last executing test programs: 24m25.483491806s ago: executing program 32 (id=93): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r2, 0xe0ffff, 0x19, 0x3) connect$inet(r1, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r3, 0x0) r4 = userfaultfd(0x80001) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 24m10.642086406s ago: executing program 33 (id=121): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT], 0x18}}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, &(0x7f0000000040)=""/44, 0x2c) getdents64(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 22m49.552851813s ago: executing program 34 (id=257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() getrlimit(0xa, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") open(0x0, 0x4827e, 0xdc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x6, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x7, 0x3, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x8, 0x1}}}}, 0xa0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 22m11.131301654s ago: executing program 35 (id=349): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) memfd_create(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x96, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x2b, 0x30, 0x0, 0x6, 0x2, 0x5a, 0xb, 0x2}) 16m14.525097941s ago: executing program 36 (id=951): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x62, 0x39, 0x38, 0x31, 0x61, 0x35, 0x36, 0x66, 0x33, 0x0, 0x0, 0x30, 0x61, 0x38, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "0011223344556677889966778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 13m45.32166811s ago: executing program 37 (id=1167): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) close(0xffffffffffffffff) fcntl$setown(r1, 0x8, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 12m12.171838799s ago: executing program 38 (id=1274): r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000ff0300060200000014000100fe"], 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x8, 0x3, 0xa8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x80, 0xfffffff8, 0x8}}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x80000000, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x0, 0x0, 0x0, 0x1}, 0x3c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000200)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@errors_remount}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000180)="438c173a28d26fa95d5602ff399e5808a48c8bd00612273a9fa3a75f541be08fb9686c0266c2d16bb769ae4b0dc4eb") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x35, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) 9m34.793590135s ago: executing program 4 (id=1476): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x1, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x8, 0x8000000000000001, 0x0, 0x2}, {0x0, 0x0, 0x10000000000000}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2810}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(0xffffffffffffffff, 0x1) r6 = inotify_init() syz_emit_vhci(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/159, 0xa7}, {&(0x7f0000000200)=""/78, 0x44}], 0x253791a644e132a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) epoll_create(0x628) 9m27.783661669s ago: executing program 4 (id=1485): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8d40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x3, 0x800, 0x5, 0x7, 0xa3, "23eac4482304a0c452b656102e82b310960fc1", 0x6, 0x8}) 9m26.169860373s ago: executing program 4 (id=1486): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100511, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f00000000c0)) 9m22.501443515s ago: executing program 4 (id=1494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000200)=""/231, 0xe7) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x22, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) 9m20.966153687s ago: executing program 4 (id=1495): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmdt(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) r4 = fanotify_init(0x40, 0x400) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) getdents64(r5, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) 9m16.844003405s ago: executing program 4 (id=1506): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={[{@threads_num={'threads', 0x3d, 0x5}}]}, 0x1, 0x19c, &(0x7f0000000000)="$eJzs0L9qFFEUx/HvuXP3XyDqqlisYBYMrhOCuzOKhdVitQEXLGwEUyybNSvOqslsoZJAGgnIYl5Bq7RiYSWiYB0sRAsdm7SZIliIqIzMzFXwGXI/MHPn/Jg55zDDcCUsAb/31/q0yTgc4j2CBmYkz5TKz5em/pXktvKSyyafCOmbBRNTCx88vN0LgsFq/VKd6n8B8C3L/kXhDCcUsdBGPu2v9Xtp16TNSC1V4IjpueI+oaanOa5wSBoTFj4u5CMPN8eje83wZ5Iko97yYHlwx/fPX2xdaJXwmzdvBYMpEPexKJ6yjtul1KXirlNY5NGOnmJeEHeoIkfmYoqLbO04Z0/Pxyh3jwThTSOm9EUP6+oaZyjfSJfvcEx4htNl9goVhSYd1OogV9UL8fQH/b2gKG84zrn+3WBp87qSH8XttuyVxdul0PDw57xs+xpHectmxGxEJ2I7YvcrIq/SKRPzf/VGen9uqpOcgiL3e+PxqleEd9Lo4qdXFaazdirbqwqvzTfm4PPfB8uyLMuyLMuyLOsA+BMAAP//afJoUg==") syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) 9m1.585899015s ago: executing program 39 (id=1506): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={[{@threads_num={'threads', 0x3d, 0x5}}]}, 0x1, 0x19c, &(0x7f0000000000)="$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") syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) 7m16.729766899s ago: executing program 9 (id=1687): syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x88d80a, 0x0, 0x20, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 7m15.720046723s ago: executing program 9 (id=1689): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x20000000) 7m14.173474574s ago: executing program 9 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x10050, &(0x7f0000000100)={[{@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@fat=@uid}, {@rodir}, {@shortname_mixed}, {@fat=@umask={'umask', 0x3d, 0x89}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@fat=@nfs}]}, 0x1, 0x2b0, &(0x7f0000000640)="$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") 7m6.81372863s ago: executing program 9 (id=1702): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000210dc6431450a41d40f157e3512b4b99c026e738de5993f365a0c450b77103ed4a4ce9645d5bda31f3c7059d42c252f8bf6429ca73047cf2160668940f50a78e03514b4a241ac903d9d349a649eb2abefc56cd1ad4da51bca4e370cad9401e0899238a3ce2fbe0aab556b9ba4341a9906debdb2646298351fb5b7ae6dbf1698f4eb5cd65fab44cdf71"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c851, 0x0, 0x1, 0x0, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) 7m4.196930338s ago: executing program 9 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0x17f}, &(0x7f0000001180)=ANY=[], &(0x7f0000000a00)="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", 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 6m59.974307669s ago: executing program 9 (id=1710): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000006000)={[{@noacl}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@resgid}, {@nobarrier}]}, 0x0, 0x46a, &(0x7f0000000980)="$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") openat(r0, 0x0, 0x200, 0x108) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x9, 0x1ff, 0x1, 0xfffffff8, 0x3, 0xfffffc01}) 6m47.601587512s ago: executing program 5 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0x17f}, &(0x7f0000001180)=ANY=[], &(0x7f0000000a00)="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", 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 6m44.867788794s ago: executing program 40 (id=1710): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000006000)={[{@noacl}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@resgid}, {@nobarrier}]}, 0x0, 0x46a, &(0x7f0000000980)="$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") openat(r0, 0x0, 0x200, 0x108) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x9, 0x1ff, 0x1, 0xfffffff8, 0x3, 0xfffffc01}) 6m43.272166907s ago: executing program 5 (id=1727): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT], 0x18}}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, &(0x7f0000000040)=""/44, 0x2c) getdents64(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b67, 0x0) 6m39.063008318s ago: executing program 5 (id=1730): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c851, 0x0, 0x1, 0x0, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) 6m33.326808269s ago: executing program 5 (id=1738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$msr(r3, &(0x7f0000000200)=""/231, 0xe7) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x22, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r6}) 6m32.006293494s ago: executing program 5 (id=1739): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT], 0x18}}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, &(0x7f0000000040)=""/44, 0x2c) getdents64(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b67, 0x0) 6m26.772018609s ago: executing program 5 (id=1746): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001100010002000000f6dbdf25650000001b"], 0xb4}], 0x1}, 0x0) syz_clone(0xc4840300, 0x0, 0x0, 0x0, 0x0, 0x0) 6m11.362508704s ago: executing program 41 (id=1746): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001100010002000000f6dbdf25650000001b"], 0xb4}], 0x1}, 0x0) syz_clone(0xc4840300, 0x0, 0x0, 0x0, 0x0, 0x0) 3m8.785735268s ago: executing program 8 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0x17f}, &(0x7f0000001180)=ANY=[], &(0x7f0000000a00)="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", 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 3m5.557971376s ago: executing program 8 (id=2165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x800) 3m1.83882572s ago: executing program 8 (id=2170): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x60}, 0x1, 0x7}, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="039d2086d42c3625f055d4661ae9ef4f", @ANYRESHEX, @ANYBLOB="877397daf2703b81391822cbeabc7686be758c481832ffe387108acb530cf242619803c25296c87d643103217cddabd2b51e89b25f6e3cb02933223ca340fc9f385f595d5d7d9d2eb187af5b03fd7eec7c0c68a656e49691a08427d603c5c0858f12747c7b92bf725b5a558f962661b0fe6f5ab29b3f2f82526eac07cb75e1e7c38b2f06b0044a0f5f5e5f9cc97eb967e7fb72d6824bd0d805ea3568", @ANYRESDEC=r0], 0x0) 2m59.74159833s ago: executing program 8 (id=2174): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) getegid() mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 2m58.926340018s ago: executing program 8 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x1, r0, 0x2) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60040000) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) 2m57.977685929s ago: executing program 8 (id=2180): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x3f02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x200002, 0x0) flistxattr(r3, 0x0, 0x0) 2m56.228866908s ago: executing program 42 (id=2180): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x3f02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x200002, 0x0) flistxattr(r3, 0x0, 0x0) 1m46.696641613s ago: executing program 3 (id=2424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0x17f}, &(0x7f0000001180)=ANY=[], &(0x7f0000000a00)="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", 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 1m45.722245376s ago: executing program 3 (id=2426): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x200440d5}, 0x9080) 1m42.658697268s ago: executing program 3 (id=2441): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80900) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 1m38.147485629s ago: executing program 3 (id=2452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0x17f}, &(0x7f0000001180)=ANY=[], &(0x7f0000000a00)="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", 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 1m36.718558966s ago: executing program 3 (id=2454): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, r2, 0x200000) symlink(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m31.805832881s ago: executing program 3 (id=2466): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1m16.639368588s ago: executing program 43 (id=2466): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 27.162649892s ago: executing program 0 (id=2516): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1200480, &(0x7f0000000c80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d230bcdf0198eb5db4c8f478a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc7f2ffffffffffffffac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00890053f0c1f445f647b4bc8a25c4034a8daaa628ca43c050cd50e106364b1107e4611e13da2b569f95c23298cf63accdad4ee080cdf70830ae4b9acb5c271e3a74ac50472f262dcaa8bbc0ffb1e42dce64ea2a35098349335d9a924a8516c21f9dcc31dc1a50e189835ef0e7cd52c638fd1d903dd71117470b3094219aba13e01272a2ad0086d3e598a0b253dfab39acaa8705cbc569bc212b119045c1955370dbc1d7"], 0x9, 0xc1e, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$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") connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) shutdown(0xffffffffffffffff, 0x1) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000100)=0x3) 19.658566063s ago: executing program 0 (id=2516): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1200480, &(0x7f0000000c80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="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"], 0x9, 0xc1e, &(0x7f0000001240)="$eJzs3U9sHNd9B/DfG5HiUmkrJnYUu42LTVukMmO5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLppYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUsZvatuKRIixFFibI+H5v67s6+N/PevPWMLOjNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdfu3T6THrUrQAAHqYrY185fdb9HwCeKFf9/z8AAAAAAAAAAAAAABx2KYp4KlLMX1lPE9X7ttrlVu+t2+PDIztX609VzSNV+fKndubsufNffGnoQicvt2Y/ov6D9my8MXb1Uv3VuZvzC9OLi9NT9fHZ1uTc1PSe97Df+tsNViegfvPNW1PXry/Wz754bsvHtwc+7PvEiYGLQ8+feq5Tdnx4ZGRss0jtvo+9g91meByNIk5Fihe++5PUjIgi9n8uag937LfrrzoxWHVifHik6shMqzm7VH442jkRRUS9q1Kjc452Hovo6X2ofdhdI2K5bH7Z4MGye2PzzYXmtZnp+mhzYam11JqbHU3t1pb9qUcRF1LESkSs9d29u94ooidSfPv4eroWEUc65+EL1cTg3dtRHGAf96BsZ703YqV4DMbsEOuLIl6PFD9972RMlucs/8TnI14v8/sR75T5SkQqvxjnIz7Y4XvE46kniviLcvwvrqep6nrQua5c/mr9y7PX57rKdq4rv+D94a4rxSO6P/Rvy4fjkF+balFEs7rir6f7/80OAAAAAAAAAAAAAAAAAA9afxTxbKR47d//uJpXHNW89OMXh/5g4Je754w/c4/9lGVfjIjlYm9zco/miYGjaTSlRzyX+ElWiyL+JM//++ajbgwAAAAAAAAAAAAAAAAAAMATrYgfR4qX3z+ZVqJ7TfHW7I361ea1mfaqsJ21fztrpm9sbGzUUzsbOSdyLudcybmacy1nFLl+zkbOiZzLOVdyruZcyxlHcv2cjZwTOZdzruRczbmWM3py/ZyNnBM5l3Ou5FzNuZYzDsnavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPGtr6+nSBHRiJiIdq72PerWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClvlTE9yJF/Q8bd7b1RESq/m07Wf5yPhpHy/xUNIbKfCUal3I2q+xpfPMRtJ/96U1F/ChS9NXevTPgefx72+/ufA3inW9svvvVnnYe6Xw48GHfJ04cvzg08uvP7PY67dSAwcut2Vu36+PDIyNjXZt78tE/1bVtIB+3eDBdJyIW33r7zebMzPTC/b8ovwL7qO6FF4f1RfQcimY8mr7zBCjv/x9Eit95/z86N/zO/f+X2u/u3OHjZ3+6ef9/efuO9nj/79le7x73/6e6tr2cfzfS2xNRW7o533siorb41tunWjebN6ZvTM+eP336S0NDXzp3uvdoRO16a2a669UDOV0AAAAAAAAAAAAAAAAAD08q4vciRfNH66keEber+VoDF4eeP/XckThSzbfaMm/7jbGrl+qvzt2cX5heXJyeqo/Ptibnpqb3erhaNd1rfHjkQDpzT/0H3P7+2qtz828ttG780dKOnx+rXbq2uLTQnNz54+iPIqLRvWWwavD48EjV6JlWc7aqOrrjZPpfXG8q4j8jxeT5evpc3pbn/22f4b9l/v/y9h0d0Pz/T3ZtK4+ZUhE/ixS//ZfPxOeqdh6Lu85ZLve3kWLwwmdzuThaluu0of1cgfbMwLLs/0aKf/z51rKd+ZBPbZY9s+cT+5gox/94pPjen38nfiNv2/r8h53H/9j2HR3Q+D/dte3YlucV7Lvr5PE/FSleeerd+M287aOe/9F59sbJXPjO8zkOaPw/3bVtIB/3tx5M1wEAAAAAAAAAAB5rvamIv4sUPxjpSS/lbXv5+39T23d0QH//6zNd26YezHpF93yx75MKAAAAAIdEbyrix5HixtK7d+ZQb53/3TX/83c3538Op22fVn/O9yvVcwMe5J//dRvIx53Yf7cBAAAAAAAAAAAAAAAAAADgUEmpiJfyeuoT1Xz+qV3XU1+NFK/99wu5XDpRluusAz9Q/Vq7Mjd76tLMzNxkc6l5bWa6PjbfnJwu6z4dKdb/5rO5blGtr95Zb769xvvmWuwLkWLk7ztl22uxd9Ymf3qz7Jmy7CcjxX/9w9aynXWsP71Z9mxZ9q8jxdf+eeeyJzbLnivLfidS/PBr9U7ZY2XZzvNRP7NZ9sXJueIARgUAAAAAAAAAAAAAAAAAAIAnTW8q4s8ixf/cXLkzlz+v/9/b9bbyzje61vvf5na1zv9Atf7/bq/vZ/3/6rkCy7sdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPF2pJi/sp5W+8r3bbXLrdlbt8eHR3au1p+qmkeq8uVP7czZc+e/+NLQhU5+dP0H7dl4Y+zqpfqrczfnF6YXF6en6uOzrcm5qek972G/9bcbrE5A/eabt6auX1+sn33x3JaPbw982PeJEwMXh54/9Vyn7PjwyMhYV5me3vs++l3SLtuPRhF/FSle+O5P0g/6IorY/7m4x3fnoPVXnRisOjE+PFJ1ZKbVnF0qPxztnIgiot5VqdE5Rw9hLPalEbFcNr9s8GDZvbH55kLz2sx0fbS5sNRaas3NjqZ2a8v+1KOICyliJSLW+u7eXW8U8Wak+Pbx9fQvfRFHOufhC1fGvnL67O7tKA6wj3tQtrPeG7FSPAZjdoj1RRH/FCl++t7J+Ne+iJ5o/8TnI14v8/sR70R7vFP5xTgf8cEO3yMeTz1RxP+V439xPb3XV14POteVy1+tf3n2+lxX2c515bG/PzxMh/zaVIsiflhd8dfTv/nvGgAAAAAAAAAAAAAAAOAQKeLXIsXL759M1fzgO3OKW7M36leb12ba0/o6c/86c6Y3NjY26qmdjZwTOZdzruRczbmWM4pcP2ejzNrGxkR+v5xzJedqzrWccSTXz9nIOZFzOedKztWcazmjJ9fP2cg5kXM550rO1ZxrOeOQzN0DAAAAAAAAAAAAAAAAAAA+XorqnxTf+vp62uhrry89Ee1ctR7ox97/BwAA///bhfta") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$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") connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) shutdown(0xffffffffffffffff, 0x1) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000100)=0x3) 15.213662972s ago: executing program 0 (id=2516): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1200480, &(0x7f0000000c80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="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"], 0x9, 0xc1e, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$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") connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) shutdown(0xffffffffffffffff, 0x1) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000100)=0x3) 12.665703816s ago: executing program 7 (id=2686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x22, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5}) 11.771294646s ago: executing program 7 (id=2688): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 11.214821255s ago: executing program 0 (id=2516): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1200480, &(0x7f0000000c80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d230bcdf0198eb5db4c8f478a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc7f2ffffffffffffffac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00890053f0c1f445f647b4bc8a25c4034a8daaa628ca43c050cd50e106364b1107e4611e13da2b569f95c23298cf63accdad4ee080cdf70830ae4b9acb5c271e3a74ac50472f262dcaa8bbc0ffb1e42dce64ea2a35098349335d9a924a8516c21f9dcc31dc1a50e189835ef0e7cd52c638fd1d903dd71117470b3094219aba13e01272a2ad0086d3e598a0b253dfab39acaa8705cbc569bc212b119045c1955370dbc1d7"], 0x9, 0xc1e, &(0x7f0000001240)="$eJzs3U9sHNd9B/DfG5HiUmkrJnYUu42LTVukMmO5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLppYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUsZvatuKRIixFFibI+H5v67s6+N/PevPWMLOjNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdfu3T6THrUrQAAHqYrY185fdb9HwCeKFf9/z8AAAAAAAAAAAAAABx2KYp4KlLMX1lPE9X7ttrlVu+t2+PDIztX609VzSNV+fKndubsufNffGnoQicvt2Y/ov6D9my8MXb1Uv3VuZvzC9OLi9NT9fHZ1uTc1PSe97Df+tsNViegfvPNW1PXry/Wz754bsvHtwc+7PvEiYGLQ8+feq5Tdnx4ZGRss0jtvo+9g91meByNIk5Fihe++5PUjIgi9n8uag937LfrrzoxWHVifHik6shMqzm7VH442jkRRUS9q1Kjc452Hovo6X2ofdhdI2K5bH7Z4MGye2PzzYXmtZnp+mhzYam11JqbHU3t1pb9qUcRF1LESkSs9d29u94ooidSfPv4eroWEUc65+EL1cTg3dtRHGAf96BsZ703YqV4DMbsEOuLIl6PFD9972RMlucs/8TnI14v8/sR75T5SkQqvxjnIz7Y4XvE46kniviLcvwvrqep6nrQua5c/mr9y7PX57rKdq4rv+D94a4rxSO6P/Rvy4fjkF+balFEs7rir6f7/80OAAAAAAAAAAAAAAAAAA9afxTxbKR47d//uJpXHNW89OMXh/5g4Je754w/c4/9lGVfjIjlYm9zco/miYGjaTSlRzyX+ElWiyL+JM//++ajbgwAAAAAAAAAAAAAAAAAAMATrYgfR4qX3z+ZVqJ7TfHW7I361ea1mfaqsJ21fztrpm9sbGzUUzsbOSdyLudcybmacy1nFLl+zkbOiZzLOVdyruZcyxlHcv2cjZwTOZdzruRczbmWM3py/ZyNnBM5l3Ou5FzNuZYzDsnavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPGtr6+nSBHRiJiIdq72PerWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClvlTE9yJF/Q8bd7b1RESq/m07Wf5yPhpHy/xUNIbKfCUal3I2q+xpfPMRtJ/96U1F/ChS9NXevTPgefx72+/ufA3inW9svvvVnnYe6Xw48GHfJ04cvzg08uvP7PY67dSAwcut2Vu36+PDIyNjXZt78tE/1bVtIB+3eDBdJyIW33r7zebMzPTC/b8ovwL7qO6FF4f1RfQcimY8mr7zBCjv/x9Eit95/z86N/zO/f+X2u/u3OHjZ3+6ef9/efuO9nj/79le7x73/6e6tr2cfzfS2xNRW7o533siorb41tunWjebN6ZvTM+eP336S0NDXzp3uvdoRO16a2a669UDOV0AAAAAAAAAAAAAAAAAD08q4vciRfNH66keEber+VoDF4eeP/XckThSzbfaMm/7jbGrl+qvzt2cX5heXJyeqo/Ptibnpqb3erhaNd1rfHjkQDpzT/0H3P7+2qtz828ttG780dKOnx+rXbq2uLTQnNz54+iPIqLRvWWwavD48EjV6JlWc7aqOrrjZPpfXG8q4j8jxeT5evpc3pbn/22f4b9l/v/y9h0d0Pz/T3ZtK4+ZUhE/ixS//ZfPxOeqdh6Lu85ZLve3kWLwwmdzuThaluu0of1cgfbMwLLs/0aKf/z51rKd+ZBPbZY9s+cT+5gox/94pPjen38nfiNv2/r8h53H/9j2HR3Q+D/dte3YlucV7Lvr5PE/FSleeerd+M287aOe/9F59sbJXPjO8zkOaPw/3bVtIB/3tx5M1wEAAAAAAAAAAB5rvamIv4sUPxjpSS/lbXv5+39T23d0QH//6zNd26YezHpF93yx75MKAAAAAIdEbyrix5HixtK7d+ZQb53/3TX/83c3538Op22fVn/O9yvVcwMe5J//dRvIx53Yf7cBAAAAAAAAAAAAAAAAAADgUEmpiJfyeuoT1Xz+qV3XU1+NFK/99wu5XDpRluusAz9Q/Vq7Mjd76tLMzNxkc6l5bWa6PjbfnJwu6z4dKdb/5rO5blGtr95Zb769xvvmWuwLkWLk7ztl22uxd9Ymf3qz7Jmy7CcjxX/9w9aynXWsP71Z9mxZ9q8jxdf+eeeyJzbLnivLfidS/PBr9U7ZY2XZzvNRP7NZ9sXJueIARgUAAAAAAAAAAAAAAAAAAIAnTW8q4s8ixf/cXLkzlz+v/9/b9bbyzje61vvf5na1zv9Atf7/bq/vZ/3/6rkCy7sdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPF2pJi/sp5W+8r3bbXLrdlbt8eHR3au1p+qmkeq8uVP7czZc+e/+NLQhU5+dP0H7dl4Y+zqpfqrczfnF6YXF6en6uOzrcm5qek972G/9bcbrE5A/eabt6auX1+sn33x3JaPbw982PeJEwMXh54/9Vyn7PjwyMhYV5me3vs++l3SLtuPRhF/FSle+O5P0g/6IorY/7m4x3fnoPVXnRisOjE+PFJ1ZKbVnF0qPxztnIgiot5VqdE5Rw9hLPalEbFcNr9s8GDZvbH55kLz2sx0fbS5sNRaas3NjqZ2a8v+1KOICyliJSLW+u7eXW8U8Wak+Pbx9fQvfRFHOufhC1fGvnL67O7tKA6wj3tQtrPeG7FSPAZjdoj1RRH/FCl++t7J+Ne+iJ5o/8TnI14v8/sR70R7vFP5xTgf8cEO3yMeTz1RxP+V439xPb3XV14POteVy1+tf3n2+lxX2c515bG/PzxMh/zaVIsiflhd8dfTv/nvGgAAAAAAAAAAAAAAAOAQKeLXIsXL759M1fzgO3OKW7M36leb12ba0/o6c/86c6Y3NjY26qmdjZwTOZdzruRczbmWM4pcP2ejzNrGxkR+v5xzJedqzrWccSTXz9nIOZFzOedKztWcazmjJ9fP2cg5kXM550rO1ZxrOeOQzN0DAAAAAAAAAAAAAAAAAAA+XorqnxTf+vp62uhrry89Ee1ctR7ox97/BwAA///bhfta") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$eJzs3U9oHPUeAPDv7GaTJg1NC+/Be48eynsP+qB0k/TPs3pqr2Kh0IPgpYbNNoRssiG70SYETO9F7EFUeqk3PXhUPHgQL4IXr14Uz4LYoND0oCv7L2022ZjUbjZmPx+Yzfxmfjvf329mv7Mzw0w2gJ51qvqSivhnRFxLIkaemNcXjZmn6vXW11Zyj9ZWcklUKtd/SiKJiIdrK7lm/aTx92hErEbEPyLii0zEmdTWuKWl5ZmJQiG/0CiPlmfnR0tLy2enZyem8lP5ufPPPX/x0oWL4+fG2zc+s7e+3vnu7pt3vn7x/t0PPzq5mnt7IonLMdyY92Q/nqX6OsnE5ZbpFzoRrIuSbjeAp5Ju5Hk1lf4eI5FuZP12KiP72jSgwyoDEZW9SFb3VB04yJK95T9waDSPA6rnv81h0wFCurPHHz9eqZ+AVOOuN4b6nL76tYk4Ujs3Gfo52XRmUj3fPN7ZptEDVm9HxFhf39bPf9L4/D29sWfRQDrq8yv1DbV1+6c29j+xzf5nuHnt9E9q7v/Wt+z/HsdPt9n/XdtljF9f+f69tvFvR/xr2/jJRvykJf6J4dpV4Xh1l/HvvfzppXbzKu9HnI7t4zclO18fHr05XciP1V+3jfHZ6ZMv7NT/oTbx69dsj9S+ZrZb//PtFtpyvfuTLz/+9+oO8f/3n523f+v6rxqMiLfaxW9x4uEHLz1ZHt8UP3lQPQrYy/aPRv/v7zL+/y+f+rbNrMFdLgIAAAAAAAAAANhGqnYvW5LKboynUtls/Rnev8VQqlAslc/cLC7OTdbveTsemVTzTquRiIHjkUmq5fHG/bjN8rmW8vnmfcTpwVo5mysWJrvcdwAAAAAAAAAAAAAAAAAAADgojrY8//9Luvb8f+vPVQOHVfuf/AYOO/kPvWtz/icRA11rCrDPfP9Dz6rIf+hd8h96l/yH3iX/oXfJf+hRQ/Ifepn8BwAAAAAAAAAAAAAAAAAAAAAAAACAjrjWHxFXr1Yera3kquXJvqXFmeJrZyfzpZns7GIumysuzGenisWpQj6bK87+0fIKxeL8WMwt3hot50vl0dLS8o3Z4uJc+cb07MRU/kY+sy+9AgAAAAAAAAAAAAAAAAAAgL+W4dqQpLIRkaqNp1LZjYf0M8nN6UJ+LCKORcQ36cxAtTze3SYDAAAAAAAAAAAAAAAAAADAoVNaWp6ZKBTyCz0y0rdlylftK0fE6rNtRnWJe35X898xHJR1eFBG+iNiN5WP7VwnHQejO/sykm58lt6IiJ0rd3GnBAAAAAAAAAAAAAAAAAAAPerxQ7+7fcdvG2ODnWoUAAAAAAAAAAAAAAAAAAAA9JzUD0lEVIfTI/8dbp3bn6zXfjK8PyJev3f9nVsT5fLCeHX6g43p5Xcb0891o/3AbjXztJnHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGOlpeWZiUIhv9DBkW73EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBp/B4AAP//aF3Pmw==") connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) shutdown(0xffffffffffffffff, 0x1) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000100)=0x3) 11.193158866s ago: executing program 6 (id=2693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x392ffda13ecd2e50}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 9.010908819s ago: executing program 6 (id=2695): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, r2, 0x200000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.010711169s ago: executing program 7 (id=2696): ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() shmdt(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xa) fchdir(r5) r6 = fanotify_init(0x40, 0x400) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r6, 0x1, 0x40001019, r7, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) getdents64(r7, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) 8.040629931s ago: executing program 1 (id=2698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x22, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5}) 7.966763124s ago: executing program 7 (id=2699): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) 6.88149775s ago: executing program 1 (id=2701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 6.878717581s ago: executing program 6 (id=2702): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 6.613446139s ago: executing program 6 (id=2704): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e000101008032090400000408066200070501020002000424010007058202000200042402000705830200020004240300070504020002000424"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000080)={[{0x3d, 0x4e00, "f27d5601cf763c15cb5f23fcef283faa5e412ed96bd23cc449eac4ed68a85bf66a325cb93fd68c46971f1a4bd367cba33140b807bb379ff7694f521ba9"}]}) syz_usb_control_io(r0, 0x0, 0x0) 6.29500679s ago: executing program 2 (id=2706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x392ffda13ecd2e50}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 6.070976887s ago: executing program 0 (id=2516): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1200480, &(0x7f0000000c80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="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"], 0x9, 0xc1e, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$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") connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) shutdown(0xffffffffffffffff, 0x1) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000100)=0x3) 6.069423667s ago: executing program 2 (id=2707): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='9', 0x1) write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[], 0x8) 3.620284609s ago: executing program 1 (id=2708): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000300)}], 0x1}}], 0x1, 0x14) shutdown(r0, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0)={r2, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d"}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x4}, &(0x7f0000000240)=0x8) 3.569745101s ago: executing program 7 (id=2709): ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() shmdt(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xa) fchdir(r5) r6 = fanotify_init(0x40, 0x400) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r6, 0x1, 0x40001019, r7, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) getdents64(r7, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) 3.569568741s ago: executing program 2 (id=2710): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x1010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x100182, 0x488) write$rfkill(r0, &(0x7f0000000080)={0x9, 0x6, 0xff, 0x1}, 0xffffff66) 2.719902249s ago: executing program 6 (id=2711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x22, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5}) 2.630381562s ago: executing program 7 (id=2712): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') symlink(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.566166425s ago: executing program 1 (id=2713): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xce25, @loopback}, 0x10) 2.503523616s ago: executing program 2 (id=2714): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socket$kcm(0x2, 0x2, 0x73) 1.19847204s ago: executing program 6 (id=2715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.009719376s ago: executing program 1 (id=2716): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x71, 0x1, {{0x10, 0x3, 0x2}, 0x40}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(0x0, 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x6, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x1, 0x0) sendfile(r3, r3, 0x0, 0x2000000000006) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d80)=""/220, 0xdc}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x44004) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r6, 0x40086e81, &(0x7f0000000200)=0x8) openat(r0, &(0x7f0000000540)='myproc\x00', 0x8040, 0x40) 893.42854ms ago: executing program 2 (id=2717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x392ffda13ecd2e50}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 186.142874ms ago: executing program 2 (id=2718): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}, {0x0}], 0x2}, 0x0) 35.876499ms ago: executing program 1 (id=2719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x3, 0x70bd25, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x3}]}, 0x24}}, 0x20000000) 0s ago: executing program 0 (id=2516): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1200480, &(0x7f0000000c80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="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"], 0x9, 0xc1e, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$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") connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) shutdown(0xffffffffffffffff, 0x1) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000100)=0x3) kernel console output (not intermixed with test programs): 1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1311.069516][T11222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.246655][T11222] usb 2-1: config 0 descriptor?? [ 1311.338312][T11222] usb 2-1: can't set config #0, error -71 [ 1311.373557][T11222] usb 2-1: USB disconnect, device number 6 [ 1312.704027][ T4324] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1312.783091][ T954] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1312.863039][T11222] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1312.904698][ T4324] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.925343][ T4324] usb 9-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1312.959097][ T4324] usb 9-1: config 1 interface 1 has no altsetting 1 [ 1312.971392][ T4324] usb 9-1: New USB device found, idVendor=23ba, idProduct=0118, bcdDevice= 1.00 [ 1312.997598][ T4324] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.998892][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 1313.006072][ T4324] usb 9-1: Product: syz [ 1313.016018][ T954] usb 2-1: New USB device found, idVendor=7392, idProduct=a611, bcdDevice=f3.d9 [ 1313.016049][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.016070][ T954] usb 2-1: Product: syz [ 1313.016085][ T954] usb 2-1: Manufacturer: syz [ 1313.016100][ T954] usb 2-1: SerialNumber: syz [ 1313.035115][ T954] usb 2-1: config 0 descriptor?? [ 1313.760310][T11222] usb 4-1: Using ep0 maxpacket: 16 [ 1313.785016][T11222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.817685][T11222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1313.839194][ T4324] usb 9-1: Manufacturer: syz [ 1313.849345][ T4324] usb 9-1: SerialNumber: syz [ 1313.854535][T11222] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1313.874937][T11222] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1313.901975][T11222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.936862][T11222] usb 4-1: config 0 descriptor?? [ 1313.960653][ T954] usb 2-1: USB disconnect, device number 7 [ 1314.099786][ T4324] usb 9-1: 1:65 : no or invalid class specific endpoint descriptor [ 1314.198758][ T4324] usb 9-1: USB disconnect, device number 12 [ 1314.377136][T11222] hid-generic 0003:057E:2019.000B: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 1314.485385][T13126] udevd[13126]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1314.548106][ T954] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1314.747821][ T954] usb 2-1: New USB device found, idVendor=7392, idProduct=a611, bcdDevice=f3.d9 [ 1314.776000][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.800937][ T954] usb 2-1: Product: syz [ 1314.815446][ T954] usb 2-1: Manufacturer: syz [ 1314.826632][ T954] usb 2-1: SerialNumber: syz [ 1314.828958][T13734] lo speed is unknown, defaulting to 1000 [ 1314.833374][ T954] usb 2-1: config 0 descriptor?? [ 1314.899639][T13734] lo speed is unknown, defaulting to 1000 [ 1314.912329][T13734] lo speed is unknown, defaulting to 1000 [ 1314.942592][T13734] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1314.962690][T13739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.985295][T13734] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1315.004735][T13739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.099233][T13702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.117936][T13734] lo speed is unknown, defaulting to 1000 [ 1315.131277][T13702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.148988][T13734] lo speed is unknown, defaulting to 1000 [ 1316.479634][T13734] lo speed is unknown, defaulting to 1000 [ 1316.496031][T13734] lo speed is unknown, defaulting to 1000 [ 1316.502883][T13734] lo speed is unknown, defaulting to 1000 [ 1316.625537][ T954] usb 2-1: USB disconnect, device number 8 [ 1316.646229][ T4324] usb 4-1: USB disconnect, device number 9 [ 1317.063997][T13760] loop6: detected capacity change from 0 to 1024 [ 1317.158736][T13760] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1317.204693][T13760] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.1934: lblock 2 mapped to illegal pblock 2 (length 1) [ 1317.265338][ T4324] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1317.273022][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 1317.318891][T13760] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1317.423511][T13760] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.1934: lblock 0 mapped to illegal pblock 48 (length 1) [ 1317.455460][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 1317.479613][T13760] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1317.493329][ T4324] usb 4-1: Using ep0 maxpacket: 32 [ 1317.510094][ T4324] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1317.513475][T13760] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1934: Failed to acquire dquot type 0 [ 1317.563503][ T4324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1317.570216][ T4324] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1317.589757][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 1317.603503][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.621874][T13760] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1317.623508][ T954] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1317.625269][ T4324] usb 4-1: config 0 descriptor?? [ 1317.681326][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 1317.720256][T13760] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.1934: mark_inode_dirty error [ 1317.752416][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 1317.782660][T13760] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1317.833433][ T954] usb 2-1: Using ep0 maxpacket: 16 [ 1317.838926][T13760] EXT4-fs (loop6): 1 orphan inode deleted [ 1317.846598][ T954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.513088][T13760] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1318.584894][ T954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.595126][ T954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1318.608610][ T954] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1318.617905][ T954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.627497][ T4379] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1318.664391][ T954] usb 2-1: config 0 descriptor?? [ 1318.699395][T13760] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.1934: Invalid inode table block 1 in block_group 0 [ 1318.723505][ T4379] EXT4-fs (loop6): Remounting filesystem read-only [ 1318.740993][ T4379] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1318.792036][ T4379] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 0 [ 1318.818489][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 1318.843339][T13760] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1318.879163][ T4379] EXT4-fs (loop6): Remounting filesystem read-only [ 1318.891234][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 1318.905764][T13760] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #2: comm syz.6.1934: mark_inode_dirty error [ 1318.937830][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 1319.087761][ T4324] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1319.104132][T12746] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm kworker/u4:22: Invalid inode table block 1 in block_group 0 [ 1319.106194][ T4324] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1319.129411][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.158216][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.163626][ T4324] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1319.174624][T12746] EXT4-fs (loop6): Remounting filesystem read-only [ 1319.183750][ T4324] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1319.190379][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.193932][ T4324] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 1319.211960][T12694] EXT4-fs (loop6): unmounting filesystem. [ 1319.226412][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.230411][T12694] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1319.245127][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.264858][ T4324] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1319.273523][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.293677][T12694] EXT4-fs (loop6): Remounting filesystem read-only [ 1319.301030][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.318269][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.335608][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.343950][T12694] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1319.345619][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.380178][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.396622][T12694] EXT4-fs (loop6): Remounting filesystem read-only [ 1319.403230][T12694] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1319.403750][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.449132][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.477489][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.492160][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.516337][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.532358][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.550018][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.570301][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.580512][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.596663][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.609872][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.630066][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.646834][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.653654][ T7241] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1319.662665][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.665185][ T4324] corsair-cpro: probe of 0003:1B1C:0C10.000C failed with error -110 [ 1319.671062][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.693138][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.701925][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.714282][ T4324] usb 4-1: USB disconnect, device number 10 [ 1319.733695][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.753968][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.761857][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.779422][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.789147][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.817106][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.830718][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.861794][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.865768][ T7241] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1319.892167][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.904537][ T7241] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.908761][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.932595][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1319.954049][ T7241] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1319.963119][ T7241] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.980991][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1320.005487][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1320.015296][ T7241] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1320.023370][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1320.032172][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1320.047665][ T7241] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.061122][ T954] hid-generic 0003:1044:7A4D.000D: unknown main item tag 0x0 [ 1320.073830][ T7241] usb 9-1: Product: syz [ 1320.078074][ T7241] usb 9-1: Manufacturer: syz [ 1320.082717][ T7241] usb 9-1: SerialNumber: syz [ 1320.087709][T13787] fido_id[13787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1320.110973][ T954] hid-generic 0003:1044:7A4D.000D: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0 [ 1320.211035][ T954] usb 2-1: USB disconnect, device number 9 [ 1320.371501][ T7241] usb 9-1: Can't get UAC3 power state for id 11 [ 1321.714449][ T7241] usb 9-1: 5:0: failed to get current value for ch 0 (-71) [ 1321.772611][ T7241] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1321.847412][ T7241] usb 9-1: USB disconnect, device number 13 [ 1321.947969][T13795] fido_id[13795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1322.063966][ T954] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1322.264048][ T954] usb 2-1: Using ep0 maxpacket: 8 [ 1322.275435][ T954] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1322.316561][ T954] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1322.397201][ T954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1322.431838][ T954] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1322.453839][ T954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.490104][ T954] usb 2-1: config 0 descriptor?? [ 1323.622970][ T954] input: HID 04e7:0030 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04E7:0030.000E/input/input27 [ 1323.736338][ T954] elo 0003:04E7:0030.000E: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 1325.260523][ T954] usb 2-1: USB disconnect, device number 10 [ 1329.508944][T13889] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1329.516158][T13889] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1329.635921][T13889] vhci_hcd vhci_hcd.0: Device attached [ 1329.689315][T13890] vhci_hcd: connection closed [ 1329.718045][ T4605] vhci_hcd: stop threads [ 1329.753462][ T4605] vhci_hcd: release socket [ 1329.786835][ T4605] vhci_hcd: disconnect device [ 1329.846967][ T4321] vhci_hcd: vhci_device speed not set [ 1330.774752][ T4343] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1330.783389][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1331.224736][ T4343] usb 4-1: device descriptor read/64, error -32 [ 1332.774713][ T4343] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1332.984903][ T4343] usb 4-1: Using ep0 maxpacket: 32 [ 1333.002001][ T4343] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1333.010656][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 1333.051004][ T4343] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1333.088479][ T4343] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1333.124843][ T4343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.188777][ T4343] usb 4-1: config 0 descriptor?? [ 1335.093485][T13936] ip_tables: iptables: counters copy to user failed while replacing table [ 1335.240440][ T4343] usbhid 4-1:0.0: can't add hid device: -71 [ 1335.275620][ T4343] usbhid: probe of 4-1:0.0 failed with error -71 [ 1335.335313][ T4343] usb 4-1: USB disconnect, device number 12 [ 1335.445629][T13941] loop1: detected capacity change from 0 to 1024 [ 1335.452973][T13941] EXT4-fs: Ignoring removed mblk_io_submit option [ 1335.574634][T13941] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1335.672305][T13941] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 1335.772702][T13941] EXT4-fs (loop1): journal inode is deleted [ 1335.881476][T13954] loop8: detected capacity change from 0 to 512 [ 1335.933912][T13954] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1335.977016][T13941] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1336.994203][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1984'. [ 1337.196076][T13972] loop6: detected capacity change from 0 to 256 [ 1338.825651][ T4343] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1339.025646][ T4343] usb 2-1: Using ep0 maxpacket: 32 [ 1339.040309][ T4343] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1339.105572][ T4343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1339.112301][ T4343] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1339.459337][ T4343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.503681][ T4343] usb 2-1: config 0 descriptor?? [ 1340.215656][T13981] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1340.415609][T13981] usb 4-1: Using ep0 maxpacket: 8 [ 1340.446506][T13981] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1340.499605][T13981] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1340.563837][T13981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1340.595415][T13981] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1340.648317][T13981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.732701][T13981] usb 4-1: config 0 descriptor?? [ 1341.173368][T13981] input: HID 04e7:0030 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04E7:0030.000F/input/input28 [ 1341.265042][T14025] loop6: detected capacity change from 0 to 1024 [ 1341.269576][ T4343] usbhid 2-1:0.0: can't add hid device: -71 [ 1341.286444][ T4343] usbhid: probe of 2-1:0.0 failed with error -71 [ 1341.303504][T13981] elo 0003:04E7:0030.000F: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 1341.351438][ T4343] usb 2-1: USB disconnect, device number 11 [ 1341.441210][T14025] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1341.543994][T14031] loop8: detected capacity change from 0 to 256 [ 1341.841363][T12694] EXT4-fs (loop6): unmounting filesystem. [ 1342.593318][T14047] loop8: detected capacity change from 0 to 256 [ 1343.017298][ T14] usb 4-1: USB disconnect, device number 13 [ 1343.476141][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 1346.776967][T14097] loop8: detected capacity change from 0 to 4096 [ 1346.897143][T14097] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1347.106639][T14097] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #2: block 16: comm syz.8.2020: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=4096 fake=1 [ 1347.166999][T14110] loop1: detected capacity change from 0 to 256 [ 1348.297161][T12885] EXT4-fs (loop8): unmounting filesystem. [ 1348.326409][T14120] loop3: detected capacity change from 0 to 8 [ 1348.372074][T14120] squashfs: Unknown parameter 'threads' [ 1350.666991][T13981] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1350.859609][T13981] usb 9-1: Using ep0 maxpacket: 8 [ 1350.871357][T13981] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1350.916944][T13981] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1350.983042][T13981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1351.023642][T13981] usb 9-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1351.060974][T13981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.100368][T13981] usb 9-1: config 0 descriptor?? [ 1353.784263][T13981] usbhid 9-1:0.0: can't add hid device: -71 [ 1353.798289][T13981] usbhid: probe of 9-1:0.0 failed with error -71 [ 1353.812978][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2039'. [ 1353.863036][T13981] usb 9-1: USB disconnect, device number 14 [ 1353.867301][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2039'. [ 1354.210151][T14170] netlink: 'syz.3.2039': attribute type 6 has an invalid length. [ 1355.156124][T14171] loop3: detected capacity change from 0 to 1024 [ 1355.237955][T14171] EXT4-fs: Ignoring removed oldalloc option [ 1355.243960][T14171] EXT4-fs: Ignoring removed orlov option [ 1355.335206][T14171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1355.376343][T14171] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.198604][T11320] EXT4-fs (loop3): unmounting filesystem. [ 1358.849943][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 1359.417960][T11223] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1359.750327][T11223] usb 9-1: Using ep0 maxpacket: 8 [ 1359.775106][T11223] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1359.877857][T11223] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1359.971226][T11223] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1360.017137][T11223] usb 9-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1360.067139][T11223] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.138790][T11223] usb 9-1: config 0 descriptor?? [ 1360.583617][T11223] input: HID 04e7:0030 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:04E7:0030.0010/input/input29 [ 1360.748326][T11223] elo 0003:04E7:0030.0010: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 04e7:0030] on usb-dummy_hcd.8-1/input0 [ 1360.831457][T14256] loop6: detected capacity change from 0 to 512 [ 1360.844035][T11223] usb 9-1: USB disconnect, device number 15 [ 1360.896264][T14256] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1360.918502][T14256] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.242166][T12694] EXT4-fs (loop6): unmounting filesystem. [ 1361.444874][T14263] fido_id[14263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1361.896976][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.900315][ T4326] plfxlc 7-1:1.124: request_firmware failed (-110) [ 1361.904254][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.938569][ T4326] plfxlc 7-1:1.124: FPGA download failed (-110) [ 1362.497525][ T4326] plfxlc 7-1:1.124: pureLifi:Device error [ 1362.504385][ T4326] plfxlc: probe of 7-1:1.124 failed with error -110 [ 1362.562413][ T4326] usb 7-1: USB disconnect, device number 4 [ 1364.898145][ T9582] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1365.103020][ T9582] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.168241][ T9582] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1365.174964][ T9582] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1365.252022][ T9582] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.326689][ T9582] usb 9-1: config 0 descriptor?? [ 1365.336927][T14317] loop6: detected capacity change from 0 to 256 [ 1365.755170][ T9582] usbhid 9-1:0.0: can't add hid device: -71 [ 1365.767733][ T9582] usbhid: probe of 9-1:0.0 failed with error -71 [ 1365.823238][ T9582] usb 9-1: USB disconnect, device number 16 [ 1366.193104][T14312] loop1: detected capacity change from 0 to 512 [ 1366.326589][T14312] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1366.467416][T14312] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1366.508331][T14312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2067: bg 0: block 248: padding at end of block bitmap is not set [ 1366.547304][T14312] Quota error (device loop1): write_blk: dquota write failed [ 1366.558589][T14312] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1366.577660][T14332] loop8: detected capacity change from 0 to 2048 [ 1366.588492][T14312] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2067: Failed to acquire dquot type 1 [ 1366.616615][T14332] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 1366.650060][T14312] EXT4-fs (loop1): 1 truncate cleaned up [ 1366.692527][T14312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1367.663347][T14337] sd 0:0:1:0: device reset [ 1369.729775][T14349] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2076'. [ 1369.757043][T10767] EXT4-fs (loop1): unmounting filesystem. [ 1371.398894][ T4343] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1371.613219][ T4343] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.674668][ T4343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1371.758968][ T4343] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1371.785501][ T4343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.910339][ T4343] usb 2-1: config 0 descriptor?? [ 1372.327685][ T4343] usbhid 2-1:0.0: can't add hid device: -71 [ 1372.351309][ T4343] usbhid: probe of 2-1:0.0 failed with error -71 [ 1372.403269][ T4343] usb 2-1: USB disconnect, device number 12 [ 1373.513210][T14394] loop1: detected capacity change from 0 to 512 [ 1373.623037][T14394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1373.767941][T14394] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1373.788179][T14394] ext4 filesystem being remounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.186601][T10767] EXT4-fs (loop1): unmounting filesystem. [ 1374.414158][T14401] ieee802154 phy0 wpan0: encryption failed: -22 [ 1374.773379][T14405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2091'. [ 1376.289840][T14444] bridge0: port 3(syz_tun) entered blocking state [ 1376.434740][T14444] bridge0: port 3(syz_tun) entered disabled state [ 1376.605696][T14444] device syz_tun entered promiscuous mode [ 1376.753379][T14444] bridge0: port 3(syz_tun) entered blocking state [ 1376.760744][T14444] bridge0: port 3(syz_tun) entered forwarding state [ 1377.234080][T14464] loop6: detected capacity change from 0 to 8 [ 1377.307889][T14464] squashfs: Unknown parameter 'threads' [ 1382.568655][T14498] loop8: detected capacity change from 0 to 8 [ 1382.609168][T14498] squashfs: Unknown parameter 'threads' [ 1383.004636][T14508] loop8: detected capacity change from 0 to 164 [ 1383.149873][T11223] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1383.349899][T11223] usb 2-1: Using ep0 maxpacket: 32 [ 1383.357144][T11223] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1383.427040][T11223] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1383.455681][T11223] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1383.519855][T11223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.563619][T11223] usb 2-1: config 0 descriptor?? [ 1386.417120][T11223] usbhid 2-1:0.0: can't add hid device: -71 [ 1386.430297][T11223] usbhid: probe of 2-1:0.0 failed with error -71 [ 1386.490426][T11223] usb 2-1: USB disconnect, device number 13 [ 1387.430383][ T4343] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1387.464433][T14547] loop3: detected capacity change from 0 to 8 [ 1387.504791][T14547] squashfs: Unknown parameter 'threads' [ 1387.640318][ T4343] usb 2-1: Using ep0 maxpacket: 8 [ 1387.655294][ T4343] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1387.707591][ T4343] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1389.000504][ T4343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1389.038905][ T4343] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1389.090482][ T4343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.146931][ T4343] usb 2-1: config 0 descriptor?? [ 1390.685438][ T4343] usbhid 2-1:0.0: can't add hid device: -71 [ 1390.719786][ T4343] usbhid: probe of 2-1:0.0 failed with error -71 [ 1390.780781][ T4343] usb 2-1: USB disconnect, device number 14 [ 1391.636676][T14587] loop3: detected capacity change from 0 to 256 [ 1394.420974][T11223] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1395.446088][T11223] usb 2-1: Using ep0 maxpacket: 8 [ 1395.459575][T11223] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1395.471647][T11223] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1395.485153][T11223] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1395.495259][T11223] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1395.531031][T11223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.552872][T11223] usb 2-1: config 0 descriptor?? [ 1395.968908][T11223] usbhid 2-1:0.0: can't add hid device: -71 [ 1395.977625][T11223] usbhid: probe of 2-1:0.0 failed with error -71 [ 1396.023954][T11223] usb 2-1: USB disconnect, device number 15 [ 1398.817587][T14645] loop6: detected capacity change from 0 to 256 [ 1399.489651][T14654] device syzkaller0 entered promiscuous mode [ 1406.621370][T14709] netlink: 'syz.6.2168': attribute type 10 has an invalid length. [ 1406.715309][T14709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.777968][T14709] device bridge_slave_1 left promiscuous mode [ 1406.810712][T14709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.343608][T14735] loop1: detected capacity change from 0 to 64 [ 1409.381833][T14737] loop8: detected capacity change from 0 to 512 [ 1409.450552][T14737] EXT4-fs: inline encryption not supported [ 1409.517182][T14737] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1409.570343][T14737] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1409.678339][T14737] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.2174: bad orphan inode 131083 [ 1409.721446][T14735] loop1: detected capacity change from 0 to 1764 [ 1409.768867][T14737] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1410.202482][T12885] EXT4-fs (loop8): unmounting filesystem. [ 1410.472705][T11223] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1410.685168][T14756] loop1: detected capacity change from 0 to 256 [ 1410.702669][T11223] usb 4-1: Using ep0 maxpacket: 32 [ 1410.709680][T11223] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1410.752657][T11223] usb 4-1: config 0 has no interface number 0 [ 1410.783283][T11223] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1410.802551][T11223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.833642][T11223] usb 4-1: Product: syz [ 1410.865820][T11223] usb 4-1: Manufacturer: syz [ 1410.883901][T11223] usb 4-1: SerialNumber: syz [ 1410.934614][T11223] usb 4-1: config 0 descriptor?? [ 1410.984525][T11223] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1411.791059][T11223] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1411.810564][T11223] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1411.992001][T14747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.006806][T14747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.075554][ T4513] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.118605][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1412.119319][ T4343] usb 4-1: USB disconnect, device number 14 [ 1412.192828][ T4343] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1412.271551][ T4343] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1412.316026][ T4343] quatech2 4-1:0.51: device disconnected [ 1412.591503][ T4513] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.893302][ T4513] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.214819][ T4513] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.555511][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1413.567438][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1413.594730][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1413.607200][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1413.615141][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1413.623415][ T8733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1414.013108][T14777] lo speed is unknown, defaulting to 1000 [ 1414.272893][T14784] sock: sock_timestamping_bind_phc: sock not bind to device [ 1415.883692][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 1415.988655][T14777] chnl_net:caif_netlink_parms(): no params data found [ 1417.963371][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 1418.416006][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.423182][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.500384][T14777] device bridge_slave_0 entered promiscuous mode [ 1418.725332][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.732515][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.793039][T14777] device bridge_slave_1 entered promiscuous mode [ 1419.020776][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.161452][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.607343][ T8733] Bluetooth: hci0: command 0x040f tx timeout [ 1421.965911][T14777] team0: Port device team_slave_0 added [ 1422.025954][T14777] team0: Port device team_slave_1 added [ 1422.392259][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.429338][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.584147][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.694602][ T8733] Bluetooth: hci0: command 0x0419 tx timeout [ 1423.047597][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.061876][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.116722][T14864] raw_sendmsg: syz.3.2200 forgot to set AF_INET. Fix it! [ 1423.219640][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.553845][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.560340][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.396250][T14777] device hsr_slave_0 entered promiscuous mode [ 1425.449175][T14777] device hsr_slave_1 entered promiscuous mode [ 1425.573455][T14777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1425.612509][T14777] Cannot create hsr debugfs directory [ 1428.294863][ T4513] device hsr_slave_0 left promiscuous mode [ 1428.473480][ T4513] device hsr_slave_1 left promiscuous mode [ 1428.505195][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.512814][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.639697][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.674549][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.764919][ T4513] device bridge_slave_1 left promiscuous mode [ 1428.794657][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.854180][ T4513] device bridge_slave_0 left promiscuous mode [ 1428.860572][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.984498][ T4513] device veth1_macvtap left promiscuous mode [ 1428.990682][ T4513] device veth0_macvtap left promiscuous mode [ 1429.031518][ T4513] device veth1_vlan left promiscuous mode [ 1429.071788][ T4513] device veth0_vlan left promiscuous mode [ 1434.042941][ T4513] team0 (unregistering): Port device team_slave_1 removed [ 1434.163903][ T4513] team0 (unregistering): Port device team_slave_0 removed [ 1434.267366][ T4513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.375456][ T4513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.964097][ T4513] bond0 (unregistering): Released all slaves [ 1436.681871][T14962] loop1: detected capacity change from 0 to 1024 [ 1436.747900][T14962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1436.922772][T14962] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.2234: lblock 2 mapped to illegal pblock 2 (length 1) [ 1436.991711][T14962] EXT4-fs (loop1): Remounting filesystem read-only [ 1437.027867][T14962] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1438.335559][T14962] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.2234: lblock 0 mapped to illegal pblock 48 (length 1) [ 1438.386163][T14962] EXT4-fs (loop1): Remounting filesystem read-only [ 1438.392782][T14962] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1438.465323][T14962] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2234: Failed to acquire dquot type 0 [ 1438.555473][T14962] EXT4-fs (loop1): Remounting filesystem read-only [ 1438.562372][T14962] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1438.614420][T14962] EXT4-fs (loop1): Remounting filesystem read-only [ 1438.655258][T14962] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.2234: mark_inode_dirty error [ 1438.733535][T14962] EXT4-fs (loop1): Remounting filesystem read-only [ 1438.787175][T14962] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1438.826136][T14962] EXT4-fs (loop1): 1 orphan inode deleted [ 1438.833043][T14962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1438.875399][ T41] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1438.909131][ T41] EXT4-fs (loop1): Remounting filesystem read-only [ 1438.949355][T14962] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.2234: Invalid inode table block 1 in block_group 0 [ 1438.955366][ T41] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1439.021565][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 1439.075634][T14962] EXT4-fs (loop1): Remounting filesystem read-only [ 1439.127618][T14962] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1439.139823][ T41] EXT4-fs (loop1): Remounting filesystem read-only [ 1439.199151][T14962] EXT4-fs (loop1): Remounting filesystem read-only [ 1439.221138][T14962] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.2234: mark_inode_dirty error [ 1439.269200][T14962] EXT4-fs (loop1): Remounting filesystem read-only [ 1439.396575][ T4513] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm kworker/u4:13: Invalid inode table block 1 in block_group 0 [ 1439.452052][ T4513] EXT4-fs (loop1): Remounting filesystem read-only [ 1439.476927][T10767] EXT4-fs (loop1): unmounting filesystem. [ 1439.482869][T10767] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1439.493428][T14777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1439.535631][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1439.542301][T10767] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1439.565139][T14777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1439.603063][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1439.616595][T14777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1439.643772][T10767] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1439.668408][T14777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1440.154814][T14777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.335311][T14996] bridge0: port 3(syz_tun) entered blocking state [ 1440.417706][T14996] bridge0: port 3(syz_tun) entered disabled state [ 1440.479019][T14996] device syz_tun entered promiscuous mode [ 1440.485281][T14996] bridge0: port 3(syz_tun) entered blocking state [ 1440.492005][T14996] bridge0: port 3(syz_tun) entered forwarding state [ 1440.926765][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1440.928557][T14996] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1440.934956][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1442.439511][T14777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.496631][T14997] bridge0: port 3(syz_tun) entered disabled state [ 1442.503623][T14997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.510905][T14997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.586210][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1442.603479][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1442.620120][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.620232][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.666650][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1442.667406][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1442.676559][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1442.685474][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.685600][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.521348][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1443.617538][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1443.618418][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1443.621654][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1443.622344][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1443.622972][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1443.626505][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1443.649736][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1443.658124][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1443.671415][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1443.672041][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1443.678508][T15023] loop3: detected capacity change from 0 to 764 [ 1443.695593][T14777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1444.093813][T15028] loop3: detected capacity change from 0 to 512 [ 1444.147767][T15028] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 1445.904695][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1445.923460][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1445.945586][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.970829][T15055] loop3: detected capacity change from 0 to 1024 [ 1446.029552][T15055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1446.050264][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1446.065529][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1446.090609][T15055] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.2255: lblock 2 mapped to illegal pblock 2 (length 1) [ 1446.136768][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1446.140553][T15055] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.152950][T15055] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1446.161584][T15055] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.2255: lblock 0 mapped to illegal pblock 48 (length 1) [ 1446.181945][T15055] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.184685][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1446.190920][T15055] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1446.206055][T15055] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2255: Failed to acquire dquot type 0 [ 1446.218937][T15055] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.237231][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1446.277794][T15055] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1446.294930][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1446.304364][T15055] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.324971][T14777] device veth0_vlan entered promiscuous mode [ 1446.343009][T15055] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.2255: mark_inode_dirty error [ 1446.397977][T15055] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.405841][T15055] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1446.420609][T15055] EXT4-fs (loop3): 1 orphan inode deleted [ 1446.427422][T15055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1446.437757][ T1076] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1446.503397][T14777] device veth1_vlan entered promiscuous mode [ 1446.509194][T15055] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.2255: Invalid inode table block 1 in block_group 0 [ 1446.522740][ T1076] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.551906][ T1076] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1446.585203][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1446.596661][ T1076] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 1446.613341][T15055] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.621988][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1446.640699][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1446.656513][ T1076] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.660743][T15055] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1446.673657][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1446.732177][T15055] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.736798][T14777] device veth0_macvtap entered promiscuous mode [ 1446.766148][T15055] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz.3.2255: mark_inode_dirty error [ 1446.782373][T14777] device veth1_macvtap entered promiscuous mode [ 1446.821215][T15055] EXT4-fs (loop3): Remounting filesystem read-only [ 1446.883157][T15066] lo speed is unknown, defaulting to 1000 [ 1446.901839][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1446.956136][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.986115][T15072] Line length is too long: Should be less than 4094 [ 1446.999456][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.032564][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.063857][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.094949][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.116964][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.127895][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.140293][ T4487] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm kworker/u4:10: Invalid inode table block 1 in block_group 0 [ 1447.155579][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1447.164140][ T4487] EXT4-fs (loop3): Remounting filesystem read-only [ 1447.190047][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1447.202529][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1447.215950][T11320] EXT4-fs (loop3): unmounting filesystem. [ 1447.230248][T11320] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1447.254086][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1447.270211][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1447.281197][T11320] EXT4-fs (loop3): Remounting filesystem read-only [ 1447.291052][T11320] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1447.309253][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.324356][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.335994][T11320] EXT4-fs (loop3): Remounting filesystem read-only [ 1447.343685][T11320] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1447.355501][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.388930][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.425232][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.454806][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.125933][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.154918][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.195362][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.209291][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1448.222966][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1448.330475][T14777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.373728][T14777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.428286][T14777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.484491][T14777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.686863][ T7241] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1448.764914][ T4513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.795856][ T4513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.859937][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1448.885017][ T5417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.893470][ T7241] usb 7-1: Using ep0 maxpacket: 32 [ 1448.904866][ T7241] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1448.927087][ T5417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.947902][ T7241] usb 7-1: config 0 has no interface number 0 [ 1448.973551][T15095] loop3: detected capacity change from 0 to 256 [ 1448.979045][ T7241] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1448.998544][ T7241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.014091][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1449.033770][ T7241] usb 7-1: Product: syz [ 1449.049644][ T7241] usb 7-1: Manufacturer: syz [ 1449.078974][ T7241] usb 7-1: SerialNumber: syz [ 1449.125263][ T7241] usb 7-1: config 0 descriptor?? [ 1449.173916][ T7241] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1449.376016][ T7241] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1449.417522][ T7241] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1449.826816][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 1449.872357][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1449.885924][ T26] usb 7-1: USB disconnect, device number 5 [ 1449.910393][ T26] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1449.973599][ T26] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1450.045912][ T26] quatech2 7-1:0.51: device disconnected [ 1451.348580][T15128] bridge0: port 3(syz_tun) entered disabled state [ 1451.355194][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.363727][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.989151][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 1453.376911][T11910] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1453.567515][T11910] usb 7-1: Using ep0 maxpacket: 8 [ 1453.586191][T11910] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1453.608504][ T26] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1453.628680][T11910] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1453.677629][T11910] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1453.703100][T11910] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1453.748877][T11910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.796225][T11910] usb 7-1: config 0 descriptor?? [ 1453.836915][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 1453.844293][ T26] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1453.886608][ T26] usb 4-1: config 0 has no interface number 0 [ 1453.929183][ T26] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1453.964711][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.016714][ T26] usb 4-1: Product: syz [ 1454.021055][ T26] usb 4-1: Manufacturer: syz [ 1454.025691][ T26] usb 4-1: SerialNumber: syz [ 1454.068820][ T26] usb 4-1: config 0 descriptor?? [ 1454.108148][ T26] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1454.145001][T15186] loop1: detected capacity change from 0 to 128 [ 1454.287854][T11910] usbhid 7-1:0.0: can't add hid device: -71 [ 1454.294015][T11910] usbhid: probe of 7-1:0.0 failed with error -71 [ 1454.304809][ T26] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1454.352563][ T26] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1454.356996][ T954] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1454.371182][T11910] usb 7-1: USB disconnect, device number 6 [ 1454.559342][ T954] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1454.583785][ T954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.626695][ T954] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1454.676868][ T954] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1454.727660][ T954] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1454.755619][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1454.759006][ T954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.781962][ T26] usb 4-1: USB disconnect, device number 15 [ 1454.830393][ T26] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1454.854611][ T954] usb 3-1: Product: syz [ 1454.884920][ T26] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1454.889667][ T954] usb 3-1: Manufacturer: syz [ 1454.938797][ T954] usb 3-1: SerialNumber: syz [ 1454.943224][ T26] quatech2 4-1:0.51: device disconnected [ 1455.089379][T15201] bridge0: port 2(syz_tun) entered blocking state [ 1455.115834][T15201] bridge0: port 2(syz_tun) entered disabled state [ 1456.424189][T15201] device syz_tun entered promiscuous mode [ 1456.432953][ T954] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1456.459686][T15201] bridge0: port 2(syz_tun) entered blocking state [ 1456.466299][T15201] bridge0: port 2(syz_tun) entered forwarding state [ 1456.482604][T15187] udevd[15187]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1456.519257][ T954] usb 3-1: USB disconnect, device number 12 [ 1456.607070][T15206] bridge0: port 2(syz_tun) entered disabled state [ 1456.613722][T15206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.827886][T11223] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1458.039507][T11223] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.066449][T11223] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1458.083830][T11223] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1458.104348][T11223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.146868][T11223] usb 3-1: config 0 descriptor?? [ 1458.577970][T11223] usbhid 3-1:0.0: can't add hid device: -71 [ 1458.584090][T11223] usbhid: probe of 3-1:0.0 failed with error -71 [ 1458.639500][T11223] usb 3-1: USB disconnect, device number 13 [ 1458.816749][T11910] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1459.704489][T11910] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1459.713589][T11910] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.767287][T11910] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1459.805731][T11910] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1459.882490][T11910] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1459.917400][T11910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.934652][T11910] usb 7-1: Product: syz [ 1459.959468][T11910] usb 7-1: Manufacturer: syz [ 1459.964154][T11910] usb 7-1: SerialNumber: syz [ 1460.261655][T11910] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1460.306148][T11910] usb 7-1: USB disconnect, device number 7 [ 1460.590701][T15187] udevd[15187]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.989605][T15291] loop6: detected capacity change from 0 to 1024 [ 1461.013244][T15291] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1461.100423][T15291] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.2318: lblock 2 mapped to illegal pblock 2 (length 1) [ 1461.138040][T15291] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.144663][T15291] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1461.217541][T15291] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.2318: lblock 0 mapped to illegal pblock 48 (length 1) [ 1461.241296][T15291] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.252765][T15291] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1461.263100][T15291] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2318: Failed to acquire dquot type 0 [ 1461.276970][T15291] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.277098][T15291] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1461.277326][T15291] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.277887][T15291] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.2318: mark_inode_dirty error [ 1461.278108][T15291] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.278123][T15291] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1461.278195][T15291] EXT4-fs (loop6): 1 orphan inode deleted [ 1461.278229][T15291] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1461.288451][ T5418] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 1461.288708][ T5418] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.288729][ T5418] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1461.288760][ T5418] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:19: Failed to release dquot type 0 [ 1461.288979][ T5418] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.315031][T15291] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.2318: Invalid inode table block 1 in block_group 0 [ 1461.316565][T15291] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.316589][T15291] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1461.316830][T15291] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.316849][T15291] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #2: comm syz.6.2318: mark_inode_dirty error [ 1461.318180][T15291] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.480341][ T41] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm kworker/u4:2: Invalid inode table block 1 in block_group 0 [ 1461.480660][ T41] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.482208][T12694] EXT4-fs (loop6): unmounting filesystem. [ 1461.485824][T12694] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1461.486896][T12694] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.486921][T12694] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1461.487143][T12694] EXT4-fs (loop6): Remounting filesystem read-only [ 1461.487161][T12694] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1464.107774][ T26] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1464.307882][ T26] usb 7-1: Using ep0 maxpacket: 32 [ 1464.315110][ T26] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1464.344146][ T26] usb 7-1: config 0 has no interface number 0 [ 1464.354073][ T26] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1464.372497][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.407447][ T26] usb 7-1: Product: syz [ 1464.417844][ T26] usb 7-1: Manufacturer: syz [ 1464.422733][ T26] usb 7-1: SerialNumber: syz [ 1464.453917][ T26] usb 7-1: config 0 descriptor?? [ 1464.480899][ T26] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1464.668525][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.708219][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.737949][ T954] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1464.904557][T15368] bridge0: port 3(syz_tun) entered blocking state [ 1464.917981][T15368] bridge0: port 3(syz_tun) entered disabled state [ 1464.936610][T15368] device syz_tun entered promiscuous mode [ 1464.937939][ T954] usb 3-1: Using ep0 maxpacket: 8 [ 1464.945705][T15368] bridge0: port 3(syz_tun) entered blocking state [ 1464.954469][T15368] bridge0: port 3(syz_tun) entered forwarding state [ 1464.973058][ T954] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1465.017917][ T954] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1465.046586][ T954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1465.055354][ T954] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1465.071449][ T954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.104019][T15369] bridge0: port 3(syz_tun) entered disabled state [ 1465.110999][T15369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.117983][ T954] usb 3-1: config 0 descriptor?? [ 1465.118245][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.544941][ T954] usbhid 3-1:0.0: can't add hid device: -71 [ 1465.564837][ T954] usbhid: probe of 3-1:0.0 failed with error -71 [ 1465.594784][ T954] usb 3-1: USB disconnect, device number 14 [ 1465.764291][T15388] loop1: detected capacity change from 0 to 1024 [ 1465.781319][T15388] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1465.830345][T15388] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.2346: lblock 2 mapped to illegal pblock 2 (length 1) [ 1465.856728][T15388] EXT4-fs (loop1): Remounting filesystem read-only [ 1465.878944][T15388] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1465.890095][T15388] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.2346: lblock 0 mapped to illegal pblock 48 (length 1) [ 1465.911709][T15388] EXT4-fs (loop1): Remounting filesystem read-only [ 1465.944748][T15388] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1465.987999][T15388] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2346: Failed to acquire dquot type 0 [ 1466.003375][T15388] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.018008][T15388] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1466.043677][T15388] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.078776][T15388] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.2346: mark_inode_dirty error [ 1466.124941][T15388] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.159375][T15388] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1466.219384][T15388] EXT4-fs (loop1): 1 orphan inode deleted [ 1466.228281][T15388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1466.257010][ T5417] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 1466.293566][T15388] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.2346: Invalid inode table block 1 in block_group 0 [ 1466.327720][ T5417] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.334834][T15388] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.343043][ T5417] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1466.373526][T15388] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1466.393682][ T5417] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 0 [ 1466.399930][T15388] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.412552][T15388] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.2346: mark_inode_dirty error [ 1466.424907][T15388] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.432077][ T5417] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.574568][ T5417] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm kworker/u4:18: Invalid inode table block 1 in block_group 0 [ 1466.590753][ T5417] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.599641][T10767] EXT4-fs (loop1): unmounting filesystem. [ 1466.605577][T10767] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1466.642281][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.649262][T10767] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1466.667502][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1466.681134][T10767] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1466.828038][ T954] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1467.031427][ T954] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.065734][ T954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1467.098100][ T954] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1467.135014][ T954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.190488][ T954] usb 4-1: config 0 descriptor?? [ 1467.354519][T15429] [ 1467.562249][ T26] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1467.604550][ T954] usbhid 4-1:0.0: can't add hid device: -71 [ 1467.610590][ T26] quatech2: probe of 7-1:0.51 failed with error -71 [ 1467.618530][ T26] usb 7-1: USB disconnect, device number 8 [ 1467.648239][ T954] usbhid: probe of 4-1:0.0 failed with error -71 [ 1467.685426][ T954] usb 4-1: USB disconnect, device number 16 [ 1468.769672][T15456] loop1: detected capacity change from 0 to 1024 [ 1468.835127][T15456] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1468.889475][T15456] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.2361: lblock 2 mapped to illegal pblock 2 (length 1) [ 1468.982429][T15456] EXT4-fs (loop1): Remounting filesystem read-only [ 1469.004805][T15456] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1469.013919][T15466] [ 1469.014124][T15456] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.2361: lblock 0 mapped to illegal pblock 48 (length 1) [ 1469.052150][T15456] EXT4-fs (loop1): Remounting filesystem read-only [ 1469.071650][T15456] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1469.087789][T15456] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2361: Failed to acquire dquot type 0 [ 1469.110866][T15456] EXT4-fs (loop1): Remounting filesystem read-only [ 1469.125406][T15456] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1469.154058][T15456] EXT4-fs (loop1): Remounting filesystem read-only [ 1469.170324][T15456] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.2361: mark_inode_dirty error [ 1469.207440][T15456] EXT4-fs (loop1): Remounting filesystem read-only [ 1469.214717][ T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1469.990880][T15456] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1470.001858][T15456] EXT4-fs (loop1): 1 orphan inode deleted [ 1470.007656][T15456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1470.028488][ T5417] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 1470.063148][ T5417] EXT4-fs (loop1): Remounting filesystem read-only [ 1470.074944][ T5417] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1470.084149][ T5417] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 0 [ 1470.096686][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 1470.104528][ T14] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1470.113362][ T5417] EXT4-fs (loop1): Remounting filesystem read-only [ 1470.120782][ T14] usb 3-1: config 0 has no interface number 0 [ 1470.750304][ T14] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1470.759593][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.768024][ T14] usb 3-1: Product: syz [ 1470.773280][ T14] usb 3-1: Manufacturer: syz [ 1470.777942][ T14] usb 3-1: SerialNumber: syz [ 1470.784979][ T14] usb 3-1: config 0 descriptor?? [ 1470.810892][ T14] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1470.890274][T10767] EXT4-fs (loop1): unmounting filesystem. [ 1470.898734][T10767] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1470.943813][T15486] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 1470.962958][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1470.984483][T10767] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1471.019780][T15468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.038712][T15468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.061028][T15486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1471.072311][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1471.081739][T10767] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1471.099578][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1471.231839][T15489] bond1: (slave veth0_to_bond): making interface the new active one [ 1471.254777][T15489] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1471.319491][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 1471.404949][T15491] device bond1 entered promiscuous mode [ 1471.422280][T15491] device veth0_to_bond entered promiscuous mode [ 1471.964078][T15511] [ 1472.118513][T11223] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1472.229300][ T14] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1472.236278][ T14] quatech2: probe of 3-1:0.51 failed with error -71 [ 1472.308851][ T14] usb 3-1: USB disconnect, device number 15 [ 1472.345860][T11223] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1472.365433][T11223] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.385383][T15518] loop2: detected capacity change from 0 to 512 [ 1472.416100][T11223] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1473.795574][T11223] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.849988][T15530] loop1: detected capacity change from 0 to 1024 [ 1473.881003][T11223] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1473.910648][T11223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.911172][T15530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1473.949355][T11223] usb 7-1: Product: syz [ 1473.953616][T11223] usb 7-1: Manufacturer: syz [ 1473.958251][T11223] usb 7-1: SerialNumber: syz [ 1473.980115][T15530] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.2382: lblock 2 mapped to illegal pblock 2 (length 1) [ 1474.086580][T15530] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.123606][T15530] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1474.138759][T15530] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.2382: lblock 0 mapped to illegal pblock 48 (length 1) [ 1474.188754][T15530] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.205749][T15530] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1474.234894][T11223] usb 7-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 1474.272204][T15530] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2382: Failed to acquire dquot type 0 [ 1474.291105][T11223] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1474.331201][T11223] usb 7-1: USB disconnect, device number 9 [ 1474.333495][T15187] udevd[15187]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1474.365289][T15530] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.380867][T15530] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1474.402136][T15530] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.411674][T15530] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.2382: mark_inode_dirty error [ 1474.427135][T15530] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.445444][T15530] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1474.496845][T15530] EXT4-fs (loop1): 1 orphan inode deleted [ 1474.512532][ T4513] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 1474.517135][T15530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1474.554631][ T4513] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.588439][ T4513] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1474.642876][ T4513] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 0 [ 1474.717362][ T4513] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.801344][T10767] EXT4-fs (loop1): unmounting filesystem. [ 1474.807283][T10767] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1474.849731][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.859802][T10767] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1474.910335][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1474.946210][T10767] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1474.983566][T10767] EXT4-fs (loop1): Remounting filesystem read-only [ 1475.688981][ T14] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1475.878967][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 1475.886794][ T14] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1475.914503][ T14] usb 3-1: config 0 has no interface number 0 [ 1475.940703][ T14] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1475.968300][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.985767][ T14] usb 3-1: Product: syz [ 1475.994654][ T14] usb 3-1: Manufacturer: syz [ 1476.011229][ T14] usb 3-1: SerialNumber: syz [ 1476.037410][ T14] usb 3-1: config 0 descriptor?? [ 1476.060972][ T14] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1476.261164][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.468248][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.933186][T15599] 9pnet_fd: p9_fd_create_tcp (15599): problem connecting socket to 127.0.0.1 [ 1478.646603][ T14] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1478.673642][ T14] quatech2: probe of 3-1:0.51 failed with error -71 [ 1478.711610][ T14] usb 3-1: USB disconnect, device number 16 [ 1479.659344][T11223] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1479.851824][T11223] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.874324][T11223] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1479.882121][T11223] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1479.894073][T11223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.907722][T11223] usb 4-1: config 0 descriptor?? [ 1480.324136][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1480.341163][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1480.392108][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1480.460631][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.266677][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.275041][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.285120][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.315221][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.358112][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.467524][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.507301][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.558388][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.588328][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.606692][T11223] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0x0 [ 1481.618222][T11223] steelseries_srws1 0003:1038:1410.0011: unbalanced collection at end of report description [ 1481.637100][T11223] steelseries_srws1 0003:1038:1410.0011: parse failed [ 1481.651845][T11223] steelseries_srws1: probe of 0003:1038:1410.0011 failed with error -22 [ 1481.671721][T11223] usb 4-1: USB disconnect, device number 17 [ 1484.773424][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.779853][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.920572][T15724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2432'. [ 1484.978410][T15724] loop1: detected capacity change from 0 to 1024 [ 1485.100431][T15724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1485.645683][T15742] device syzkaller0 entered promiscuous mode [ 1485.931147][T10767] EXT4-fs (loop1): unmounting filesystem. [ 1486.229900][T11222] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1487.532903][T11222] usb 7-1: device descriptor read/64, error -71 [ 1487.890687][T11222] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1487.998185][T15776] FAULT_INJECTION: forcing a failure. [ 1487.998185][T15776] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.011208][ T14] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1488.048400][T15776] CPU: 0 PID: 15776 Comm: syz.1.2445 Not tainted syzkaller #0 [ 1488.055956][T15776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1488.066036][T15776] Call Trace: [ 1488.069327][T15776] [ 1488.072274][T15776] dump_stack_lvl+0x188/0x24e [ 1488.076990][T15776] ? show_regs_print_info+0x12/0x12 [ 1488.082211][T15776] ? load_image+0x410/0x410 [ 1488.086741][T15776] ? __lock_acquire+0x7c40/0x7c40 [ 1488.091796][T15776] should_fail_ex+0x390/0x4c0 [ 1488.096500][T15776] should_failslab+0x5/0x20 [ 1488.101016][T15776] slab_pre_alloc_hook+0x59/0x300 [ 1488.106057][T15776] kmem_cache_alloc_lru+0x49/0x2e0 [ 1488.111183][T15776] ? sock_alloc_inode+0x24/0xc0 [ 1488.116135][T15776] sock_alloc_inode+0x24/0xc0 [ 1488.120851][T15776] ? sockfs_init_fs_context+0xa0/0xa0 [ 1488.126265][T15776] new_inode_pseudo+0x5f/0x1c0 [ 1488.131065][T15776] __sock_create+0x129/0x940 [ 1488.135731][T15776] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1488.141743][T15776] __sys_socket+0xc4/0x190 [ 1488.146180][T15776] __x64_sys_socket+0x76/0x80 [ 1488.150879][T15776] do_syscall_64+0x4c/0xa0 [ 1488.155315][T15776] ? clear_bhb_loop+0x60/0xb0 [ 1488.160011][T15776] ? clear_bhb_loop+0x60/0xb0 [ 1488.164709][T15776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1488.170627][T15776] RIP: 0033:0x7fd04ed9e159 [ 1488.175054][T15776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.194677][T15776] RSP: 002b:00007fd04fd5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1488.203106][T15776] RAX: ffffffffffffffda RBX: 00007fd04f025fa0 RCX: 00007fd04ed9e159 [ 1488.211115][T15776] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1488.219107][T15776] RBP: 00007fd04ee3503b R08: 0000000000000000 R09: 0000000000000000 [ 1488.227091][T15776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.235080][T15776] R13: 00007fd04f026038 R14: 00007fd04f025fa0 R15: 00007ffd07bf95a8 [ 1488.243081][T15776] [ 1488.246202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1488.246266][T11222] usb 7-1: device descriptor read/64, error -71 [ 1488.261541][T15776] socket: no more sockets [ 1488.362811][ T14] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1488.380272][T11222] usb usb7-port1: attempt power cycle [ 1488.381230][ T14] usb 4-1: can't read configurations, error -61 [ 1488.580154][ T14] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1488.784504][ T14] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1488.790242][T11222] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1488.800058][ T14] usb 4-1: can't read configurations, error -61 [ 1488.823452][ T14] usb usb4-port1: attempt power cycle [ 1488.840871][T11222] usb 7-1: device descriptor read/8, error -71 [ 1490.340497][T11222] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1490.470280][ T14] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1490.537507][ T14] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1490.550256][ T14] usb 4-1: can't read configurations, error -61 [ 1490.580292][T11222] usb 7-1: device not accepting address 13, error -71 [ 1490.590545][T11222] usb usb7-port1: unable to enumerate USB device [ 1490.740480][ T14] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1492.178175][ T14] usb 4-1: device not accepting address 21, error -71 [ 1492.185344][ T14] usb usb4-port1: unable to enumerate USB device [ 1492.271685][T11222] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1492.463232][T11222] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1492.493465][T11222] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.553344][T11222] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1492.600487][T11222] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.642645][T11222] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.693143][T11222] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1492.722986][T11222] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.750535][T11222] usb 7-1: Product: syz [ 1492.765012][T11222] usb 7-1: Manufacturer: syz [ 1492.780325][T11222] usb 7-1: SerialNumber: syz [ 1493.051322][T11222] usb 7-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 1493.126297][T11222] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1493.162807][T11222] usb 7-1: USB disconnect, device number 14 [ 1493.176396][T14946] udevd[14946]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1495.992578][T15860] FAULT_INJECTION: forcing a failure. [ 1495.992578][T15860] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.005300][T15860] CPU: 0 PID: 15860 Comm: syz.3.2454 Not tainted syzkaller #0 [ 1496.012813][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1496.022915][T15860] Call Trace: [ 1496.026235][T15860] [ 1496.029198][T15860] dump_stack_lvl+0x188/0x24e [ 1496.034032][T15860] ? show_regs_print_info+0x12/0x12 [ 1496.039375][T15860] ? load_image+0x410/0x410 [ 1496.043924][T15860] ? __might_sleep+0xd0/0xd0 [ 1496.048571][T15860] ? __lock_acquire+0x7c40/0x7c40 [ 1496.053654][T15860] should_fail_ex+0x390/0x4c0 [ 1496.058389][T15860] should_failslab+0x5/0x20 [ 1496.062930][T15860] slab_pre_alloc_hook+0x59/0x300 [ 1496.068010][T15860] ? memcg_list_lru_alloc+0x331/0xb00 [ 1496.073462][T15860] __kmem_cache_alloc_node+0x4f/0x270 [ 1496.078893][T15860] ? memcg_list_lru_alloc+0x331/0xb00 [ 1496.084331][T15860] __kmalloc+0xa3/0x240 [ 1496.088560][T15860] memcg_list_lru_alloc+0x331/0xb00 [ 1496.093833][T15860] ? slab_pre_alloc_hook+0xb1/0x300 [ 1496.099087][T15860] ? memcg_reparent_list_lrus+0x850/0x850 [ 1496.104875][T15860] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1496.110891][T15860] slab_pre_alloc_hook+0x2ad/0x300 [ 1496.116042][T15860] ? slab_pre_alloc_hook+0xb1/0x300 [ 1496.121271][T15860] kmem_cache_alloc_lru+0x49/0x2e0 [ 1496.126428][T15860] ? __d_alloc+0x2e/0x6e0 [ 1496.130931][T15860] __d_alloc+0x2e/0x6e0 [ 1496.135290][T15860] d_alloc+0x46/0x250 [ 1496.139303][T15860] lookup_one_qstr_excl+0xc6/0x240 [ 1496.144871][T15860] do_unlinkat+0x199/0x580 [ 1496.149308][T15860] ? fsnotify_link_count+0xf0/0xf0 [ 1496.154528][T15860] ? getname_flags+0x206/0x500 [ 1496.159308][T15860] __x64_sys_unlink+0x45/0x50 [ 1496.164001][T15860] do_syscall_64+0x4c/0xa0 [ 1496.168439][T15860] ? clear_bhb_loop+0x60/0xb0 [ 1496.173147][T15860] ? clear_bhb_loop+0x60/0xb0 [ 1496.178034][T15860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1496.183951][T15860] RIP: 0033:0x7f6be419e159 [ 1496.188381][T15860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.208006][T15860] RSP: 002b:00007f6be50e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1496.216443][T15860] RAX: ffffffffffffffda RBX: 00007f6be4426180 RCX: 00007f6be419e159 [ 1496.224521][T15860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 1496.232592][T15860] RBP: 00007f6be423503b R08: 0000000000000000 R09: 0000000000000000 [ 1496.240585][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1496.248570][T15860] R13: 00007f6be4426218 R14: 00007f6be4426180 R15: 00007ffed77e87f8 [ 1496.256580][T15860] [ 1497.681231][T15867] FAULT_INJECTION: forcing a failure. [ 1497.681231][T15867] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.753333][T15867] CPU: 0 PID: 15867 Comm: syz.2.2467 Not tainted syzkaller #0 [ 1497.760917][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1497.771142][T15867] Call Trace: [ 1497.774462][T15867] [ 1497.777445][T15867] dump_stack_lvl+0x188/0x24e [ 1497.782185][T15867] ? show_regs_print_info+0x12/0x12 [ 1497.787529][T15867] ? load_image+0x410/0x410 [ 1497.792083][T15867] ? __lock_acquire+0x7c40/0x7c40 [ 1497.797254][T15867] should_fail_ex+0x390/0x4c0 [ 1497.801986][T15867] should_failslab+0x5/0x20 [ 1497.806521][T15867] slab_pre_alloc_hook+0x59/0x300 [ 1497.811592][T15867] kmem_cache_alloc_lru+0x49/0x2e0 [ 1497.816742][T15867] ? sock_alloc_inode+0x24/0xc0 [ 1497.821632][T15867] sock_alloc_inode+0x24/0xc0 [ 1497.826329][T15867] ? sockfs_init_fs_context+0xa0/0xa0 [ 1497.831725][T15867] new_inode_pseudo+0x5f/0x1c0 [ 1497.836514][T15867] __sock_create+0x129/0x940 [ 1497.841122][T15867] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1497.847132][T15867] __sys_socket+0xc4/0x190 [ 1497.851570][T15867] __x64_sys_socket+0x76/0x80 [ 1497.856274][T15867] do_syscall_64+0x4c/0xa0 [ 1497.860710][T15867] ? clear_bhb_loop+0x60/0xb0 [ 1497.865405][T15867] ? clear_bhb_loop+0x60/0xb0 [ 1497.870107][T15867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.876018][T15867] RIP: 0033:0x7fdd78b9e159 [ 1497.880445][T15867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.900068][T15867] RSP: 002b:00007fdd79a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1497.908521][T15867] RAX: ffffffffffffffda RBX: 00007fdd78e25fa0 RCX: 00007fdd78b9e159 [ 1497.916527][T15867] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1497.924538][T15867] RBP: 00007fdd78c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1497.932527][T15867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.940532][T15867] R13: 00007fdd78e26038 R14: 00007fdd78e25fa0 R15: 00007ffd90426cb8 [ 1497.948562][T15867] [ 1498.344331][T15867] socket: no more sockets [ 1499.131100][ T7241] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1500.142369][ T7241] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.198951][ T7241] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1500.860004][ T7241] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1500.869654][ T7241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.895768][ T7241] usb 3-1: config 0 descriptor?? [ 1501.338178][ T7241] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x3 [ 1501.387505][ T7241] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 1501.456975][ T7241] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 1501.505841][ T7241] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 1501.586635][ T7241] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 1501.641814][ T7241] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 1501.712057][ T7241] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 1501.750045][ T7241] steelseries_srws1 0003:1038:1410.0012: unbalanced collection at end of report description [ 1501.781737][ T7241] steelseries_srws1 0003:1038:1410.0012: parse failed [ 1501.820007][ T7241] steelseries_srws1: probe of 0003:1038:1410.0012 failed with error -22 [ 1501.878780][ T7241] usb 3-1: USB disconnect, device number 17 [ 1502.885250][T15972] FAULT_INJECTION: forcing a failure. [ 1502.885250][T15972] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.931565][T15972] CPU: 1 PID: 15972 Comm: syz.6.2479 Not tainted syzkaller #0 [ 1502.939125][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1502.949308][T15972] Call Trace: [ 1502.952628][T15972] [ 1502.955598][T15972] dump_stack_lvl+0x188/0x24e [ 1502.960336][T15972] ? show_regs_print_info+0x12/0x12 [ 1502.965597][T15972] ? load_image+0x410/0x410 [ 1502.970161][T15972] ? __lock_acquire+0x7c40/0x7c40 [ 1502.975238][T15972] should_fail_ex+0x390/0x4c0 [ 1502.979968][T15972] should_failslab+0x5/0x20 [ 1502.984516][T15972] slab_pre_alloc_hook+0x59/0x300 [ 1502.989599][T15972] kmem_cache_alloc_lru+0x49/0x2e0 [ 1502.994752][T15972] ? sock_alloc_inode+0x24/0xc0 [ 1502.999636][T15972] sock_alloc_inode+0x24/0xc0 [ 1503.004345][T15972] ? sockfs_init_fs_context+0xa0/0xa0 [ 1503.009748][T15972] new_inode_pseudo+0x5f/0x1c0 [ 1503.014543][T15972] __sock_create+0x129/0x940 [ 1503.019151][T15972] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1503.025158][T15972] __sys_socket+0xc4/0x190 [ 1503.029600][T15972] __x64_sys_socket+0x76/0x80 [ 1503.034291][T15972] do_syscall_64+0x4c/0xa0 [ 1503.038836][T15972] ? clear_bhb_loop+0x60/0xb0 [ 1503.043534][T15972] ? clear_bhb_loop+0x60/0xb0 [ 1503.048234][T15972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1503.054148][T15972] RIP: 0033:0x7f4c3599e159 [ 1503.058584][T15972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.078230][T15972] RSP: 002b:00007f4c36799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1503.086672][T15972] RAX: ffffffffffffffda RBX: 00007f4c35c25fa0 RCX: 00007f4c3599e159 [ 1503.094659][T15972] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1503.102651][T15972] RBP: 00007f4c35a3503b R08: 0000000000000000 R09: 0000000000000000 [ 1503.110641][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1503.118639][T15972] R13: 00007f4c35c26038 R14: 00007f4c35c25fa0 R15: 00007ffef1cca358 [ 1503.126658][T15972] [ 1503.263036][T15972] socket: no more sockets [ 1505.600790][ T27] audit: type=1804 audit(1789065593.116:217): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1505.722679][ T27] audit: type=1804 audit(1789065593.186:218): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1505.771779][ T27] audit: type=1804 audit(1789065593.186:219): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1505.861091][ T27] audit: type=1804 audit(1789065593.186:220): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1505.941799][ T27] audit: type=1804 audit(1789065593.186:221): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1506.005403][ T27] audit: type=1804 audit(1789065593.186:222): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1506.101839][ T27] audit: type=1804 audit(1789065593.206:223): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1506.188197][ T27] audit: type=1804 audit(1789065593.206:224): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1506.303154][ T27] audit: type=1804 audit(1789065593.206:225): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1507.684546][ T27] audit: type=1804 audit(1789065593.206:226): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1508.603565][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2499'. [ 1508.789093][T16081] device bond1 entered promiscuous mode [ 1509.125547][T16091] loop6: detected capacity change from 0 to 512 [ 1509.142692][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 1509.169628][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 1509.216196][T16091] EXT4-fs (loop6): 1 truncate cleaned up [ 1509.232419][T16091] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1509.260781][T16091] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.2502: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 1509.466001][T12694] EXT4-fs (loop6): unmounting filesystem. [ 1510.842267][ T27] kauditd_printk_skb: 702 callbacks suppressed [ 1510.842286][ T27] audit: type=1804 audit(1789065598.355:929): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.077740][ T27] audit: type=1804 audit(1789065598.355:930): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.151671][ T27] audit: type=1804 audit(1789065598.355:931): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.227671][ T27] audit: type=1804 audit(1789065598.355:932): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.282310][ T27] audit: type=1804 audit(1789065598.355:933): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.312490][ T27] audit: type=1804 audit(1789065598.355:934): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.418686][ T27] audit: type=1804 audit(1789065598.355:935): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.522021][ T27] audit: type=1804 audit(1789065598.355:936): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.579093][ T27] audit: type=1804 audit(1789065598.355:937): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1511.623527][ T27] audit: type=1804 audit(1789065598.355:938): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/193/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 1512.599615][T16133] loop1: detected capacity change from 0 to 512 [ 1512.748312][T16133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1512.838530][T16133] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.2518: bg 0: bad block bitmap checksum [ 1513.048600][T10767] EXT4-fs (loop1): unmounting filesystem. [ 1513.632218][T11320] device syz_tun left promiscuous mode [ 1513.638160][T11320] bridge0: port 3(syz_tun) entered disabled state [ 1514.120020][ T8733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1514.131650][ T8733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1514.140874][ T8733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1514.150606][ T8733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1514.172736][ T8733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1514.185539][ T8733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1514.441269][T12746] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.892840][T12746] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.204835][T12746] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.313567][ T7241] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1515.355393][ T7241] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1515.506108][T16191] udevd[16191]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 1515.577479][T12746] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.932779][T11223] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1516.050709][ T8733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1516.063736][ T8733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1516.072754][ T8733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1516.093075][ T8733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1516.108919][ T8733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1516.119630][ T8733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1516.164492][T11223] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.174988][T11223] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1516.190044][T11223] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1516.199699][T11223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1516.208159][T11223] usb 3-1: Product: syz [ 1516.212506][T11223] usb 3-1: Manufacturer: syz [ 1516.297355][T16207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2538'. [ 1517.859334][ T8733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1517.872087][ T8733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1517.881448][ T8733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1517.901057][ T8733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1517.911650][ T8733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1517.920223][ T8733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1518.788087][T11223] usb 3-1: USB disconnect, device number 18 [ 1519.206678][T16255] autofs4:pid:16255:autofs_fill_super: called with bogus options [ 1519.976100][ T8733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1520.008269][ T8733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1520.018366][ T8733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1520.028837][ T8733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1520.036730][ T8733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1520.046715][ T8733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1520.100762][T16269] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 1521.163237][T11223] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1521.373279][T11223] usb 7-1: Using ep0 maxpacket: 8 [ 1521.380195][T11223] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1521.412014][T12746] device hsr_slave_0 left promiscuous mode [ 1521.422041][T11223] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1521.463373][T12746] device hsr_slave_1 left promiscuous mode [ 1521.492994][T11223] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1521.513502][T11223] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1521.522627][T11223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.606774][T12746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.628930][T11223] usb 7-1: config 0 descriptor?? [ 1521.634084][T12746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.677185][T12746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1521.702206][T12746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.749285][T12746] device bridge_slave_1 left promiscuous mode [ 1521.764077][T12746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.801814][T12746] device bridge_slave_0 left promiscuous mode [ 1521.832386][T12746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.046750][T12746] device veth1_macvtap left promiscuous mode [ 1522.053441][T12746] device veth0_macvtap left promiscuous mode [ 1522.083414][T12746] device veth1_vlan left promiscuous mode [ 1522.094603][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.113571][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.123496][T12746] device veth0_vlan left promiscuous mode [ 1522.153338][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.195885][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.215425][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.252066][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.282552][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.324660][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.363939][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.370884][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.431790][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.467296][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.516268][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.567203][T11223] elo 0003:04E7:0030.0014: unknown main item tag 0x0 [ 1522.603474][T11223] elo 0003:04E7:0030.0014: unbalanced collection at end of report description [ 1522.623802][T11223] elo 0003:04E7:0030.0014: parse failed [ 1522.629438][T11223] elo: probe of 0003:04E7:0030.0014 failed with error -22 [ 1522.716064][T11223] usb 7-1: USB disconnect, device number 15 [ 1523.411917][ T8733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1523.431723][ T8733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1523.441123][ T8733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1523.451100][ T8733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1523.474511][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1523.482582][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1524.822432][T12746] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1524.831734][T12746] device veth0_to_bond left promiscuous mode [ 1524.859011][T12746] bond1 (unregistering): Released all slaves [ 1525.832160][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1525.844871][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1525.853967][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1525.863765][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1525.872651][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1525.880167][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1527.296485][T12746] team0 (unregistering): Port device team_slave_1 removed [ 1527.437300][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1527.457231][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1527.466587][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1527.474757][T12746] team0 (unregistering): Port device team_slave_0 removed [ 1527.482637][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1527.490642][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1527.506764][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1527.836879][T12746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.057539][T12746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.726163][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1529.738525][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1529.747637][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1529.767573][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1529.775238][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1529.785124][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1530.378906][T12746] bond0 (unregistering): Released all slaves [ 1532.913962][ T8733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1532.950200][ T8733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1532.963183][ T8733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1532.971714][ T8733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1532.979460][ T8733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1532.986942][ T8733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1535.687554][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1535.702581][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1535.720669][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1535.730967][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1535.741082][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1535.748476][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1535.894689][ T4365] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1536.096434][ T4365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.164316][ T4365] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1536.294818][ T4365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1536.313156][ T4365] usb 3-1: Product: syz [ 1536.324658][ T4365] usb 3-1: Manufacturer: syz [ 1537.965569][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1537.976865][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1537.985936][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1537.995868][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1538.004055][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1538.011709][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1538.054946][ T8733] Bluetooth: hci0: command 0x0406 tx timeout [ 1538.650654][T16245] usb 3-1: USB disconnect, device number 19 [ 1542.313158][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1542.331369][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1542.342805][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1543.069376][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1543.077629][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1543.085417][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1543.405058][T16478] loop6: detected capacity change from 0 to 512 [ 1543.507581][T16478] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1543.610314][T16478] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm syz.6.2599: bg 0: bad block bitmap checksum [ 1543.767352][T12694] EXT4-fs (loop6): unmounting filesystem. [ 1545.617108][T16499] 9pnet_fd: Insufficient options for proto=fd [ 1545.705947][ T4321] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1545.940887][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.041110][ T4321] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1546.236028][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.242448][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.347801][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1546.355957][ T4321] usb 2-1: Product: syz [ 1546.361876][ T4321] usb 2-1: Manufacturer: syz [ 1546.545941][ T8733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1546.558978][T16510] bridge0: port 3(syz_tun) entered blocking state [ 1546.563184][ T8733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1546.575007][ T8733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1546.583330][T16510] bridge0: port 3(syz_tun) entered disabled state [ 1546.590910][ T8733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1546.600232][ T8733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1546.608177][ T8733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1546.619180][T16510] device syz_tun entered promiscuous mode [ 1546.626968][T16510] bridge0: port 3(syz_tun) entered blocking state [ 1546.633627][T16510] bridge0: port 3(syz_tun) entered forwarding state [ 1547.400064][T16510] bridge0: port 3(syz_tun) entered disabled state [ 1547.406792][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.414342][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.440197][T16245] usb 2-1: USB disconnect, device number 16 [ 1549.324298][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2616'. [ 1549.361874][T16532] device bond1 entered promiscuous mode [ 1551.004934][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1551.018575][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1551.028133][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1551.079047][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1551.104285][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1551.111747][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1551.125641][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 1551.136132][ T4321] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1551.303214][T16566] device bond1 entered promiscuous mode [ 1551.335339][ T4321] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1551.366865][ T4321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1551.395775][ T4321] usb 7-1: Product: syz [ 1551.400606][ T4321] usb 7-1: Manufacturer: syz [ 1551.886322][ T26] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1552.086193][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 1552.093293][ T26] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1552.107287][ T26] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1552.120441][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1552.127315][ T26] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1552.136782][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.152633][ T26] usb 3-1: config 0 descriptor?? [ 1552.565510][ T26] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 1552.572664][ T26] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 1552.580677][ T26] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 1552.587666][ T26] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 1552.594405][ T26] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 1552.601173][ T26] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 1552.608022][ T26] elo 0003:04E7:0030.0015: unbalanced collection at end of report description [ 1552.618792][ T26] elo 0003:04E7:0030.0015: parse failed [ 1552.624669][ T26] elo: probe of 0003:04E7:0030.0015 failed with error -22 [ 1552.768819][ T7] usb 3-1: USB disconnect, device number 20 [ 1554.482127][ T26] usb 7-1: USB disconnect, device number 16 [ 1556.234477][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1556.246671][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1556.255731][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1556.283672][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1556.291704][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1556.301459][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1561.074343][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1561.086403][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1561.096014][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1561.104224][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1561.112173][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1561.120798][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1561.850426][T16664] loop6: detected capacity change from 0 to 512 [ 1567.651969][T11910] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1567.847970][T11910] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1568.738550][T11910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1568.746643][T11910] usb 7-1: Product: syz [ 1568.844969][T11910] usb 7-1: Manufacturer: syz [ 1568.961569][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1568.973132][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1568.988433][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1568.996349][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1569.108545][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1569.116046][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1569.821961][T16710] loop2: detected capacity change from 0 to 512 [ 1570.115592][T11910] usb 7-1: USB disconnect, device number 17 [ 1573.441083][ T8733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1573.467164][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1573.487181][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1573.513589][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1573.528692][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1573.539543][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1577.252138][ T14] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1577.462098][ T14] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1577.478564][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1577.486879][ T14] usb 2-1: Product: syz [ 1577.491867][ T14] usb 2-1: Manufacturer: syz [ 1577.502241][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1577.514750][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1577.524385][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1577.533562][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1577.541701][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1577.558794][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1579.283694][T11223] usb 2-1: USB disconnect, device number 17 [ 1582.554905][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1582.566239][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1582.580760][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1582.593262][T16797] device bond1 entered promiscuous mode [ 1582.609708][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1582.617784][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1582.625859][ T8733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1582.669797][T11223] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1582.894410][T11223] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1582.918122][T11223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1582.946989][T11223] usb 7-1: Product: syz [ 1582.954792][T11223] usb 7-1: Manufacturer: syz [ 1585.407372][T16814] loop2: detected capacity change from 0 to 512 [ 1586.205943][ T14] usb 7-1: USB disconnect, device number 18 [ 1586.226641][T16814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1586.434848][T14777] EXT4-fs (loop2): unmounting filesystem. [ 1588.018980][T16829] loop1: detected capacity change from 0 to 512 [ 1588.054281][T16829] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1588.559300][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1588.580133][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1588.603614][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1588.615219][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1588.651041][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1588.660446][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1589.022468][T16838] netlink: 'syz.2.2718': attribute type 10 has an invalid length. [ 1589.041411][T16838] bridge0: port 3(syz_tun) entered blocking state [ 1589.048166][T16838] bridge0: port 3(syz_tun) entered listening state [ 1589.055029][T16838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.062245][T16838] bridge0: port 2(bridge_slave_1) entered listening state [ 1589.069643][T16838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.076867][T16838] bridge0: port 1(bridge_slave_0) entered listening state [ 1589.142989][T16838] bond0: (slave bridge0): Enslaving as an active interface with an up link SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=2516 state=3 status=67 (errno 9: Bad file descriptor) [ 1589.767364][T14777] bridge0: port 3(syz_tun) entered disabled state [ 1589.972028][T14777] device syz_tun left promiscuous mode [ 1589.996433][T14777] bridge0: port 3(syz_tun) entered disabled state [ 1590.426437][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.543394][T10767] device syz_tun left promiscuous mode [ 1590.548962][T10767] bridge0: port 3(syz_tun) entered disabled state [ 1590.589256][T12694] device syz_tun left promiscuous mode [ 1590.595930][T12694] bridge0: port 2(syz_tun) entered disabled state [ 1590.637072][ T6893] device syz_tun left promiscuous mode [ 1590.643024][ T6893] bridge0: port 3(syz_tun) entered disabled state [ 1590.682058][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.782069][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.876747][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.075911][ T41] device hsr_slave_0 left promiscuous mode [ 1592.086125][ T41] device hsr_slave_1 left promiscuous mode [ 1592.095569][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.103963][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.114423][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.122420][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.130492][ T41] device bridge_slave_1 left promiscuous mode [ 1592.136726][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.145439][ T41] device bridge_slave_0 left promiscuous mode [ 1592.151929][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.176012][ T41] device veth1_macvtap left promiscuous mode [ 1592.182228][ T41] device veth0_macvtap left promiscuous mode [ 1592.188497][ T41] device veth1_vlan left promiscuous mode [ 1592.194545][ T41] device veth0_vlan left promiscuous mode [ 1592.273869][ T41] bond1 (unregistering): Released all slaves [ 1592.994496][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1593.062778][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1593.129674][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.198683][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.702229][ T41] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1593.711116][ T41] bond0 (unregistering): Released all slaves [ 1594.355077][ T41] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.422353][ T41] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.480065][ T41] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.560289][ T41] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.684805][ T41] device hsr_slave_0 left promiscuous mode [ 1595.692577][ T41] device hsr_slave_1 left promiscuous mode [ 1595.698977][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1595.707753][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1595.716574][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1595.724939][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1595.733778][ T41] device bridge_slave_1 left promiscuous mode [ 1595.740397][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.748458][ T41] device bridge_slave_0 left promiscuous mode [ 1595.754956][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.778176][ T41] device veth1_macvtap left promiscuous mode [ 1595.784544][ T41] device veth0_macvtap left promiscuous mode [ 1595.790807][ T41] device veth1_vlan left promiscuous mode [ 1595.796611][ T41] device veth0_vlan left promiscuous mode [ 1595.879529][ T41] bond1 (unregistering): Released all slaves [ 1596.567023][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1596.631416][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1596.699903][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.765140][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.297856][ T41] bond0 (unregistering): Released all slaves [ 1597.443096][ T9582] lo speed is unknown, defaulting to 1000