last executing test programs: 29m17.714757104s ago: executing program 32 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x0, 0x5, 0x8, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$netlink(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 28m10.654490963s ago: executing program 33 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r5, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)=""/124, 0x7c}], 0x2, 0x100, 0xffffffff) fcntl$setown(r4, 0x8, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(0x0, &(0x7f0000000200)='./file0\x00') 19m42.007994693s ago: executing program 0 (id=947): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x1, 0x6, 0x8000, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "4a4faa7920a000ad"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 19m36.490584565s ago: executing program 0 (id=958): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x10, 0xffff85e5, 'syz1\x00'}, 0x0, [0x400, 0x2, 0x7ffc, 0x5, 0xd, 0x100000000, 0x0, 0x45, 0x7, 0x7, 0x3, 0x8007f, 0x1, 0x200, 0x8000000, 0x0, 0x8, 0x1, 0x2000000000000001, 0x1, 0x0, 0x0, 0x5, 0x3, 0x100000001, 0x40, 0x2, 0xff, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x3, 0x20, 0xee4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x2000008, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x7, 0x80000000, 0x7, 0x0, 0x0, 0x80000001, 0x20000000000, 0x0, 0x0, 0x0, 0x5, 0x9, 0xb4f, 0xffffffff, 0x9, 0xfffffffc, 0x1, 0x0, 0xffffffd, 0xd87, 0x0, 0x0, 0x1, 0x80, 0x400000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4b7, 0x1000e9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x20bb, 0x200000, 0x3, 0x0, 0xfffffffb, 0x7, 0x7ffffffd, 0x4, 0x0, 0x2, 0x1, 0x400003, 0x3, 0x0, 0xfffffffd, 0x5, 0x3, 0x6, 0x6, 0x0, 0x8, 0x4, 0x0, 0x0, 0xe1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7ff]}) epoll_create1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x60004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = io_uring_setup(0x1ddd, &(0x7f00000003c0)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x10f0, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x80000000, r7}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 19m35.386913313s ago: executing program 0 (id=960): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x7000, 0xeeee8000, 0x3, 0x0, 0x8, 0xee, 0xde, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x4000, 0xeeef0000, 0xd, 0x7, 0x41, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x4}, {0x50000, 0x2000, 0xb, 0xc, 0x26, 0x7, 0x81, 0x3, 0x2, 0x4, 0x1, 0x73}, {0x5000, 0x6000, 0x0, 0xfe, 0x6, 0xaa, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0x8}, {0x2000, 0x80a0000, 0xc, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0xeeee8000, 0x10000, 0x9, 0xb9, 0x5, 0x5, 0x0, 0x5, 0xac, 0x1, 0x0, 0x7}, {0x8080000, 0x0, 0xa, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0xffff1000, 0xeee98004, 0xa, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x58000, 0x5}, {0x4000, 0x6}, 0x20000025, 0x0, 0xeeef0002, 0x200, 0x8, 0x801, 0xeeee0c00, [0x1, 0x1004, 0x5, 0x9]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0xa0401, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'ni_labpc\x00', [0xfe, 0x10013, 0xcd, 0x2, 0xfffffffe, 0x100, 0x3, 0xe7, 0x8, 0xc, 0x0, 0xb4d, 0x400001, 0x20000001, 0x800, 0x80000002, 0x0, 0x46, 0xfe8, 0x401, 0x4, 0x2, 0x3, 0x9, 0x80000048, 0x9, 0x6, 0x6a77, 0x1, 0x7, 0x7, 0xffffffff]}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r3, r1, 0x0, 0x7ffffffd) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000dc0)=@svm={0x100, 0x1, 0x1080, {0x2000}, {"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"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) keyctl$negate(0xc, 0x0, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x400) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000000), 0x4) 19m32.864610084s ago: executing program 0 (id=967): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='timers\x00') lseek(r0, 0x38, 0x0) lseek(r0, 0x100, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$sock(r1, &(0x7f0000002080), 0x8000379, 0x4000801) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvmmsg(0xffffffffffffffff, &(0x7f00000029c0), 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRES32=r4], 0x3c}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004"], 0xff3c, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x565c}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0xff, @scatter={0x2134, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/200, 0xc8}]}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x4, 0x0, 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4001, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc1205531, &(0x7f0000002680)=""/4066) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r8, 0xc0045401, &(0x7f0000000600)=0x17f) sendmsg$key(r7, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003"], 0xa0}}, 0x0) 19m29.397182535s ago: executing program 0 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xb, &(0x7f0000000040)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004000000defffffffffdffffffffffffffff08000740010000012c000680140004000000000000000000000000000000000114000500200100"/192], 0xc0}}, 0x0) fcntl$dupfd(r2, 0x406, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r1, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r4, &(0x7f0000001900)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0xfdef) openat(0xffffffffffffff9c, 0x0, 0x60c42, 0x5) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) socket$tipc(0x1e, 0x5, 0x0) pipe(0x0) 19m27.365237514s ago: executing program 0 (id=974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000"], 0x0) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0xffffffffffffff92, &(0x7f0000000080)={&(0x7f0000000200)={'crc32-pclmul\x00'}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x2, 0xb, 0x5}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'pcl724\x00', [0xfffffffb, 0x2, 0x2, 0x6, 0x1, 0x2, 0x7f, 0x7, 0x5, 0x54, 0x5, 0xfff, 0xfffffff7, 0x5, 0x79, 0x8, 0x9, 0x6, 0x7, 0x100, 0x9, 0x8, 0x0, 0x59, 0xc4, 0x9, 0x4, 0x7a0, 0x7, 0x10, 0x0, 0x2]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f00000000c0)="ff71e4ca0c558de7a90b5876f7", 0xfffffffffffffdfc, 0x80, 0x0, 0x0) 19m11.061366827s ago: executing program 34 (id=974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000"], 0x0) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0xffffffffffffff92, &(0x7f0000000080)={&(0x7f0000000200)={'crc32-pclmul\x00'}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x2, 0xb, 0x5}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'pcl724\x00', [0xfffffffb, 0x2, 0x2, 0x6, 0x1, 0x2, 0x7f, 0x7, 0x5, 0x54, 0x5, 0xfff, 0xfffffff7, 0x5, 0x79, 0x8, 0x9, 0x6, 0x7, 0x100, 0x9, 0x8, 0x0, 0x59, 0xc4, 0x9, 0x4, 0x7a0, 0x7, 0x10, 0x0, 0x2]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f00000000c0)="ff71e4ca0c558de7a90b5876f7", 0xfffffffffffffdfc, 0x80, 0x0, 0x0) 16m6.918571507s ago: executing program 4 (id=1283): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) io_uring_setup(0x67d, &(0x7f0000000300)={0x0, 0x8d6d, 0x800, 0x1}) r0 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x3, 0x161}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000c00000008", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xf253) io_uring_enter(r0, 0x0, 0x0, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r6, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) 16m5.715928049s ago: executing program 4 (id=1286): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r0) socket$inet6(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0xa9a, 0x1, 0x7, 0x80000008, 0x0}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='environ\x00') socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r4, 0x0, 0x0) listen(r2, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$packet(r5, &(0x7f0000000600)="5f0e", 0x2, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 15m55.185147451s ago: executing program 4 (id=1300): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x1, 0x6, 0x8000, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "4a4faa7920a000ad"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 15m53.418724698s ago: executing program 4 (id=1303): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f00000001c0)='1', 0x1) write$6lowpan_control(r0, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x5, @remote, 0x7}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x14, r6, 0x1, 0x70bd2c, 0x1200}, 0x14}}, 0x4) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_ifreq(r8, 0x8937, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000140)="41d1311e676f2fa7bc8867091918675ef2c7201df7e62ca56362ea7df33cd505"}) 15m47.847186401s ago: executing program 4 (id=1307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) setpriority(0x2, 0x0, 0x6) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x2) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) write(r9, &(0x7f0000000180)="1f", 0x1) fallocate(r9, 0x8, 0x4000, 0x4000) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r10, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x34}}, 0x20) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x74, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44004}, 0x842) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15m42.195236608s ago: executing program 4 (id=1316): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x7000, 0xeeee8000, 0x3, 0x0, 0x8, 0xee, 0xde, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x4000, 0xeeef0000, 0xd, 0x7, 0x41, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x4}, {0x50000, 0x2000, 0xb, 0xc, 0x26, 0x7, 0x81, 0x3, 0x2, 0x4, 0x1, 0x73}, {0x5000, 0x6000, 0x0, 0xfe, 0x6, 0xaa, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0x8}, {0x2000, 0x80a0000, 0xc, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0xeeee8000, 0x10000, 0x9, 0xb9, 0x5, 0x5, 0x0, 0x5, 0xac, 0x1, 0x0, 0x7}, {0x8080000, 0x0, 0xa, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0xffff1000, 0xeee98004, 0xa, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x58000, 0x5}, {0x4000, 0x6}, 0x20000025, 0x0, 0xeeef0002, 0x200, 0x8, 0x801, 0xeeee0c00, [0x1, 0x1004, 0x5, 0x9]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0xa0401, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'ni_labpc\x00', [0xfe, 0x10013, 0xcd, 0x2, 0xfffffffe, 0x100, 0x3, 0xe7, 0x8, 0xc, 0x0, 0xb4d, 0x400001, 0x20000001, 0x800, 0x80000002, 0x0, 0x46, 0xfe8, 0x401, 0x4, 0x2, 0x3, 0x9, 0x80000048, 0x9, 0x6, 0x6a77, 0x1, 0x7, 0x7, 0xffffffff]}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r3, r1, 0x0, 0x7ffffffd) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000dc0)=@svm={0x100, 0x1, 0x1080, {0x2000}, {"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"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) keyctl$negate(0xc, 0x0, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x400) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000000), 0x4) 15m25.70715264s ago: executing program 35 (id=1316): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x7000, 0xeeee8000, 0x3, 0x0, 0x8, 0xee, 0xde, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x4000, 0xeeef0000, 0xd, 0x7, 0x41, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x4}, {0x50000, 0x2000, 0xb, 0xc, 0x26, 0x7, 0x81, 0x3, 0x2, 0x4, 0x1, 0x73}, {0x5000, 0x6000, 0x0, 0xfe, 0x6, 0xaa, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0x8}, {0x2000, 0x80a0000, 0xc, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0xeeee8000, 0x10000, 0x9, 0xb9, 0x5, 0x5, 0x0, 0x5, 0xac, 0x1, 0x0, 0x7}, {0x8080000, 0x0, 0xa, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0xffff1000, 0xeee98004, 0xa, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x58000, 0x5}, {0x4000, 0x6}, 0x20000025, 0x0, 0xeeef0002, 0x200, 0x8, 0x801, 0xeeee0c00, [0x1, 0x1004, 0x5, 0x9]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0xa0401, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'ni_labpc\x00', [0xfe, 0x10013, 0xcd, 0x2, 0xfffffffe, 0x100, 0x3, 0xe7, 0x8, 0xc, 0x0, 0xb4d, 0x400001, 0x20000001, 0x800, 0x80000002, 0x0, 0x46, 0xfe8, 0x401, 0x4, 0x2, 0x3, 0x9, 0x80000048, 0x9, 0x6, 0x6a77, 0x1, 0x7, 0x7, 0xffffffff]}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r3, r1, 0x0, 0x7ffffffd) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000dc0)=@svm={0x100, 0x1, 0x1080, {0x2000}, {"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"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) keyctl$negate(0xc, 0x0, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x400) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000000), 0x4) 14m12.399096649s ago: executing program 5 (id=1433): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x1000000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x1, 0x6, 0x8000, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "4a4faa7920a000ad"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 14m10.216448154s ago: executing program 5 (id=1437): socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x4ce903, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f00000006c0)=ANY=[], 0x2a, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) keyctl$revoke(0x3, r4) r5 = add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000180), &(0x7f0000000540)="375f9c2beeffdc181e10d1f414139b0116cbadc3452c1117bf184c04000000c7b54100d1feb9f7e86bafda0432be1b1d99c4d5d6bc4e9cf792e3b9025e", 0x3d, r4) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0xffffffffffffffdb, 0x2000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x880000006}, 0x0, 0x0) 14m6.112516024s ago: executing program 5 (id=1442): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x10, 0xffff85e5, 'syz1\x00'}, 0x0, [0x400, 0x2, 0x7ffc, 0x5, 0xd, 0x100000000, 0x0, 0x45, 0x7, 0x7, 0x3, 0x8007f, 0x1, 0x200, 0x8000000, 0x0, 0x8, 0x1, 0x2000000000000001, 0x1, 0x0, 0x0, 0x5, 0x3, 0x100000001, 0x40, 0x2, 0xff, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x3, 0x20, 0xee4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x2000008, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x7, 0x80000000, 0x7, 0x0, 0x0, 0x80000001, 0x20000000000, 0x0, 0x0, 0x0, 0x5, 0x9, 0xb4f, 0xffffffff, 0x9, 0xfffffffc, 0x1, 0x0, 0xffffffd, 0xd87, 0x0, 0x0, 0x1, 0x80, 0x400000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4b7, 0x1000e9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x20bb, 0x200000, 0x3, 0x0, 0xfffffffb, 0x7, 0x7ffffffd, 0x4, 0x0, 0x2, 0x1, 0x400003, 0x3, 0x0, 0xfffffffd, 0x5, 0x3, 0x6, 0x6, 0x0, 0x8, 0x4, 0x0, 0x0, 0xe1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7ff]}) epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = io_uring_setup(0x1ddd, &(0x7f00000003c0)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x10f0, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x80000000, r6}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 14m4.743294604s ago: executing program 5 (id=1443): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000"], 0xb0}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d062d407f2c696f636861727365743d63703836332c636f6465706167653d69736f383835392d332c0057728e7edeea8ce4639d9c42b47d17d3fcd0720a8929166d5bfaae65f664ad57409da31d700c355f59f646ec2c830b3fb51d44dc6f9d032cc06c0101baca689e1b114191b7fd569fb54225bd68fca477c5f9a7e24e8298dd0c91"], 0x5, 0x357, &(0x7f0000000580)="$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") r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) pwritev(r8, &(0x7f0000000600)=[{&(0x7f0000000040)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000200)="527102587a0a4e43ad389b", 0xb}], 0x3, 0xc, 0x20000000) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r9, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000804) 14m3.465654549s ago: executing program 5 (id=1445): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x81}, 0x0, 0x0, 0x4, 0x8803, 0x30000000000000, 0x0, 0x50, 0x2}}], 0xb0, 0x8004}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) 14m1.836688821s ago: executing program 5 (id=1449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffff9c, &(0x7f0000000000)=""/53, 0x35) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xa}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)=""/16}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x8, 0x13, 0x200, 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@deltfilter={0x30, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) writev(r9, &(0x7f00000019c0)=[{&(0x7f0000000780)="bb2aa567283061f12d24e8b7646b5d2263a855a0c0be5d611d89f8a5f096f730ef7509058c134d3a39507ba1d11ca8ddc95cf756", 0x34}, {&(0x7f0000001780)="4d8dee9265b7368f6d98b7a1d6b800bb2716f33709e2559c65f99a4102dbb6a6f902e25c2da5353929142a9702222f1000fcc654523288903511aa638092e1102e", 0x41}], 0x2) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYBLOB], 0x40}}, 0x4048084) 13m43.788447941s ago: executing program 36 (id=1449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffff9c, &(0x7f0000000000)=""/53, 0x35) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xa}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)=""/16}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x8, 0x13, 0x200, 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@deltfilter={0x30, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) writev(r9, &(0x7f00000019c0)=[{&(0x7f0000000780)="bb2aa567283061f12d24e8b7646b5d2263a855a0c0be5d611d89f8a5f096f730ef7509058c134d3a39507ba1d11ca8ddc95cf756", 0x34}, {&(0x7f0000001780)="4d8dee9265b7368f6d98b7a1d6b800bb2716f33709e2559c65f99a4102dbb6a6f902e25c2da5353929142a9702222f1000fcc654523288903511aa638092e1102e", 0x41}], 0x2) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYBLOB], 0x40}}, 0x4048084) 9m1.39081975s ago: executing program 8 (id=1919): r0 = socket(0x27, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r8 = fanotify_init(0xf00, 0x1000) fanotify_mark(r8, 0x105, 0x10000839, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r8, &(0x7f0000000c40), 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000500), 0x10) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r9}, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r2, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8m58.730983087s ago: executing program 8 (id=1924): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x19508a3, &(0x7f00000003c0)=ANY=[], 0x1, 0x1528, &(0x7f0000001e80)="$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") getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, 0x80) sendfile(r3, r1, 0x0, 0x7ffffffd) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000dc0)=@svm={0x100, 0x1, 0x1080, {0x2000}, {"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"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) keyctl$negate(0xc, 0x0, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x400) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000000), 0x4) 8m52.758859328s ago: executing program 8 (id=1936): close(0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0xa9a, 0x1, 0x7, 0x80000008, 0x0}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='environ\x00') socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r4, 0x0, 0x0) listen(r1, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$packet(r5, &(0x7f0000000600)="5f0e", 0x2, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 8m51.210823526s ago: executing program 8 (id=1939): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x143042, 0x6d) fallocate(r1, 0x0, 0x9, 0x10001) copy_file_range(r1, 0x0, r1, &(0x7f00000001c0)=0xae8, 0x8000863, 0x0) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0xd2, 0x3, 0x5, 0xffff, 0x3c37, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb14, 0x10, 0x3, 0x4001bf}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/104, 0x68}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8m45.880799419s ago: executing program 8 (id=1944): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_usb_connect$uac2(0x0, 0xbf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000ac0)={r7, 0xd0}, &(0x7f0000000b00)=0x8) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB]}, 0x0) 8m29.173391791s ago: executing program 37 (id=1944): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_usb_connect$uac2(0x0, 0xbf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000ac0)={r7, 0xd0}, &(0x7f0000000b00)=0x8) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB]}, 0x0) 1m7.740640891s ago: executing program 6 (id=3204): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r6, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r8, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) syz_open_procfs$namespace(r1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300"], 0x78) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 1m6.644098059s ago: executing program 6 (id=3206): r0 = socket$inet6(0xa, 0x80002, 0x88) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) sendmmsg$sock(r0, &(0x7f0000005dc0)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x2, @private0, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 1m6.274891485s ago: executing program 6 (id=3209): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 1m3.985184545s ago: executing program 6 (id=3216): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m2.685661822s ago: executing program 6 (id=3221): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 59.710813262s ago: executing program 6 (id=3234): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c365059681", 0x36}], 0x1}, 0x4) 59.173514155s ago: executing program 38 (id=3234): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c365059681", 0x36}], 0x1}, 0x4) 10.379989307s ago: executing program 7 (id=3421): syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000006740)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1842428, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) 8.654868542s ago: executing program 2 (id=3428): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r1}, &(0x7f00000002c0)=0x8) 8.472591791s ago: executing program 2 (id=3430): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000180)={[{@four_active_logs}, {@nocheckpoint_merge}, {@nodiscard}, {@fsync_mode_posix}, {}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@noinline_dentry}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xd74}}]}, 0x1, 0x5514, &(0x7f0000005880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0xc21c2, 0x9c37611dc13d0db7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 8.046919449s ago: executing program 7 (id=3432): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x20, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x36, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x2, 0x5, 0x5, 0x8, 0x90000, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x8001, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x3, 0xd, 0x0, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7f, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x208, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x8000, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x8, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x9, 0xd, 0x2950bfaf, 0x3, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0x1ffff, 0x0, 0x1a, 0x1c, 0x11ffff, 0x7, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0xbd, 0x755a, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x5, 0x4, 0x8006, 0x1, 0x0, 0x6, 0x8, 0x1, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0x6, 0x1, 0x1, 0x9, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.885147136s ago: executing program 7 (id=3434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x4, 0x3, 0x8, 0x9, 0x3, 0x4f, 0x1, 0x5, 0x3, [0x401, 0xb0, 0x0, 0x7, 0x2, 0x8, 0x2, 0xfffffff8], [0x0, 0xbae27f9]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x400b}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$unix(0x1, 0x1, 0x0) 7.725206093s ago: executing program 9 (id=3435): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r6, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r8, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) syz_open_procfs$namespace(r1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300"], 0x78) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 5.322261708s ago: executing program 3 (id=3439): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c09000008002700031a00000800b700"], 0x34}}, 0x0) 5.202981463s ago: executing program 2 (id=3440): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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") setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 4.894779587s ago: executing program 3 (id=3441): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500000000010d90481a000000000000109022400010000000009040100010300000009210000000122080009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400208"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.512441483s ago: executing program 9 (id=3443): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x2, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700) 4.151147209s ago: executing program 1 (id=3445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x4, 0x3, 0x8, 0x9, 0x3, 0x4f, 0x1, 0x5, 0x3, [0x401, 0xb0, 0x0, 0x7, 0x2, 0x8, 0x2, 0xfffffff8], [0x0, 0xbae27f9]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$eJzs3M9vVNUeAPDvnXZogcejj8cjoQ+1gMbGxBYKCgs3mJi40MSIC1k2bSGVAQztQkgjQ2JwTeLeuDTuNHGrS+PKPwAXLkwMCVE2gKsxd+bedjpzpzMttbXt55MMnHN/nB/3njNz7j29N4AdayT9J4n4V0Tci4j9jejyDUYa/z1+uDD15OHCVFRrtfO/J/XtHqXxTL7f3iwyWooofZK0JNgwd+Pm5clKZeZ6VOvx8fkrH47P3bj58uyVyUszl2auTpw9e/rUyTOvTryyLO2IGOxaqYL80no9Gv742pHDb164+/ZUf2tizfXoKN/rj2rXTSM/th280JzeNrCvKZy01+vWhhaGng1mzbCc9v+FyrELm10gYMPUarXaQOfV1Vqr221LgC0ric0uAbA58h/69Po3/zSWlDdi+LHpHpxrXAA9erhQuxUx9Xix/v1RyrYpt1zfplYYM63KSES8X/3z8/QTK92H+GWdMgQAdrzvz2XDwCRaxn+lONS03b+zOZShiPhPRByIiP9GxMGI+F/Esm2XSSJqK+R/sHXBYv7fZLMIpftrrVsv0vHfa9ncVv7J8s03GerLYvsi8gHzzInsmIxGeeDibGXmZIf0d3XJv3n8l37S/POxYFaO+/0tg83pyfnJtdW23YPbEcP9rfVP+tMTl0/jJBFxOCKGV5HuUFN49qUvjyxGWi4rute/rlYwpbcu82e1LyJebJz/aiw7/0s5Js3zk6W2+cnxwajMnBhPW8GJwkL++NOddzrl37X+3/7aussbZ747//QVz6Tnf09T+498/nap/kNJRLI4XzsXUetbXR53fv60nu7I8fZ1a23/u5L36uG8f300OT9//WTEruSt9uUTS/vm8Xz7tP6jx4v7/4Fsn/RI/D8i0kb8TEQ8G9GXl/1oRByLiIKqLfrh9ec/6LSux/b/t0nrP134/Zdk7aB+/pfm63sM5OmnS/ouH733ZLh44j6r//6Vz//pemg0W1L8/Zcs+4rotaTrcAgBAADgH68U9b/9L40thkulsbHGPaCDsadUuTY3/1xEXJ1uPCMwFOXSxdnKTH5DbijKSX7/c6gpPtESP5XdN/6sb3c9PjZ1rTK92ZWHHW5vvc8nbf0/9dsq7/MCW9A2eg4NWKVu/f/Q3Q0qCLDh/P7DztXU/zu92aLqL2Vge/L7DztXUf+/FV+t+OyC7wzY+mr6MuxoK/f/7u/bBLau/nh3MVx/7LnwaVtgOzL+hx2p+0PyA6t+9n8pUBsoXjUYBW8MGFxTFl0Duwvy2pRAOrJaxwTLEdHbxrvXkkU+BOz8hofS6hIciPZVfbHSXknxexwiotpxr/SodC3PpUO9Nv6eA/k7Uda72Xy91E/LPZ7upw243gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALaVvwIAAP//CB3NTQ==") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x400b}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 4.049054553s ago: executing program 9 (id=3446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x2c, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='j'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]]}, 0x2c}}, 0x4804) 3.21195345s ago: executing program 7 (id=3447): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r0 = syz_open_dev$loop(0x0, 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r6, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r8, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) syz_open_procfs$namespace(r1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300"], 0x78) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 2.99483469s ago: executing program 9 (id=3448): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x0, 0x2000) 2.876669495s ago: executing program 2 (id=3449): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e000000002e5f0c0003"], 0x30}}, 0x0) 2.775058519s ago: executing program 1 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xb9, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.53487458s ago: executing program 7 (id=3451): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000000)={&(0x7f0000000480)=""/200, 0xc8}) 2.505638831s ago: executing program 3 (id=3452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) 2.440329734s ago: executing program 9 (id=3453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x12}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.381137266s ago: executing program 2 (id=3454): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(0x0, 0x0) 2.340546128s ago: executing program 1 (id=3455): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='ALTPCM \'Line Capture\' 00000000000000000000\nLINE2\nDIGITAL3\nSPEAKER'], 0xf7) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2.163140136s ago: executing program 9 (id=3456): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$eJzs3c1vHGcdB/DfvvolNLVyqEqEkJuWl1KaxEkJgQJtD3Dg0gOKuKFErltFpICSgNLKIq4sJA6c+AtASBwR4og48Af0wJUbJ05EspFAPTFo7OeJZze7Xbu2d9aez0dyZn7zzK6f8XdnXzIz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/9zvdWWhFx82dpwVLEp6IT0Y5YKOvliFhYXsrrdyPi2dhpjmciojcXUd5+55+nI16JiA/PRmxtr6+Wi6/ssx/f/uPff/eDM2/+7Q+9S//90/3Oq+PWe/DgV//588PDbTMAAAA0TVEURSt9zD+fPt+36+4UADAV+fW/SPLyU1//+p9v/mWW+qNWq9Vq9RTqqmK0h9UiIjaqtynfMzgcDwAnzEZ8VHcXqJH8G60bEWfq7gQw01p1d4BjsbW9vtpK+baqrwfLu+35XJCB/Ddaj6/vGDedZPgck2k9vjajE+fG9GdhSn2YJTn/9nD+N3fb+2m9485/Wsbl39+99Klxcv6d4fyHnJ782yPzb6qcf/dA+XfkDwAAAAAAMyz///9Szcd/5w6/Kfvyccd/l6fUBwAAAAAAAAA4aocd/+8x4/8BAADAzCo/q5d+c3Zv2bjvYiuX32hFPDW0PtAw6WKZxbr7AQAAAAAAAAAAAABN0t09h/dGK6IXEU8tLhZFUf5UDdcHddjbn3RN335osrqf5AEAYNeHZ/O1/L3dBa2I+Yi4kb7rr7e4uFgU8wuLxWKxMJffz/bn5ouFyufaPC2XzfX38Ya42y/KO5uv3K5q0uflSe3D91f+rn7R2UfHjkj6Y8aY5hoDB4D0AhWx5RXplCmKp8e9+YAB9v9TaCmW6n5cMfvqfpgCAAAAx68oiqKVvs77fDrm3667UwDAVOTX/+HjAoeq22PaI47m/tVqtVqtVn+iuqoY7WG1iIiN6m3K9wyG4weAE2YjPqq7C9RI/o3WjYhn6+4EMNNadXeAY7G1vb7aSvm2qq8HaXz3fC7IQP4brZ3b5duPmk4yfI7JtB5fm9GJc2P688yU+jBLcv7t4fxv7rb303rHnf+0jMu/v3PJXPPk/DvD+Q85Pfm3R+bfVDn/7oHy78gfAAAAAABmWP7//yXHf/MmAwAAAAAAAMCJs7W9vpqve83H/z8zYj3Xf55OOf/WQfNfSPPyP9Fy/u2h/L84tF6nMv/ojb39/9/b66u/v/+vT+fpfvOfyzOt9MhqpUdEK/2mVjdND7N1T9rsdfrlb+q12p1uOuen6L0dt+NOrMXlgXXb6e+x174y0F72tDfQfmWgvftE+9WB9l763oFiIbdfjNX4cdyJt3bay7a5Cds/P6G9mNCe8+94/m+knH/38c+575f5L6b21tC09OiD9hP7fXU66ve8fvuzv7x8/Jsz0WZ0Hm9bVbl9F2roz87f5Ew/fnpv7e7FB7fu37+7EmkysPRKpMkRy/n3dn7m9p7/n99tz8/71f310Qf9A+c/KzajOzb/5yvz5fa+OOW+1SHn308/Of+3Uvvo/f8k5z9+/3+phv4AAAAAAAAAAAAAAADAxymKYucS0dcj4lq6/qeuazMBgOnKr/9Fkper1Wq1Wq0+fXVVMdpr1SIi/lq9Tfme4eej7gwAmGX/i4h/1N0JaiP/Bsvf91dOX6i7M8BU3Xvv/R/eunNn7e69unsCAAAAAAAAAHxSefzP5cr4zy9ExNLQegPjv74Ry4cd/7ObZx4PMHrEA32Psdnud9qV4cafi53xuS+OG//7Qjw5/nceE7dT3Y4xehPa+xPa5ya0z49cupfWyAs9KnL+z1XGOy/zPz80/HoTxn8dHvO+CXL+FyqP5zL/LwytV82/+O3M5b+x3xU3oz2Q/6X77/7k0r333n/59ru33ll7Z+1HV1dWLl+9du369euX3r59Z+3y7r/H0+sZkPPPY187D7RZcv45c/k3S87/c6mWf7Pk/D+favk3S84/v9+Tf7Pk/PNnH/k3S87/xVTLv1ly/l9KtfybZWt7fa7M/6VUy79Z8v7/5VTLv1ly/i+nWv7NkvO/mGr5N0vO/1Kq95G/r4c/RXL++QiX/b9Zcv4rqZZ/s+T8r6Ra/s2S87+aavk3S87/lVTLv1ly/l9JtfybJed/LdXyb5ac/1dTLf9myflfT7X8myXn/7VUy79Zcv5fT7X8myXn/2qq5d8sOf9vpFr+zZLz/2aq5d8sOf9vpVr+zZLzfy3V8m+Wve//N2NmFmZ+cbR32IkZ2a6TNlP3MxMAAAAAAAAAAAAAMGwapxPXvY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO+n7gZ/bmtUOIgRCc/A1sEmOMs2TXl/jCHxcTrg1QbgmFXrBd79os+IbXLoEi2TRQImFUVIGavmgLCLWRqgqr4gWtKM2LqpdXpX1B31RUlZAaVSEKqEhtRbPVzHmexzOzszO73vF69jyfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGh295tmP18riqL+p/HX5qJ4Qf3jjRObG5e97mZvIQAAALBa/9v4+7nb0gWHl3GjpmX+9hX/8K2FhYWF4oPDXxn98sJCumKiKEY3FEXjuujqv32o1rxM8FgxXhtq+nyox+qHe1w/0uP60R7Xj/W4fkOP68d7XL9oByyysfx5TOPOtjU+3Fzu0uL2YrRx3bYOt3qstmFoKP4sp6HWuM3C6IlirjhVzBbTLcuXy9Yay3/n7vq63l7EdQ01rWtr/Qj58aePx22ohX28rWVd1+4z+tEbi4mf/PjTx//owjN3dpo9d0PL/ZXbueOe+nZ+NlxSbmut2JD2SdzOoabt3NrhORlu2c5a43b1j9u387llbufwtc1cU+3P+Xgx1Pj4e439NNL8Y720n7aGy/7r3qIoLl/b7PZlFq2rGCo2tVwydO35GS+PyPp91A+lFxcjKzpO717GcVqfM9taj9P210R8/u8OtxtZYhuan6YffWZs0fO+0uM0qj/qpV4r7cdgv18rg3IMxuPie40H/XjHY3BbePyf3r70Mdjx2OlwDKbH3XQM3tPrGBwaG25sc3oSao3bXDsGd7UsP9xYU60xn97e/RicunD63NT8Jz/12rnTx07Onpw9s2fXruk9+/YdOHBg6sTcqdnp8u/r3NuDb1MxlF4D94R9F18Dr25btvlQXfha/16H411eh5vblu3363Ck/cHV1uYFufiYLl8bD9d3+viVoWKJ11jj+dm5+tdhetxNr8ORptdhx68pHV6HI8t4HdaXObdzed+zjDT96bQNN+prweamY7D9+5H2Y7Df348MyjE4Ho6Lf9m59NeCrWF7H59c6fcjw4uOwfRww3tP/ZL0/f74gcbodFzeVb/ilrHi4vzs+fsfPXbhwvldRRhr4iVNx0r78bqp6TEVi47XoRUfr4fnXvH4XR0u3xz21fhr63+NL/lc1ZfZe3/356rx1a3z/my5dHcRRp+t9f7s9NW8vj9TluyyP+vLfHZq9d+Lp1za9P47usT7b8z9z5frS3f12PDoSPn6HU57Z7Tl/bj1qRppvHfVGut+bmp578ej4c9avx/f3uX9eEvbsv1+Px5tf3Dx/bjW66cdq9P+fI6H4+TUdPf34/oyW3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWavjdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/Hxe17uh+n9WWe2rv6986N8cOm986xXsfg6PBYfZtH00FYvt8vbIzH4P3F8eJscaqYaVw71jieao11TT6wvGNwLPxZ6/fKLV2OwR1ty/b7GExfx5Y69mojix98H7Q/n+PhuHjige7HYH2ZN+/v7/euO8IlaZmm713bf7621M+87mrbTTfyZ1717fzr/d1/Nltf5tSBlebM7vvpvnDJLR32U/vrd6nX1EyxNvtpS9jOZw4svZ/q21Nf5ssHl3k8HS6K4tLHH2z8vDf8+8qfXfz+t1r+3aXTv+lc+viDz9564m9Wsv0ArH/Pl2NT+bWu6V+mlvPv/wAAAMC6EHP/UJiJ/A8AAACVEXN//F/hifwPAAAAlRFz/0iYSSb5f8ubn5l7/lKRmvkLQbw+7YaHyuVix3U6fD6xcE398ge/MfvTv7i0vHUPFUXxs4d+o+PyWx6K21WaCNt59S2tly++4aVlrf/oI9eWa+6vfzXcf3w8yz0MOlVwp4ui+M5tX2ysZ+JDVxrzqYeONub7Lj/+WH2Z5w6Wn8fbP/2ScvnfD+XfwyeOtdz+6bAffhjm9Ds67494u29eec3W/R+4tr54u9o9L2w87Cc+XN5v/D05X3qsXD7u56W2/y+/8OQ368s/+qrO239pqPP2Pxnu9xth/vfLy+Wbn4P65/F2nwvbH9cXb3f/17/bcfuvfr5c/txby+WOhhnXvyN8vu2tz8w1769Ha8daHlfxtnK5uP7p7/924/p4f/H+27d//MiVlv3Rfnw89U/l/Uy1LR8vj+uJ/rxt/fX7aT4+4/qf/K2jLfu51/qvvu/pl9fvt33997UtN9x2+/bf2PQHn/tix/XF7Tn8p+daHs/h94bXcVj/Ex8Ox2O4/n+ufrFlvdHR97a+/8Tlv7r5Usvjid7+k3L9V99wsjH/feKnv3fLC2594eVX1vddUXzv/eX99Vr/yT8827L9X7tjZ+P5iNfHjn77+pcS13/+E5Nnzs5fnJtp2quN353zznJ7Noxv3FTf3tvCe2v750fOXvjI7PmJ6Ynpopio7q/Qu25fD/PZclxe6e13PhKez7t+9zubtv/jF+Ll//xwefmVd5Rft14dlvtSuHxz+fwt1Fa5/ifuvqPx+q49VX7e0mPvg63b/uPAshYMj7/9+4J4vJ976Uca+6F+XePrRnxdr3L7fzBT3s+3w35dCL+Z+Z47rq2vefn4uxGuvL98va96/4W3ufi8/nF4vt/1w/L+43bFx/uD8H3Md7e0vt/F4+Pbl4ba77/xWzwuh/eT4nJ5fVwq7u8rz93RcfPi7yEpLt/Z+Px30v3cuaKHuZT5T85PnZo7c/HRqQuz8xem5j/5qSOnz148c+FI43d5Hvlor9tfe3/a1Hh/mpndt7eY3lgUxdlieg3esG7M9tc/Wt72n3vk+Mz+6e0zsyeOXTxx4ZFzs+dPHp+fPz47M7/92IkTs5/odfu5mUO7dh/cs3/35Mm5mUMHDh7cc3By7szZ+maUG9XDvumPTZ45f6Rxk/lDew/ueuCBvdOTp8/OzB7aPz09ebHX7Rtfmybrt/71yfOzp45dmDs9Ozk/96nZQ7sO7tu3u+dvAzx97sT8xNT5i2emLs7Pnp8qH8vEhcbF9a99vW5PNc3/a/n9bLta+Yv4inffty/9fta6b3xmybsqF2n7BaLPhN9F8/cvOndgOZ/H3D8aZpJJ/gcAAIAcxNw/FmYi/wMAAEBlxNy/IcxE/gcAAIDKiLl/PMwkk/yv/6//v7z+f3m9/n9e/f9zHy97peu9/x/78/r/ebjJ/f9Vr1//X/+/ev3/5ffn1/v26//r/7PYoPX/Y+7fWBRZ5n8AAADIQcz9m8JM5H8AAACojJj7bwkzkf8BAACgMmLuf0GYSSb5P4f+/3s6LLbC/v/uXoWr6vf/1835/zcW+v/6/839//jk6P9nY8X9+w883PKp/n+g/6//r/+v/6//z6qNLnnNzer/x9x/a5hJJvkfAAAAchBz/wvDTOR/AAAAqIyY+28LM5H/AQAAoDJi7t8cZpJJ/s+h/9+J8/9Xtv/v/P/6//09/3/Txuj/rw/O/99d5/7/2C2LLtL/X2H/f1z/fz32/0f7u/2D3f/vufn6/9wQg3b+/5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAACoj5v6XhJnI/wAAAFAZMfffHmaSSf7X/9f/1//X/9f/77z+3uf/Lz/S/x8s+v/dOf9/D87/n1f/v8/bP9j9/36f/3/0Le231/+nk0Hr/8fc/9Iwk0zyPwAAAOQg5v47wkzkfwAAAKiMmPtfFmYi/wMAAEBlxNy/Jcwkk/yv/6//r/+v/6//33n9vfv/Jf3/waL/353+fw/6//r/+v/L6/93+OZX/59OevX/H3x9+T69Vv3/mPvvDDPJJP8DAABADmLuvyvMRP4HAACAyoi5//+Fmcj/AAAAUBkx928NM8kk/+v/6//r/+fV/79vTP9f/7/a9P+70//vQf9f/1//f5nn/19sJf3/Db3ujMro1f9/9337Gm+B7f3/DvmqL/3/mPtfHmaSSf4HAACAHMTc/4owE/kfAAAAKiPm/leGmcj/AAAAUBkx90+EmWSS//X/q9X//5O/euKVhf6//n+P9Ve0/x8PA/3/zOn/d6f/34P+v/6//v+a9P/Jx/X2/zvoS/8/5v67w0wyyf8AAACQg5j77wkzkf8BAACgMmLuvzfMRP4HAACAyoi5f1uYSSb5X/+/Wv3/SP9f/7/b+iva/0/0//Om/99B04tU/78H/X/9/+z7//G7X/1/+mPQ+v8x978qzCST/A8AAAA5iLl/e5iJ/A8AAACVEXP/q8NM5H8AAACojJj7d4SZZJL/9f/1//X/9f/1/zuvX/9/fdL/726l/f8x/X/9f/3/zPr/zv9Pfw1a/z/m/teEmWSS/wEAACAHMffvDDOR/wEAAKAy4v/fLP/fq/wPAAAAVRRz/2SYSSb5X/9f/z+n/n9N/1//X/+/8vT/u3P+/x70//X/9f/1/+mrQev/x9z/2jCTTPI/AAAA5CDm/vvDTOR/AAAAqIyY+6fCTOR/AAAAqIyY+6fDTDLJ//r/+v859f+d/1//X/+/+vT/u9P/70H/X/+/av3/otD/56YatP5/zP27wkwyyf8AAACQg5j7d4eZyP8AAABQGTH37wkzkf8BAACgMmLu3xtmkkn+1//X/9f/1//X/++8fv3/9alb//4ry7i9/n+g/6//r/9fjf6/8/9zkw1a/z/m/gfCTDLJ/wAAAJCDmPv3hZnI/wAAAFAZMffvDzMJ+b/T/+sGAAAA1peY+w+EmWTy7//6/xXp///m37WsW/9f/7/b+vvT/9+o/x+m/v9gqej5/9tfFtdtffb/n0+PX/9f/3+Qt1//X/+fxQat/x9z/8Ewk0zyPwAAAOQg5v7XhZnI/wAAAFAZMff//zAT+R8AAAAqI+b+14eZZJL/9f8r0v9vo/+v/99t/c7/r/9fZRXt//fN+uz/L3H+/yH9f/3/1W//WB+3X/9/Of3/Db3uhoq58f3/+NHy+v8x9x8KM8kk/wMAAEAOYu7/uTAT+R8AAAAqI+b+N4SZyP8AAABQGTH3Hw4zyST/6//r/+v/6//fmP7/G4p2g9j/rx88+v/Vov/fXaX6/87/r/8/YNuv/+/8/yw2aOf/j7n/jWEmmeR/AAAAyEHM/Q+Gmcj/AAAAUBkx978pzET+BwAAgMqIuf/NYSaZ5H/9f/1//X/9f+f/77x+/f/1Sf+/O/3/HvT/9f/1//X/6aub1//f0PH6mPvfEmaSSf4HAACAHMTc/9YwE/kfAAAAKiPm/reFmcj/AAAAUBkx9789zCST/K//r/+v/1/N/v+GLuvX/9f/rzL9/+70/3vQ/9f/1//X/6evBu38/zH3/3yYSSb5HwAAAHIQc/9DYSbyPwAAAFRGzP3vCDOR/wEAAKAyYu5/Z5hJJvlf/1//X/+/mv3/buvX/9f/rzL9/+70/3vQ/9f/1//X/6evBq3/H3P/u8JMMsn/AAAAkIOY+38hzET+BwAAgMqIuf/dYSbyPwAAAFRGzP3vCTPJJP/3p/9fK8pWq/5/M/3/6+n/L1xqvp3+v/5/0a/+f/1G+v9Z0P/vTv+/hw79/w36//r/+v/6/1y3Qev/x9z/3jCTTPI/AAAA5CDm/veFmcj/AAAAUBkx978/zET+BwAAgMqIuf/hMJNM8r/z/2fZ/08PefD6/87/r//v/P/6/6uj/9+d/n8Pzv+v/78u+/+jYX5sMn5t0v9nUAxa/z/m/kfCTDLJ/wAAAJCDmPs/EGYi/wMAAEBlxNz/i2Em8j8AAABURsz9HwwzyST/6/9n2f8f4PP/V63/P9JyfOTU/x9vej7Tcan/r/+/BvT/u9P/70H/X/9/kPv/4WjeuMTtnf+fQTRo/f+Y+z8UZpJJ/gcAAIAcxNz/S2Em8j8AAABURsz9vxxmIv8DAABAZcTc/ythJpnk/yz6/0OLF9P/1/9v3l/O/+/8/53Wr/+/Pun/d6f/34P+fz79/5H+b//NO/9/Sf+fQTRo/f+Y+381zGTJ4Pfsfy7jYQIAAAADJOb+D4eZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP9n0f/vYOn+fzyjqv6//r/+v/6//v961L/+/8tuLQr9f/1//f/K9v9vwPbr/+v/s9ig9f9j7j8WZpJJ/gcAAIAcxNz/a2Em8j8AAABURsz9x8NM5H8AAACojJj7Z8JMMsn/a93/b+r1jg5m/9/5/6+3//8z/X/9/0D/vzP9/7Xh/P/d6f/3oP+v/6//r/9PXw1a/z/m/tkwk0zyPwAAAFRY+nFwzP0nwkzkfwAAAKiMmPtPhpnI/wAAAFAZMfd/JMwkk/zv/P/6/87/fzP6/yMty+v/l/T/9f/7Qf+/O/3/HvT/9f/1//X/6atB6//H3D8XZpJJ/gcAAIAcxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3nwozyST/6//r/+fe/68VxWXn/9f/77R+/f/1Sf+/u/9j7z6a5DqrP463baVZwUtgzYqlWdkLXgBbdlSxNtHkYJmcwUSTwYDJOWeTc87Z5BxNMIaqoTw+50ij7rk90lx13/s8n8/m/KW/xbTwYOqH6luP/n8N/b/+X/+v/2dUU+v/c/dfFbd0sv8BAACgB7n77xu32P8AAADQjNz994tb7H8AAABoRu7++8ctnex//b/+v/f+f7GV9//3//Xt9/93/B3S/+v/N2Gpvz+2+q87KAo/sP+/2+VX31v/r//X/w/S/+v/9f+ca2r9f+7+B8Qtnex/AAAA6EHu/gfGLfY/AAAANCN3/4PiFvsfAAAAmpG7/+q4pZP9r//X/+v/9f/7+v+bvP+v/5837/8Pm0f/f/nu7q7+fxX9/7Q/v/5f/8+yqfX/ufsfHLd0sv8BAACgB7n7HxK32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+X/8/l/7/xIzf/4/vB/2//n8D9P/D5tH/e/9f/z/Pz6//1/+z7Pz7/wP/sT1K/5+7/+FxSyf7HwAAAHqQu/8RcYv9DwAAAM3I3f/IuMX+BwAAgGbk7n9U3NLJ/tf/6//1/3Pp/zf0/r/+X/8/czcszvwzQf+/TP+/xpr+f7HQ/w85dD+/+rc3n89/AP2//p9l59//H/gvNUr/n7v/0XHLlYvFiQv9TQIAAACTkrv/MXFLJ3/+DwAAAD3I3X9N3GL/AwAAQDNy95+OWzrZ//p//b/+X/+v/1/99fX/8+T9/2FH7//veuer7tNv/+/9/2He/x+7/7/9O6PJ/l9m3ZGp9f+5+6+NWzrZ/wAAANCD3P2PjVvsfwAAAGhG7v7HxS32PwAAADQjd//j45ZO9r/+f1r9f+YuF97/X7bv153V/+/VLvr/uff/99D/6//1/2vo/4d5/3+NvX/M7dQP9f/6f+//e/+fo5la/5+7/wlxSyf7HwAAAHqQu/+JcYv9DwAAAM3I3f+kuMX+BwAAgGbk7n9y3NLJ/tf/T6v/9/6//t/7//p//f/R6P+H6f/XaOX9/wv8rtl2P39U2/78+n/9P8um1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/efT/+RX0//r/i9//J/3/POn/h+n/12il/79A2+7n5/759f/6f5ZNrf/P3f+MuKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/8+j/vf+v//f+v/7/cPT/w/T/a+j/9f/6f/0/o5pa/5+7/7q4pZP9DwAAAD3I3f+cuMX+BwAAgGbk7n9u3GL/AwAAQDNy9z8vbulk/+v/V/X/t+j/9f/6f/2//n+m9P/D9P9r6P/1//p//T+jmlD/f9avOrV4ftzSyf4HAACAHuTuf0HcYv8DAABAM3L3vzBusf8BAACgGbn7r49bOtn/+v/JvP+/l/O11f/vLBYL/f+i0/5/56y/n/V9qf/X/2+A/n+Y/n8N/b/+X/+v/2dUE+r/936cu/9FcUsn+x8AAAB6kLv/xXGL/Q8AAADNyN3/krjF/gcAAIBm5O5/adzSyf7X/0+m/9/TVv/v/f9zvz966v+9/79M/78Z+v9h+v819P/6f/2//p9RTa3/z93/srjpxPEL/i0CAAAAE5O7/+VxSyd//g8AAAA9yN3/irjF/gcAAICZum7pZ3L3vzJu6WT/6//H7f9PnPVz+n/9/7nfH/p//b/+/+LT/w/T/6+h/9f/6//1/4xqav1/7v5XxS2d7H8AAADoQe7+G+IW+x8AAACakbv/1XGL/Q8AAADNyN3/mrilk/2v//f+v/5f/6//X/319f/zpP8fpv9fQ/9/YD9/mKex9f9H7v9Pnvk/9f+04Tz6/93d3Wsuev+fu/+1cUsn+x8AAAB6kLv/xrjF/gcAAIBm5O5/Xdxi/wMAAEAzcve/Pm7pZP/r/zvt//NbfV79/+nFYpL9/6X6//30/6vp/zdD/z9M/7+G/t/7/97/1/8zqqm9/5+7/w1xSyf7HwAAAHqQu/+NcYv9DwAAAM3I3f+muMX+BwAAgGbk7n9z3NLJ/tf/d9r/e//f+//6/033/7ct9P8bMYv+f+fgrz/1/v9a/b/+f0B3/f89777vh/p//T/Lptb/5+5/S9zSyf4HAACAHuTuf2vcYv8DAABAM3L3vy1usf8BAACgGbn73x43Hetk/+v/9f/6f/2//n/119/w+/8nFouF/n8Es+j/B0y9/x/n/f9z/1N+hv5f/z/nz6//1/+zbGr9f+7+d8Qtnex/AAAA6EHu/nfGLfY/AAAANCN3/7viFvsfAAAAmpG7/91xSyf7X/+v/9f/6/+b7/+vnUX/7/3/kej/h02j/z+Y/l//P+fPr//X/3N42+r/c/e/J27pZP8DAABAD3L3vzdusf8BAACgGbn73xe32P8AAADQjNz9749bOtn/+n/9//n0//k59f9t9f8nJ9f/n9r3r9fJ+//6/5Ho/4fp/9fQ/+v/9f/X6f8Z09Te/8/d/4G4pZP9DwAAAD3I3f/BuPU/3dr/AAAA0Izc/R+KW+x/AAAAaEbu/g/HLZ3sf/2//t/7//r/5t//1/93Rf8/TP+/hv5f/6//9/4/o5pa/5+7/yNxSyf7HwAAAHqQu/+jcYv9DwAAAM3I3f+xuMX+BwAAgGbk7r8pbulk/+v/9f/6f/2//v+Ov4f6/zbo/4dtpv/f0f/r/6ufvyT+U6D/1/+v+/W0aWr9f+7+j8ctnex/AAAAaM3xFT+Xu/8TcYv9DwAAAM3I3f/JuMX+BwAAgFk6tuLncvd/Km6Z5f5fVaEP0//r//X/+n/9/+qvr/+fp630//lNof/3/n/op/+/y74fze39/3P/++uyhf5f/8/Yptb/5+7/dNwyy/0PAAAArJK7/zNxi/0PAAAAzcjd/9m4xf4HAACAZuTu/1zc0sn+1//r//X/+n/9/+qvr/+fp9H6/5ML7//r//X/G34/f+6fX/+v/2fZ1Pr/3P2fj1s62f8AAADQg9z9X4hb7H8AAABoRu7+L8Yt9j8AAAA0Y2/3Z1zW4f7X/+v/9f/6f/3/6q+v/5+nrbz/r//X/+v/9+j/9f/6f841tf7/S3u/6tTiy3FLJ/sfAAAAepC7/ytxi/0PAAAAzcjd/9W4xf4HAACAZuTu/1rc0sn+1//va89P6/+n2v/v7u5eo/+/ZHGV/n9l/3/zjPv/6/X/I9P/D+u4/z92qA+g/9f/T77/P/e/Jc/Q/zNFU+v/c/d/PW7pZP8DAABAD3L3fyNusf8BAACgGbn7vxm32P8AAADQjNz934pbOtn/+v8JvP9/Sv/v/X/v/y+8/6//H4n+f1jH/f/htNj/nzr8b3/b/fxRbfvze/9f/8+yqfX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/m+v/b/73r5f3/ncXqz6//1//r//X/F5v+f5j+f40W+//zsO1+fu6fX/+v/2fZ1Pr/3P3fj1v2D7/j5/e7BAAAAKYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwPv/Dfb/3v9f/f2h/590/3+p/r8N+v9h+v819P/6f/3/SP1/fjfr/3s3tf4/d/+P45ZO9j8AAAD0IHf/T+KWK3e29ZEAAACAkeXu/2nc4s//AQAAoBm5+2+OW87a/6va7lbo//X/+n/9v/5/9dfX/8+T/n/YYfv/k4uj9f9J/6//1//32v97/587bLj/P72u/8/d/7O4xZ//AwAAwOwcP+Dnc/f/PG6x/wEAAKAZuft/EbfY/wAAANCM3P2/jFtuuXRbH2mj9P/6f/3/mv7/1vgG1//r//X/s6D/H+b9/zX0/2P081fo/9vo/xcL/T9Ht+H+f+2Pc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8T+fy/NbLr/9/6//j/o/+dB/z9s+/3/jYNfVv/fRP/v/f9G+n/v/zOGbfT/OwP//9z9v4tbOtn/AAAA0IPc/b+PW+x/AAAAaEbu/j/ELfY/AAAANCN3/x/jlk72/9b6//i3Wv8/+/6//ff/B/v/3YX+X/+v/58W/f+w7ff/w/T/+v85f379v/6fZdvo/wd/vPerTi3+FLd0sv8BAACgB7n7/xy32P8AAADQjNz9f4lb7H8AAABoRu7+v8Ytnex/7//r//X/3v/X/6/++vr/edL/D9P/r1Z/o/T/+n/9v/6fUU2t/8/d/7e4pZP9DwAAAD3I3f/3uMX+BwAAgGbk7r8lbrH/AQAAoBm5+/8RtzSx/4+t/Sv0/7Ps/yuP1v/r//X/+n/20/8P22b/f687rf+y3v/fev+fH0H/r//X/zOKqfX/ufv/Gbc0sf8BAACA2+Xu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b41bOtn/a/r/k/UX6v8Hef9//+fX/6/+/tD/6//1/xef/n+Y9//X0P97/1//r/9nVFPr/3P3/ydu6WT/AwAAQA9y998Wt9j/AAAA0Izc/f+NW+x/AAAAaEbu/v/FLZ3sf+//z6n/v0L/r//X/+v/9f9r6P+H6f/X0P/r//X/+n9GNbX+P3f//wMAAP//qbtNJQ==") unlink(&(0x7f0000000280)='./file1\x00') syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.054621211s ago: executing program 7 (id=3457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x4, 0x3, 0x8, 0x9, 0x3, 0x4f, 0x1, 0x5, 0x3, [0x401, 0xb0, 0x0, 0x7, 0x2, 0x8, 0x2, 0xfffffff8], [0x0, 0xbae27f9]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x400b}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$unix(0x1, 0x1, 0x0) 2.052466401s ago: executing program 1 (id=3458): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000000000000000200000000", @ANYBLOB="0003000000000000140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 2.002748673s ago: executing program 3 (id=3459): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xfffffffffffffffa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.590931901s ago: executing program 1 (id=3460): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 1.502725695s ago: executing program 3 (id=3461): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r5, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r7, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) syz_open_procfs$namespace(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300"], 0x78) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 607.154334ms ago: executing program 1 (id=3462): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x37c, 0x2b4, 0xc8, 0x8, 0x1a8, 0x5803, 0x2b4, 0x2e8, 0x2e8, 0x2b4, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x188, 0x1a8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x24}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xffff7ffd}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3d8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0xf7f346e877b34421}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x7ff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote, 0x40080}, 0x1c) syz_emit_ethernet(0x170, &(0x7f0000000b40)=ANY=[], 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x1, 0x0) unshare(0x26040600) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) fcntl$setpipe(r9, 0x408, 0x7) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r11, 0x78d4a000) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000008000/0x1000)=nil, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 115.381385ms ago: executing program 2 (id=3463): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r6, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r8, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) syz_open_procfs$namespace(r1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300"], 0x78) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 0s ago: executing program 3 (id=3464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={0x5c, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random='vw'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "1f36a5ed75a04b91f507422f23"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) kernel console output (not intermixed with test programs): rent blktraces are not allowed on loop5 [ 1804.621090][T18644] blktrace: Concurrent blktraces are not allowed on loop5 [ 1805.261676][T18623] JBD2: Ignoring recovery information on journal [ 1805.584203][T18623] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1805.699705][T18654] comedi comedi3: comedi_config --init_data is deprecated [ 1806.480728][ T5396] ocfs2: Unmounting device (7,6) on (node local) [ 1806.864154][T18667] loop9: detected capacity change from 0 to 512 [ 1807.719323][T18667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1807.791841][T18669] blktrace: Concurrent blktraces are not allowed on loop4 [ 1808.301332][T18667] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.2904: iget: bad i_size value: 38620345925642 [ 1808.314573][T18667] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.2904: couldn't read orphan inode 15 (err -117) [ 1808.327293][T18667] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1808.441281][T18666] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.2904: bg 0: block 5: invalid block bitmap [ 1808.454136][T18666] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2024 with error 28 [ 1808.466726][T18666] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1808.466726][T18666] [ 1808.476669][T18666] EXT4-fs (loop9): Total free blocks count 0 [ 1808.482722][T18666] EXT4-fs (loop9): Free/Dirty block details [ 1808.488685][T18666] EXT4-fs (loop9): free_blocks=0 [ 1808.493897][T18666] EXT4-fs (loop9): dirty_blocks=2028 [ 1808.499216][T18666] EXT4-fs (loop9): Block reservation details [ 1808.505294][T18666] EXT4-fs (loop9): i_reserved_data_blocks=2028 [ 1808.590648][T18672] loop2: detected capacity change from 0 to 8 [ 1808.723760][T12478] EXT4-fs (loop9): unmounting filesystem. [ 1812.053432][T18685] blktrace: Concurrent blktraces are not allowed on loop5 [ 1812.167659][ T4326] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1812.382209][ T4326] usb 10-1: device descriptor read/64, error -71 [ 1812.417235][T18691] loop6: detected capacity change from 0 to 1024 [ 1812.591588][ T7490] hfsplus: b-tree write err: -5, ino 25 [ 1812.607833][ T7490] hfsplus: b-tree write err: -5, ino 4 [ 1812.613519][ T7490] hfsplus: b-tree write err: -5, ino 2 [ 1812.624882][ T7490] hfsplus: b-tree write err: -5, ino 26 [ 1812.681541][ T4326] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1812.814079][T18701] loop3: detected capacity change from 0 to 1764 [ 1812.863828][ T4326] usb 10-1: device descriptor read/64, error -71 [ 1813.007731][ T4326] usb usb10-port1: attempt power cycle [ 1813.092819][ T4319] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1813.108818][T12703] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1813.120822][T18707] loop3: detected capacity change from 0 to 64 [ 1813.210851][T18709] loop9: detected capacity change from 0 to 128 [ 1813.233560][T18709] hpfs: bad mount options. [ 1813.292355][ T4319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1813.312109][T12703] usb 3-1: Using ep0 maxpacket: 32 [ 1813.321997][T12703] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1813.332652][ T4319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1813.355028][T12703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.363110][T12703] usb 3-1: Product: syz [ 1813.388700][ T4319] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1813.396847][T12703] usb 3-1: Manufacturer: syz [ 1813.406682][T12703] usb 3-1: SerialNumber: syz [ 1813.441603][T12703] usb 3-1: config 0 descriptor?? [ 1813.467856][ T4319] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1813.497669][ T4319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.538579][ T4319] usb 7-1: config 0 descriptor?? [ 1813.666228][T12703] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1813.685743][T12703] dvb-usb: bulk message failed: -22 (4/0) [ 1813.691549][T12703] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1813.718127][T12703] dvb-usb: bulk message failed: -22 (5/0) [ 1813.724378][T12703] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1814.335906][ T4319] hid-generic 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 1814.406157][T12703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1814.464505][ T5584] usb 7-1: USB disconnect, device number 19 [ 1814.471683][T12703] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1814.550848][T12703] usb 3-1: media controller created [ 1814.594437][T12703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1814.659313][T12703] usb 3-1: selecting invalid altsetting 3 [ 1814.665947][T12703] ttusb2: set interface to alts=3 failed [ 1814.713457][T18715] fido_id[18715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1815.035866][T12703] DVB: Unable to find symbol tda10086_attach() [ 1815.054855][T12703] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1815.154726][T12703] dvb-usb: bulk message failed: -22 (4/0) [ 1815.164209][T12703] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1815.179722][T12703] dvb-usb: bulk message failed: -22 (5/0) [ 1815.187114][T12703] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1815.213297][T12703] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1815.314195][T12703] usb 3-1: USB disconnect, device number 29 [ 1815.367897][T18729] loop6: detected capacity change from 0 to 2048 [ 1815.466390][T12703] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1815.499322][T18729] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1815.562075][T18737] loop2: detected capacity change from 0 to 128 [ 1815.611809][T18737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1815.634609][T18737] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1815.685802][T18737] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 1815.701417][ T5396] EXT4-fs (loop6): unmounting filesystem. [ 1815.795490][T18743] loop9: detected capacity change from 0 to 1024 [ 1815.807485][T18744] loop3: detected capacity change from 0 to 512 [ 1815.874796][T18744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1815.918547][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1816.000112][T18744] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2928: iget: bad i_size value: 38620345925642 [ 1816.031845][ T41] hfsplus: b-tree write err: -5, ino 25 [ 1816.053560][ T41] hfsplus: b-tree write err: -5, ino 4 [ 1816.076133][T18744] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2928: couldn't read orphan inode 15 (err -117) [ 1816.100900][ T41] hfsplus: b-tree write err: -5, ino 2 [ 1816.188563][T18744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1816.346578][ T4319] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1816.394893][T18752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2928: bg 0: block 5: invalid block bitmap [ 1816.441714][T18752] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 292 with error 28 [ 1816.476839][T18752] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1816.476839][T18752] [ 1816.506828][ T5584] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1816.514113][T18752] EXT4-fs (loop3): Total free blocks count 0 [ 1816.531602][T18752] EXT4-fs (loop3): Free/Dirty block details [ 1816.544189][T18752] EXT4-fs (loop3): free_blocks=0 [ 1816.622940][T18749] loop2: detected capacity change from 0 to 32768 [ 1816.636578][T18752] EXT4-fs (loop3): dirty_blocks=296 [ 1816.647636][ T4319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.671078][T18752] EXT4-fs (loop3): Block reservation details [ 1816.677161][T18752] EXT4-fs (loop3): i_reserved_data_blocks=296 [ 1816.690326][T18749] JBD2: Ignoring recovery information on journal [ 1816.715710][ T5584] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.724968][ T4319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1816.728540][ T5584] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1816.747067][ T5584] usb 10-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1816.757343][ T5584] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.770730][ T5584] usb 10-1: config 0 descriptor?? [ 1816.805856][ T4319] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1816.911732][ T4319] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1816.922930][T18749] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1816.940076][ T4319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.985235][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1816.998833][ T4319] usb 7-1: config 0 descriptor?? [ 1817.238503][ T5584] waltop 0003:172F:0501.0005: item fetching failed at offset 5/7 [ 1817.774177][ T5584] waltop: probe of 0003:172F:0501.0005 failed with error -22 [ 1817.784057][ T5584] usb 10-1: USB disconnect, device number 21 [ 1817.835467][ T4319] steelseries_srws1 0003:1038:1410.0006: unknown main item tag 0x0 [ 1817.854460][ T4319] steelseries_srws1 0003:1038:1410.0006: unknown main item tag 0x0 [ 1817.862706][ T4319] steelseries_srws1 0003:1038:1410.0006: unknown main item tag 0x0 [ 1817.865740][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 1817.875317][ T4319] steelseries_srws1 0003:1038:1410.0006: unknown main item tag 0x0 [ 1817.900773][ T4319] steelseries_srws1 0003:1038:1410.0006: unknown main item tag 0x0 [ 1817.909084][ T4319] steelseries_srws1 0003:1038:1410.0006: unknown main item tag 0x0 [ 1817.917158][ T4319] steelseries_srws1 0003:1038:1410.0006: unknown main item tag 0x0 [ 1817.925891][ T4319] steelseries_srws1 0003:1038:1410.0006: missing HID_OUTPUT_REPORT 0 [ 1818.084990][ T5584] usb 7-1: USB disconnect, device number 20 [ 1818.120941][ T4319] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1818.141467][T18769] blktrace: Concurrent blktraces are not allowed on loop5 [ 1818.349165][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1818.426120][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.519888][ T4319] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1818.671918][ T4319] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1818.703367][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.769435][ T4319] usb 4-1: config 0 descriptor?? [ 1819.436791][ T4319] hid-generic 0003:0457:07DA.0007: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 1819.671340][ T4319] usb 4-1: USB disconnect, device number 12 [ 1819.896976][ T9083] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1820.184497][ T9083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.208670][ T9083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.238846][T18806] loop6: detected capacity change from 0 to 512 [ 1820.267009][ T9083] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1820.286581][ T9083] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.296566][T18806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1820.372636][ T9083] usb 10-1: config 0 descriptor?? [ 1820.397125][T18806] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.2946: iget: bad i_size value: 38620345925642 [ 1820.455744][T18806] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.2946: couldn't read orphan inode 15 (err -117) [ 1820.538259][T18806] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1820.648358][T18811] loop2: detected capacity change from 0 to 1024 [ 1820.718601][T18733] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1820.787455][T18805] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 284 with error 28 [ 1820.800563][ T7504] hfsplus: b-tree write err: -5, ino 25 [ 1820.814236][ T7504] hfsplus: b-tree write err: -5, ino 4 [ 1820.824072][T18805] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1820.824072][T18805] [ 1820.835266][ T7504] hfsplus: b-tree write err: -5, ino 2 [ 1820.862990][ T9083] cp2112 0003:10C4:EA90.0008: unbalanced collection at end of report description [ 1820.877544][T18805] EXT4-fs (loop6): Total free blocks count 0 [ 1820.883611][T18805] EXT4-fs (loop6): Free/Dirty block details [ 1820.890627][ T9083] cp2112 0003:10C4:EA90.0008: parse failed [ 1820.896541][ T9083] cp2112: probe of 0003:10C4:EA90.0008 failed with error -22 [ 1820.920180][T18805] EXT4-fs (loop6): free_blocks=0 [ 1820.925210][T18805] EXT4-fs (loop6): dirty_blocks=288 [ 1820.930486][T18805] EXT4-fs (loop6): Block reservation details [ 1821.008898][T18805] EXT4-fs (loop6): i_reserved_data_blocks=288 [ 1821.099918][ T5584] usb 10-1: USB disconnect, device number 22 [ 1821.184827][ T5396] EXT4-fs (loop6): unmounting filesystem. [ 1821.280543][T18820] loop2: detected capacity change from 0 to 512 [ 1821.345059][T18820] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1821.373869][T18820] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1821.854914][T18820] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.2952: Invalid block bitmap block 0 in block_group 0 [ 1822.117004][T18820] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1822.132103][T18809] loop3: detected capacity change from 0 to 32768 [ 1822.174547][T18820] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.2952: attempt to clear invalid blocks 983261 len 1 [ 1822.202093][T18809] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1822.242324][T18820] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.2952: Invalid inode table block 0 in block_group 0 [ 1822.305968][T18820] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1822.367317][T18820] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1822.406852][T18820] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.2952: Invalid inode table block 0 in block_group 0 [ 1822.421763][T18820] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1822.432310][T18820] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.2952: mark_inode_dirty error [ 1822.470307][T14664] ocfs2: Unmounting device (7,3) on (node local) [ 1822.503897][T18820] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1822.512745][T18346] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1822.559520][T18820] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.2952: Invalid inode table block 0 in block_group 0 [ 1822.620869][T18820] EXT4-fs (loop2): 1 truncate cleaned up [ 1822.643119][T18820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1822.799687][T18843] loop3: detected capacity change from 0 to 1024 [ 1822.956683][T18346] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.968594][T18346] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.979093][T18346] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1822.988603][T18346] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.172520][T18346] usb 10-1: config 0 descriptor?? [ 1823.590265][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1823.757148][T18346] hid (null): unknown global tag 0xe [ 1823.785527][T18346] playstation 0003:054C:0DF2.0009: unknown global tag 0xe [ 1823.807545][T18346] playstation 0003:054C:0DF2.0009: item 0 1 1 14 parsing failed [ 1823.834269][T18346] playstation 0003:054C:0DF2.0009: Parse failed [ 1823.845418][T18346] playstation: probe of 0003:054C:0DF2.0009 failed with error -22 [ 1823.925362][T18855] loop2: detected capacity change from 0 to 512 [ 1823.950192][T18855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1823.974594][T18346] usb 10-1: USB disconnect, device number 23 [ 1824.001833][T18855] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2960: iget: bad i_size value: 38620345925642 [ 1824.018017][T18855] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2960: couldn't read orphan inode 15 (err -117) [ 1824.031245][T18855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1824.110704][T18855] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2960: bg 0: block 5: invalid block bitmap [ 1824.124387][T18855] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1172 with error 28 [ 1824.137273][T18855] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1824.137273][T18855] [ 1824.146976][T18855] EXT4-fs (loop2): Total free blocks count 0 [ 1824.153115][T18855] EXT4-fs (loop2): Free/Dirty block details [ 1824.159562][T18855] EXT4-fs (loop2): free_blocks=0 [ 1824.164555][T18855] EXT4-fs (loop2): dirty_blocks=1176 [ 1824.169967][T18855] EXT4-fs (loop2): Block reservation details [ 1824.175992][T18855] EXT4-fs (loop2): i_reserved_data_blocks=1176 [ 1824.190186][ T4326] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 1824.807868][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1824.892268][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1824.974381][ T4326] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1825.191546][ T4326] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1825.237294][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.331474][T18874] loop2: detected capacity change from 0 to 256 [ 1825.660661][ T4326] usb 4-1: config 0 descriptor?? [ 1825.687743][T18874] exfat: Deprecated parameter 'namecase' [ 1825.925832][T18874] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 1825.941954][T18878] blktrace: Concurrent blktraces are not allowed on loop5 [ 1826.085082][T18874] exFAT-fs (loop2): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 1826.114903][ T4326] hid (null): unknown global tag 0xa3 [ 1826.133838][ T4326] magicmouse 0003:05AC:0269.000A: unexpected long global item [ 1826.142305][T18874] exFAT-fs (loop2): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 1826.157813][ T4326] magicmouse 0003:05AC:0269.000A: magicmouse hid parse failed [ 1826.165518][ T4326] magicmouse: probe of 0003:05AC:0269.000A failed with error -22 [ 1826.338261][ T4326] usb 4-1: USB disconnect, device number 13 [ 1828.410845][T18910] loop3: detected capacity change from 0 to 4096 [ 1828.420502][T18915] loop9: detected capacity change from 0 to 512 [ 1828.437851][T18910] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1828.487611][T18915] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2979: invalid indirect mapped block 10 (level 1) [ 1828.548129][ T26] audit: type=1800 audit(1778589921.316:404): pid=18910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2976" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 1828.588068][T18920] loop2: detected capacity change from 0 to 512 [ 1828.610832][T18920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1828.614217][T18915] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2979: invalid indirect mapped block 8 (level 1) [ 1828.662604][T18920] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2980: iget: bad i_size value: 38620345925642 [ 1828.677074][T18920] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2980: couldn't read orphan inode 15 (err -117) [ 1828.690565][T18920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1828.737879][T14664] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 1828.745039][T14664] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1828.752278][T14664] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 1828.768690][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1828.775754][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1828.783876][T18920] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2980: bg 0: block 5: invalid block bitmap [ 1828.800544][T18920] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 956 with error 28 [ 1828.813122][T18920] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1828.813122][T18920] [ 1828.823167][T18920] EXT4-fs (loop2): Total free blocks count 0 [ 1828.829770][T18920] EXT4-fs (loop2): Free/Dirty block details [ 1828.835717][T18920] EXT4-fs (loop2): free_blocks=0 [ 1828.841104][T18920] EXT4-fs (loop2): dirty_blocks=960 [ 1828.846356][T18920] EXT4-fs (loop2): Block reservation details [ 1828.852453][T18920] EXT4-fs (loop2): i_reserved_data_blocks=960 [ 1828.899676][T18915] EXT4-fs (loop9): 1 truncate cleaned up [ 1828.930348][T18915] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1829.146673][T12478] EXT4-fs (loop9): unmounting filesystem. [ 1829.344767][T18930] loop9: detected capacity change from 0 to 512 [ 1829.353293][T18930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1829.370622][T18930] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.2982: iget: bad i_size value: 38620345925642 [ 1829.390640][T18930] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.2982: couldn't read orphan inode 15 (err -117) [ 1829.404054][T18930] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1829.478400][ T9083] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1829.493376][T18930] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.2982: bg 0: block 5: invalid block bitmap [ 1829.509866][T18930] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1232 with error 28 [ 1829.523766][T18930] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1829.523766][T18930] [ 1829.533522][T18930] EXT4-fs (loop9): Total free blocks count 0 [ 1829.539559][T18930] EXT4-fs (loop9): Free/Dirty block details [ 1829.545867][T18930] EXT4-fs (loop9): free_blocks=0 [ 1829.550852][T18930] EXT4-fs (loop9): dirty_blocks=1236 [ 1829.556243][T18930] EXT4-fs (loop9): Block reservation details [ 1829.562283][T18930] EXT4-fs (loop9): i_reserved_data_blocks=1236 [ 1829.569385][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1829.651215][T18935] loop6: detected capacity change from 0 to 128 [ 1829.658532][T18935] hpfs: bad mount options. [ 1829.725561][ T9083] usb 4-1: Using ep0 maxpacket: 32 [ 1829.733170][ T9083] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1829.759906][ T9083] usb 4-1: config 0 has no interface number 0 [ 1829.770009][ T9083] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1829.785722][ T9083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.794481][ T9083] usb 4-1: Product: syz [ 1829.798782][ T9083] usb 4-1: Manufacturer: syz [ 1829.810579][ T9083] usb 4-1: SerialNumber: syz [ 1829.828906][ T9083] usb 4-1: config 0 descriptor?? [ 1829.837199][ T9083] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1830.082677][ T9083] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1830.109703][ T9083] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1830.310485][T12478] EXT4-fs (loop9): unmounting filesystem. [ 1830.509367][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1830.527941][ T9083] usb 4-1: USB disconnect, device number 14 [ 1830.565240][ T9083] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1830.621630][ T9083] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1830.678490][ T9083] quatech2 4-1:0.51: device disconnected [ 1831.765882][T18953] loop3: detected capacity change from 0 to 1024 [ 1831.803548][T18953] hfsplus: bad catalog entry type [ 1831.890409][ T41] hfsplus: b-tree write err: -5, ino 25 [ 1831.896034][ T5584] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1831.904691][ T41] hfsplus: b-tree write err: -5, ino 4 [ 1831.932050][ T41] hfsplus: b-tree write err: -5, ino 2 [ 1832.092545][ T5584] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.103680][ T5584] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1832.115226][ T5584] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1832.124680][ T5584] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1832.135552][ T5584] usb 10-1: SerialNumber: syz [ 1832.172369][T18960] loop6: detected capacity change from 0 to 128 [ 1832.205668][T18960] hpfs: bad mount options. [ 1832.378393][ T5584] usb 10-1: 0:2 : does not exist [ 1832.422398][ T5584] usb 10-1: USB disconnect, device number 24 [ 1832.677097][T12705] udevd[12705]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1833.547503][T18981] loop6: detected capacity change from 0 to 512 [ 1833.559391][T18981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1833.601287][T18981] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.2995: iget: bad i_size value: 38620345925642 [ 1833.614807][T18981] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.2995: couldn't read orphan inode 15 (err -117) [ 1833.628183][T18981] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1833.648667][T18986] loop2: detected capacity change from 0 to 1024 [ 1833.707127][T18981] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.2995: bg 0: block 5: invalid block bitmap [ 1833.722836][T18981] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 880 with error 28 [ 1833.735884][T18981] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1833.735884][T18981] [ 1833.745656][T18981] EXT4-fs (loop6): Total free blocks count 0 [ 1833.752044][T18981] EXT4-fs (loop6): Free/Dirty block details [ 1833.758076][T18981] EXT4-fs (loop6): free_blocks=0 [ 1833.763240][T18981] EXT4-fs (loop6): dirty_blocks=884 [ 1833.768883][T18981] EXT4-fs (loop6): Block reservation details [ 1833.774925][T18981] EXT4-fs (loop6): i_reserved_data_blocks=884 [ 1833.930166][ T4395] hfsplus: b-tree write err: -5, ino 25 [ 1833.961164][ T4395] hfsplus: b-tree write err: -5, ino 4 [ 1833.999207][ T4395] hfsplus: b-tree write err: -5, ino 2 [ 1834.039377][ T4395] hfsplus: b-tree write err: -5, ino 20 [ 1834.435450][ T5396] EXT4-fs (loop6): unmounting filesystem. [ 1834.628674][T19000] loop3: detected capacity change from 0 to 128 [ 1834.747080][T19000] hpfs: bad mount options. [ 1835.534394][T19009] loop6: detected capacity change from 0 to 512 [ 1835.556149][T19009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1835.618680][T19009] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.3006: iget: bad i_size value: 38620345925642 [ 1835.632391][T19009] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3006: couldn't read orphan inode 15 (err -117) [ 1835.645332][T19009] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1835.753872][T19008] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3006: bg 0: block 5: invalid block bitmap [ 1835.767130][T19008] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1480 with error 28 [ 1835.779751][T19008] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1835.779751][T19008] [ 1835.789537][T19008] EXT4-fs (loop6): Total free blocks count 0 [ 1835.795599][T19008] EXT4-fs (loop6): Free/Dirty block details [ 1835.801543][T19008] EXT4-fs (loop6): free_blocks=0 [ 1835.806613][T19008] EXT4-fs (loop6): dirty_blocks=1484 [ 1835.811943][T19008] EXT4-fs (loop6): Block reservation details [ 1835.818030][T19008] EXT4-fs (loop6): i_reserved_data_blocks=1484 [ 1836.307685][T18995] loop2: detected capacity change from 0 to 40427 [ 1836.334353][ T5396] EXT4-fs (loop6): unmounting filesystem. [ 1836.417731][T18995] F2FS-fs (loop2): invalid crc value [ 1836.470884][T18995] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1836.577595][T19003] loop9: detected capacity change from 0 to 32768 [ 1836.667205][T18995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1836.714765][T19003] XFS (loop9): Mounting V5 Filesystem [ 1836.885291][ T4326] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1837.024132][T19034] blktrace: Concurrent blktraces are not allowed on loop5 [ 1837.039681][T19003] XFS (loop9): Ending clean mount [ 1837.127989][ T4326] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1837.195271][ T4326] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1837.511797][ T4326] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.605012][ T4326] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1837.701234][ T4326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1837.740796][ T4326] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1837.749949][ T4326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.848911][ T4326] usb 7-1: config 0 descriptor?? [ 1837.887479][T12478] XFS (loop9): Unmounting Filesystem [ 1838.647828][ T4326] hid-alps 0003:044E:120C.000B: unbalanced delimiter at end of report description [ 1838.807834][ T4326] hid-alps 0003:044E:120C.000B: parse failed [ 1838.849835][ T4326] hid-alps: probe of 0003:044E:120C.000B failed with error -22 [ 1838.876826][ T4326] usb 7-1: USB disconnect, device number 21 [ 1839.390292][T19063] blktrace: Concurrent blktraces are not allowed on loop5 [ 1839.683067][T19070] loop6: detected capacity change from 0 to 512 [ 1839.701042][T19070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1839.720233][T19070] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.3023: iget: bad i_size value: 38620345925642 [ 1839.733624][T19070] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3023: couldn't read orphan inode 15 (err -117) [ 1839.746993][T19070] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1839.970470][T11691] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:18: bg 0: block 5: invalid block bitmap [ 1840.053762][T11691] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1184 with error 28 [ 1840.117600][T11691] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1840.117600][T11691] [ 1840.181987][T11691] EXT4-fs (loop6): Total free blocks count 0 [ 1840.228826][T11691] EXT4-fs (loop6): Free/Dirty block details [ 1840.258098][T11691] EXT4-fs (loop6): free_blocks=0 [ 1840.293770][T11691] EXT4-fs (loop6): dirty_blocks=1188 [ 1840.302195][T11691] EXT4-fs (loop6): Block reservation details [ 1840.325326][T11691] EXT4-fs (loop6): i_reserved_data_blocks=1188 [ 1840.397702][T19053] loop3: detected capacity change from 0 to 32768 [ 1840.439033][T19076] loop2: detected capacity change from 0 to 1024 [ 1840.463123][ T5396] EXT4-fs (loop6): unmounting filesystem. [ 1840.544519][T19076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1840.698769][T19076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1840.902757][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1841.096382][T19086] blktrace: Concurrent blktraces are not allowed on loop5 [ 1841.148988][ T8337] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1842.545515][T19100] loop6: detected capacity change from 0 to 256 [ 1842.728858][T19100] exfat: Deprecated parameter 'namecase' [ 1843.173838][T19100] exfat: Deprecated parameter 'namecase' [ 1843.217829][T19100] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1843.317204][T19100] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1843.407366][T19107] device ipvlan2 entered promiscuous mode [ 1843.685896][T19113] loop2: detected capacity change from 0 to 8192 [ 1843.746855][T19113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1843.772871][T19115] loop6: detected capacity change from 0 to 4096 [ 1843.798609][T19113] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1843.808544][T19113] REISERFS (device loop2): using ordered data mode [ 1843.815726][T19113] reiserfs: using flush barriers [ 1843.841790][ T5584] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1843.875892][T19113] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1843.996778][T19120] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1844.064382][T19113] REISERFS (device loop2): checking transaction log (loop2) [ 1844.098976][ T5584] usb 4-1: Using ep0 maxpacket: 8 [ 1844.105967][ T5584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 1844.138056][T19113] REISERFS (device loop2): Using tea hash to sort names [ 1844.150352][ T5584] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1844.164194][T19122] loop9: detected capacity change from 0 to 64 [ 1844.201298][T19113] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1844.235255][ T5584] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1844.250289][T19122] syz.9.3039: attempt to access beyond end of device [ 1844.250289][T19122] loop9: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1844.367795][ T5584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.374211][T19122] Buffer I/O error on dev loop9, logical block 512, async page read [ 1844.396795][T19122] syz.9.3039: attempt to access beyond end of device [ 1844.396795][T19122] loop9: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1844.478743][ T5584] usb 4-1: config 0 descriptor?? [ 1844.486172][T19122] Buffer I/O error on dev loop9, logical block 56576, async page read [ 1844.527630][T19125] syz.9.3039: attempt to access beyond end of device [ 1844.527630][T19125] loop9: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1844.588681][T19125] Buffer I/O error on dev loop9, logical block 512, async page read [ 1844.638116][T19125] syz.9.3039: attempt to access beyond end of device [ 1844.638116][T19125] loop9: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1844.696120][T19125] Buffer I/O error on dev loop9, logical block 56576, async page read [ 1844.940355][T19133] loop6: detected capacity change from 0 to 16 [ 1844.964096][T19133] erofs: (device loop6): mounted with root inode @ nid 36. [ 1844.988672][T19133] syz.6.3044: attempt to access beyond end of device [ 1844.988672][T19133] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1845.013790][ T5584] cypress 0003:04B4:07B1.000C: item fetching failed at offset 2/41 [ 1845.057317][ T5584] cypress 0003:04B4:07B1.000C: parse failed [ 1845.064135][T19133] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -4 in[62, 4034] out[4096] [ 1845.102707][ T26] audit: type=1800 audit(1778589936.804:405): pid=19133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3044" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1845.267529][ T5584] cypress: probe of 0003:04B4:07B1.000C failed with error -22 [ 1845.279447][ T5584] usb 4-1: USB disconnect, device number 15 [ 1846.117062][T19142] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3046'. [ 1846.327532][T19148] loop6: detected capacity change from 0 to 256 [ 1846.376908][T19150] loop9: detected capacity change from 0 to 256 [ 1846.384567][T19150] exfat: Deprecated parameter 'namecase' [ 1846.405774][T19150] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 1846.703868][T19157] blktrace: Concurrent blktraces are not allowed on loop5 [ 1847.296153][T19160] loop9: detected capacity change from 0 to 2048 [ 1847.354845][T19160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1847.559695][T19168] blktrace: Concurrent blktraces are not allowed on loop5 [ 1848.728096][T19182] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3060'. [ 1848.915146][T19189] loop3: detected capacity change from 0 to 128 [ 1848.944412][T19189] hpfs: bad mount options. [ 1849.209943][T19192] loop2: detected capacity change from 0 to 256 [ 1849.265390][T19192] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1849.737656][T19200] blktrace: Concurrent blktraces are not allowed on loop5 [ 1851.003557][T19205] loop6: detected capacity change from 0 to 32768 [ 1851.129672][T19205] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.3069 (19205) [ 1852.278837][T19205] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1852.386195][T19240] blktrace: Concurrent blktraces are not allowed on loop5 [ 1852.398820][T19205] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1852.667469][T19205] BTRFS info (device loop6): enabling auto defrag [ 1852.927352][T19205] BTRFS info (device loop6): force clearing of disk cache [ 1853.089584][T19205] BTRFS info (device loop6): ignoring data csums [ 1853.126662][T19205] BTRFS info (device loop6): turning on async discard [ 1853.156634][T19251] comedi comedi3: comedi_config --init_data is deprecated [ 1853.199216][T19205] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1853.360924][T19205] BTRFS info (device loop6): turning off async discard [ 1853.441182][T19205] BTRFS info (device loop6): disabling free space tree [ 1854.060785][T19281] loop2: detected capacity change from 0 to 512 [ 1854.068934][T19281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1854.136333][T19281] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.3085: iget: bad i_size value: 38620345925642 [ 1854.151896][T19281] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3085: couldn't read orphan inode 15 (err -117) [ 1854.164308][T19281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1854.249314][T19281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3085: bg 0: block 5: invalid block bitmap [ 1854.264234][T19281] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1816 with error 28 [ 1854.276926][T19281] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1854.276926][T19281] [ 1854.286627][T19281] EXT4-fs (loop2): Total free blocks count 0 [ 1854.292687][T19281] EXT4-fs (loop2): Free/Dirty block details [ 1854.298612][T19281] EXT4-fs (loop2): free_blocks=0 [ 1854.303631][T19281] EXT4-fs (loop2): dirty_blocks=1820 [ 1854.308951][T19281] EXT4-fs (loop2): Block reservation details [ 1854.314973][T19281] EXT4-fs (loop2): i_reserved_data_blocks=1820 [ 1854.371738][T19205] BTRFS error (device loop6): open_ctree failed: -12 [ 1854.921499][T19294] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3086'. [ 1854.944262][T19294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.975440][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1855.005860][T19294] device bridge_slave_1 left promiscuous mode [ 1855.033054][T19294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.205809][T19296] loop2: detected capacity change from 0 to 512 [ 1855.220036][T19296] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24295!=65280) [ 1855.229767][T19296] EXT4-fs (loop2): group descriptors corrupted! [ 1855.519107][T19306] loop2: detected capacity change from 0 to 16 [ 1855.586008][T19309] blktrace: Concurrent blktraces are not allowed on loop5 [ 1855.597377][T19306] erofs: (device loop2): mounted with root inode @ nid 36. [ 1856.353376][T19314] loop3: detected capacity change from 0 to 512 [ 1856.369912][T19314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1856.407288][T19314] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3093: iget: bad i_size value: 38620345925642 [ 1856.428319][T19314] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3093: couldn't read orphan inode 15 (err -117) [ 1856.446342][T19314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1856.553178][T19313] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3093: bg 0: block 5: invalid block bitmap [ 1856.566170][T19313] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1480 with error 28 [ 1856.578802][T19313] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1856.578802][T19313] [ 1856.588604][T19313] EXT4-fs (loop3): Total free blocks count 0 [ 1856.594702][T19313] EXT4-fs (loop3): Free/Dirty block details [ 1856.600665][T19313] EXT4-fs (loop3): free_blocks=0 [ 1856.605752][T19313] EXT4-fs (loop3): dirty_blocks=1484 [ 1856.611083][T19313] EXT4-fs (loop3): Block reservation details [ 1856.617206][T19313] EXT4-fs (loop3): i_reserved_data_blocks=1484 [ 1857.404197][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1858.390379][T19353] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1858.406145][T19353] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1858.487843][T19356] blktrace: Concurrent blktraces are not allowed on loop5 [ 1859.601006][T19369] loop2: detected capacity change from 0 to 128 [ 1859.613180][T19369] hpfs: bad mount options. [ 1859.676625][T19371] loop3: detected capacity change from 0 to 256 [ 1859.678873][T12705] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1859.753708][T19371] FAT-fs (loop3): Directory bread(block 64) failed [ 1859.781983][T19371] FAT-fs (loop3): Directory bread(block 65) failed [ 1859.818999][T19371] FAT-fs (loop3): Directory bread(block 66) failed [ 1859.865059][T19371] FAT-fs (loop3): Directory bread(block 67) failed [ 1859.908538][T19371] FAT-fs (loop3): Directory bread(block 68) failed [ 1859.949588][T19371] FAT-fs (loop3): Directory bread(block 69) failed [ 1859.986039][T19371] FAT-fs (loop3): Directory bread(block 70) failed [ 1860.025721][T19371] FAT-fs (loop3): Directory bread(block 71) failed [ 1860.057025][T19371] FAT-fs (loop3): Directory bread(block 72) failed [ 1860.083553][T19371] FAT-fs (loop3): Directory bread(block 73) failed [ 1861.551615][T19395] loop6: detected capacity change from 0 to 128 [ 1861.576495][T19395] hpfs: bad mount options. [ 1862.997074][T19416] loop9: detected capacity change from 0 to 32768 [ 1863.086177][T19416] JBD2: Ignoring recovery information on journal [ 1863.244253][T19416] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1863.323519][ T26] audit: type=1800 audit(1778589953.863:406): pid=19416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3122" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 1863.442230][T12478] ocfs2: Unmounting device (7,9) on (node local) [ 1863.669315][T19439] loop3: detected capacity change from 0 to 128 [ 1863.706829][T19439] hpfs: bad mount options. [ 1864.131013][T19429] loop2: detected capacity change from 0 to 32768 [ 1865.218758][T19452] UFO tlock:0xffffc900028ba090 [ 1868.695071][T19487] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3141'. [ 1868.794127][ T5003] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1868.993251][T19475] loop3: detected capacity change from 0 to 131072 [ 1869.010785][ T5003] usb 10-1: Using ep0 maxpacket: 8 [ 1869.024162][ T5003] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1869.043716][ T5003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1869.077119][ T5003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1869.100409][ T5003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1869.145715][ T5003] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1869.157093][T19291] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1869.164867][T19292] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1869.168052][ T5003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1869.189255][ T5003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1869.199085][ T5003] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1869.241415][T19475] XFS (loop3): Mounting V5 Filesystem [ 1869.244183][ T5003] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1869.269805][ T5003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.284445][ T5003] usb 10-1: Product: syz [ 1869.289244][ T5003] usb 10-1: Manufacturer: syz [ 1869.294214][ T5003] usb 10-1: SerialNumber: syz [ 1869.390204][T19292] usb 3-1: device descriptor read/64, error -71 [ 1869.408203][ T5003] usb 10-1: config 0 descriptor?? [ 1869.418602][T19482] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1869.424370][T19291] usb 7-1: Using ep0 maxpacket: 8 [ 1869.442028][T19291] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1869.464318][T19475] XFS (loop3): Starting recovery (logdev: internal) [ 1869.486067][T19291] usb 7-1: config 179 has no interface number 0 [ 1869.534950][T19291] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1869.575806][T19291] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1869.626014][T19291] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1869.670053][T19291] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1869.701596][T19291] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1869.720801][T19292] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1869.745464][T19291] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1869.755007][T19291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.807487][T19475] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 1869.818739][T19475] XFS (loop3): Unmount and run xfs_repair [ 1869.825373][T19475] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1869.832853][T19475] 00000000: 46 49 42 54 00 00 00 01 ff ff ff ff ff ff ff ff FIBT............ [ 1869.838945][ T5003] snd-usb-audio: probe of 10-1:0.0 failed with error -12 [ 1869.841912][T19475] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 40 ...............@ [ 1869.841972][T19475] 00000020: b9 3a 89 37 cc d4 41 a2 86 c7 66 a1 57 0a 28 46 .:.7..A...f.W.(F [ 1869.841990][T19475] 00000030: 00 00 00 00 f6 a6 a0 b7 00 00 00 20 00 00 00 37 ........... ...7 [ 1869.842007][T19475] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1869.842023][T19475] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1869.842039][T19475] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1869.842055][T19475] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1869.845052][T19475] XFS (loop3): log mount/recovery failed: error -74 [ 1869.948675][ T5003] usb 10-1: USB disconnect, device number 25 [ 1869.959467][T19480] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1870.005058][T19475] XFS (loop3): log mount failed [ 1870.031800][T12723] udevd[12723]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1870.048493][T19292] usb 3-1: device descriptor read/64, error -71 [ 1870.226832][ T5584] usb 7-1: USB disconnect, device number 22 [ 1870.226992][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1870.241298][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1870.704949][T19292] usb usb3-port1: attempt power cycle [ 1870.879752][T19519] blktrace: Concurrent blktraces are not allowed on loop5 [ 1871.025248][T19518] loop3: detected capacity change from 0 to 4096 [ 1872.720321][T19528] loop6: detected capacity change from 0 to 16 [ 1872.803826][T19528] erofs: (device loop6): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 1873.210360][T19539] loop6: detected capacity change from 0 to 512 [ 1873.230177][T19539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1873.256487][T19539] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.3157: iget: bad i_size value: 38620345925642 [ 1873.270030][T19539] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3157: couldn't read orphan inode 15 (err -117) [ 1873.285853][T19539] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1873.479159][ T6978] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:22: bg 0: block 5: invalid block bitmap [ 1873.498977][ T6978] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1168 with error 28 [ 1873.517556][ T5584] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1873.523289][ T6978] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1873.523289][ T6978] [ 1873.563760][ T6978] EXT4-fs (loop6): Total free blocks count 0 [ 1873.569843][ T6978] EXT4-fs (loop6): Free/Dirty block details [ 1873.593751][ T6978] EXT4-fs (loop6): free_blocks=0 [ 1873.599189][ T6978] EXT4-fs (loop6): dirty_blocks=1172 [ 1873.613240][ T6978] EXT4-fs (loop6): Block reservation details [ 1873.619402][ T6978] EXT4-fs (loop6): i_reserved_data_blocks=1172 [ 1873.823778][ T5584] usb 10-1: Using ep0 maxpacket: 16 [ 1873.840328][ T5584] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1873.897858][ T5396] EXT4-fs (loop6): unmounting filesystem. [ 1873.959796][ T5584] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.049457][ T5584] usb 10-1: Product: syz [ 1874.087910][ T5584] usb 10-1: Manufacturer: syz [ 1874.125559][ T5584] usb 10-1: SerialNumber: syz [ 1874.169048][T19554] loop2: detected capacity change from 0 to 512 [ 1874.220374][T19554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1874.232055][ T5584] usb 10-1: config 0 descriptor?? [ 1874.258462][T19554] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.3162: iget: bad i_size value: 38620345925642 [ 1874.271756][T19554] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3162: couldn't read orphan inode 15 (err -117) [ 1874.284919][T19554] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1874.326089][ T5584] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1874.364705][T19554] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3162: bg 0: block 5: invalid block bitmap [ 1874.383621][T19554] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 944 with error 28 [ 1874.396222][T19554] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1874.396222][T19554] [ 1874.406282][T19554] EXT4-fs (loop2): Total free blocks count 0 [ 1874.412714][T19554] EXT4-fs (loop2): Free/Dirty block details [ 1874.418728][T19554] EXT4-fs (loop2): free_blocks=0 [ 1874.423722][T19554] EXT4-fs (loop2): dirty_blocks=948 [ 1874.429332][T19554] EXT4-fs (loop2): Block reservation details [ 1874.435353][T19554] EXT4-fs (loop2): i_reserved_data_blocks=948 [ 1874.518655][ T5584] gspca_spca508: reg_read err -32 [ 1874.525661][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1874.746971][ T5584] gspca_spca508: reg_read err -71 [ 1874.765480][ T5584] gspca_spca508: reg_read err -71 [ 1874.766989][T19565] blktrace: Concurrent blktraces are not allowed on loop5 [ 1874.790391][ T5584] gspca_spca508: reg_read err -71 [ 1874.808704][ T5584] gspca_spca508: reg write: error -71 [ 1874.826414][ T5584] spca508: probe of 10-1:0.0 failed with error -71 [ 1874.936639][ T5584] usb 10-1: USB disconnect, device number 26 [ 1875.283192][T19568] netdevsim netdevsim6: Firmware load for '/../file0' refused, path contains '..' component [ 1875.554572][T19572] loop6: detected capacity change from 0 to 512 [ 1875.637985][T19572] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1875.770717][T19572] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1875.791038][T19572] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3167: bg 0: block 248: padding at end of block bitmap is not set [ 1875.815552][T19572] Quota error (device loop6): write_blk: dquota write failed [ 1875.823798][T19572] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1875.834839][T19572] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.3167: Failed to acquire dquot type 1 [ 1875.936110][T19572] EXT4-fs (loop6): 1 truncate cleaned up [ 1875.969721][T19572] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1876.530720][ T41] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 1876.554372][ T41] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 1876.664271][ T5396] EXT4-fs (loop6): unmounting filesystem. [ 1876.685077][T19582] loop9: detected capacity change from 0 to 512 [ 1876.701524][T19582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1876.760828][T19563] loop2: detected capacity change from 0 to 32768 [ 1876.771478][T19582] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.3170: iget: bad i_size value: 38620345925642 [ 1876.785062][T19582] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.3170: couldn't read orphan inode 15 (err -117) [ 1876.798240][T19582] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1876.952674][T19563] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1877.008412][ T41] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 1877.150206][ T41] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1128 with error 28 [ 1877.183142][ T41] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1877.183142][ T41] [ 1877.216239][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 1877.235731][ T41] EXT4-fs (loop9): Total free blocks count 0 [ 1877.241802][ T41] EXT4-fs (loop9): Free/Dirty block details [ 1877.289085][ T41] EXT4-fs (loop9): free_blocks=0 [ 1877.294123][ T41] EXT4-fs (loop9): dirty_blocks=1132 [ 1877.332662][ T41] EXT4-fs (loop9): Block reservation details [ 1877.338763][ T41] EXT4-fs (loop9): i_reserved_data_blocks=1132 [ 1877.437711][T19592] loop6: detected capacity change from 0 to 764 [ 1877.472616][T12478] EXT4-fs (loop9): unmounting filesystem. [ 1877.548302][T19595] loop2: detected capacity change from 0 to 128 [ 1877.604838][T19595] hpfs: bad mount options. [ 1877.646624][T19580] loop3: detected capacity change from 0 to 32768 [ 1877.744207][T19580] JBD2: Ignoring recovery information on journal [ 1877.757175][T19597] loop9: detected capacity change from 0 to 512 [ 1877.776839][T19580] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 1877.843405][T19597] EXT4-fs: Ignoring removed i_version option [ 1877.856564][T19580] JBD2: bad block at offset 32 [ 1877.922051][T19597] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1877.961222][T19580] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1878.001004][T19597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 1878.056794][T19597] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1878.109073][T14664] ocfs2: Unmounting device (7,3) on (node local) [ 1878.169056][T19597] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3172: bg 0: block 361: padding at end of block bitmap is not set [ 1878.325898][T19597] EXT4-fs (loop9): Remounting filesystem read-only [ 1878.332581][T19597] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1878.374269][T19597] EXT4-fs (loop9): Remounting filesystem read-only [ 1878.396688][T19597] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.3172: attempt to clear invalid blocks 33619980 len 1 [ 1878.459935][T19597] EXT4-fs (loop9): Remounting filesystem read-only [ 1878.481293][T19597] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3172: invalid indirect mapped block 1811939328 (level 0) [ 1878.526185][T19597] EXT4-fs (loop9): Remounting filesystem read-only [ 1878.552142][T19597] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3172: invalid indirect mapped block 2185560079 (level 1) [ 1878.595441][T19597] EXT4-fs (loop9): Remounting filesystem read-only [ 1878.613584][T19597] EXT4-fs (loop9): 1 truncate cleaned up [ 1878.622655][T19597] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1878.678410][T19292] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1878.760502][T12478] EXT4-fs (loop9): unmounting filesystem. [ 1878.866667][T19600] loop6: detected capacity change from 0 to 32768 [ 1878.899847][T19292] usb 4-1: Using ep0 maxpacket: 8 [ 1878.916738][T19611] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3179'. [ 1878.920739][T19292] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1878.962185][T19292] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1878.973957][T19600] JBD2: Ignoring recovery information on journal [ 1878.995484][T19292] usb 4-1: string descriptor 0 read error: -22 [ 1879.046713][T19292] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1879.139182][T19292] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1879.216689][T19292] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1879.242131][T19600] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1879.278017][T19621] loop9: detected capacity change from 0 to 4096 [ 1879.295244][T19621] ntfs: (device loop9): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1879.361843][T19292] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1879.379800][T19621] ntfs: (device loop9): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1879.399964][T19292] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1879.420579][T19292] usb 4-1: media controller created [ 1879.424940][T19621] ntfs: (device loop9): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1879.508420][T19621] ntfs: (device loop9): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1879.517962][T19292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1879.535895][T19621] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1879.550986][ T5396] ocfs2: Unmounting device (7,6) on (node local) [ 1879.608909][T19621] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1879.663987][T19292] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1879.685480][T19621] ntfs: volume version 0.0. [ 1879.696213][T19292] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1879.709675][T19621] ntfs: (device loop9): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1879.853286][T19632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.880216][T19292] DVB: Unable to find symbol qt1010_attach() [ 1879.902977][T19632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.538617][T19292] usb 4-1: USB disconnect, device number 16 [ 1880.919185][T19644] loop2: detected capacity change from 0 to 256 [ 1880.976322][T19647] comedi comedi3: comedi_config --init_data is deprecated [ 1881.155082][T19654] blktrace: Concurrent blktraces are not allowed on loop5 [ 1881.483735][ T5584] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1881.705239][ T5584] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1881.745534][ T5584] usb 7-1: string descriptor 0 read error: -22 [ 1881.786392][ T5584] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1881.797973][ T5584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.066008][T19663] loop3: detected capacity change from 0 to 128 [ 1882.087339][T19292] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1882.108079][T19663] hpfs: bad mount options. [ 1882.168928][ T5003] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1882.250593][ T5584] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1882.311579][T19292] usb 10-1: Using ep0 maxpacket: 16 [ 1882.321724][T19292] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1882.358445][T19292] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1882.379937][T19292] usb 10-1: Product: syz [ 1882.384264][T19292] usb 10-1: Manufacturer: syz [ 1882.390459][ T5003] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.397145][T19292] usb 10-1: SerialNumber: syz [ 1882.412365][ T5003] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.425083][T19292] usb 10-1: config 0 descriptor?? [ 1882.445377][ T5003] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.472882][ T5584] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1882.479946][ T5003] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1882.501743][ T5003] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1882.514983][ T5003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.552903][ T5003] usb 3-1: config 0 descriptor?? [ 1882.560769][ T5584] usb 7-1: USB disconnect, device number 23 [ 1882.674464][T19292] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1882.869927][T12705] udevd[12705]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1882.889391][T19292] peak_usb 10-1:0.0 can0: sending command failure: -8 [ 1882.896390][T19292] peak_usb 10-1:0.0 can0: sending command failure: -8 [ 1882.920031][T19292] peak_usb 10-1:0.0 can0: sending command failure: -8 [ 1883.028540][T19292] peak_usb: probe of 10-1:0.0 failed with error -8 [ 1883.056112][ T5003] kye 0003:0458:5015.000D: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 1883.099248][ T5003] kye 0003:0458:5015.000D: tablet-enabling feature report not found [ 1883.139992][ T5003] kye 0003:0458:5015.000D: tablet enabling failed [ 1883.165973][ T5584] usb 10-1: USB disconnect, device number 27 [ 1883.280392][ T5003] usb 3-1: USB disconnect, device number 33 [ 1883.461819][T19667] fido_id[19667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1883.793317][T19683] loop9: detected capacity change from 0 to 256 [ 1883.853467][T19683] FAT-fs (loop9): Directory bread(block 64) failed [ 1883.861522][T19683] FAT-fs (loop9): Directory bread(block 65) failed [ 1883.888588][T19666] loop6: detected capacity change from 0 to 32768 [ 1883.912742][T19683] FAT-fs (loop9): Directory bread(block 66) failed [ 1883.933422][T19683] FAT-fs (loop9): Directory bread(block 67) failed [ 1883.965039][T19683] FAT-fs (loop9): Directory bread(block 68) failed [ 1883.987670][T19683] FAT-fs (loop9): Directory bread(block 69) failed [ 1884.041920][T19683] FAT-fs (loop9): Directory bread(block 70) failed [ 1884.057159][T19683] FAT-fs (loop9): Directory bread(block 71) failed [ 1884.075213][T19683] FAT-fs (loop9): Directory bread(block 72) failed [ 1884.084507][T19683] FAT-fs (loop9): Directory bread(block 73) failed [ 1884.406067][T19279] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1884.427027][T19688] comedi comedi3: comedi_config --init_data is deprecated [ 1884.516776][T19690] blktrace: Concurrent blktraces are not allowed on loop5 [ 1885.034985][T19279] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1885.048480][T19279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.086575][T19279] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1885.111538][T19279] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.164157][T19279] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.207627][T19279] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1885.234565][T19279] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1885.272121][T19279] usb 3-1: Product: syz [ 1885.279120][T19279] usb 3-1: Manufacturer: syz [ 1885.331095][T19279] cdc_wdm 3-1:1.0: skipping garbage [ 1885.346704][T19279] cdc_wdm 3-1:1.0: skipping garbage [ 1885.420012][T19279] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1885.430089][T19279] cdc_wdm 3-1:1.0: Unknown control protocol [ 1885.508625][T19702] loop3: detected capacity change from 0 to 512 [ 1885.522731][T19702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1885.617622][T19279] usb 3-1: USB disconnect, device number 34 [ 1885.649761][T19699] loop9: detected capacity change from 0 to 128 [ 1885.675837][T19685] cdc_wdm 3-1:1.0: Error submitting int urb - -19 [ 1885.727706][T19702] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3207: iget: bad i_size value: 38620345925642 [ 1885.746139][T19702] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3207: couldn't read orphan inode 15 (err -117) [ 1885.766708][T19702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1885.872831][T19705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1885.888099][T19700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3207: bg 0: block 5: invalid block bitmap [ 1885.904855][T19700] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1492 with error 117 [ 1885.917579][T19700] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1885.917579][T19700] [ 1885.964821][T19699] hpfs: bad mount options. [ 1886.212466][ T5584] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1886.290767][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1886.416903][ T5584] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1886.443451][ T5584] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1886.475469][ T5584] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1886.505263][ T5584] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1886.533298][ T5584] usb 7-1: Product: syz [ 1886.715906][ T5584] usb 7-1: Manufacturer: syz [ 1886.720658][ T5584] usb 7-1: SerialNumber: syz [ 1886.740871][ T5584] usb 7-1: config 0 descriptor?? [ 1886.756095][ T5584] usb 7-1: selecting invalid altsetting 0 [ 1886.999712][T19714] loop3: detected capacity change from 0 to 8192 [ 1887.093030][T19714] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1887.153651][T19286] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1887.784397][ T5584] usb 7-1: USB disconnect, device number 24 [ 1887.803803][T19714] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1887.856020][T19714] ntfs3: loop3: Failed to load $Extend. [ 1887.889713][T19286] usb 3-1: device descriptor read/64, error -71 [ 1887.898285][T19723] blktrace: Concurrent blktraces are not allowed on loop5 [ 1888.200135][T19286] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1888.498859][T19286] usb 3-1: device descriptor read/64, error -71 [ 1888.540820][T19726] loop6: detected capacity change from 0 to 512 [ 1888.649946][T19286] usb usb3-port1: attempt power cycle [ 1888.670632][T19726] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1888.802980][T19726] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.3216: inode has both inline data and extents flags [ 1888.870897][T19726] EXT4-fs (loop6): Remounting filesystem read-only [ 1888.920531][T19726] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3216: couldn't read orphan inode 15 (err -117) [ 1888.953925][T19726] EXT4-fs (loop6): Remounting filesystem read-only [ 1888.961412][T19726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1889.011744][T19292] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1889.069690][T19726] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1889.112011][T19735] comedi comedi3: comedi_config --init_data is deprecated [ 1889.129590][T19286] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1889.174913][T19286] usb 3-1: device descriptor read/8, error -71 [ 1889.180917][ T5396] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /619/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1889.236159][T19292] usb 4-1: Using ep0 maxpacket: 8 [ 1889.301047][ T5396] EXT4-fs (loop6): Remounting filesystem read-only [ 1889.323753][T19731] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 1889.326558][T19292] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1889.352759][ T5396] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /619/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1889.380467][ T5396] EXT4-fs (loop6): Remounting filesystem read-only [ 1889.459300][ T5396] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1889.505035][T19286] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1889.588203][T19731] EXT4-fs (loop6): Remounting filesystem read-only [ 1889.663137][T19292] usb 4-1: config 2 has no interface number 0 [ 1889.737737][T19286] usb 3-1: device descriptor read/8, error -71 [ 1889.889237][T19292] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1889.914347][T19292] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1889.947682][T19292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.991372][T19292] usb 4-1: Product: syz [ 1890.000998][ T5396] EXT4-fs (loop6): Remounting filesystem read-only [ 1890.008887][T19292] usb 4-1: Manufacturer: syz [ 1890.014208][ T5396] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /619/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1890.034978][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.042120][T19286] usb usb3-port1: unable to enumerate USB device [ 1890.058880][T19292] usb 4-1: SerialNumber: syz [ 1890.073799][T19742] loop2: detected capacity change from 0 to 16 [ 1890.168966][ T5396] EXT4-fs (loop6): Remounting filesystem read-only [ 1890.197348][ T5396] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /619/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1890.241978][ T5396] EXT4-fs (loop6): Remounting filesystem read-only [ 1890.249094][ T5396] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1890.275455][ T5396] EXT4-fs (loop6): Remounting filesystem read-only [ 1890.283068][ T5396] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /619/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1890.303956][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.361601][ T5396] EXT4-fs (loop6): Remounting filesystem read-only [ 1890.368289][ T5396] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /619/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1890.452291][ T5396] EXT4-fs (loop6): Remounting filesystem read-only [ 1890.480225][ T5396] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1890.838399][T19292] ch9200: probe of 4-1:2.31 failed with error -22 [ 1891.038123][T19292] usb 4-1: USB disconnect, device number 17 [ 1891.240255][T19743] loop9: detected capacity change from 0 to 32768 [ 1891.516376][T19743] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1891.591738][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1891.591755][ T26] audit: type=1800 audit(1778589980.318:407): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3223" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 1892.023804][T12478] ocfs2: Unmounting device (7,9) on (node local) [ 1892.491445][T11677] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.503632][T19757] loop2: detected capacity change from 0 to 32768 [ 1892.533328][T11677] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.546210][T19757] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.3229 (19757) [ 1892.596373][T19757] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1892.618675][T19757] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1892.669345][T19757] BTRFS info (device loop2): using free space tree [ 1892.740963][T11677] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.784560][T11677] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.051399][T19757] BTRFS info (device loop2): enabling ssd optimizations [ 1893.234246][T11677] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.244991][T11677] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.412156][T19801] loop9: detected capacity change from 0 to 1024 [ 1893.427395][T11677] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.443673][T19803] 9pnet_fd: Insufficient options for proto=fd [ 1893.443838][T19791] loop3: detected capacity change from 0 to 4096 [ 1893.471083][T11677] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.525585][T19801] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1893.617841][T19791] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1893.676331][T19791] ntfs3: loop3: Failed to load $Extend. [ 1893.837327][T12478] EXT4-fs (loop9): unmounting filesystem. [ 1893.939275][T14664] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 1893.946101][T14664] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 1893.959837][ T4271] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1894.180087][T19051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1894.193536][T19051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1894.234745][T19051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1894.244840][T19051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1894.317028][T19051] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1894.333434][T19819] loop9: detected capacity change from 0 to 512 [ 1894.347487][T19051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1894.411461][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1894.417915][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1894.535279][T11677] tipc: Left network mode [ 1894.565919][T19819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1894.592156][T19819] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.3243: iget: bad i_size value: 38620345925642 [ 1894.605826][T19819] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.3243: couldn't read orphan inode 15 (err -117) [ 1894.618495][T19819] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1894.842725][T19819] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.3243: bg 0: block 5: invalid block bitmap [ 1894.855885][T19819] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1894.868517][T19819] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1894.868517][T19819] [ 1894.878217][T19819] EXT4-fs (loop9): Total free blocks count 0 [ 1894.884330][T19819] EXT4-fs (loop9): Free/Dirty block details [ 1894.890358][T19819] EXT4-fs (loop9): free_blocks=0 [ 1894.895370][T19819] EXT4-fs (loop9): dirty_blocks=2508 [ 1894.900799][T19819] EXT4-fs (loop9): Block reservation details [ 1894.906826][T19819] EXT4-fs (loop9): i_reserved_data_blocks=2508 [ 1894.944622][T14032] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 452 with error 28 [ 1895.213977][T19828] loop3: detected capacity change from 0 to 2048 [ 1895.255616][T19812] lo speed is unknown, defaulting to 1000 [ 1895.262589][T19812] wg1 speed is unknown, defaulting to 1000 [ 1895.327702][ C0] vkms_vblank_simulate: vblank timer overrun [ 1895.381695][T19828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1895.432650][ T26] audit: type=1800 audit(1778589983.903:408): pid=19828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3247" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1895.945227][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1896.028239][T19842] loop9: detected capacity change from 0 to 2048 [ 1896.328647][T19842] loop9: p2 p3 p7 [ 1896.674874][T19851] comedi comedi3: comedi_config --init_data is deprecated [ 1896.688871][T12716] udevd[12716]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 1896.712731][T16702] udevd[16702]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1896.726089][T12705] udevd[12705]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1896.802206][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 1896.891170][T12716] udevd[12716]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 1896.904851][T16702] udevd[16702]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1896.933506][T12705] udevd[12705]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1897.041045][T19860] loop3: detected capacity change from 0 to 64 [ 1897.106519][T19860] hfs: request for non-existent node 196608 in B*Tree [ 1897.130787][T19860] hfs: request for non-existent node 196608 in B*Tree [ 1897.161642][T19862] loop2: detected capacity change from 0 to 512 [ 1897.182699][T19862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1897.244447][T19862] EXT4-fs (loop2): 1 truncate cleaned up [ 1897.253772][T19862] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1897.361472][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1897.953108][T19812] chnl_net:caif_netlink_parms(): no params data found [ 1899.015551][T19812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.024910][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 1899.101307][T19812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.155595][T19906] blktrace: Concurrent blktraces are not allowed on loop5 [ 1899.250079][T19812] device bridge_slave_0 entered promiscuous mode [ 1899.258655][T19812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.267511][T19876] loop2: detected capacity change from 0 to 32768 [ 1899.461949][T19812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.616067][T19876] XFS (loop2): Mounting V5 Filesystem [ 1899.707717][T19812] device bridge_slave_1 entered promiscuous mode [ 1899.899362][T19876] XFS (loop2): Ending clean mount [ 1899.905009][T11677] device hsr_slave_0 left promiscuous mode [ 1899.930197][T11677] device hsr_slave_1 left promiscuous mode [ 1899.940046][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1899.953714][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1899.962648][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1900.054487][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1900.111314][T11677] device geneve1 left promiscuous mode [ 1900.126710][T11677] bridge0: port 3(geneve1) entered disabled state [ 1900.143882][T11677] device bridge_slave_1 left promiscuous mode [ 1900.163549][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.180706][ T4271] XFS (loop2): Unmounting Filesystem [ 1900.241247][T11677] device bridge_slave_0 left promiscuous mode [ 1900.248007][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.408373][T11677] device veth1_macvtap left promiscuous mode [ 1900.424697][T11677] device veth0_macvtap left promiscuous mode [ 1900.438026][T11677] device veth1_vlan left promiscuous mode [ 1900.568841][T19924] comedi comedi3: comedi_config --init_data is deprecated [ 1900.623910][T19902] loop9: detected capacity change from 0 to 32768 [ 1900.674421][T11677] infiniband syz1: set down [ 1900.689439][T19902] XFS (loop9): Mounting V5 Filesystem [ 1900.793161][T19902] XFS (loop9): Ending clean mount [ 1900.967473][T12478] XFS (loop9): Unmounting Filesystem [ 1901.241615][T11677] bond1 (unregistering): Released all slaves [ 1901.248294][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 1901.583692][T19937] blktrace: Concurrent blktraces are not allowed on loop5 [ 1902.204112][T19945] loop2: detected capacity change from 0 to 1024 [ 1902.262015][T19945] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1902.355795][T19945] ext4 filesystem being mounted at /636/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1902.481641][T19945] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.3274: lblock 0 mapped to illegal pblock 0 (length 6) [ 1902.519214][T19945] EXT4-fs (loop2): Remounting filesystem read-only [ 1902.595870][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1903.527119][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 1903.746003][T11677] team0 (unregistering): Port device team_slave_1 removed [ 1903.866994][T11677] team0 (unregistering): Port device team_slave_0 removed [ 1903.946262][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1903.957876][ T4369] smc: removing ib device syz1 [ 1904.024948][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1904.486400][T11677] bond0 (unregistering): Released all slaves [ 1904.735153][T19812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1904.917930][T19812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1905.075682][T19812] team0: Port device team_slave_0 added [ 1905.116846][T19812] team0: Port device team_slave_1 added [ 1905.149783][T19970] blktrace: Concurrent blktraces are not allowed on loop5 [ 1905.199630][T19971] loop3: detected capacity change from 0 to 512 [ 1905.208578][T19971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1905.250957][T19971] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3279: iget: bad i_size value: 38620345925642 [ 1905.264626][T19971] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3279: couldn't read orphan inode 15 (err -117) [ 1905.278152][T19971] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1905.797932][T11681] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:14: bg 0: block 5: invalid block bitmap [ 1905.817378][T11681] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1905.918062][T19812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1905.942540][T11681] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1905.942540][T11681] [ 1905.969470][T19812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1906.057673][T11681] EXT4-fs (loop3): Total free blocks count 0 [ 1906.091921][T11681] EXT4-fs (loop3): Free/Dirty block details [ 1906.130217][T11681] EXT4-fs (loop3): free_blocks=0 [ 1906.184930][T11681] EXT4-fs (loop3): dirty_blocks=16000 [ 1906.201340][T19812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.224690][T11681] EXT4-fs (loop3): Block reservation details [ 1906.250649][T11681] EXT4-fs (loop3): i_reserved_data_blocks=16000 [ 1906.310227][T19984] usb usb9: usbfs: process 19984 (syz.9.3284) did not claim interface 0 before use [ 1906.320981][T19812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.330926][T19812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1906.459988][T19812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.704913][T19812] device hsr_slave_0 entered promiscuous mode [ 1906.719321][T19981] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1906.776416][T19812] device hsr_slave_1 entered promiscuous mode [ 1906.880049][T19812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1906.908604][T19812] Cannot create hsr debugfs directory [ 1908.648255][T20005] blktrace: Concurrent blktraces are not allowed on loop5 [ 1909.119904][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1909.130023][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1909.137622][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1909.147718][ T4280] Workqueue: hci4 hci_rx_work [ 1909.152463][ T4280] Call Trace: [ 1909.155801][ T4280] [ 1909.158768][ T4280] dump_stack_lvl+0x188/0x24e [ 1909.163514][ T4280] ? show_regs_print_info+0x12/0x12 [ 1909.168776][ T4280] ? load_image+0x400/0x400 [ 1909.173354][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 1909.178566][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 1909.183307][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 1909.188561][ T4280] kobject_add_internal+0x61c/0xcc0 [ 1909.193816][ T4280] kobject_add+0x160/0x230 [ 1909.198269][ T4280] ? kobject_init+0x1d0/0x1d0 [ 1909.202988][ T4280] ? klist_children_get+0x50/0x50 [ 1909.208063][ T4280] ? get_device_parent+0x121/0x3f0 [ 1909.213201][ T4280] device_add+0x483/0xfb0 [ 1909.217572][ T4280] ? kmem_cache_free+0xf7/0x290 [ 1909.222461][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 1909.227438][ T4280] le_conn_complete_evt+0x1062/0x1670 [ 1909.232863][ T4280] ? le_conn_complete_evt+0xe9/0x1670 [ 1909.238267][ T4280] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1909.244557][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1909.250239][ T4280] ? skb_pull_data+0xf7/0x200 [ 1909.254951][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 1909.260539][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 1909.266641][ T4280] hci_event_packet+0x7b9/0x1280 [ 1909.271625][ T4280] ? bis_list+0x280/0x280 [ 1909.275988][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1909.281910][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 1909.287057][ T4280] ? netdev_warn+0x3e/0x16c [ 1909.291593][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 1909.296849][ T4280] hci_rx_work+0x3eb/0xd40 [ 1909.301298][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 1909.306180][ T4280] ? process_one_work+0x7b0/0x1160 [ 1909.311322][ T4280] process_one_work+0x8a2/0x1160 [ 1909.316311][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 1909.321979][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1909.327031][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1909.332602][ T4280] ? kthread_data+0x4b/0xc0 [ 1909.337148][ T4280] worker_thread+0xaa2/0x1270 [ 1909.341874][ T4280] kthread+0x29d/0x330 [ 1909.345960][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 1909.351011][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 1909.355627][ T4280] ret_from_fork+0x1f/0x30 [ 1909.360084][ T4280] [ 1909.363268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1909.380285][ T4280] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1909.393732][ T4280] Bluetooth: hci4: failed to register connection device [ 1910.333735][T20017] loop2: detected capacity change from 0 to 256 [ 1910.350180][T20017] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 1910.508821][T20017] overlayfs: filesystem on './file1' not supported [ 1911.339859][T20036] blktrace: Concurrent blktraces are not allowed on loop5 [ 1911.593291][ T4280] Bluetooth: hci4: command 0x2016 tx timeout [ 1911.736213][T19812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1911.789798][T19812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1911.854551][T19812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1911.877164][T19812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1912.109547][T20049] loop2: detected capacity change from 0 to 1024 [ 1912.372159][T19812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.460275][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1912.483089][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1912.536630][T19812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1912.587554][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1912.606039][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1912.627491][T20053] blktrace: Concurrent blktraces are not allowed on loop5 [ 1912.641687][T11681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.648844][T11681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.943763][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1913.075473][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1913.120609][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1913.301176][ T8337] Bluetooth: hci1: command 0x0411 tx timeout [ 1913.391820][T11681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.399207][T11681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1913.478328][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1913.541973][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1913.606953][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1913.666693][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1913.739633][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1913.795070][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1913.815288][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1913.869863][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1913.900387][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1913.936632][T19812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1913.975159][T19812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1913.992742][T20065] loop2: detected capacity change from 0 to 4096 [ 1914.019148][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1914.028280][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1914.065743][T20065] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1914.158344][T20065] ntfs3: loop2: ino=1b, "file0" directory corrupted [ 1914.432863][T20077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1914.676001][T20082] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1914.712484][T20082] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1914.758022][T20083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1914.777610][T20082] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1915.070592][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1915.103773][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1915.137541][T19812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1915.214893][T11691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1915.243269][T11691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1915.318407][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1915.371090][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1915.400356][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1915.436308][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1915.493787][T19812] device veth0_vlan entered promiscuous mode [ 1915.520366][T19812] device veth1_vlan entered promiscuous mode [ 1915.577787][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1915.602287][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1915.674413][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1915.683316][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1915.720942][T20107] device erspan0 entered promiscuous mode [ 1915.751615][T19812] device veth0_macvtap entered promiscuous mode [ 1915.778168][T19812] device veth1_macvtap entered promiscuous mode [ 1915.839649][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1915.857986][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1915.919133][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1915.977619][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.009558][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.079444][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.127719][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.170649][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.240519][T19812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.284117][T11691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1916.716014][T11691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1917.128831][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1917.180217][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1917.206469][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1917.283386][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1917.324769][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1917.353000][T20129] loop3: detected capacity change from 0 to 512 [ 1917.379517][T20129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1917.401933][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1917.472267][T20129] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3318: iget: bad i_size value: 38620345925642 [ 1917.486366][T20129] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3318: couldn't read orphan inode 15 (err -117) [ 1917.504819][T20129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1917.725977][T20126] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3318: bg 0: block 5: invalid block bitmap [ 1917.739156][T20126] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1917.752057][T20126] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1917.752057][T20126] [ 1917.761807][T20126] EXT4-fs (loop3): Total free blocks count 0 [ 1917.768125][T20126] EXT4-fs (loop3): Free/Dirty block details [ 1917.774144][T20126] EXT4-fs (loop3): free_blocks=0 [ 1917.779176][T20126] EXT4-fs (loop3): dirty_blocks=3576 [ 1917.784507][T20126] EXT4-fs (loop3): Block reservation details [ 1917.788662][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1917.791868][T20126] EXT4-fs (loop3): i_reserved_data_blocks=3576 [ 1917.843854][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1917.845999][T11681] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1520 with error 28 [ 1917.857858][T19812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1917.892516][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1917.925270][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1918.004612][T19812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.045639][T19812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.054421][T19812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.117463][T20137] blktrace: Concurrent blktraces are not allowed on loop5 [ 1918.299733][T19812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.266191][T11674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.270725][T20147] comedi comedi3: comedi_config --init_data is deprecated [ 1919.287764][T11691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.295663][T11691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.312276][T11674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.013938][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1920.029342][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1921.831358][T20187] loop1: detected capacity change from 0 to 512 [ 1921.850125][T20187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1921.885284][T17991] hid-generic 0004:0004:FFFF0001.000E: unknown main item tag 0x0 [ 1921.894222][T17991] hid-generic 0004:0004:FFFF0001.000E: unknown main item tag 0x0 [ 1921.902199][T17991] hid-generic 0004:0004:FFFF0001.000E: unknown main item tag 0x0 [ 1921.932086][T20187] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.3332: iget: bad i_size value: 38620345925642 [ 1921.946140][T20187] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3332: couldn't read orphan inode 15 (err -117) [ 1921.958963][T20187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1922.162661][T17991] hid-generic 0004:0004:FFFF0001.000E: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 1922.242334][ T4331] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 1922.302365][ T4331] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1752 with error 28 [ 1922.355174][ T4331] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1922.355174][ T4331] [ 1922.466302][ T4331] EXT4-fs (loop1): Total free blocks count 0 [ 1922.499154][ T4331] EXT4-fs (loop1): Free/Dirty block details [ 1922.654866][ T4331] EXT4-fs (loop1): free_blocks=0 [ 1922.713263][ T4331] EXT4-fs (loop1): dirty_blocks=1756 [ 1922.747938][ T4331] EXT4-fs (loop1): Block reservation details [ 1922.790596][ T4331] EXT4-fs (loop1): i_reserved_data_blocks=1756 [ 1922.819049][T20196] fido_id[20196]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1922.843112][T20207] loop3: detected capacity change from 0 to 512 [ 1922.895427][T20207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1922.948518][T20207] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3337: iget: bad i_size value: 38620345925642 [ 1922.966806][T20207] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3337: couldn't read orphan inode 15 (err -117) [ 1922.979940][T20207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1923.068159][T20207] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3337: bg 0: block 5: invalid block bitmap [ 1923.116101][T20207] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2040 with error 28 [ 1923.128650][T20207] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1923.128650][T20207] [ 1923.138515][T20207] EXT4-fs (loop3): Total free blocks count 0 [ 1923.144586][T20207] EXT4-fs (loop3): Free/Dirty block details [ 1923.150957][T20207] EXT4-fs (loop3): free_blocks=0 [ 1923.156029][T20207] EXT4-fs (loop3): dirty_blocks=2044 [ 1923.161365][T20207] EXT4-fs (loop3): Block reservation details [ 1923.167539][T20207] EXT4-fs (loop3): i_reserved_data_blocks=2044 [ 1923.209767][T19812] EXT4-fs (loop1): unmounting filesystem. [ 1923.645256][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1923.709578][T19292] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1923.912426][T19292] usb 2-1: Using ep0 maxpacket: 16 [ 1923.920729][T19292] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1923.960982][T19292] usb 2-1: config 0 has no interface number 0 [ 1923.986273][T19292] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1924.026873][T19292] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1924.045658][T19292] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1924.058004][T19292] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1924.068790][T19292] usb 2-1: Product: syz [ 1924.076932][T19292] usb 2-1: SerialNumber: syz [ 1924.087069][T19292] usb 2-1: config 0 descriptor?? [ 1924.103228][T19292] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1924.111552][T19292] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input14 [ 1924.313628][T20227] loop3: detected capacity change from 0 to 1024 [ 1924.345576][T20227] EXT4-fs: Ignoring removed mblk_io_submit option [ 1924.391350][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1924.402385][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1924.410574][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1924.419250][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1924.428863][T20231] loop9: detected capacity change from 0 to 512 [ 1924.436012][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1924.443342][T19292] usb 2-1: USB disconnect, device number 2 [ 1924.463062][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 1924.478920][T19292] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1924.490123][T20227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1924.507971][T20231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1924.583924][T20231] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.3344: iget: bad i_size value: 38620345925642 [ 1924.598869][T20231] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.3344: couldn't read orphan inode 15 (err -117) [ 1924.611529][T20227] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.3342: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1924.630602][T20231] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1924.885373][T20227] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3342: couldn't read orphan inode 11 (err -117) [ 1924.953976][T20227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1925.100398][ T4369] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 1925.124400][T20227] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.3342: Invalid block bitmap block 0 in block_group 0 [ 1925.149970][T20227] Quota error (device loop3): write_blk: dquota write failed [ 1925.161665][T20227] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1925.161690][ T4369] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1188 with error 28 [ 1925.188744][T20227] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.3342: Failed to acquire dquot type 0 [ 1925.202257][ T4369] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1925.202257][ T4369] [ 1925.222955][ T4369] EXT4-fs (loop9): Total free blocks count 0 [ 1925.223460][T20253] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3342: Invalid inode bitmap blk 137438953472 in block_group 0 [ 1925.238482][ T4369] EXT4-fs (loop9): Free/Dirty block details [ 1925.259997][ T4369] EXT4-fs (loop9): free_blocks=0 [ 1925.265269][ T4369] EXT4-fs (loop9): dirty_blocks=1192 [ 1925.282757][ T4369] EXT4-fs (loop9): Block reservation details [ 1925.288843][ T4369] EXT4-fs (loop9): i_reserved_data_blocks=1192 [ 1925.313448][T19291] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1925.342239][T11685] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm kworker/u4:15: Invalid inode table block 8589934593 in block_group 0 [ 1925.362714][T12478] EXT4-fs (loop9): unmounting filesystem. [ 1925.391489][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1925.494042][T19291] usb 3-1: device descriptor read/64, error -71 [ 1925.705518][T20266] blktrace: Concurrent blktraces are not allowed on loop5 [ 1925.797505][T19291] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1926.167237][T19291] usb 3-1: device descriptor read/64, error -71 [ 1926.306630][T19291] usb usb3-port1: attempt power cycle [ 1926.765655][T19291] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1926.814033][T19291] usb 3-1: device descriptor read/8, error -71 [ 1926.841487][T20282] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3353'. [ 1927.107700][T19291] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1927.163186][T19291] usb 3-1: device descriptor read/8, error -71 [ 1927.270170][T20294] loop3: detected capacity change from 0 to 2048 [ 1927.289274][T17991] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1927.353999][T19291] usb usb3-port1: unable to enumerate USB device [ 1927.375824][T20294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1927.486683][T17991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1927.506229][T17991] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1927.534880][T17991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.587166][T17991] usb 2-1: config 0 descriptor?? [ 1928.231548][T20317] loop2: detected capacity change from 0 to 1024 [ 1928.467240][T17991] video4linux radio48: keene_cmd_main failed (-71) [ 1928.498485][T17991] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1928.533605][T20304] loop9: detected capacity change from 0 to 32768 [ 1928.582365][T17991] usb 2-1: USB disconnect, device number 3 [ 1930.062664][T20331] loop1: detected capacity change from 0 to 4096 [ 1930.091216][T20331] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1930.256077][T20331] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1930.330164][T20344] loop3: detected capacity change from 0 to 512 [ 1930.345806][T20344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1930.412810][ T26] audit: type=1800 audit(1778590016.646:409): pid=20331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3367" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1930.437309][T20344] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3371: iget: bad i_size value: 38620345925642 [ 1930.450811][T20344] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3371: couldn't read orphan inode 15 (err -117) [ 1930.464500][T20344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1930.713846][ T7490] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:23: bg 0: block 5: invalid block bitmap [ 1930.796378][ T7490] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1652 with error 28 [ 1930.878625][ T7490] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1930.878625][ T7490] [ 1930.939922][ T7490] EXT4-fs (loop3): Total free blocks count 0 [ 1930.972593][ T7490] EXT4-fs (loop3): Free/Dirty block details [ 1931.000610][ T7490] EXT4-fs (loop3): free_blocks=0 [ 1931.026421][ T7490] EXT4-fs (loop3): dirty_blocks=1656 [ 1931.058516][ T7490] EXT4-fs (loop3): Block reservation details [ 1931.109037][ T7490] EXT4-fs (loop3): i_reserved_data_blocks=1656 [ 1931.141741][T20362] loop9: detected capacity change from 0 to 256 [ 1931.195405][T20362] exfat: Deprecated parameter 'utf8' [ 1931.251033][T20362] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1931.398945][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1931.636449][T20366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1931.878413][T20368] loop3: detected capacity change from 0 to 4096 [ 1932.009458][T20368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1932.427740][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1933.234900][T20394] can0: slcan on ptm0. [ 1933.286663][T20370] loop9: detected capacity change from 0 to 32768 [ 1933.352254][T20370] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 1933.413423][T20393] can0 (unregistered): slcan off ptm0. [ 1933.431526][T20370] JBD2: Ignoring recovery information on journal [ 1933.617079][T20406] loop1: detected capacity change from 0 to 512 [ 1933.639168][T20406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1933.734817][T20406] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.3384: iget: bad i_size value: 38620345925642 [ 1933.748720][T20406] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3384: couldn't read orphan inode 15 (err -117) [ 1933.762244][T20406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1933.862660][T20370] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1934.110865][T13403] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:30: bg 0: block 5: invalid block bitmap [ 1934.147941][T13403] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1832 with error 28 [ 1934.233372][T13403] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1934.233372][T13403] [ 1934.294522][T13403] EXT4-fs (loop1): Total free blocks count 0 [ 1934.320343][T13403] EXT4-fs (loop1): Free/Dirty block details [ 1934.349893][T13403] EXT4-fs (loop1): free_blocks=0 [ 1934.371372][T13403] EXT4-fs (loop1): dirty_blocks=1836 [ 1934.395741][T13403] EXT4-fs (loop1): Block reservation details [ 1934.415593][T13403] EXT4-fs (loop1): i_reserved_data_blocks=1836 [ 1934.597910][T19812] EXT4-fs (loop1): unmounting filesystem. [ 1934.643336][T12478] ocfs2: Unmounting device (7,9) on (node local) [ 1936.433847][T20459] loop3: detected capacity change from 0 to 512 [ 1936.442188][T20459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1936.475774][T20459] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3397: iget: bad i_size value: 38620345925642 [ 1936.489117][T20459] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3397: couldn't read orphan inode 15 (err -117) [ 1936.502974][T20459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1936.737933][T20428] loop1: detected capacity change from 0 to 40427 [ 1936.747908][ T7490] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:23: bg 0: block 5: invalid block bitmap [ 1936.800057][T20428] F2FS-fs (loop1): Invalid segment/section count (24 != 3 * 1) [ 1936.807707][T20428] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1936.826229][ T7490] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1100 with error 28 [ 1936.879662][ T7490] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1936.879662][ T7490] [ 1936.890140][ T7490] EXT4-fs (loop3): Total free blocks count 0 [ 1936.897132][ T7490] EXT4-fs (loop3): Free/Dirty block details [ 1936.903289][ T7490] EXT4-fs (loop3): free_blocks=0 [ 1936.909437][T20428] F2FS-fs (loop1): invalid crc value [ 1936.918222][ T7490] EXT4-fs (loop3): dirty_blocks=1104 [ 1936.924632][ T7490] EXT4-fs (loop3): Block reservation details [ 1936.933387][ T7490] EXT4-fs (loop3): i_reserved_data_blocks=1104 [ 1936.976134][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1937.005121][T20428] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1937.187927][T20456] loop9: detected capacity change from 0 to 32768 [ 1937.341937][T20428] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1937.379014][T20480] loop3: detected capacity change from 0 to 512 [ 1937.393110][T20428] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1937.490115][T20456] XFS (loop9): Mounting V5 Filesystem [ 1937.522290][T20480] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1937.616818][T20480] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3400: iget: bad i_size value: 38620345925642 [ 1937.713860][T20456] XFS (loop9): Ending clean mount [ 1937.754341][T20428] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1937.767900][T20480] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3400: couldn't read orphan inode 15 (err -117) [ 1937.873735][T20480] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1938.014828][T20428] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1938.265551][T20486] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3400: bg 0: block 5: invalid block bitmap [ 1938.337900][T20486] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 244 with error 28 [ 1938.414288][T12478] XFS (loop9): Unmounting Filesystem [ 1938.456181][T20486] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1938.456181][T20486] [ 1938.477742][ T4318] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1938.520298][T20486] EXT4-fs (loop3): Total free blocks count 0 [ 1938.526360][T20486] EXT4-fs (loop3): Free/Dirty block details [ 1938.563194][T20486] EXT4-fs (loop3): free_blocks=0 [ 1938.568237][T20486] EXT4-fs (loop3): dirty_blocks=244 [ 1938.684907][T20486] EXT4-fs (loop3): Block reservation details [ 1938.693469][T20486] EXT4-fs (loop3): i_reserved_data_blocks=244 [ 1938.754568][ T4318] usb 3-1: device descriptor read/64, error -71 [ 1939.075869][ T4318] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1939.228760][T14664] EXT4-fs (loop3): unmounting filesystem. [ 1939.247269][ T4318] usb 3-1: device descriptor read/64, error -71 [ 1939.375911][ T4318] usb usb3-port1: attempt power cycle [ 1939.824128][ T4318] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1939.938310][ T4318] usb 3-1: device descriptor read/8, error -71 [ 1940.230470][ T4318] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1940.316593][ T4318] usb 3-1: device descriptor read/8, error -71 [ 1940.445852][ T4318] usb usb3-port1: unable to enumerate USB device [ 1940.852905][T20535] loop3: detected capacity change from 0 to 32768 [ 1940.923916][T20535] JBD2: Ignoring recovery information on journal [ 1941.284849][T20535] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1941.539880][T19292] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1941.886322][T19292] usb 10-1: device descriptor read/64, error -71 [ 1942.043194][T14664] ocfs2: Unmounting device (7,3) on (node local) [ 1942.185664][T19292] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1942.442084][T19292] usb 10-1: device descriptor read/64, error -71 [ 1942.581043][T19292] usb usb10-port1: attempt power cycle [ 1943.019394][T19292] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1943.062318][T19292] usb 10-1: device descriptor read/8, error -71 [ 1943.212868][ T4318] kernel write not supported for file /amidi2 (pid: 4318 comm: kworker/1:4) [ 1943.350369][T19292] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1943.393811][T19292] usb 10-1: device descriptor read/8, error -71 [ 1943.521984][T19292] usb usb10-port1: unable to enumerate USB device [ 1944.023497][ T1185] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1944.237347][ T1185] usb 4-1: Using ep0 maxpacket: 32 [ 1944.245802][ T1185] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 203, changing to 7 [ 1944.291874][T20632] blktrace: Concurrent blktraces are not allowed on loop5 [ 1944.505343][ T1185] usb 4-1: string descriptor 0 read error: -22 [ 1944.522345][ T1185] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1944.614092][ T1185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.661881][ T1185] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1945.229769][ T1185] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1945.298945][ T1185] usb 4-1: USB disconnect, device number 18 [ 1945.357360][T20610] loop2: detected capacity change from 0 to 40427 [ 1945.395822][T20610] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 1945.425862][T20610] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 1945.461081][T20610] F2FS-fs (loop2): invalid crc value [ 1945.700831][T20610] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1945.912750][T20610] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 1946.132994][T20610] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1946.159805][T20649] loop3: detected capacity change from 0 to 128 [ 1946.221850][T20649] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1946.260609][T20649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1946.374087][T20610] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10 [ 1946.650311][ T4271] syz-executor: attempt to access beyond end of device [ 1946.650311][ T4271] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1947.400440][ T1185] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1947.547107][T20667] loop9: detected capacity change from 0 to 2048 [ 1947.609596][T20667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1947.658568][ T1185] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1947.699665][ T1185] usb 4-1: config 0 has no interface number 0 [ 1947.731962][ T1185] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1947.806327][ T1185] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1947.816201][ T1185] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1947.865515][ T1185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.902707][ T1185] usb 4-1: config 0 descriptor?? [ 1947.977737][T20678] loop1: detected capacity change from 0 to 512 [ 1947.988891][T20678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1948.137244][T20678] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.3445: iget: bad i_size value: 38620345925642 [ 1948.157669][T20678] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3445: couldn't read orphan inode 15 (err -117) [ 1948.171375][T20678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1948.287915][T20677] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3445: bg 0: block 5: invalid block bitmap [ 1948.301320][T20677] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1256 with error 28 [ 1948.313967][T20677] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1948.313967][T20677] [ 1948.324650][T20677] EXT4-fs (loop1): Total free blocks count 0 [ 1948.330771][T20677] EXT4-fs (loop1): Free/Dirty block details [ 1948.336753][T20677] EXT4-fs (loop1): free_blocks=0 [ 1948.342101][T20677] EXT4-fs (loop1): dirty_blocks=1260 [ 1948.347484][T20677] EXT4-fs (loop1): Block reservation details [ 1948.353634][T20677] EXT4-fs (loop1): i_reserved_data_blocks=1260 [ 1948.390803][T20662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1948.424248][T20662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1948.435713][ T1185] holtek_mouse 0003:04D9:A081.000F: unknown main item tag 0x0 [ 1948.483067][T20679] loop2: detected capacity change from 0 to 4096 [ 1948.490245][ T1185] holtek_mouse 0003:04D9:A081.000F: unknown main item tag 0x0 [ 1948.507231][ T1185] holtek_mouse 0003:04D9:A081.000F: unknown main item tag 0x0 [ 1948.529650][T20685] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1948.588601][ T1185] holtek_mouse 0003:04D9:A081.000F: unknown main item tag 0x0 [ 1948.596213][ T1185] holtek_mouse 0003:04D9:A081.000F: unknown main item tag 0x0 [ 1948.756252][ T1185] holtek_mouse 0003:04D9:A081.000F: unknown main item tag 0x0 [ 1948.795098][ T1185] holtek_mouse 0003:04D9:A081.000F: unknown main item tag 0x0 [ 1948.824250][ T1185] holtek_mouse 0003:04D9:A081.000F: unknown main item tag 0x0 [ 1948.921807][ T1185] holtek_mouse 0003:04D9:A081.000F: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.3-1/input1 [ 1948.991722][ T1185] usb 4-1: USB disconnect, device number 19 [ 1949.076654][T19812] EXT4-fs (loop1): unmounting filesystem. [ 1949.166813][T20693] mmap: syz.9.3448 (20693) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1949.375327][T20690] fido_id[20690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1949.936467][T20718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3458'. [ 1951.862825][T20746] blktrace: Concurrent blktraces are not allowed on loop5 [ 1952.009164][T20714] loop9: detected capacity change from 0 to 32768 [ 1952.105036][T20714] ERROR: (device loop9): diWrite: ixpxd invalid [ 1952.105036][T20714] [ 1952.187837][T20714] ERROR: (device loop9): remounting filesystem as read-only [ 1952.239712][T20714] ERROR: (device loop9): txCommit: [ 1952.239712][T20714] [ 1952.298218][T20751] BUG: Bad page state in process syz.9.3456 pfn:7e665 [ 1952.314315][T20751] page:ffffea0001f99940 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7e665 [ 1952.373529][T20751] flags: 0xfff08000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 1952.422559][T20751] raw: 00fff08000002046 ffffea00019151c8 ffffc9000457f980 0000000000000000 [ 1952.465190][T20751] raw: 000000000000001c ffff88805f010e88 00000000ffffffff 0000000000000000 [ 1952.531715][T20751] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 1952.575977][T20751] page_owner tracks the page as allocated [ 1952.613897][T20751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 20714, tgid 20712 (syz.9.3456), ts 1952098519368, free_ts 1951841614148 [ 1952.676165][T20751] post_alloc_hook+0x173/0x1a0 [ 1952.691965][T20751] get_page_from_freelist+0x1a1e/0x1ab0 [ 1952.701534][T20751] __alloc_pages+0x1ec/0x4f0 [ 1952.719746][T20751] folio_alloc+0x1c/0x60 [ 1952.757050][T20751] filemap_alloc_folio+0xdb/0x480 [ 1952.762271][T20751] do_read_cache_folio+0x1bb/0x760 [ 1952.779178][T20751] do_read_cache_page+0x32/0x220 [ 1952.802545][T20751] __get_metapage+0x316/0xfa0 [ 1952.827285][T20751] diRead+0x6f7/0xbb0 [ 1952.849831][T20751] jfs_iget+0x89/0x3f0 [ 1952.869745][T20751] jfs_fill_super+0x70e/0xad0 [ 1952.896320][T20751] mount_bdev+0x287/0x3c0 [ 1952.911439][T20751] legacy_get_tree+0xe6/0x180 [ 1952.930319][T20751] vfs_get_tree+0x88/0x270 [ 1952.943169][T20751] do_new_mount+0x24a/0xa40 [ 1952.958527][T20751] __se_sys_mount+0x2e3/0x3d0 [ 1952.975204][T20751] page last free stack trace: [ 1952.991118][T20751] free_unref_page_prepare+0x8b4/0x9a0 [ 1953.009345][T20751] free_unref_page+0x2e/0x3f0 [ 1953.026624][T20751] tlb_finish_mmu+0x140/0x220 [ 1953.047610][T20751] exit_mmap+0x384/0x960 [ 1953.063061][T20751] __mmput+0x118/0x3c0 [ 1953.078424][T20751] exit_mm+0x1fe/0x2d0 [ 1953.091818][T20751] do_exit+0x905/0x2480 [ 1953.113312][T20751] do_group_exit+0x217/0x2d0 [ 1953.143059][T20751] get_signal+0x1272/0x1350 [ 1953.167794][T20751] arch_do_signal_or_restart+0xc4/0x1350 [ 1953.196309][T20751] exit_to_user_mode_loop+0x70/0x110 [ 1953.218415][T20751] exit_to_user_mode_prepare+0xee/0x180 [ 1953.247408][T20751] syscall_exit_to_user_mode+0x16/0x40 [ 1953.273384][T20751] do_syscall_64+0x58/0xa0 [ 1953.297858][T20751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1953.316119][T20751] Modules linked in: [ 1953.320204][T20751] CPU: 0 PID: 20751 Comm: syz.9.3456 Not tainted syzkaller #0 [ 1953.327729][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1953.337817][T20751] Call Trace: [ 1953.341109][T20751] [ 1953.344053][T20751] dump_stack_lvl+0x188/0x24e [ 1953.348756][T20751] ? show_regs_print_info+0x12/0x12 [ 1953.353988][T20751] ? swiotlb_print_info+0x60/0x60 [ 1953.359050][T20751] bad_page+0x14b/0x170 [ 1953.363219][T20751] free_unref_page_prepare+0x42a/0x9a0 [ 1953.368701][T20751] ? percpu_ref_put+0x19/0x180 [ 1953.373493][T20751] free_unref_page_list+0xbb/0x8e0 [ 1953.378648][T20751] release_pages+0x1fa6/0x2220 [ 1953.383448][T20751] ? lru_cache_disable+0x30/0x30 [ 1953.388410][T20751] ? mlock_page_drain_local+0x75/0x490 [ 1953.393894][T20751] ? mlock_page_drain_local+0x75/0x490 [ 1953.399370][T20751] ? mlock_page_drain_local+0x289/0x490 [ 1953.404932][T20751] __pagevec_release+0x6d/0xe0 [ 1953.409715][T20751] truncate_inode_pages_range+0x352/0x1090 [ 1953.415557][T20751] ? mapping_evict_folio+0x520/0x520 [ 1953.420859][T20751] ? parse_options+0xcdf/0xe40 [ 1953.425656][T20751] ? jfs_fill_super+0xad0/0xad0 [ 1953.430531][T20751] ? jfs_sync_fs+0x83/0xa0 [ 1953.434975][T20751] ? sync_filesystem+0x1e2/0x220 [ 1953.439945][T20751] jfs_remount+0x33d/0x5b0 [ 1953.444379][T20751] ? jfs_statfs+0x550/0x550 [ 1953.448902][T20751] ? hook_sb_remount+0x19/0xc0 [ 1953.453683][T20751] reconfigure_super+0x219/0x8a0 [ 1953.458639][T20751] path_mount+0xe13/0x1020 [ 1953.463071][T20751] ? kmem_cache_free+0xf7/0x290 [ 1953.467946][T20751] __se_sys_mount+0x2e3/0x3d0 [ 1953.472657][T20751] ? __x64_sys_mount+0xc0/0xc0 [ 1953.477433][T20751] ? lockdep_hardirqs_on+0x94/0x140 [ 1953.482651][T20751] ? __x64_sys_mount+0x1c/0xc0 [ 1953.487432][T20751] do_syscall_64+0x4c/0xa0 [ 1953.491872][T20751] ? clear_bhb_loop+0x60/0xb0 [ 1953.496567][T20751] ? clear_bhb_loop+0x60/0xb0 [ 1953.501265][T20751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1953.507166][T20751] RIP: 0033:0x7fe39779e04a [ 1953.511632][T20751] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.531270][T20751] RSP: 002b:00007fe398653e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1953.539703][T20751] RAX: ffffffffffffffda RBX: 00007fe398653ee0 RCX: 00007fe39779e04a [ 1953.547697][T20751] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 1953.555683][T20751] RBP: 0000200000000f40 R08: 00007fe398653ee0 R09: 0000000001a6a038 [ 1953.563680][T20751] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 1953.571670][T20751] R13: 00007fe398653ea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 1953.579669][T20751] [ 1953.582802][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.832656][T20751] Disabling lock debugging due to kernel taint [ 1960.065814][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1960.072146][ T1278] ieee802154 phy1 wpan1: encryption failed: -22