751025436.963:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f037458e929 code=0x7ffc0000 [ 430.027425][ T27] audit: type=1326 audit(1751025439.483:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037458e929 code=0x7ffc0000 [ 430.122972][ T27] audit: type=1326 audit(1751025439.483:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037458e929 code=0x7ffc0000 [ 430.170695][ T8620] loop2: detected capacity change from 0 to 128 [ 430.328557][ T6890] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 430.519833][ T8626] loop1: detected capacity change from 0 to 128 [ 431.475686][ T8632] loop2: detected capacity change from 0 to 256 [ 431.482668][ T8632] exfat: Deprecated parameter 'utf8' [ 431.488120][ T8632] exfat: Deprecated parameter 'namecase' [ 431.513274][ T8632] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 431.870108][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.606'. [ 432.038689][ T8645] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 432.328320][ T787] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 432.455619][ T8649] vivid-000: disconnect [ 432.462006][ T8649] vivid-000: reconnect [ 432.562875][ T787] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 432.670161][ T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.808302][ T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.044565][ T787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 433.103597][ T787] usb 6-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 433.138137][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.194802][ T787] usb 6-1: config 0 descriptor?? [ 433.326118][ T27] audit: type=1326 audit(1751025443.073:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.360875][ T27] audit: type=1326 audit(1751025443.093:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.400133][ T27] audit: type=1326 audit(1751025443.093:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.487091][ T27] audit: type=1326 audit(1751025443.093:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.537725][ T27] audit: type=1326 audit(1751025443.093:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.560683][ T27] audit: type=1326 audit(1751025443.133:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.584353][ T27] audit: type=1326 audit(1751025443.133:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.608454][ T27] audit: type=1326 audit(1751025443.133:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.650970][ T787] wacom 0003:056A:00F4.0007: item fetching failed at offset 5/7 [ 433.652449][ T27] audit: type=1326 audit(1751025443.133:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.674483][ T787] wacom 0003:056A:00F4.0007: parse failed [ 433.743886][ T787] wacom: probe of 0003:056A:00F4.0007 failed with error -22 [ 433.751036][ T8656] loop2: detected capacity change from 0 to 256 [ 433.780264][ T27] audit: type=1326 audit(1751025443.143:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd47898e929 code=0x7ffc0000 [ 433.856331][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 433.874726][ T8] usb 6-1: USB disconnect, device number 2 [ 433.912960][ T8656] FAT-fs (loop2): Filesystem has been set read-only [ 434.063946][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.141019][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.150572][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.159606][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.169215][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.178091][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.186998][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.197833][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.222278][ T8656] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 434.300012][ T8663] overlayfs: failed to resolve './file2': -2 [ 435.056950][ T8656] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 435.224251][ T8669] loop5: detected capacity change from 0 to 128 [ 435.416471][ T8671] loop4: detected capacity change from 0 to 128 [ 435.448463][ T5845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 435.680220][ T8673] loop5: detected capacity change from 0 to 128 [ 435.807996][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.843638][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.853466][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 435.886409][ T5845] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 435.895631][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.959309][ T5845] usb 2-1: config 0 descriptor?? [ 436.120832][ T8681] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.407015][ T5845] wacom 0003:056A:0027.0008: ignoring exceeding usage max [ 436.427515][ T5845] wacom 0003:056A:0027.0008: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 436.447953][ T5845] wacom 0003:056A:0027.0008: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 436.484405][ T5845] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.0008/input/input29 [ 436.669702][ T8667] loop1: detected capacity change from 0 to 512 [ 436.777822][ T8667] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.614: corrupted in-inode xattr: invalid ea_ino [ 436.880313][ T8694] loop4: detected capacity change from 0 to 256 [ 437.040516][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.049674][ T8694] FAT-fs (loop4): Filesystem has been set read-only [ 437.057046][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.067484][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.076673][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.086157][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.095232][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.104292][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.113669][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.122580][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.131549][ T8694] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 437.187450][ T8694] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 437.466784][ T8667] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.614: couldn't read orphan inode 15 (err -117) [ 437.558541][ T8667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000001000000 r/w without journal. Quota mode: none. [ 437.593397][ T5154] usb 2-1: USB disconnect, device number 9 [ 438.214063][ T8704] loop5: detected capacity change from 0 to 256 [ 438.430642][ T8704] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 438.637983][ T8703] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 438.646497][ T8703] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 438.655969][ T8703] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 438.663935][ T8703] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 439.444393][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000001000000. [ 439.880379][ T8711] xt_hashlimit: size too large, truncated to 1048576 [ 440.168754][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.183695][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.674508][ T8724] loop5: detected capacity change from 0 to 128 [ 443.455770][ T8734] loop2: detected capacity change from 0 to 128 [ 443.678949][ T6890] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 444.117095][ T8739] loop5: detected capacity change from 0 to 512 [ 444.209521][ T8739] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.630: invalid indirect mapped block 256 (level 2) [ 444.280825][ T8739] EXT4-fs (loop5): 2 truncates cleaned up [ 444.310267][ T8739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.712694][ T8739] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.630: bg 0: block 5: invalid block bitmap [ 444.940572][ T5784] block nbd16: Receive control failed (result -11) [ 445.016425][ T8739] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 445.126373][ T8739] EXT4-fs (loop5): This should not happen!! Data will be lost [ 445.126373][ T8739] [ 445.248363][ T8739] EXT4-fs (loop5): Total free blocks count 0 [ 445.339734][ T8739] EXT4-fs (loop5): Free/Dirty block details [ 445.385440][ T8739] EXT4-fs (loop5): free_blocks=0 [ 445.390454][ T8739] EXT4-fs (loop5): dirty_blocks=196 [ 445.444157][ T8739] EXT4-fs (loop5): Block reservation details [ 445.450248][ T8739] EXT4-fs (loop5): i_reserved_data_blocks=196 [ 445.671217][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.035239][ T8742] loop4: detected capacity change from 0 to 40427 [ 446.065362][ T8742] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 446.096934][ T8742] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 446.113245][ T787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 446.163924][ T8742] F2FS-fs (loop4): invalid crc value [ 446.197958][ T8742] F2FS-fs (loop4): Found nat_bits in checkpoint [ 446.569474][ T8762] loop2: detected capacity change from 0 to 512 [ 446.632992][ T8762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 446.742564][ T8762] EXT4-fs (loop2): 1 truncate cleaned up [ 446.756328][ T8762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.113062][ T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.124106][ T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.134009][ T787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 447.146914][ T787] usb 6-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 447.176631][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.219797][ T787] usb 6-1: config 0 descriptor?? [ 447.288633][ T8742] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 447.334315][ T8742] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 447.507250][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.681905][ T787] wacom 0003:056A:0027.0009: ignoring exceeding usage max [ 447.712274][ T787] wacom 0003:056A:0027.0009: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 447.732350][ T787] wacom 0003:056A:0027.0009: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.5-1/input0 [ 447.756668][ T787] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0027.0009/input/input32 [ 447.899420][ T8753] loop5: detected capacity change from 0 to 512 [ 447.910668][ T8766] syzkaller0: entered promiscuous mode [ 447.944021][ T8766] syzkaller0: entered allmulticast mode [ 448.039902][ T8753] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.634: corrupted in-inode xattr: invalid ea_ino [ 448.104781][ T8753] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.634: couldn't read orphan inode 15 (err -117) [ 448.136027][ T8753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000001000000 r/w without journal. Quota mode: none. [ 448.263548][ T787] usb 6-1: USB disconnect, device number 3 [ 448.842084][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000001000000. [ 451.272010][ T8783] loop5: detected capacity change from 0 to 128 [ 452.640440][ T8793] loop1: detected capacity change from 0 to 512 [ 452.722224][ T8793] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.642: invalid indirect mapped block 256 (level 2) [ 452.790937][ T8793] EXT4-fs (loop1): 2 truncates cleaned up [ 452.802598][ T8793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.174356][ T8793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.642: bg 0: block 5: invalid block bitmap [ 453.213908][ T8793] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 348 with error 28 [ 453.271157][ T8793] EXT4-fs (loop1): This should not happen!! Data will be lost [ 453.271157][ T8793] [ 453.323766][ T8793] EXT4-fs (loop1): Total free blocks count 0 [ 453.332476][ T8793] EXT4-fs (loop1): Free/Dirty block details [ 453.346664][ T8793] EXT4-fs (loop1): free_blocks=0 [ 453.354321][ T8793] EXT4-fs (loop1): dirty_blocks=348 [ 453.567824][ T8793] EXT4-fs (loop1): Block reservation details [ 453.677241][ T8793] EXT4-fs (loop1): i_reserved_data_blocks=348 [ 454.181203][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.187386][ T8808] loop5: detected capacity change from 0 to 128 [ 455.441734][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 456.327757][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.339296][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.349649][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 456.370139][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.400646][ T8] usb 2-1: config 0 descriptor?? [ 457.588781][ T8] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 457.620131][ T8] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 457.630182][ T8] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 457.666023][ T8] pyra: probe of 0003:1E7D:2CF6.000A failed with error -5 [ 457.881620][ T28] usb 2-1: USB disconnect, device number 10 [ 458.245600][ T8828] loop4: detected capacity change from 0 to 128 [ 458.691713][ T8836] loop5: detected capacity change from 0 to 512 [ 458.725262][ T8836] EXT4-fs (loop5): failed to initialize system zone (-117) [ 458.778019][ T8836] EXT4-fs (loop5): mount failed [ 458.902769][ T8840] loop2: detected capacity change from 0 to 512 [ 459.002366][ T8840] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.655: invalid indirect mapped block 256 (level 2) [ 459.017936][ T8840] EXT4-fs (loop2): 2 truncates cleaned up [ 459.029619][ T8840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.209508][ T8840] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.655: bg 0: block 5: invalid block bitmap [ 459.252100][ T8845] 9pnet_fd: Insufficient options for proto=fd [ 459.264008][ T8840] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 459.296485][ T8840] EXT4-fs (loop2): This should not happen!! Data will be lost [ 459.296485][ T8840] [ 459.311149][ T8840] EXT4-fs (loop2): Total free blocks count 0 [ 459.385951][ T8840] EXT4-fs (loop2): Free/Dirty block details [ 459.399921][ T8840] EXT4-fs (loop2): free_blocks=0 [ 459.417829][ T8840] EXT4-fs (loop2): dirty_blocks=276 [ 459.429958][ T8840] EXT4-fs (loop2): Block reservation details [ 459.452376][ T8840] EXT4-fs (loop2): i_reserved_data_blocks=276 [ 459.574613][ T5831] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 459.596356][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.786126][ T8856] loop4: detected capacity change from 0 to 512 [ 460.805421][ T5831] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 460.829012][ T5831] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 460.851749][ T8856] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 460.863266][ T8856] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 460.872812][ T5831] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.901314][ T8856] EXT4-fs (loop4): 1 truncate cleaned up [ 460.915282][ T8856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.938260][ T5831] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 460.956087][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 460.973587][ T5831] usb 2-1: Product: syz [ 460.987026][ T5831] usb 2-1: Manufacturer: syz [ 460.991834][ T5831] usb 2-1: SerialNumber: syz [ 461.055425][ T8856] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 461.120857][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.253195][ T5831] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 461.507640][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.656'. [ 461.699664][ T8869] loop4: detected capacity change from 0 to 512 [ 461.732066][ T8869] EXT4-fs (loop4): Test dummy encryption mode enabled [ 461.749091][ T8869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 461.866800][ T8869] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.662: bad orphan inode 131083 [ 461.889364][ T8869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.990379][ T787] usb 2-1: USB disconnect, device number 11 [ 462.012088][ T787] usblp0: removed [ 463.119730][ T8881] loop5: detected capacity change from 0 to 128 [ 463.380609][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.512290][ T8884] ax25_connect(): syz.4.666 uses autobind, please contact jreuter@yaina.de [ 463.532418][ T8884] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 465.006783][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 465.021142][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016 [ 465.040727][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1000048ad [ 465.050772][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 465.094561][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x61c6 [ 465.130861][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2a74 [ 465.164283][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 465.185660][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x85b [ 465.194427][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 465.275223][ T8893] kvm_intel: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3187 [ 465.307372][ T8893] kvm: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3187 [ 465.320505][ T8893] kvm_intel: kvm [8892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5149 [ 465.323228][ T8902] loop5: detected capacity change from 0 to 128 [ 465.348911][ T8904] loop2: detected capacity change from 0 to 256 [ 465.364736][ T8904] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 465.375779][ T8904] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 465.410196][ T6890] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 465.436931][ T8904] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 465.660212][ T8902] loop5: detected capacity change from 0 to 256 [ 465.668256][ T8902] exfat: Deprecated parameter 'utf8' [ 465.673704][ T8902] exfat: Deprecated parameter 'namecase' [ 465.707411][ T8902] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 466.062218][ T8910] ax25_connect(): syz.5.676 uses autobind, please contact jreuter@yaina.de [ 466.096743][ T8912] loop4: detected capacity change from 0 to 128 [ 466.102559][ T8910] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 466.163801][ T6890] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 468.786089][ T8943] loop5: detected capacity change from 0 to 128 [ 468.860224][ T8944] loop4: detected capacity change from 0 to 128 [ 468.924362][ T8944] EXT4-fs (loop4): Test dummy encryption mode enabled [ 469.061727][ T8944] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.065203][ T8943] loop5: detected capacity change from 0 to 256 [ 469.081232][ T8943] exfat: Deprecated parameter 'utf8' [ 469.086678][ T8943] exfat: Deprecated parameter 'namecase' [ 469.116293][ T8944] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 469.152061][ T8943] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 470.286401][ T8952] can0: slcan on ptm0. [ 470.854074][ T8944] can0 (unregistered): slcan off ptm0. [ 471.619497][ T7189] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.673628][ T8964] ax25_connect(): syz.2.687 uses autobind, please contact jreuter@yaina.de [ 471.704924][ T8964] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 472.656742][ T8975] loop4: detected capacity change from 0 to 128 [ 472.728132][ T8977] fuse: Bad value for 'user_id' [ 472.757198][ T8977] loop1: detected capacity change from 0 to 1024 [ 472.777168][ T8975] EXT4-fs (loop4): Test dummy encryption mode enabled [ 472.785754][ T8977] EXT4-fs: Ignoring removed nobh option [ 472.799449][ T8977] EXT4-fs: Ignoring removed bh option [ 472.815126][ T8977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 472.862679][ T8975] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.926376][ T8975] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 472.955241][ T8977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.524862][ T28] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 473.848738][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.027144][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.038627][ T28] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 474.175592][ T28] usb 6-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 474.184838][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.191016][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.197166][ T28] usb 6-1: config 0 descriptor?? [ 476.161643][ T28] wacom 0003:056A:0027.000B: ignoring exceeding usage max [ 476.252371][ T9012] loop2: detected capacity change from 0 to 256 [ 476.259735][ T9012] exfat: Deprecated parameter 'utf8' [ 476.265168][ T9012] exfat: Deprecated parameter 'utf8' [ 476.722381][ T9012] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 476.804874][ T28] wacom 0003:056A:0027.000B: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 477.159266][ T28] wacom 0003:056A:0027.000B: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.5-1/input0 [ 477.257526][ T28] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0027.000B/input/input36 [ 477.980217][ T9022] loop1: detected capacity change from 0 to 256 [ 479.248180][ T28] usb 6-1: USB disconnect, device number 4 [ 479.468953][ T9029] mmap: syz.5.698 (9029) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 480.803850][ T6914] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.935563][ T7189] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.324035][ T9046] ax25_connect(): syz.2.699 uses autobind, please contact jreuter@yaina.de [ 481.359880][ T9046] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 481.424588][ T5845] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 481.627621][ T9053] loop4: detected capacity change from 0 to 512 [ 481.657674][ T9053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 481.658718][ T9053] EXT4-fs (loop4): filesystem is read-only [ 481.659027][ T9053] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 481.683773][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.683825][ T5845] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 481.683851][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.734820][ T5845] usb 2-1: config 0 descriptor?? [ 481.768919][ T9053] EXT4-fs (loop4): filesystem is read-only [ 481.768941][ T9053] EXT4-fs (loop4): orphan cleanup on readonly fs [ 481.774044][ T9053] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.705: bg 0: block 64: padding at end of block bitmap is not set [ 481.860141][ T9053] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 481.904145][ T9053] EXT4-fs (loop4): 1 orphan inode deleted [ 481.921131][ T9053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 482.078554][ T5784] block nbd17: Receive control failed (result -11) [ 482.135082][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.143646][ T28] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 482.154821][ T5845] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 482.171106][ T5845] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input39 [ 482.295767][ T5845] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 482.340465][ T9062] loop4: detected capacity change from 0 to 1024 [ 482.352750][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.370260][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.396764][ T9062] EXT4-fs: Ignoring removed nobh option [ 482.411247][ T9062] EXT4-fs: Ignoring removed bh option [ 482.434041][ T9062] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 482.452861][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 482.471139][ T28] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 482.490835][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.530942][ T28] usb 3-1: config 0 descriptor?? [ 482.538006][ T9062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.633094][ T8] usb 2-1: USB disconnect, device number 12 [ 482.796229][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.941709][ T9071] loop4: detected capacity change from 0 to 128 [ 483.035122][ T28] wacom 0003:056A:0027.000D: ignoring exceeding usage max [ 483.070020][ T28] wacom 0003:056A:0027.000D: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 483.104021][ T28] wacom 0003:056A:0027.000D: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0 [ 483.153923][ T28] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.000D/input/input40 [ 484.912933][ T9086] loop4: detected capacity change from 0 to 2048 [ 485.000637][ T9086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.009944][ T9092] loop1: detected capacity change from 0 to 512 [ 485.022221][ T9092] EXT4-fs (loop1): Test dummy encryption mode enabled [ 485.030092][ T9092] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 485.073306][ T9092] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.715: bad orphan inode 131083 [ 485.102911][ T9092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.153013][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 485.153030][ T27] audit: type=1804 audit(1751025494.893:420): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.713" name="/newroot/110/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 485.213392][ T27] audit: type=1804 audit(1751025494.953:421): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.713" name="/newroot/110/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 485.439817][ T9097] loop5: detected capacity change from 0 to 512 [ 485.497498][ T28] usb 3-1: USB disconnect, device number 4 [ 485.540594][ T9097] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.716: corrupted in-inode xattr: invalid ea_ino [ 486.353966][ T9097] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.716: couldn't read orphan inode 15 (err -117) [ 486.407859][ T9097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000001000000 r/w without journal. Quota mode: none. [ 486.449496][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.600370][ T9104] loop1: detected capacity change from 0 to 128 [ 486.605448][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.617135][ T9104] EXT4-fs (loop1): Test dummy encryption mode enabled [ 486.688055][ T9104] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.722066][ T9104] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.831173][ T9110] loop4: detected capacity change from 0 to 128 [ 486.932115][ T9111] can0: slcan on ptm0. [ 487.043928][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 487.283618][ T5785] Bluetooth: hci4: command tx timeout [ 487.441252][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.790995][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.036660][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 488.088118][ T28] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 488.125519][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.165353][ T28] usb 3-1: config 0 descriptor?? [ 488.308937][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000001000000. [ 488.629217][ T28] wacom 0003:056A:0027.000E: ignoring exceeding usage max [ 488.677856][ T28] wacom 0003:056A:0027.000E: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 488.710587][ T9131] loop5: detected capacity change from 0 to 2048 [ 488.760385][ T28] wacom 0003:056A:0027.000E: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0 [ 488.836341][ T9131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.904569][ T28] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.000E/input/input43 [ 489.091841][ T28] usb 3-1: USB disconnect, device number 5 [ 489.163844][ T9104] can0 (unregistered): slcan off ptm0. [ 489.286854][ T9133] fido_id[9133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 489.328122][ T8391] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 489.412055][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.475892][ T8391] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 489.776975][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.101280][ T9150] xt_hashlimit: size too large, truncated to 1048576 [ 491.042856][ T9158] loop4: detected capacity change from 0 to 128 [ 491.095380][ T9158] EXT4-fs (loop4): Test dummy encryption mode enabled [ 491.171581][ T9158] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.218658][ T9160] loop2: detected capacity change from 0 to 128 [ 491.275257][ T9158] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 491.343720][ T6914] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 491.359728][ T9160] loop2: detected capacity change from 0 to 256 [ 491.366918][ T9160] exfat: Deprecated parameter 'utf8' [ 491.372279][ T9160] exfat: Deprecated parameter 'namecase' [ 491.445411][ T9160] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 491.508059][ T9158] overlayfs: upper fs does not support tmpfile. [ 491.699988][ T7189] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.773625][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 492.975640][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.996893][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 493.027154][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.066336][ T23] usb 3-1: config 0 descriptor?? [ 493.511481][ T23] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 493.543812][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input46 [ 493.724515][ T23] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 493.934115][ T787] usb 3-1: USB disconnect, device number 6 [ 493.970420][ T9191] fido_id[9191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 495.641654][ T9200] loop5: detected capacity change from 0 to 512 [ 495.663936][ T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 495.702349][ T9200] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.737: casefold flag without casefold feature [ 495.758474][ T9200] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.737: couldn't read orphan inode 15 (err -117) [ 495.804707][ T9200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.916845][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.947246][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.980303][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 496.017254][ T787] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 496.038076][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.072088][ T787] usb 3-1: config 0 descriptor?? [ 496.538493][ T787] wacom 0003:056A:0027.0010: ignoring exceeding usage max [ 496.570259][ T787] wacom 0003:056A:0027.0010: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 497.396845][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.678951][ T9211] loop2: detected capacity change from 0 to 256 [ 497.693942][ T9211] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.704786][ T9211] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 497.708680][ T787] wacom 0003:056A:0027.0010: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0 [ 497.757055][ T9211] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 497.783017][ T787] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.0010/input/input47 [ 498.017812][ T787] usb 3-1: USB disconnect, device number 7 [ 498.102126][ T9212] fido_id[9212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 499.006541][ T9223] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 499.006541][ T9223] program syz.5.744 not setting count and/or reply_len properly [ 499.041217][ T9223] netlink: 256 bytes leftover after parsing attributes in process `syz.5.744'. [ 499.856630][ T9235] loop5: detected capacity change from 0 to 256 [ 499.999912][ T9235] FAT-fs (loop5): Directory bread(block 64) failed [ 500.056000][ T9235] FAT-fs (loop5): Directory bread(block 65) failed [ 500.062774][ T9235] FAT-fs (loop5): Directory bread(block 66) failed [ 500.143742][ T9235] FAT-fs (loop5): Directory bread(block 67) failed [ 500.195934][ T9235] FAT-fs (loop5): Directory bread(block 68) failed [ 500.202525][ T9235] FAT-fs (loop5): Directory bread(block 69) failed [ 500.267512][ T9235] FAT-fs (loop5): Directory bread(block 70) failed [ 500.274194][ T9235] FAT-fs (loop5): Directory bread(block 71) failed [ 500.280831][ T9235] FAT-fs (loop5): Directory bread(block 72) failed [ 500.287480][ T9235] FAT-fs (loop5): Directory bread(block 73) failed [ 500.480473][ T9242] loop2: detected capacity change from 0 to 1024 [ 500.547310][ T9242] EXT4-fs: Ignoring removed nobh option [ 500.552946][ T9242] EXT4-fs: Ignoring removed bh option [ 500.624120][ T9242] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 500.770108][ T9247] loop1: detected capacity change from 0 to 128 [ 501.035078][ T9242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.562492][ T9253] overlayfs: missing 'lowerdir' [ 501.705837][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.713346][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.405526][ T55] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 502.650353][ T9265] netlink: 256 bytes leftover after parsing attributes in process `syz.4.756'. [ 502.697950][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 502.728396][ T55] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 502.760615][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.802092][ T55] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.842150][ T55] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.851674][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.872115][ T55] usb 6-1: Product: syz [ 502.880349][ T55] usb 6-1: Manufacturer: syz [ 502.889855][ T55] usb 6-1: SerialNumber: syz [ 503.150994][ T55] usb 6-1: 0:2 : does not exist [ 503.247899][ T55] usb 6-1: USB disconnect, device number 5 [ 503.362212][ T6890] udevd[6890]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.251600][ T9276] vivid-000: disconnect [ 504.256381][ T9276] vivid-000: reconnect [ 504.286727][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.218196][ T9282] loop5: detected capacity change from 0 to 128 [ 505.408194][ T9282] loop5: detected capacity change from 0 to 256 [ 505.415287][ T9282] exfat: Deprecated parameter 'utf8' [ 505.418550][ T9285] loop1: detected capacity change from 0 to 256 [ 505.420623][ T9282] exfat: Deprecated parameter 'namecase' [ 505.465113][ T9282] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 505.495433][ T9285] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 505.524527][ T9285] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 505.572992][ T9285] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 506.271713][ T9302] loop5: detected capacity change from 0 to 512 [ 506.647721][ T9302] EXT4-fs (loop5): Test dummy encryption mode enabled [ 506.687477][ T9302] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 506.765298][ T9302] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.770: bad orphan inode 131083 [ 506.848401][ T9302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.018707][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.144637][ T9289] loop2: detected capacity change from 0 to 40427 [ 507.264665][ T9289] F2FS-fs (loop2): invalid crc value [ 507.325930][ T9289] F2FS-fs (loop2): Found nat_bits in checkpoint [ 507.341603][ T9314] vivid-000: disconnect [ 507.346343][ T9314] vivid-000: reconnect [ 507.445846][ T9289] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 508.782874][ T9327] loop1: detected capacity change from 0 to 128 [ 508.829276][ T9327] loop1: detected capacity change from 0 to 256 [ 508.836546][ T9327] exfat: Deprecated parameter 'utf8' [ 508.843336][ T9327] exfat: Deprecated parameter 'namecase' [ 508.904508][ T9327] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 509.844269][ T9338] netlink: 256 bytes leftover after parsing attributes in process `syz.1.779'. [ 509.984979][ T9344] syz.1.783[9344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.985122][ T9344] syz.1.783[9344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.306318][ T9350] loop4: detected capacity change from 0 to 512 [ 510.440375][ T9350] EXT4-fs (loop4): Test dummy encryption mode enabled [ 510.456897][ T9350] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 510.471569][ T9352] vivid-000: disconnect [ 510.476574][ T9352] vivid-000: reconnect [ 510.590660][ T9350] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.782: bad orphan inode 131083 [ 510.614964][ T9350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.882596][ T9362] loop1: detected capacity change from 0 to 128 [ 511.017263][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.370506][ T9366] loop5: detected capacity change from 0 to 256 [ 511.937320][ T9366] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 514.688854][ T9391] loop4: detected capacity change from 0 to 512 [ 514.713735][ T9391] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 514.753384][ T9391] EXT4-fs (loop4): 1 truncate cleaned up [ 514.814947][ T9391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.038627][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.422368][ T9399] vivid-000: disconnect [ 515.431674][ T9399] vivid-000: reconnect [ 516.135119][ T9401] loop4: detected capacity change from 0 to 128 [ 516.254888][ T9401] loop4: detected capacity change from 0 to 256 [ 516.264074][ T9401] exfat: Deprecated parameter 'utf8' [ 516.269537][ T9401] exfat: Deprecated parameter 'namecase' [ 516.309573][ T9401] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 516.496831][ T9403] loop4: detected capacity change from 0 to 128 [ 517.841843][ T9410] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 517.851076][ T9410] overlayfs: missing 'lowerdir' [ 518.018972][ T27] audit: type=1326 audit(1751025527.543:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.206216][ T27] audit: type=1326 audit(1751025527.543:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.423895][ T27] audit: type=1326 audit(1751025527.553:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.455114][ T27] audit: type=1326 audit(1751025527.563:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.478844][ T27] audit: type=1326 audit(1751025527.563:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.501498][ T27] audit: type=1326 audit(1751025527.573:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.524209][ T27] audit: type=1326 audit(1751025527.573:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.546714][ T27] audit: type=1326 audit(1751025527.573:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.571809][ T27] audit: type=1326 audit(1751025527.583:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.594163][ T27] audit: type=1326 audit(1751025527.603:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f358e929 code=0x7ffc0000 [ 518.640578][ T9392] wg2: entered promiscuous mode [ 518.648567][ T9392] wg2: entered allmulticast mode [ 518.911534][ T9414] pim6reg1: entered promiscuous mode [ 518.917150][ T9414] pim6reg1: entered allmulticast mode [ 519.060916][ T9406] Bluetooth: hci4: command 0x0406 tx timeout [ 519.148671][ T9418] pim6reg1: entered promiscuous mode [ 519.154130][ T9418] pim6reg1: entered allmulticast mode [ 519.501604][ T9424] loop5: detected capacity change from 0 to 512 [ 519.533288][ T9424] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 519.596262][ T9424] EXT4-fs (loop5): 1 truncate cleaned up [ 519.603340][ T9424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.948383][ T9431] vivid-000: disconnect [ 519.959157][ T9431] vivid-000: reconnect [ 519.981740][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.769181][ T9435] loop5: detected capacity change from 0 to 128 [ 524.159429][ T9457] loop5: detected capacity change from 0 to 256 [ 524.288059][ T9457] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 526.297346][ T9464] vivid-000: disconnect [ 526.308455][ T9464] vivid-000: reconnect [ 529.168449][ T9485] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 529.658335][ T9494] vivid-000: disconnect [ 529.664342][ T9494] vivid-000: reconnect [ 530.467673][ T9498] loop1: detected capacity change from 0 to 256 [ 530.662070][ T6890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 530.780430][ T9502] netlink: 84 bytes leftover after parsing attributes in process `syz.5.828'. [ 531.714176][ T9506] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 532.045001][ T9519] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 532.525529][ T9523] loop1: detected capacity change from 0 to 256 [ 532.585618][ T9523] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 534.353742][ T9528] vivid-000: disconnect [ 534.389754][ T9528] vivid-000: reconnect [ 535.309372][ T9533] netlink: 84 bytes leftover after parsing attributes in process `syz.4.840'. [ 535.812310][ T9540] loop4: detected capacity change from 0 to 512 [ 535.822001][ T9540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 535.907076][ T9540] EXT4-fs (loop4): 1 truncate cleaned up [ 535.935422][ T9540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.086541][ T7189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.223898][ T9551] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 537.519645][ T9563] vivid-000: disconnect [ 537.527042][ T9563] vivid-000: reconnect [ 541.913677][ T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 542.127145][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.138585][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.149788][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 542.163209][ T787] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 542.180335][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.192551][ T787] usb 2-1: config 0 descriptor?? [ 542.620750][ T787] usbhid 2-1:0.0: can't add hid device: -71 [ 542.628950][ T787] usbhid: probe of 2-1:0.0 failed with error -71 [ 542.664036][ T787] usb 2-1: USB disconnect, device number 13 [ 542.934955][ T9604] [ 542.938070][ T9604] ============================= [ 542.944038][ T9604] WARNING: suspicious RCU usage [ 542.948936][ T9604] 6.6.94-syzkaller #0 Not tainted [ 542.954356][ T9604] ----------------------------- [ 542.959237][ T9604] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 542.968308][ T9604] [ 542.968308][ T9604] other info that might help us debug this: [ 542.968308][ T9604] [ 542.978641][ T9604] [ 542.978641][ T9604] rcu_scheduler_active = 2, debug_locks = 1 [ 542.986788][ T9604] 1 lock held by syz.4.865/9604: [ 542.991754][ T9604] #0: ffffffff8cd2f900 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 543.002115][ T9604] [ 543.002115][ T9604] stack backtrace: [ 543.008138][ T9604] CPU: 0 PID: 9604 Comm: syz.4.865 Not tainted 6.6.94-syzkaller #0 [ 543.016071][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.026207][ T9604] Call Trace: [ 543.029525][ T9604] [ 543.032499][ T9604] dump_stack_lvl+0x16c/0x230 [ 543.037235][ T9604] ? show_regs_print_info+0x20/0x20 [ 543.042482][ T9604] ? load_image+0x3b0/0x3b0 [ 543.047051][ T9604] lockdep_rcu_suspicious+0x1e1/0x300 [ 543.052479][ T9604] get_callchain_entry+0x2a9/0x3c0 [ 543.057681][ T9604] get_perf_callchain+0xa3/0x4b0 [ 543.062673][ T9604] ? put_callchain_entry+0xb0/0xb0 [ 543.067837][ T9604] ? plist_add+0x3d8/0x490 [ 543.072314][ T9604] __bpf_get_stack+0x2d7/0x510 [ 543.077143][ T9604] ? stack_map_get_build_id_offset+0x720/0x720 [ 543.083363][ T9604] ? __cant_sleep+0x210/0x210 [ 543.088093][ T9604] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 543.093784][ T9604] bpf_get_stack_raw_tp+0x1a9/0x210 [ 543.099035][ T9604] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 543.104543][ T9604] bpf_prog_run_pin_on_cpu+0xa8/0x140 [ 543.109969][ T9604] bpf_prog_test_run_syscall+0x311/0x490 [ 543.115658][ T9604] ? sock_gen_cookie+0x60/0x60 [ 543.120480][ T9604] ? sock_gen_cookie+0x60/0x60 [ 543.125307][ T9604] bpf_prog_test_run+0x321/0x390 [ 543.130321][ T9604] __sys_bpf+0x440/0x800 [ 543.134621][ T9604] ? bpf_link_show_fdinfo+0x350/0x350 [ 543.140048][ T9604] ? lock_chain_count+0x20/0x20 [ 543.144961][ T9604] __x64_sys_bpf+0x7c/0x90 [ 543.149422][ T9604] do_syscall_64+0x55/0xb0 [ 543.153897][ T9604] ? clear_bhb_loop+0x40/0x90 [ 543.158619][ T9604] ? clear_bhb_loop+0x40/0x90 [ 543.163337][ T9604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.169290][ T9604] RIP: 0033:0x7fb9f358e929 [ 543.173763][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.193420][ T9604] RSP: 002b:00007fb9f447f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.201884][ T9604] RAX: ffffffffffffffda RBX: 00007fb9f37b5fa0 RCX: 00007fb9f358e929 [ 543.209896][ T9604] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 543.217913][ T9604] RBP: 00007fb9f3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 543.225920][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.233937][ T9604] R13: 0000000000000000 R14: 00007fb9f37b5fa0 R15: 00007fff436a3418 [ 543.241964][ T9604]