last executing test programs: 11m17.459961969s ago: executing program 32 (id=38): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") fallocate(0xffffffffffffffff, 0x0, 0x0, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) keyctl$join(0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 10m33.984484126s ago: executing program 33 (id=127): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x412, &(0x7f0000000080)=ANY=[], 0xff, 0x1526, &(0x7f0000001cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x18400, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) 9m31.486205832s ago: executing program 34 (id=258): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x28) 9m24.818109945s ago: executing program 35 (id=272): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000180)={[{@nobh}, {@noauto_da_alloc}]}, 0x1, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 9m17.35536384s ago: executing program 36 (id=282): r0 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x104}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) 9m11.17692081s ago: executing program 37 (id=292): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x900, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) landlock_restrict_self(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000600)={0x80, 0xfffffffe, 0xc8, 0x80, 0x8, 0x8}) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) socketpair(0x5, 0x4, 0x8000f, &(0x7f0000000080)) 9m11.130055275s ago: executing program 5 (id=294): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0xe2) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 9m9.932313371s ago: executing program 5 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0) 9m8.96047136s ago: executing program 5 (id=296): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x7, 0x1, 0x0, @remote, @broadcast}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m7.607710389s ago: executing program 5 (id=297): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x1808000, &(0x7f0000000380)={[{@lastblock}, {@umask={'umask', 0x3d, 0x5}}, {@undelete}, {@longad}, {@shortad}, {@dmode={'dmode', 0x3d, 0x1}}, {@undelete}, {@shortad}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@session}, {@umask={'umask', 0x3d, 0x401}}]}, 0x2, 0xc3b, &(0x7f0000001700)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 9m6.25577944s ago: executing program 5 (id=298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3c, r2, 0x607, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffd}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x80) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0xb15}, 0x14}}, 0x80) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r4}) 9m4.91405006s ago: executing program 5 (id=299): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010043000400018010000280060001"], 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013001a800ca3488008000000000000000800038064"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x15, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_reuseport, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000100000000300000020000000", @ANYRES32, @ANYBLOB="d281a17fc949a69f0000000000281c527c7ca0ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r8, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x71, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$rfkill(r8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9m1.046977645s ago: executing program 38 (id=299): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010043000400018010000280060001"], 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013001a800ca3488008000000000000000800038064"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x15, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000400000000000000000000085000000a40000009500000000000000628fe013f59a6e1cdad89410e457e644c3c81c3aa6fc48bfb1d8a647d7f46014c9ccd30221a0ac941d96692b1ab3345a735d5ebefad394642bd1e1a0cb9fbf0bd92d196a5d7468795b8ec411a0b9ab945571ea9224b5b1d64072316b5e23d3067d1beb5ea3dde558b1826de33695cdac98ab5330ed14fa301c7cca135fd1b2f2827fa36f2263ffa8681c25cdb2ecdf99c8dd4ae6a1aacbc904e8feffffffffffffffb5f7591e6ee95c7449f13e6742a0411998233d79676a1ab503bbf8f10d89d1afe5bbb5fa340622c6294eeb8698508117dcdc4aa425d677ace1be34616bb2f0a33cb5ccca74d504dfe97e6084e64397afbd2ed65ef05638878613f478aa2a"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_reuseport, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000100000000300000020000000", @ANYRES32, @ANYBLOB="d281a17fc949a69f0000000000281c527c7ca0ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r8, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x71, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$rfkill(r8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m44.812526016s ago: executing program 7 (id=261): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x2404489b, &(0x7f0000b63fe4)={0xa, 0x2, 0x800000, @empty}, 0x1c) 8m43.907566014s ago: executing program 7 (id=301): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0xe2) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 8m42.493591205s ago: executing program 7 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0) 8m40.710225614s ago: executing program 7 (id=304): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x1808000, &(0x7f0000000380)={[{@lastblock}, {@umask={'umask', 0x3d, 0x5}}, {@undelete}, {@longad}, {@shortad}, {@dmode={'dmode', 0x3d, 0x1}}, {@undelete}, {@shortad}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@session}, {@umask={'umask', 0x3d, 0x401}}]}, 0x2, 0xc3b, &(0x7f0000001700)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 8m38.796644812s ago: executing program 7 (id=306): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$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") r0 = syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x10042, &(0x7f0000000140)=ANY=[@ANYBLOB='discard=0x00000000000000f4,discard=0x000000000100aff9,errors=continue,nointegrity,iocharset=macroman,discard,uid=', @ANYRESHEX=0x0, @ANYRESHEX=0x0], 0x24, 0x623a, &(0x7f0000002780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x402) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_secret(0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000089c0)={0x2020}, 0x4e4cbe055d7f60cb) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='ramfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000de9800000000000056080000000000008500000005000000b70000000000000095000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) linkat(r0, 0x0, r0, &(0x7f00000003c0)='./file1\x00', 0x1400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 8m37.62616429s ago: executing program 7 (id=308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(khazad-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000004280)=""/225, 0xe1}], 0x1}, 0x9}], 0x1, 0x40000001, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="a4", 0x1}, {&(0x7f0000000380)="5d3a0ef761819eb28a27a32f908c96531c667675a622bed20a638b42cf50900a615107ae4f8fd2ecda0737e6f67321fd985e15fde83715e9a726658399bdbf2c983c24b672602a3dff67ad75a0d99efdb85c9a44795ddf6b5967cdf64d767507fc7950ac1c874029bbc5bfbeba2935c795f51b1b59fc4f746114b865b6e5db750979f053a0d40ff75db77fe1cdc50b4a7afa9e299dc2d0a9240081473a5f768da322eca449a64dbb8b7c866bed889af5b8acfc119c1cd41d09ddd0fd27805253e95a2853036ed3d69a3e078a5d218d3017a96c5a0b0543a3ea47e5f0049a285a", 0xe0}], 0x2) 8m33.784850636s ago: executing program 39 (id=308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(khazad-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000004280)=""/225, 0xe1}], 0x1}, 0x9}], 0x1, 0x40000001, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="a4", 0x1}, {&(0x7f0000000380)="5d3a0ef761819eb28a27a32f908c96531c667675a622bed20a638b42cf50900a615107ae4f8fd2ecda0737e6f67321fd985e15fde83715e9a726658399bdbf2c983c24b672602a3dff67ad75a0d99efdb85c9a44795ddf6b5967cdf64d767507fc7950ac1c874029bbc5bfbeba2935c795f51b1b59fc4f746114b865b6e5db750979f053a0d40ff75db77fe1cdc50b4a7afa9e299dc2d0a9240081473a5f768da322eca449a64dbb8b7c866bed889af5b8acfc119c1cd41d09ddd0fd27805253e95a2853036ed3d69a3e078a5d218d3017a96c5a0b0543a3ea47e5f0049a285a", 0xe0}], 0x2) 8m33.729201818s ago: executing program 9 (id=284): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 8m32.76623648s ago: executing program 9 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0) 8m30.936060244s ago: executing program 9 (id=313): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x1808000, &(0x7f0000000380)={[{@lastblock}, {@umask={'umask', 0x3d, 0x5}}, {@undelete}, {@longad}, {@shortad}, {@dmode={'dmode', 0x3d, 0x1}}, {@undelete}, {@shortad}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@session}, {@umask={'umask', 0x3d, 0x401}}]}, 0x2, 0xc3b, &(0x7f0000001700)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 8m29.125937906s ago: executing program 9 (id=316): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x2404489b, &(0x7f0000b63fe4)={0xa, 0x2, 0x800000, @empty}, 0x1c) 8m28.017798221s ago: executing program 9 (id=320): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xac3, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz0\x00', {0x5afb, 0x81, 0x87, 0xebc9}, 0x4e, [0xa8, 0xfffffffa, 0x7, 0x6, 0xaf3a, 0x6, 0x24, 0x5, 0x1, 0x6, 0xd, 0x4, 0x4e1, 0x4, 0x5, 0x8, 0x0, 0x50dbab9d, 0x0, 0x1000, 0x1, 0x3, 0x80000000, 0x3ff, 0x8, 0x8, 0x25, 0x81, 0x101, 0x41, 0x3, 0x1, 0xffffffff, 0x7, 0xa, 0x8, 0x4, 0x3, 0xc, 0xfffffffa, 0x2, 0x2, 0xfffffff8, 0xfff, 0x800, 0x10001, 0x0, 0x7, 0x6, 0x8000, 0x5, 0x3, 0xfffffff9, 0x4800000, 0x9, 0x3, 0x0, 0x8, 0x735, 0xfffffff7, 0x53de, 0x0, 0x5, 0xffffff7f], [0x80000000, 0x7, 0x3, 0x8e, 0xff, 0x7, 0x3, 0x3470, 0xffffffff, 0x9, 0xf17b, 0x7, 0x62, 0x7, 0xfff, 0x2, 0x7, 0x8, 0xffffffff, 0x3, 0x7f, 0xc, 0x1, 0x1, 0x10000, 0xe, 0x80, 0x7ff, 0x9, 0x0, 0xe553, 0x7f, 0x401, 0x5a6d, 0x5c74ca0d, 0x0, 0x9, 0x8, 0x516e267e, 0x2, 0xfdcc, 0xd9e4, 0x4, 0xffffffa4, 0x2, 0x200, 0x2, 0x2, 0xe, 0x1, 0xffffff30, 0x4, 0x10, 0xfffffff7, 0x0, 0x7fffffff, 0xffffffff, 0x7, 0x7, 0x12, 0x5, 0xa8a0, 0x3, 0x3], [0xa, 0x6, 0x4, 0x503, 0x5, 0x0, 0x8, 0x6164138e, 0xd6c4, 0xe2a5, 0x5, 0xd, 0x3, 0x1, 0xd, 0x2, 0x3fffc0, 0x1, 0x9, 0x1, 0x1574e123, 0x81, 0x6, 0x9, 0xffffffff, 0x9, 0xdbe, 0x40a5, 0x10000, 0x7d, 0x21e, 0x8001, 0xf, 0x2, 0x5, 0x400, 0x3, 0x9, 0xa, 0x9, 0x2, 0x6, 0x9da, 0x0, 0x7, 0x2, 0x40, 0x9, 0x6, 0x10, 0x80000001, 0x3, 0x9, 0x694579f2, 0xfb7, 0x2, 0x52a, 0x5, 0x50d, 0x7, 0x1ff, 0xfff, 0xfff, 0x5], [0x8, 0xb2be, 0x8, 0x6, 0x0, 0x1, 0x80000000, 0x2, 0x9c, 0x10100, 0x401, 0x8, 0x112, 0x10, 0x6, 0x7, 0x8000, 0x80000001, 0xd, 0x3, 0xffff, 0x7, 0xffffff9b, 0x1, 0x10, 0x1, 0xc613, 0xed37, 0x10001, 0x4, 0x3, 0xf6, 0x715a1009, 0xae9b, 0x1, 0x8850, 0x5, 0x97f1, 0x185f, 0x769, 0x3, 0x3, 0x10000000, 0x7, 0x101, 0x10000, 0xf1, 0xeba3, 0x4c, 0xbf2d, 0x10000, 0x20, 0x4, 0x9, 0x9, 0xfff, 0xfffffc00, 0x9, 0x7, 0xfff, 0x4, 0x5, 0xfffffff7, 0x8001]}, 0x45c) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[]) 8m24.258706038s ago: executing program 40 (id=320): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xac3, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz0\x00', {0x5afb, 0x81, 0x87, 0xebc9}, 0x4e, [0xa8, 0xfffffffa, 0x7, 0x6, 0xaf3a, 0x6, 0x24, 0x5, 0x1, 0x6, 0xd, 0x4, 0x4e1, 0x4, 0x5, 0x8, 0x0, 0x50dbab9d, 0x0, 0x1000, 0x1, 0x3, 0x80000000, 0x3ff, 0x8, 0x8, 0x25, 0x81, 0x101, 0x41, 0x3, 0x1, 0xffffffff, 0x7, 0xa, 0x8, 0x4, 0x3, 0xc, 0xfffffffa, 0x2, 0x2, 0xfffffff8, 0xfff, 0x800, 0x10001, 0x0, 0x7, 0x6, 0x8000, 0x5, 0x3, 0xfffffff9, 0x4800000, 0x9, 0x3, 0x0, 0x8, 0x735, 0xfffffff7, 0x53de, 0x0, 0x5, 0xffffff7f], [0x80000000, 0x7, 0x3, 0x8e, 0xff, 0x7, 0x3, 0x3470, 0xffffffff, 0x9, 0xf17b, 0x7, 0x62, 0x7, 0xfff, 0x2, 0x7, 0x8, 0xffffffff, 0x3, 0x7f, 0xc, 0x1, 0x1, 0x10000, 0xe, 0x80, 0x7ff, 0x9, 0x0, 0xe553, 0x7f, 0x401, 0x5a6d, 0x5c74ca0d, 0x0, 0x9, 0x8, 0x516e267e, 0x2, 0xfdcc, 0xd9e4, 0x4, 0xffffffa4, 0x2, 0x200, 0x2, 0x2, 0xe, 0x1, 0xffffff30, 0x4, 0x10, 0xfffffff7, 0x0, 0x7fffffff, 0xffffffff, 0x7, 0x7, 0x12, 0x5, 0xa8a0, 0x3, 0x3], [0xa, 0x6, 0x4, 0x503, 0x5, 0x0, 0x8, 0x6164138e, 0xd6c4, 0xe2a5, 0x5, 0xd, 0x3, 0x1, 0xd, 0x2, 0x3fffc0, 0x1, 0x9, 0x1, 0x1574e123, 0x81, 0x6, 0x9, 0xffffffff, 0x9, 0xdbe, 0x40a5, 0x10000, 0x7d, 0x21e, 0x8001, 0xf, 0x2, 0x5, 0x400, 0x3, 0x9, 0xa, 0x9, 0x2, 0x6, 0x9da, 0x0, 0x7, 0x2, 0x40, 0x9, 0x6, 0x10, 0x80000001, 0x3, 0x9, 0x694579f2, 0xfb7, 0x2, 0x52a, 0x5, 0x50d, 0x7, 0x1ff, 0xfff, 0xfff, 0x5], [0x8, 0xb2be, 0x8, 0x6, 0x0, 0x1, 0x80000000, 0x2, 0x9c, 0x10100, 0x401, 0x8, 0x112, 0x10, 0x6, 0x7, 0x8000, 0x80000001, 0xd, 0x3, 0xffff, 0x7, 0xffffff9b, 0x1, 0x10, 0x1, 0xc613, 0xed37, 0x10001, 0x4, 0x3, 0xf6, 0x715a1009, 0xae9b, 0x1, 0x8850, 0x5, 0x97f1, 0x185f, 0x769, 0x3, 0x3, 0x10000000, 0x7, 0x101, 0x10000, 0xf1, 0xeba3, 0x4c, 0xbf2d, 0x10000, 0x20, 0x4, 0x9, 0x9, 0xfff, 0xfffffc00, 0x9, 0x7, 0xfff, 0x4, 0x5, 0xfffffff7, 0x8001]}, 0x45c) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[]) 4m14.089892507s ago: executing program 6 (id=1130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}}, 0x0) 4m13.524151116s ago: executing program 6 (id=1133): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400), &(0x7f00000004c0)=""/66}, 0x20) 4m12.657843989s ago: executing program 6 (id=1138): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r3, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) add_key(0x0, 0x0, &(0x7f0000000100)="4a6b995bce359c4d3386e49dac0f630eda2735f6622afc284b3d3f5ac4b90e4105ee98ed92fae01e5e399531172db75c45f1e96548eb6b404d78cca81bf3a9f2ef0231602e4f12183929ba39d8649270de0816e56221430bde466224", 0x5c, 0xfffffffffffffffe) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 4m10.523219958s ago: executing program 6 (id=1145): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2008042, &(0x7f0000000040), 0x11, 0x571, &(0x7f00000011c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) 4m8.882972012s ago: executing program 6 (id=1152): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m7.805352579s ago: executing program 6 (id=1156): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)={0x0, 0x14, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m52.45639157s ago: executing program 41 (id=1156): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)={0x0, 0x14, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.090605942s ago: executing program 3 (id=1578): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) 2m15.301334168s ago: executing program 3 (id=1583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)={0x38, r3, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m14.397699491s ago: executing program 3 (id=1588): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 2m13.030210422s ago: executing program 3 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) 2m12.1894479s ago: executing program 3 (id=1597): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00442ffffe8000000000000000000000000000aaff0200"/52], 0x7a) 2m11.087542299s ago: executing program 3 (id=1601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800"], 0x7c}}, 0x0) 2m7.164647427s ago: executing program 42 (id=1601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800"], 0x7c}}, 0x0) 9.234372965s ago: executing program 0 (id=1989): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x32}, 0x28) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x78, &(0x7f0000000440)=r3, 0x4) 8.591421167s ago: executing program 0 (id=1994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8000) 7.782057918s ago: executing program 4 (id=1997): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="44010000100001000000000800000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ac1414aa00"/65, @ANYRES32=0x0, @ANYBLOB], 0x144}}, 0x4000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.309924042s ago: executing program 0 (id=2000): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="70d0371d26e425c4c8e9dbffeb8b81bc26d6b4744ed8e2a71838f420d7dc95ce27eeaffb0c347f3fff56963ac0bf43d3d5f3d740331492d878ccdc006ecdb80598", 0x41, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x200, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000640), &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 6.684190441s ago: executing program 1 (id=2002): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200"/51], 0xfdef) 5.519093855s ago: executing program 2 (id=2004): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x32}, 0x28) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x78, &(0x7f0000000440)=r3, 0x4) 4.650641234s ago: executing program 0 (id=2005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) preadv2(0xffffffffffffffff, 0x0, 0xfffffffffffffdac, 0x3fd, 0xffffffde, 0x9) 4.610720197s ago: executing program 1 (id=2006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x4, 0x1) 4.509932327s ago: executing program 8 (id=2007): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000039c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 4.292533913s ago: executing program 2 (id=2008): recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/45, 0x2d}, 0x4}], 0x1, 0x600121a3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 3.812339853s ago: executing program 4 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)={0xcc, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@generic="ef2c04e39bf75096de5a2960042a80d377b9ec83", @nested={0x14, 0x100, 0x0, 0x1, [@nested={0x4, 0x10d}, @typed={0xc, 0xe9, 0x0, 0x0, @str='nl80211\x00'}]}, @generic="c0e2d76ece076559a7ae9c17c74313f02c4bf9fdb9ba7a6fff45147d7a97f86a0af4da9eecb85d44cd5ad7bf94f115ef155af58968317b913561529a361a6f17d26d013ecc0965eb61a798d126ce5084386ab99115f91a0085fa683e11e4e0bad746d874a0", @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x24, 0xfe, 0x0, 0x1, [@typed={0x1f, 0x3b, 0x0, 0x0, @binary="9c89a3b4eb4bd8afb544aa6509ad0948c30fe6658b93b6035a9f51"}]}]}, 0xcc}], 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.558090794s ago: executing program 0 (id=2010): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.466538788s ago: executing program 1 (id=2011): socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket(0xa, 0x40000000002, 0x0) socket(0x400000000010, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.451937221s ago: executing program 8 (id=2012): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.211976055s ago: executing program 2 (id=2013): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 2.98979231s ago: executing program 4 (id=2014): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) acct(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.624889101s ago: executing program 8 (id=2015): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="70d0371d26e425c4c8e9dbffeb8b81bc26d6b4744ed8e2a71838f420d7dc95ce27eeaffb0c347f3fff56963ac0bf43d3d5f3d740331492d878ccdc006ecdb80598", 0x41, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x200, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000640), &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.504788424s ago: executing program 4 (id=2016): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200"/51], 0xfdef) 1.896000572s ago: executing program 8 (id=2017): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b) 1.810373985s ago: executing program 1 (id=2018): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x32}, 0x28) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x78, &(0x7f0000000440)=r3, 0x4) 1.792018372s ago: executing program 2 (id=2019): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x18, 0x800, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) 1.313409124s ago: executing program 4 (id=2020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.229889122s ago: executing program 8 (id=2021): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.082567595s ago: executing program 2 (id=2022): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000039c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 1.031361844s ago: executing program 1 (id=2023): recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/45, 0x2d}, 0x4}], 0x1, 0x600121a3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 317.855118ms ago: executing program 2 (id=2024): syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7a1f, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 185.947431ms ago: executing program 1 (id=2025): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 112.984568ms ago: executing program 0 (id=2026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="61030604030280727ce716"], 0xb) 3.297407ms ago: executing program 8 (id=2027): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="70d0371d26e425c4c8e9dbffeb8b81bc26d6b4744ed8e2a71838f420d7dc95ce27eeaffb0c347f3fff56963ac0bf43d3d5f3d740331492d878ccdc006ecdb80598", 0x41, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x200, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r3], 0x0, 0x0, 0xffffffffffffffff}) 0s ago: executing program 4 (id=2028): socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket(0xa, 0x40000000002, 0x0) socket(0x400000000010, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): end was attached by 'Elgato EyeTV Sat' [ 599.465244][ T8309] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input5 [ 599.662216][ T8309] dvb-usb: schedule remote query interval to 400 msecs. [ 599.669812][ T8309] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 599.740421][ T8309] usb 7-1: USB disconnect, device number 3 [ 600.042866][ T7185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.112880][ T9038] loop8: detected capacity change from 0 to 1024 [ 601.137280][ T9048] loop0: detected capacity change from 0 to 32768 [ 601.181198][ T8309] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 601.668038][ T9050] loop2: detected capacity change from 0 to 32768 [ 601.830761][ T9048] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 601.830950][ T9048] allowing incompatible features above 0.0: (unknown version) [ 601.831059][ T9048] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 601.878264][ T9048] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 601.886954][ T9048] bcachefs (loop0): initializing new filesystem [ 601.912273][ T9048] bcachefs (loop0): going read-write [ 601.948566][ T9048] bcachefs (loop0): marking superblocks [ 602.008183][ T9048] bcachefs (loop0): initializing freespace [ 602.040475][ T9048] bcachefs (loop0): done initializing freespace [ 602.062931][ T9048] bcachefs (loop0): reading snapshots table [ 602.069528][ T9048] bcachefs (loop0): reading snapshots done [ 602.259510][ T9048] bcachefs (loop0): done starting filesystem [ 604.032448][ T7442] bcachefs (loop0): shutting down [ 604.037699][ T7442] bcachefs (loop0): going read-only [ 604.043548][ T7442] bcachefs (loop0): finished waiting for writes to stop [ 604.071830][ T7442] bcachefs (loop0): flushing journal and stopping allocators, journal seq 5 [ 604.145193][ T7442] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5 [ 604.218763][ T7442] bcachefs (loop0): clean shutdown complete, journal seq 6 [ 604.306009][ T7442] bcachefs (loop0): marking filesystem clean [ 604.519835][ T7442] bcachefs (loop0): shutdown complete [ 606.240232][ T9097] loop6: detected capacity change from 0 to 1024 [ 607.106809][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 607.116131][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 607.124464][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 607.132381][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 607.140376][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 607.148322][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 607.156260][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 607.164278][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 607.172110][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 607.180772][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 607.380272][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 607.558087][ T8305] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 607.907696][ T8305] usb 7-1: unable to get BOS descriptor or descriptor too short [ 607.957381][ T8305] usb 7-1: not running at top speed; connect to a high speed hub [ 608.064907][ T8305] usb 7-1: config 129 has an invalid interface number: 28 but max is 0 [ 608.080741][ T8305] usb 7-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 608.091887][ T8305] usb 7-1: config 129 has no interface number 0 [ 608.098990][ T8305] usb 7-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 608.112300][ T8305] usb 7-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 608.123004][ T8305] usb 7-1: config 129 interface 28 has no altsetting 0 [ 608.329644][ T9113] loop2: detected capacity change from 0 to 32768 [ 608.516681][ T8305] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 608.526503][ T8305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.535019][ T8305] usb 7-1: Product: syz [ 608.535396][ T9113] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 608.539588][ T8305] usb 7-1: Manufacturer: syz [ 608.539713][ T8305] usb 7-1: SerialNumber: syz [ 608.564181][ T9113] allowing incompatible features above 0.0: (unknown version) [ 608.564302][ T9113] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 608.564508][ T9113] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 608.564689][ T9113] bcachefs (loop2): initializing new filesystem [ 608.631605][ T9113] bcachefs (loop2): going read-write [ 608.706145][ T9113] bcachefs (loop2): marking superblocks [ 608.775088][ T9113] bcachefs (loop2): initializing freespace [ 608.806645][ T9113] bcachefs (loop2): done initializing freespace [ 608.828763][ T9113] bcachefs (loop2): reading snapshots table [ 608.835206][ T9113] bcachefs (loop2): reading snapshots done [ 608.995756][ T9113] bcachefs (loop2): done starting filesystem [ 609.130573][ T8305] etas_es58x 7-1:129.28: Starting syz syz (Serial Number syz) [ 609.196712][ T9131] loop8: detected capacity change from 0 to 64 [ 609.254787][ T8305] etas_es58x 7-1:129.28: could not retrieve the product info string [ 609.738641][ T8305] usb 7-1: USB disconnect, device number 4 [ 609.747597][ T8305] etas_es58x 7-1:129.28: Disconnecting syz syz [ 610.084544][ T9117] fido_id[9117]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 610.678190][ T9135] loop8: detected capacity change from 0 to 1024 [ 610.719266][ T7185] bcachefs (loop2): shutting down [ 610.724541][ T7185] bcachefs (loop2): going read-only [ 610.731054][ T7185] bcachefs (loop2): finished waiting for writes to stop [ 610.776133][ T9135] EXT4-fs: inline encryption not supported [ 610.783118][ T9135] EXT4-fs: Ignoring removed bh option [ 610.856133][ T7185] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5 [ 610.912474][ T7185] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5 [ 610.994627][ T7185] bcachefs (loop2): clean shutdown complete, journal seq 6 [ 611.055262][ T7185] bcachefs (loop2): marking filesystem clean [ 611.071857][ T9135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.402644][ T7185] bcachefs (loop2): shutdown complete [ 611.814312][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.308528][ T8305] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 612.563627][ T8305] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 612.573590][ T8305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.582322][ T8305] usb 1-1: Product: syz [ 612.586730][ T8305] usb 1-1: Manufacturer: syz [ 612.591682][ T8305] usb 1-1: SerialNumber: syz [ 612.711833][ T8305] usb 1-1: config 0 descriptor?? [ 613.300226][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 613.479680][ T9169] loop6: detected capacity change from 0 to 64 [ 613.513854][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.524624][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 613.565939][ T24] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 613.575859][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.585460][ T24] usb 2-1: Product: syz [ 613.590296][ T24] usb 2-1: Manufacturer: syz [ 613.595555][ T24] usb 2-1: SerialNumber: syz [ 613.724051][ T24] usb 2-1: config 0 descriptor?? [ 613.798776][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 613.852395][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 613.931038][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 613.940644][ T24] usb 2-1: media controller created [ 614.079185][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.119315][ T8305] usb 1-1: f81604_read: reg: 100e failed: -EREMOTEIO [ 614.327163][ T8305] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 614.369196][ T8305] usb 1-1: USB disconnect, device number 7 [ 614.422180][ T8305] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 614.526816][ T8305] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 615.573802][ T9180] loop6: detected capacity change from 0 to 32768 [ 615.587072][ T24] DVB: Unable to find symbol tda10046_attach() [ 615.593835][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 615.602810][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 615.838675][ T24] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 615.899886][ T24] usb 2-1: USB disconnect, device number 6 [ 616.127462][ T9180] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 616.127650][ T9180] allowing incompatible features above 0.0: (unknown version) [ 616.127757][ T9180] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 616.175592][ T9180] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 616.184043][ T9180] bcachefs (loop6): initializing new filesystem [ 616.201272][ T9180] bcachefs (loop6): going read-write [ 616.240595][ T9180] bcachefs (loop6): marking superblocks [ 616.285528][ T9180] bcachefs (loop6): initializing freespace [ 616.308153][ T9180] bcachefs (loop6): done initializing freespace [ 616.324863][ T9180] bcachefs (loop6): reading snapshots table [ 616.331298][ T9180] bcachefs (loop6): reading snapshots done [ 616.469122][ T9180] bcachefs (loop6): done starting filesystem [ 617.963148][ T7374] bcachefs (loop6): shutting down [ 617.969955][ T7374] bcachefs (loop6): going read-only [ 617.975411][ T7374] bcachefs (loop6): finished waiting for writes to stop [ 618.138375][ T7374] bcachefs (loop6): flushing journal and stopping allocators, journal seq 5 [ 618.194509][ T7374] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 5 [ 618.308733][ T7374] bcachefs (loop6): clean shutdown complete, journal seq 6 [ 618.383754][ T7374] bcachefs (loop6): marking filesystem clean [ 618.725719][ T7374] bcachefs (loop6): shutdown complete [ 620.389805][ T5825] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 620.849309][ T9228] syz.8.869 (9228): drop_caches: 2 [ 621.581064][ T9243] loop0: detected capacity change from 0 to 2048 [ 621.742584][ T9243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.964379][ T9256] overlayfs: missing 'lowerdir' [ 622.220384][ T9253] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 622.313471][ T9243] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 390 with error 28 [ 622.326518][ T9243] EXT4-fs (loop0): This should not happen!! Data will be lost [ 622.326518][ T9243] [ 622.337245][ T9243] EXT4-fs (loop0): Total free blocks count 0 [ 622.343816][ T9243] EXT4-fs (loop0): Free/Dirty block details [ 622.350257][ T9243] EXT4-fs (loop0): free_blocks=0 [ 622.355510][ T9243] EXT4-fs (loop0): dirty_blocks=400 [ 622.361776][ T9243] EXT4-fs (loop0): Block reservation details [ 622.368305][ T9243] EXT4-fs (loop0): i_reserved_data_blocks=25 [ 622.894471][ T9270] loop8: detected capacity change from 0 to 8 [ 622.963507][ T9270] Dev loop8: unable to read RDB block 8 [ 622.970200][ T9270] loop8: unable to read partition table [ 622.990256][ T9270] loop8: partition table beyond EOD, truncated [ 622.996788][ T9270] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 623.184766][ T7442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.761245][ T9297] overlayfs: missing 'lowerdir' [ 626.131647][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 626.270687][ T9279] loop0: detected capacity change from 0 to 512 [ 626.302010][ T9279] EXT4-fs: Ignoring removed orlov option [ 626.309499][ T9279] EXT4-fs (loop0): unable to read superblock [ 626.905031][ T9311] loop6: detected capacity change from 0 to 2048 [ 627.121772][ T9311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.039929][ T8301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 628.191236][ T9311] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.893: bg 0: block 234: padding at end of block bitmap is not set [ 628.223712][ T9311] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 484 with error 28 [ 628.236952][ T9311] EXT4-fs (loop6): This should not happen!! Data will be lost [ 628.236952][ T9311] [ 628.247350][ T9311] EXT4-fs (loop6): Total free blocks count 0 [ 628.253945][ T9311] EXT4-fs (loop6): Free/Dirty block details [ 628.260303][ T9311] EXT4-fs (loop6): free_blocks=0 [ 628.265565][ T9311] EXT4-fs (loop6): dirty_blocks=496 [ 628.271259][ T9311] EXT4-fs (loop6): Block reservation details [ 628.277442][ T9311] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 628.368898][ T8301] usb 3-1: Using ep0 maxpacket: 32 [ 628.404865][ T8301] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 628.413574][ T8301] usb 3-1: config 0 has no interface number 0 [ 628.421585][ T8301] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.433385][ T8301] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.444227][ T8301] usb 3-1: config 0 interface 85 has no altsetting 0 [ 628.582605][ T8301] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 628.592799][ T8301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.601630][ T8301] usb 3-1: Product: syz [ 628.606131][ T8301] usb 3-1: Manufacturer: syz [ 628.611437][ T8301] usb 3-1: SerialNumber: syz [ 628.745104][ T8301] usb 3-1: config 0 descriptor?? [ 628.950024][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.254738][ T8301] appletouch 3-1:0.85: Failed to request geyser raw mode [ 629.263364][ T8301] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 629.380230][ T8301] usb 3-1: USB disconnect, device number 4 [ 630.478945][ T9359] loop6: detected capacity change from 0 to 2048 [ 630.648850][ T9359] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 630.657016][ T9359] UDF-fs: Scanning with blocksize 512 failed [ 630.898676][ T9359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 631.040667][ T30] audit: type=1800 audit(1755948190.410:22): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.908" name="file2" dev="loop6" ino=839 res=0 errno=0 [ 631.451366][ T9371] loop0: detected capacity change from 0 to 2048 [ 631.645504][ T9371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.905517][ T8301] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 632.128802][ T8301] usb 9-1: Using ep0 maxpacket: 32 [ 632.191305][ T8301] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 632.200054][ T8301] usb 9-1: config 0 has no interface number 0 [ 632.234939][ T8301] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 632.245828][ T8301] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.254305][ T8301] usb 9-1: Product: syz [ 632.258905][ T8301] usb 9-1: Manufacturer: syz [ 632.263737][ T8301] usb 9-1: SerialNumber: syz [ 632.342119][ T8301] usb 9-1: config 0 descriptor?? [ 632.381314][ T8301] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 632.627072][ T8301] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 632.737369][ T8301] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 632.883549][ T9371] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.914: bg 0: block 234: padding at end of block bitmap is not set [ 632.961882][ T9371] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 574 with error 28 [ 632.975303][ T9371] EXT4-fs (loop0): This should not happen!! Data will be lost [ 632.975303][ T9371] [ 632.985576][ T9371] EXT4-fs (loop0): Total free blocks count 0 [ 632.991965][ T9371] EXT4-fs (loop0): Free/Dirty block details [ 632.998222][ T9371] EXT4-fs (loop0): free_blocks=0 [ 633.003389][ T9371] EXT4-fs (loop0): dirty_blocks=576 [ 633.009170][ T9371] EXT4-fs (loop0): Block reservation details [ 633.015539][ T9371] EXT4-fs (loop0): i_reserved_data_blocks=36 [ 633.121507][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 633.139633][ T8301] usb 9-1: USB disconnect, device number 3 [ 633.193292][ T8301] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 633.367309][ T8301] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 633.383524][ T8301] quatech2 9-1:0.51: device disconnected [ 633.904659][ T7442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.623908][ T9411] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 636.118230][ T8301] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 636.308965][ T9429] loop2: detected capacity change from 0 to 1024 [ 636.343550][ T8301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.346912][ T9429] EXT4-fs: Ignoring removed nobh option [ 636.354826][ T8301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 636.360533][ T9429] EXT4-fs: Ignoring removed bh option [ 636.371698][ T8301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 636.388363][ T8301] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 636.602962][ T9429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.620616][ T8301] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.630205][ T8301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.638785][ T8301] usb 1-1: Product: syz [ 636.643198][ T8301] usb 1-1: Manufacturer: syz [ 636.648294][ T8301] usb 1-1: SerialNumber: syz [ 636.694749][ T9424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 636.776853][ T8301] cdc_mbim 1-1:1.0: skipping garbage [ 636.819121][ T30] audit: type=1800 audit(1755948196.190:23): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.931" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 637.246203][ T9437] loop6: detected capacity change from 0 to 2048 [ 637.462309][ T9437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.764457][ T7185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.882495][ T8301] cdc_mbim 1-1:1.0: bind() failure [ 637.901687][ T8301] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 637.909251][ T8301] cdc_ncm 1-1:1.1: bind() failure [ 638.041910][ T8301] usb 1-1: USB disconnect, device number 8 [ 638.258449][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.645166][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.945'. [ 639.848404][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.945'. [ 641.139910][ T9489] loop8: detected capacity change from 0 to 7 [ 641.164508][ T9489] Dev loop8: unable to read RDB block 7 [ 641.170713][ T9489] loop8: unable to read partition table [ 641.240804][ T9489] loop8: partition table beyond EOD, truncated [ 641.247509][ T9489] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 642.613513][ T9501] tipc: Invalid UDP bearer configuration [ 642.613872][ T9501] tipc: Enabling of bearer rejected, failed to enable media [ 646.168587][ T5825] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 646.818264][ T9538] loop8: detected capacity change from 0 to 7 [ 646.860039][ T9538] Dev loop8: unable to read RDB block 7 [ 646.866130][ T9538] loop8: unable to read partition table [ 646.909703][ T9538] loop8: partition table beyond EOD, truncated [ 646.916480][ T9538] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 646.985530][ T5170] Dev loop8: unable to read RDB block 7 [ 646.991752][ T5170] loop8: unable to read partition table [ 647.011055][ T5170] loop8: partition table beyond EOD, truncated [ 649.338752][ T8309] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 649.577212][ T8309] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 649.586950][ T8309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.595524][ T8309] usb 7-1: Product: syz [ 649.600009][ T8309] usb 7-1: Manufacturer: syz [ 649.604956][ T8309] usb 7-1: SerialNumber: syz [ 649.678379][ T8309] usb 7-1: config 0 descriptor?? [ 649.940741][ T9584] loop8: detected capacity change from 0 to 7 [ 649.980904][ T9584] Dev loop8: unable to read RDB block 7 [ 649.987532][ T9584] loop8: unable to read partition table [ 650.032909][ T9584] loop8: partition table beyond EOD, truncated [ 650.040377][ T9584] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 650.581642][ T8309] usb 7-1: f81604_write: reg: 105 data: 92 failed: -EPROTO [ 650.590903][ T8309] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 650.599446][ T8309] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 650.687136][ T8309] usb 7-1: USB disconnect, device number 5 [ 651.744341][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.985'. [ 655.625330][ T9654] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 657.502921][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 657.531771][ T9678] team0: entered promiscuous mode [ 657.537164][ T9678] team_slave_0: entered promiscuous mode [ 657.544546][ T9678] team_slave_1: entered promiscuous mode [ 657.554867][ T9678] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 657.709033][ T9678] team0: left promiscuous mode [ 657.714223][ T9678] team_slave_0: left promiscuous mode [ 657.721497][ T9678] team_slave_1: left promiscuous mode [ 659.818024][ T8309] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 659.832547][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.840116][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.086743][ T8309] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.098530][ T8309] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 660.164510][ T8309] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 660.175058][ T8309] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.184874][ T8309] usb 9-1: Product: syz [ 660.189583][ T8309] usb 9-1: Manufacturer: syz [ 660.194437][ T8309] usb 9-1: SerialNumber: syz [ 660.346289][ T8309] usb 9-1: config 0 descriptor?? [ 662.985167][ T8301] usb 9-1: USB disconnect, device number 4 [ 663.147072][ T9752] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 663.662590][ T9755] loop0: detected capacity change from 0 to 4096 [ 663.838388][ T9764] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 664.302806][ T9766] syzkaller0: entered promiscuous mode [ 664.308912][ T9766] syzkaller0: entered allmulticast mode [ 665.351058][ T9775] vlan0: entered promiscuous mode [ 667.127556][ T5825] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 667.498668][ T9802] netlink: 'syz.2.1047': attribute type 21 has an invalid length. [ 667.890865][ T9809] loop8: detected capacity change from 0 to 1024 [ 667.942196][ T9809] EXT4-fs: Ignoring removed nobh option [ 667.949457][ T9809] EXT4-fs: Ignoring removed bh option [ 668.101651][ T9809] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.339437][ T30] audit: type=1800 audit(1755948227.710:24): pid=9809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1049" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 668.360589][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.762755][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.999743][ T9837] loop8: detected capacity change from 0 to 164 [ 674.780331][ T9894] loop6: detected capacity change from 0 to 164 [ 676.221478][ T9914] evm: overlay not supported [ 676.718958][ T9923] overlayfs: failed to resolve './file0': -2 [ 679.228330][ T8309] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 679.463597][ T8309] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.474785][ T8309] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 679.542711][ T8309] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 679.552550][ T8309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.561120][ T8309] usb 2-1: Product: syz [ 679.565496][ T8309] usb 2-1: Manufacturer: syz [ 679.570494][ T8309] usb 2-1: SerialNumber: syz [ 679.606622][ T9960] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1093'. [ 679.624199][ T9960] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1093'. [ 679.641151][ T8309] usb 2-1: config 0 descriptor?? [ 680.073103][ T9963] overlayfs: failed to resolve './file0': -2 [ 681.553436][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1102'. [ 682.108946][ T9992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 682.264333][ T8309] usb 2-1: USB disconnect, device number 7 [ 684.901114][ T8301] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 685.184963][ T8301] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 685.194827][ T8301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.203736][ T8301] usb 7-1: Product: syz [ 685.208285][ T8301] usb 7-1: Manufacturer: syz [ 685.213261][ T8301] usb 7-1: SerialNumber: syz [ 685.324572][ T8301] usb 7-1: config 0 descriptor?? [ 686.078711][ T8301] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 686.085859][ T8301] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 686.094185][ T8301] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 686.240118][ T8301] usb 7-1: USB disconnect, device number 6 [ 689.418883][ T8301] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 689.698112][ T8301] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 689.707582][ T8301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.716287][ T8301] usb 2-1: Product: syz [ 689.720881][ T8301] usb 2-1: Manufacturer: syz [ 689.725710][ T8301] usb 2-1: SerialNumber: syz [ 689.872025][ T8301] usb 2-1: config 0 descriptor?? [ 690.586693][ T8301] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 690.594158][ T8301] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 690.602273][ T8301] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 690.753367][ T8301] usb 2-1: USB disconnect, device number 8 [ 691.946663][T10122] loop6: detected capacity change from 0 to 512 [ 692.101814][T10122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.115218][T10122] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.440793][T10122] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1145: corrupted inode contents [ 692.529178][T10122] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1145: mark_inode_dirty error [ 692.611167][T10122] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1145: corrupted inode contents [ 692.646975][T10122] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1145: mark_inode_dirty error [ 692.955074][T10137] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1149'. [ 693.104102][ T7374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.628392][T10177] loop0: detected capacity change from 0 to 512 [ 696.886639][T10177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.900707][T10177] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 697.001794][T10186] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1162: corrupted inode contents [ 697.029942][T10186] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1162: mark_inode_dirty error [ 697.149457][T10186] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1162: corrupted inode contents [ 697.215732][T10186] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1162: mark_inode_dirty error [ 697.328636][T10177] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1162: corrupted inode contents [ 697.411242][T10177] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1162: mark_inode_dirty error [ 697.482679][T10177] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1162: corrupted inode contents [ 697.531671][T10186] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1162: corrupted inode contents [ 697.609529][T10186] EXT4-fs error (device loop0): ext4_append:88: inode #2: comm syz.0.1162: mark_inode_dirty error [ 697.691362][T10186] EXT4-fs error (device loop0) in ext4_append:100: Corrupt filesystem [ 698.144364][ T7442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.399053][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1180'. [ 703.112628][T10235] syz.1.1176 (10235): drop_caches: 2 [ 703.811703][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1185'. [ 705.409196][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 706.897396][T10289] syz.8.1195 (10289): drop_caches: 2 [ 708.910764][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 709.874107][T10330] overlayfs: failed to resolve './file1': -2 [ 711.093726][T10342] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 711.104349][T10342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 711.114407][T10342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 711.129764][T10342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 711.197651][T10342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 712.161229][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 713.308154][T10342] Bluetooth: hci5: command tx timeout [ 713.481900][T10363] loop8: detected capacity change from 0 to 32768 [ 713.535522][T10341] chnl_net:caif_netlink_parms(): no params data found [ 714.212630][T10376] overlayfs: failed to resolve './file1': -2 [ 715.388351][T10342] Bluetooth: hci5: command tx timeout [ 715.983216][T10341] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.995481][T10341] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.005915][T10341] bridge_slave_0: entered allmulticast mode [ 716.988467][T10341] bridge_slave_0: entered promiscuous mode [ 717.020693][T10341] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.028593][T10341] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.036373][T10341] bridge_slave_1: entered allmulticast mode [ 717.046832][T10341] bridge_slave_1: entered promiscuous mode [ 717.474425][T10342] Bluetooth: hci5: command tx timeout [ 717.676463][T10341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.852126][T10341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.361109][T10425] overlayfs: failed to resolve './file1': -2 [ 718.466246][T10341] team0: Port device team_slave_0 added [ 718.560094][T10341] team0: Port device team_slave_1 added [ 719.114153][T10341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.121573][T10341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.148844][T10341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.334315][T10341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.342112][T10341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.369478][T10341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.553016][T10342] Bluetooth: hci5: command tx timeout [ 720.100626][T10341] hsr_slave_0: entered promiscuous mode [ 720.111833][T10341] hsr_slave_1: entered promiscuous mode [ 721.516900][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.523969][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.611269][T10473] loop8: detected capacity change from 0 to 7 [ 722.652500][T10473] Dev loop8: unable to read RDB block 7 [ 722.660543][T10473] loop8: unable to read partition table [ 722.722772][T10473] loop8: partition table beyond EOD, truncated [ 722.730603][T10473] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 723.184739][T10341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 723.215553][T10341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 723.243637][T10341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 723.280066][T10341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 725.154340][T10341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.537328][T10341] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.593167][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.601140][ T1896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.802985][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.810681][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.267506][T10341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 729.232568][T10341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.836585][T10341] veth0_vlan: entered promiscuous mode [ 729.879616][T10550] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 729.988416][T10341] veth1_vlan: entered promiscuous mode [ 730.475255][T10341] veth0_macvtap: entered promiscuous mode [ 730.600997][T10341] veth1_macvtap: entered promiscuous mode [ 730.761057][ T30] audit: type=1326 audit(1755948290.130:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 730.783991][T10341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.785569][ T30] audit: type=1326 audit(1755948290.130:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 730.938517][T10341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.065717][ T30] audit: type=1326 audit(1755948290.230:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 731.089382][ T30] audit: type=1326 audit(1755948290.230:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 731.113447][ T30] audit: type=1326 audit(1755948290.240:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 731.137171][ T30] audit: type=1326 audit(1755948290.260:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bd2f8ec23 code=0x7ffc0000 [ 731.159858][ T30] audit: type=1326 audit(1755948290.260:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 731.171624][ T4994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.183249][ T30] audit: type=1326 audit(1755948290.280:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 731.253729][ T4994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.288421][ T4994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.385236][ T4994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.113120][ T8302] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 732.505211][T10570] loop8: detected capacity change from 0 to 32768 [ 732.513117][ T8302] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 732.522852][ T8302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.532010][ T8302] usb 3-1: Product: syz [ 732.536417][ T8302] usb 3-1: Manufacturer: syz [ 732.541598][ T8302] usb 3-1: SerialNumber: syz [ 734.489821][ T8302] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 734.561499][ T8302] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 734.607348][ T8302] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 734.620321][ T8302] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 734.630851][ T8302] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 734.670462][T10602] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1294'. [ 734.694730][ T8302] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 734.754094][T10602] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1294'. [ 734.850414][ T8302] usb 3-1: USB disconnect, device number 5 [ 735.260611][ T30] audit: type=1326 audit(1755948294.630:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10601 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 735.283996][ T30] audit: type=1326 audit(1755948294.630:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10601 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 739.220950][ T8318] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 739.526322][ T8318] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 739.536020][ T8318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.544624][ T8318] usb 2-1: Product: syz [ 739.549575][ T8318] usb 2-1: Manufacturer: syz [ 739.554426][ T8318] usb 2-1: SerialNumber: syz [ 741.506760][ T8318] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 741.574179][ T8318] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 741.671381][ T8318] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 741.686103][ T8318] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 741.697276][ T8318] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 741.870815][ T8318] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 741.981467][T10672] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 742.021114][ T8318] usb 2-1: USB disconnect, device number 9 [ 742.796853][T10687] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1317'. [ 744.409314][ T4994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.417687][ T4994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.584933][T10709] loop8: detected capacity change from 0 to 512 [ 744.796801][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.805252][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.938234][T10709] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1324: corrupted inode contents [ 745.040982][T10709] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.1324: mark_inode_dirty error [ 745.137632][T10709] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1324: corrupted inode contents [ 745.217464][T10709] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.1324: mark_inode_dirty error [ 745.286539][T10709] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1324: corrupted inode contents [ 745.366417][T10709] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 745.421205][T10709] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1324: corrupted inode contents [ 745.519482][T10709] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.1324: mark_inode_dirty error [ 745.589757][T10709] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 745.643493][T10709] EXT4-fs (loop8): 1 truncate cleaned up [ 745.652396][T10709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.665803][T10709] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.681139][ T4994] __quota_error: 10 callbacks suppressed [ 745.681234][ T4994] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 745.699463][ T4994] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:29: Failed to release dquot type 1 [ 745.897063][T10723] 9pnet_fd: Insufficient options for proto=fd [ 746.320751][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.366510][T10727] program syz.2.1330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 747.448453][ T8302] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 747.709290][ T8302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.720515][ T8302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 747.821407][ T8302] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 747.831223][ T8302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.839982][ T8302] usb 4-1: Product: syz [ 747.844481][ T8302] usb 4-1: Manufacturer: syz [ 747.849482][ T8302] usb 4-1: SerialNumber: syz [ 747.931210][ T8302] usb 4-1: config 0 descriptor?? [ 747.991552][ T30] audit: type=1326 audit(1755948307.370:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.036623][ T8302] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 748.056282][ T30] audit: type=1326 audit(1755948307.430:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.098390][ T8302] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 748.142384][ T8302] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 748.151780][ T8302] usb 4-1: media controller created [ 748.206774][ T30] audit: type=1326 audit(1755948307.490:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.230518][ T30] audit: type=1326 audit(1755948307.490:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.253041][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.260044][ T30] audit: type=1326 audit(1755948307.490:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.284222][ T30] audit: type=1326 audit(1755948307.540:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.307847][ T30] audit: type=1326 audit(1755948307.580:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.331664][ T30] audit: type=1326 audit(1755948307.580:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.354369][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.361662][ T30] audit: type=1326 audit(1755948307.690:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 748.384369][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.452605][ T8302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.114619][ T8302] DVB: Unable to find symbol tda10046_attach() [ 749.123039][ T8302] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 749.132489][ T8302] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 749.354360][ T8302] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 749.412545][ T8302] usb 4-1: USB disconnect, device number 4 [ 752.409969][T10809] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1359'. [ 752.890759][T10812] overlayfs: missing 'lowerdir' [ 755.752030][ T8302] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 756.021851][ T8302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.032902][ T8302] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.114372][ T8302] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 756.124328][ T8302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.132819][ T8302] usb 2-1: Product: syz [ 756.137199][ T8302] usb 2-1: Manufacturer: syz [ 756.142325][ T8302] usb 2-1: SerialNumber: syz [ 756.246950][ T8302] usb 2-1: config 0 descriptor?? [ 756.331896][ T8302] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 756.423470][ T8302] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 756.503328][ T8302] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 756.514555][ T8302] usb 2-1: media controller created [ 756.692893][ T8302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.918572][ T8318] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 757.138607][ T8318] usb 1-1: Using ep0 maxpacket: 8 [ 757.196915][ T8318] usb 1-1: config 162 has an invalid interface number: 45 but max is 0 [ 757.206040][ T8318] usb 1-1: config 162 has an invalid descriptor of length 36, skipping remainder of the config [ 757.217632][ T8318] usb 1-1: config 162 has no interface number 0 [ 757.224613][ T8318] usb 1-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 757.238595][ T8318] usb 1-1: config 162 interface 45 has no altsetting 0 [ 757.364254][ T8318] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 757.375657][ T8318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.385120][ T8318] usb 1-1: Product: syz [ 757.391133][ T8318] usb 1-1: Manufacturer: syz [ 757.395977][ T8318] usb 1-1: SerialNumber: syz [ 757.539039][ T8302] DVB: Unable to find symbol tda10046_attach() [ 757.545413][ T8302] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 757.556223][ T8302] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 757.808078][ T8302] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 757.839423][T10838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1370'. [ 757.935571][ T8318] pl2303 1-1:162.45: required endpoints missing [ 757.957714][ T8302] usb 2-1: USB disconnect, device number 10 [ 758.024233][ T8318] usb 1-1: USB disconnect, device number 9 [ 758.087073][T10852] overlayfs: missing 'lowerdir' [ 759.591203][T10875] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 759.770213][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 760.702464][T10888] overlayfs: missing 'lowerdir' [ 761.856094][T10901] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 762.808523][T10914] loop2: detected capacity change from 0 to 1024 [ 762.871781][T10914] EXT4-fs: Ignoring removed nobh option [ 763.060839][T10914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.153003][T10926] overlayfs: missing 'lowerdir' [ 763.826795][ T7185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.669791][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 764.669882][ T30] audit: type=1400 audit(1755948324.040:89): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=10947 comm="syz.3.1410" [ 766.880140][ T30] audit: type=1326 audit(1755948326.250:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 766.904456][ T30] audit: type=1326 audit(1755948326.250:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 767.168733][ T30] audit: type=1326 audit(1755948326.310:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 767.192357][ T30] audit: type=1326 audit(1755948326.310:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 767.215837][ T30] audit: type=1326 audit(1755948326.320:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 767.239889][ T30] audit: type=1326 audit(1755948326.320:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 767.263746][ T30] audit: type=1326 audit(1755948326.330:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 767.286837][ T30] audit: type=1326 audit(1755948326.330:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 768.244666][ T30] audit: type=1400 audit(1755948327.610:98): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=10995 comm="syz.8.1428" [ 771.809383][ T30] audit: type=1400 audit(1755948331.160:99): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11039 comm="syz.2.1442" [ 771.810871][T11043] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 773.671069][T11062] ------------[ cut here ]------------ [ 773.676845][T11062] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 773.698590][T11062] WARNING: CPU: 1 PID: 11062 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0xb26/0x14b0 [ 773.711563][T11062] Modules linked in: [ 773.715742][T11062] CPU: 1 UID: 0 PID: 11062 Comm: syz.1.1450 Not tainted syzkaller #0 PREEMPT(none) [ 773.725921][T11062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.736465][T11062] RIP: 0010:reg_bounds_sanity_check+0xb26/0x14b0 [ 773.743394][T11062] Code: ff ff ff b5 20 ff ff ff ff b5 18 ff ff ff ff b5 48 ff ff ff ff b5 10 ff ff ff ff b5 08 ff ff ff e8 3f 1e 02 ff 48 83 c4 38 90 <0f> 0b 90 90 4c 8b bd 70 ff ff ff e9 83 f8 ff ff 8b 3a e8 a3 56 79 [ 773.763791][T11062] RSP: 0018:ffff888051a6ef58 EFLAGS: 00010282 [ 773.770478][T11062] RAX: ffffffff81207e75 RBX: ffff888056f49800 RCX: 0000000000080000 [ 773.780630][T11062] RDX: ffffc90009405000 RSI: 000000000001f373 RDI: 000000000001f374 [ 773.789024][T11062] RBP: ffff888051a6f0d8 R08: ffffea000000000f R09: 0000000000000000 [ 773.797254][T11062] R10: ffff888237b75028 R11: ffff88823f2635e0 R12: 0000000000000000 [ 773.805672][T11062] R13: ffff888050d7ac20 R14: 0000000000000000 R15: 0000000000000000 [ 773.814534][T11062] FS: 00007f671f9aa6c0(0000) GS:ffff8881aa796000(0000) knlGS:0000000000000000 [ 773.824102][T11062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.831028][T11062] CR2: 00002000000054c0 CR3: 0000000056f7e000 CR4: 00000000003526f0 [ 773.839472][T11062] Call Trace: [ 773.842931][T11062] [ 773.846053][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 773.851716][T11062] reg_set_min_max+0x335/0x440 [ 773.856882][T11062] check_cond_jmp_op+0x3187/0x4820 [ 773.862646][T11062] do_check+0x2374/0x15760 [ 773.868102][T11062] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 773.875467][T11062] ? kmsan_get_metadata+0x30/0x160 [ 773.881719][T11062] do_check_common+0x2482/0x3740 [ 773.887079][T11062] bpf_check+0x61f8/0x2a100 [ 773.892055][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 773.897478][T11062] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 773.903789][T11062] ? pcpu_block_update_hint_alloc+0x12df/0x1390 [ 773.910583][T11062] ? kmsan_get_metadata+0x150/0x160 [ 773.916204][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 773.924724][T11062] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 773.931599][T11062] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 773.938426][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 773.943842][T11062] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 773.950091][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 773.955504][T11062] ? strncpy_from_bpfptr+0xaf/0xf0 [ 773.961251][T11062] ? __msan_warning+0x1b/0x30 [ 773.966227][T11062] ? stack_depot_save_flags+0x35/0x7b0 [ 773.972310][T11062] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 773.980382][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 773.985800][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 773.991855][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 773.997542][T11062] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 774.004608][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 774.010276][T11062] ? kmsan_get_metadata+0xfb/0x160 [ 774.016145][T11062] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 774.022734][T11062] bpf_prog_load+0x28e6/0x2e50 [ 774.028045][T11062] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 774.034696][T11062] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 774.041299][T11062] ? security_bpf+0x88/0x620 [ 774.046161][T11062] ? _copy_from_user+0xcb/0x100 [ 774.051599][T11062] __sys_bpf+0x7f4/0xed0 [ 774.056256][T11062] __x64_sys_bpf+0xa4/0xf0 [ 774.061603][T11062] x64_sys_call+0x3550/0x3e20 [ 774.066616][T11062] do_syscall_64+0xd9/0x210 [ 774.071579][T11062] ? irqentry_exit+0x16/0x60 [ 774.076456][T11062] ? clear_bhb_loop+0x40/0x90 [ 774.082836][T11062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.089608][T11062] RIP: 0033:0x7f671eb8ebe9 [ 774.094269][T11062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.114672][T11062] RSP: 002b:00007f671f9aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.123729][T11062] RAX: ffffffffffffffda RBX: 00007f671edb5fa0 RCX: 00007f671eb8ebe9 [ 774.132120][T11062] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 774.140630][T11062] RBP: 00007f671ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 774.149042][T11062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.157271][T11062] R13: 00007f671edb6038 R14: 00007f671edb5fa0 R15: 00007ffe8505ded8 [ 774.165757][T11062] [ 774.169088][T11062] ---[ end trace 0000000000000000 ]--- [ 774.919910][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 775.068294][ T30] audit: type=1326 audit(1755948334.420:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 775.181600][ T30] audit: type=1326 audit(1755948334.490:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 775.204646][ T30] audit: type=1326 audit(1755948334.530:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 775.228744][ T30] audit: type=1326 audit(1755948334.530:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 775.493539][ T30] audit: type=1326 audit(1755948334.640:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 775.518480][ T30] audit: type=1326 audit(1755948334.650:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 775.542997][ T30] audit: type=1326 audit(1755948334.650:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 776.170731][T11095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 777.809112][T11118] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1470'. [ 777.873043][T11118] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1470'. [ 778.077903][T11125] mmap: syz.0.1468 (11125) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 778.713839][T11115] loop0: detected capacity change from 0 to 164 [ 778.733843][ T30] audit: type=1326 audit(1755948338.100:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 778.756884][ T30] audit: type=1326 audit(1755948338.120:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 778.779577][ T30] audit: type=1326 audit(1755948338.120:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 778.981726][T11115] rock: directory entry would overflow storage [ 778.988443][T11115] rock: sig=0x66, size=4, remaining=3 [ 779.060939][ T8301] hid_parser_main: 26 callbacks suppressed [ 779.061058][ T8301] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 779.181058][ T30] audit: type=1326 audit(1755948338.180:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 779.221680][ T8301] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 779.325503][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 779.335449][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 779.869722][T11148] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 780.597430][T11154] loop8: detected capacity change from 0 to 1024 [ 780.736434][T11154] EXT4-fs (loop8): filesystem too large to mount safely on this system [ 781.181286][T11159] 9pnet_fd: Insufficient options for proto=fd [ 781.455646][T11163] loop0: detected capacity change from 0 to 128 [ 781.541135][T11163] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4627: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 781.557181][T11163] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 781.639500][T11167] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1485'. [ 781.814607][T11167] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1485'. [ 782.731555][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.739624][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.684615][T11199] loop8: detected capacity change from 0 to 128 [ 785.127148][T11197] Bluetooth: MGMT ver 1.23 [ 785.132526][T11197] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 785.749743][T11209] loop0: detected capacity change from 0 to 1024 [ 785.797220][T11209] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 785.883021][T11209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.140056][T11213] loop3: detected capacity change from 0 to 512 [ 786.198320][T11213] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 786.247087][T11213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e09c, mo2=0002] [ 786.272542][T11213] EXT4-fs (loop3): orphan cleanup on readonly fs [ 786.279482][T11213] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1499: bad orphan inode 267 [ 786.411984][T11213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 786.605204][T11213] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1499: dx entry: limit 0 != root limit 125 [ 786.618000][T11213] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1499: Corrupt directory, running e2fsck is recommended [ 786.735204][T11229] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1499: dx entry: limit 0 != root limit 125 [ 786.748461][T11229] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1499: Corrupt directory, running e2fsck is recommended [ 786.868859][T11213] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1499: dx entry: limit 0 != root limit 125 [ 786.882291][T11213] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1499: Corrupt directory, running e2fsck is recommended [ 787.199718][T11233] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1499: dx entry: limit 0 != root limit 125 [ 787.213257][T11233] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1499: Corrupt directory, running e2fsck is recommended [ 787.410159][T11229] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1499: dx entry: limit 0 != root limit 125 [ 787.422749][T11229] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1499: Corrupt directory, running e2fsck is recommended [ 787.753408][ T7442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.955416][T11243] loop8: detected capacity change from 0 to 128 [ 788.205714][T10341] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 788.335474][T11247] loop0: detected capacity change from 0 to 512 [ 789.035945][T11253] loop3: detected capacity change from 0 to 1024 [ 789.116772][T11253] EXT4-fs: Ignoring removed orlov option [ 789.293342][T11253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.380664][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.380664][ T1896] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 789.395143][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.395143][ T1896] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 789.409691][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.409691][ T1896] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 789.423874][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.423874][ T1896] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 789.438213][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.438213][ T1896] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 789.453516][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.453516][ T1896] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 789.468229][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.468229][ T1896] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 789.484023][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.484023][ T1896] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 789.498672][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.498672][ T1896] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 789.513229][ T1896] kworker/u8:9: attempt to access beyond end of device [ 789.513229][ T1896] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 789.863324][T11256] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 791.507052][T11276] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 791.788424][T11217] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 88: padding at end of block bitmap is not set [ 791.828195][ T30] audit: type=1326 audit(1755948351.190:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11277 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 792.001137][ T30] audit: type=1326 audit(1755948351.250:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11277 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 792.025533][ T30] audit: type=1326 audit(1755948351.280:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11277 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 792.131914][T10341] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.158132][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1521'. [ 793.515044][T11288] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 794.511327][T11310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 795.001222][T11313] netlink: 'syz.2.1530': attribute type 4 has an invalid length. [ 795.514363][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1535'. [ 795.814284][T11323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.935361][T11323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.949497][ T30] audit: type=1326 audit(1755948355.310:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 795.973141][ T30] audit: type=1326 audit(1755948355.330:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 796.017320][T11323] bond0 (unregistering): Released all slaves [ 796.163145][ T30] audit: type=1326 audit(1755948355.390:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 796.186681][ T30] audit: type=1326 audit(1755948355.390:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 797.648698][T11340] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 798.855950][T11357] autofs: Bad value for 'fd' [ 801.176997][T11385] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 802.472593][T11405] fuse: Bad value for 'fd' [ 805.073252][T11428] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 807.622971][ T30] audit: type=1326 audit(1755948367.000:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.1.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 807.750061][ T30] audit: type=1326 audit(1755948367.060:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.1.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 807.774938][ T30] audit: type=1326 audit(1755948367.060:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.1.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 807.798784][ T30] audit: type=1326 audit(1755948367.060:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.1.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 807.810344][T11472] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 807.904385][T11468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1586'. [ 810.257039][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 810.265278][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 810.273673][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 810.281670][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 810.289795][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 810.297503][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 810.305576][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 810.313527][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 810.321832][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 810.331001][ T8318] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 810.828838][ T8318] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 811.228112][ T3728] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.565252][ T3728] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.682218][T11502] loop8: detected capacity change from 0 to 2048 [ 811.784132][ T3728] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.033024][T11502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.168603][ T3728] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.256526][T11502] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.1602: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 812.603509][T11500] fido_id[11500]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 812.802407][T11502] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 813.333422][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.600166][ T3728] bridge_slave_1: left allmulticast mode [ 813.607490][ T3728] bridge_slave_1: left promiscuous mode [ 813.614494][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.676564][ T3728] bridge_slave_0: left allmulticast mode [ 813.683588][ T3728] bridge_slave_0: left promiscuous mode [ 813.690638][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.392045][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.441541][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.477616][ T3728] bond0 (unregistering): Released all slaves [ 815.231563][ T3728] hsr_slave_0: left promiscuous mode [ 815.278119][ T3728] hsr_slave_1: left promiscuous mode [ 815.286883][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.295714][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.371828][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.379736][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.499861][ T3728] veth1_macvtap: left promiscuous mode [ 815.505682][ T3728] veth0_macvtap: left promiscuous mode [ 815.513495][ T3728] veth1_vlan: left promiscuous mode [ 815.519682][ T3728] veth0_vlan: left promiscuous mode [ 816.336132][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 816.361882][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 816.394198][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 816.451385][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 816.493748][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 817.063799][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 817.116049][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 817.519495][T11547] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1612'. [ 817.681197][T11528] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1608'. [ 817.834573][T11549] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 818.244169][ T30] audit: type=1326 audit(1755948377.600:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.8.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 818.267524][ T30] audit: type=1326 audit(1755948377.600:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.8.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 818.291856][ T30] audit: type=1326 audit(1755948377.610:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.8.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 818.314783][ T30] audit: type=1326 audit(1755948377.610:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.8.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 818.338271][ T30] audit: type=1326 audit(1755948377.620:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.8.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 818.618347][ T5825] Bluetooth: hci3: command tx timeout [ 818.669148][ T30] audit: type=1326 audit(1755948377.890:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.8.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 818.692412][ T30] audit: type=1326 audit(1755948377.970:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.8.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 819.111283][T11562] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 820.498812][T11542] chnl_net:caif_netlink_parms(): no params data found [ 820.582513][T11581] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1623'. [ 820.668777][ T5825] Bluetooth: hci3: command tx timeout [ 821.249137][ T30] audit: type=1326 audit(1755948380.610:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 821.369404][ T30] audit: type=1326 audit(1755948380.650:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 821.392904][ T30] audit: type=1326 audit(1755948380.650:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 822.711143][ T32] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 822.750891][ T5825] Bluetooth: hci3: command tx timeout [ 822.831995][T11542] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.839849][T11542] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.849481][T11542] bridge_slave_0: entered allmulticast mode [ 822.860356][T11542] bridge_slave_0: entered promiscuous mode [ 822.935877][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.946649][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.957157][T11542] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.965653][T11542] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.973678][T11542] bridge_slave_1: entered allmulticast mode [ 822.983973][T11542] bridge_slave_1: entered promiscuous mode [ 823.025219][ T32] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 823.035230][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.043907][ T32] usb 1-1: Product: syz [ 823.048423][ T32] usb 1-1: Manufacturer: syz [ 823.053225][ T32] usb 1-1: SerialNumber: syz [ 823.238270][ T32] usb 1-1: config 0 descriptor?? [ 823.299267][ T32] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 823.451681][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.582971][ T32] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 823.592464][ T32] usb 1-1: media controller created [ 823.838176][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.890354][T11612] random: crng reseeded on system resumption [ 824.206115][T11542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.454031][T11542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.828727][ T5825] Bluetooth: hci3: command tx timeout [ 824.925947][ T32] DVB: Unable to find symbol tda10046_attach() [ 824.932607][ T32] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 824.942489][ T32] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 825.071387][T11542] team0: Port device team_slave_0 added [ 825.169389][T11542] team0: Port device team_slave_1 added [ 825.180935][ T32] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 825.219504][ T32] usb 1-1: USB disconnect, device number 10 [ 825.621039][T11542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.629195][T11542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.655762][T11542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.677146][T11542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.685239][T11542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.713403][T11542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.382865][T11542] hsr_slave_0: entered promiscuous mode [ 826.395466][T11542] hsr_slave_1: entered promiscuous mode [ 826.724241][T11636] loop0: detected capacity change from 0 to 164 [ 826.906754][T11636] process 'syz.0.1639' launched '/dev/fd/6' with NULL argv: empty string added [ 827.005315][T11636] bio_check_eod: 13 callbacks suppressed [ 827.005519][T11636] syz.0.1639: attempt to access beyond end of device [ 827.005519][T11636] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 827.026806][T11636] syz.0.1639: attempt to access beyond end of device [ 827.026806][T11636] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 830.163512][T11542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 830.259456][T11542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 830.396839][T11542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 830.500027][T11542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 830.608149][ T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 830.824460][ T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 830.833402][ T32] usb 3-1: config 0 has no interface number 0 [ 830.910264][ T32] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 830.920657][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.929242][ T32] usb 3-1: Product: syz [ 830.933649][ T32] usb 3-1: Manufacturer: syz [ 830.938648][ T32] usb 3-1: SerialNumber: syz [ 831.046479][ T32] usb 3-1: config 0 descriptor?? [ 831.264578][ T32] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 831.842917][ T32] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 831.855463][ T32] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 831.864174][ T32] usb 3-1: media controller created [ 832.112969][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.939894][T11542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.183090][ T32] i2c i2c-5: ec100: i2c rd failed=-32 reg=33 [ 833.279321][T11542] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.351323][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.359007][ T4994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.481451][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.489141][ T4994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.120425][ T32] usb 3-1: USB disconnect, device number 6 [ 834.834038][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 834.834125][ T30] audit: type=1326 audit(1755948394.210:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.050088][ T30] audit: type=1326 audit(1755948394.310:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.073222][ T30] audit: type=1326 audit(1755948394.320:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.096776][ T30] audit: type=1326 audit(1755948394.380:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.119895][ T30] audit: type=1326 audit(1755948394.380:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.142812][ T30] audit: type=1326 audit(1755948394.490:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.166643][ T30] audit: type=1326 audit(1755948394.490:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.191462][ T30] audit: type=1326 audit(1755948394.490:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.214535][ T30] audit: type=1326 audit(1755948394.500:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 835.434496][T11713] vlan0: entered allmulticast mode [ 835.440198][T11713] dummy0: entered allmulticast mode [ 835.556014][ T30] audit: type=1326 audit(1755948394.660:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2498ebe9 code=0x7ffc0000 [ 836.074985][T11719] loop2: detected capacity change from 0 to 2048 [ 836.412566][T11719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 836.811068][T11542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.388497][T11734] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 837.440690][T11742] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1669'. [ 837.450311][T11742] ksmbd: Unknown IPC event: 4, ignore. [ 838.651122][ T7185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 839.239699][T11755] loop8: detected capacity change from 0 to 164 [ 839.568661][ T8865] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 839.862596][ T8865] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 839.871452][ T8865] usb 3-1: config 0 has no interface number 0 [ 839.966118][ T8865] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 839.976017][ T8865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.984965][ T8865] usb 3-1: Product: syz [ 839.989616][ T8865] usb 3-1: Manufacturer: syz [ 839.994633][ T8865] usb 3-1: SerialNumber: syz [ 840.158250][ T8865] usb 3-1: config 0 descriptor?? [ 840.411361][ T8865] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 840.470286][ T8865] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 840.482987][ T8865] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 840.491589][ T8865] usb 3-1: media controller created [ 840.659544][ T8865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 841.435237][T11542] veth0_vlan: entered promiscuous mode [ 841.450201][T11763] loop0: detected capacity change from 0 to 164 [ 841.556408][T11542] veth1_vlan: entered promiscuous mode [ 841.591939][ T8865] i2c i2c-5: ec100: i2c rd failed=-32 reg=33 [ 841.672936][T11763] rock: directory entry would overflow storage [ 841.679675][T11763] rock: sig=0x66, size=4, remaining=3 [ 842.055690][T11542] veth0_macvtap: entered promiscuous mode [ 842.173802][T11542] veth1_macvtap: entered promiscuous mode [ 842.461185][T11542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.548239][ T8865] usb 3-1: USB disconnect, device number 7 [ 842.570544][ T7550] udevd[7550]: setting mode of /dev/bus/usb/003/007 to 020664 failed: No such file or directory [ 842.609436][T11542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.662622][ T7550] udevd[7550]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 842.847563][ T3473] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.930999][ T3473] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.014543][ T4009] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.079386][ T4009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.141082][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.148135][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 845.179827][T11806] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1685'. [ 845.189739][T11806] ksmbd: Unknown IPC event: 4, ignore. [ 846.386904][T11825] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1690'. [ 846.955533][T11832] loop2: detected capacity change from 0 to 1024 [ 847.100425][T11832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 847.199336][T11832] System zones: 0-1, 3-36 [ 847.262956][T11838] 9pnet_fd: Insufficient options for proto=fd [ 847.282122][T11832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.400295][T11831] capability: warning: `syz.2.1692' uses deprecated v2 capabilities in a way that may be insecure [ 847.484041][T11832] program syz.2.1692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.687478][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 847.687580][ T30] audit: type=1326 audit(1755948407.060:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 847.828159][ T30] audit: type=1326 audit(1755948407.170:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 847.851324][ T30] audit: type=1326 audit(1755948407.170:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 847.874382][ T30] audit: type=1326 audit(1755948407.170:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 847.897888][ T30] audit: type=1326 audit(1755948407.190:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 847.921695][ T30] audit: type=1326 audit(1755948407.190:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 847.945324][ T30] audit: type=1326 audit(1755948407.210:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 847.970914][ T30] audit: type=1326 audit(1755948407.210:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 847.996926][ T30] audit: type=1326 audit(1755948407.230:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 848.019871][ T30] audit: type=1326 audit(1755948407.230:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 848.166513][ T7185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.360607][T11867] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1702'. [ 850.370317][T11867] ksmbd: Unknown IPC event: 4, ignore. [ 851.029753][T11877] loop0: detected capacity change from 0 to 128 [ 851.389956][T11877] FAT-fs (loop0): Directory bread(block 32) failed [ 851.396995][T11877] FAT-fs (loop0): Directory bread(block 33) failed [ 851.405601][T11877] FAT-fs (loop0): Directory bread(block 34) failed [ 851.412574][T11877] FAT-fs (loop0): Directory bread(block 35) failed [ 851.419721][T11877] FAT-fs (loop0): Directory bread(block 36) failed [ 851.426488][T11877] FAT-fs (loop0): Directory bread(block 37) failed [ 851.433655][T11877] FAT-fs (loop0): Directory bread(block 38) failed [ 851.440664][T11877] FAT-fs (loop0): Directory bread(block 39) failed [ 851.447593][T11877] FAT-fs (loop0): Directory bread(block 40) failed [ 851.454722][T11877] FAT-fs (loop0): Directory bread(block 41) failed [ 851.759015][T11874] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 851.768201][T11874] FAT-fs (loop0): Filesystem has been set read-only [ 852.374750][T11894] 9pnet_fd: Insufficient options for proto=fd [ 853.925724][T11904] loop0: detected capacity change from 0 to 1024 [ 854.248763][T11904] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 854.329036][T11904] System zones: 0-1, 3-36 [ 854.466988][T11904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.882377][ T4525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.891283][ T4525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.081910][ T7442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.443865][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.452754][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.455066][T11922] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1715'. [ 855.470643][T11922] ksmbd: Unknown IPC event: 4, ignore. [ 856.476366][T11937] syz.4.1604: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 856.492232][T11937] CPU: 0 UID: 0 PID: 11937 Comm: syz.4.1604 Tainted: G W syzkaller #0 PREEMPT(none) [ 856.492456][T11937] Tainted: [W]=WARN [ 856.492515][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 856.492612][T11937] Call Trace: [ 856.492673][T11937] [ 856.492731][T11937] __dump_stack+0x26/0x30 [ 856.492934][T11937] dump_stack_lvl+0x1df/0x270 [ 856.493142][T11937] dump_stack+0x1e/0x25 [ 856.493325][T11937] warn_alloc+0x470/0x690 [ 856.493533][T11937] ? kmsan_get_metadata+0xfb/0x160 [ 856.493723][T11937] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 856.493932][T11937] __vmalloc_node_range_noprof+0x133/0x2360 [ 856.494194][T11937] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 856.494409][T11937] ? should_fail_ex+0x45/0x8a0 [ 856.494636][T11937] ? kmsan_get_metadata+0xfb/0x160 [ 856.494825][T11937] ? kmsan_get_metadata+0xfb/0x160 [ 856.495000][T11937] ? kmsan_get_metadata+0xfb/0x160 [ 856.495167][T11937] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 856.495360][T11937] ? kmsan_get_metadata+0xfb/0x160 [ 856.495565][T11937] vmalloc_user_noprof+0xce/0x140 [ 856.495717][T11937] ? xskq_create+0x11d/0x290 [ 856.495942][T11937] xskq_create+0x11d/0x290 [ 856.496188][T11937] xsk_init_queue+0xfd/0x1d0 [ 856.496412][T11937] xsk_setsockopt+0x968/0xfe0 [ 856.496642][T11937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 856.496853][T11937] __sys_setsockopt+0x43e/0x580 [ 856.497063][T11937] __x64_sys_setsockopt+0xf4/0x1a0 [ 856.497275][T11937] x64_sys_call+0x27c9/0x3e20 [ 856.497502][T11937] do_syscall_64+0xd9/0x210 [ 856.497709][T11937] ? irqentry_exit+0x16/0x60 [ 856.497880][T11937] ? clear_bhb_loop+0x40/0x90 [ 856.498056][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.498228][T11937] RIP: 0033:0x7f0a98d8ebe9 [ 856.498347][T11937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.498500][T11937] RSP: 002b:00007f0a99bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 856.498660][T11937] RAX: ffffffffffffffda RBX: 00007f0a98fb5fa0 RCX: 00007f0a98d8ebe9 [ 856.498776][T11937] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 856.498874][T11937] RBP: 00007f0a98e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 856.498974][T11937] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 856.499075][T11937] R13: 00007f0a98fb6038 R14: 00007f0a98fb5fa0 R15: 00007ffc234db918 [ 856.499226][T11937] [ 856.747557][T11937] Mem-Info: [ 856.751359][T11937] active_anon:7389 inactive_anon:0 isolated_anon:0 [ 856.751359][T11937] active_file:3499 inactive_file:40711 isolated_file:0 [ 856.751359][T11937] unevictable:768 dirty:65 writeback:0 [ 856.751359][T11937] slab_reclaimable:4154 slab_unreclaimable:25118 [ 856.751359][T11937] mapped:30349 shmem:2216 pagetables:1619 [ 856.751359][T11937] sec_pagetables:0 bounce:0 [ 856.751359][T11937] kernel_misc_reclaimable:0 [ 856.751359][T11937] free:359158 free_pcp:13192 free_cma:0 [ 856.797256][T11937] Node 0 active_anon:29556kB inactive_anon:0kB active_file:13996kB inactive_file:162644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121396kB dirty:260kB writeback:0kB shmem:7328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5360kB pagetables:6116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 856.832220][T11937] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 856.865416][T11937] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.896422][T11937] lowmem_reserve[]: 0 928 1241 1241 1241 [ 856.903939][T11937] Node 0 DMA32 free:520828kB boost:0kB min:36820kB low:46024kB high:55228kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11084kB inactive_anon:0kB active_file:11468kB inactive_file:65300kB unevictable:0kB writepending:128kB present:3129332kB managed:951092kB mlocked:0kB bounce:0kB free_pcp:39396kB local_pcp:21688kB free_cma:0kB [ 856.938118][T11937] lowmem_reserve[]: 0 0 312 312 312 [ 856.943958][T11937] Node 0 Normal free:18920kB boost:0kB min:13016kB low:16268kB high:19520kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18508kB inactive_anon:0kB active_file:2528kB inactive_file:97344kB unevictable:1536kB writepending:132kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:13276kB local_pcp:7592kB free_cma:0kB [ 856.981021][T11937] lowmem_reserve[]: 0 0 0 0 0 [ 856.986360][T11937] Node 1 Normal free:892788kB boost:0kB min:40100kB low:50124kB high:60148kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 857.019865][T11937] lowmem_reserve[]: 0 0 0 0 0 [ 857.027516][T11937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 857.042951][T11937] Node 0 DMA32: 1921*4kB (UM) 831*8kB (UME) 178*16kB (UME) 44*32kB (UE) 82*64kB (UM) 37*128kB (UME) 97*256kB (UME) 49*512kB (UME) 24*1024kB (UM) 4*2048kB (U) 100*4096kB (UM) = 520860kB [ 857.063471][T11937] Node 0 Normal: 364*4kB (UME) 271*8kB (UME) 126*16kB (UME) 47*32kB (UME) 12*64kB (ME) 14*128kB (ME) 8*256kB (ME) 4*512kB (UME) 1*1024kB (M) 0*2048kB 1*4096kB (U) = 18920kB [ 857.083642][T11937] Node 1 Normal: 3*4kB (ME) 7*8kB (UME) 9*16kB (UE) 29*32kB (UME) 18*64kB (UME) 13*128kB (UME) 6*256kB (UME) 3*512kB (U) 3*1024kB (UM) 3*2048kB (UM) 214*4096kB (M) = 892788kB [ 857.103607][T11937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 857.113683][T11937] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 857.123634][T11937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 857.134717][T11937] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 857.144966][T11937] 46401 total pagecache pages [ 857.150082][T11937] 0 pages in swap cache [ 857.154518][T11937] Free swap = 124996kB [ 857.159061][T11937] Total swap = 124996kB [ 857.163415][T11937] 2097051 pages RAM [ 857.167408][T11937] 0 pages HighMem/MovableOnly [ 857.172544][T11937] 1531355 pages reserved [ 857.177058][T11937] 0 pages cma reserved [ 859.483979][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 859.484080][ T30] audit: type=1326 audit(1755948418.860:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.651438][ T30] audit: type=1326 audit(1755948418.910:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.674989][ T30] audit: type=1326 audit(1755948418.940:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.699531][ T30] audit: type=1326 audit(1755948418.940:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.723586][ T30] audit: type=1326 audit(1755948418.940:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.746972][ T30] audit: type=1326 audit(1755948418.950:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.770349][ T30] audit: type=1326 audit(1755948418.950:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.794296][ T30] audit: type=1326 audit(1755948418.970:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.818034][ T30] audit: type=1326 audit(1755948418.970:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 859.841131][ T30] audit: type=1326 audit(1755948418.990:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.8.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 862.160392][T11978] loop8: detected capacity change from 0 to 8192 [ 866.977986][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 866.978084][ T30] audit: type=1326 audit(1755948426.330:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 867.175483][ T30] audit: type=1326 audit(1755948426.390:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 867.200249][ T30] audit: type=1326 audit(1755948426.400:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 871.938155][T12093] loop2: detected capacity change from 0 to 2048 [ 872.115139][T12093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.232406][T12093] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1772: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 872.351939][T12093] EXT4-fs (loop2): Remounting filesystem read-only [ 872.816742][ T7185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.824457][T12145] loop8: detected capacity change from 0 to 512 [ 875.880721][T12145] EXT4-fs: Ignoring removed bh option [ 875.987594][T12145] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 875.998811][T12145] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 876.075462][T12145] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 876.110630][T12145] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 876.226303][T12145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.470276][T12145] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1789: bg 0: block 353: padding at end of block bitmap is not set [ 877.396231][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.381352][T12242] netlink: 'syz.1.1819': attribute type 6 has an invalid length. [ 885.751295][ T30] audit: type=1326 audit(1755948445.100:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12265 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 885.775440][ T30] audit: type=1326 audit(1755948445.130:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12265 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 885.801651][ T30] audit: type=1326 audit(1755948445.130:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12265 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 886.123662][ T30] audit: type=1326 audit(1755948445.240:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12265 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 887.695213][T12284] loop0: detected capacity change from 0 to 1024 [ 887.841010][T12284] EXT4-fs: Ignoring removed nobh option [ 888.061143][T12284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.077653][ T7442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.135394][T12295] loop2: detected capacity change from 0 to 4096 [ 889.346202][T12308] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 889.766848][ T30] audit: type=1326 audit(1755948449.130:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 889.788919][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.796610][ T30] audit: type=1326 audit(1755948449.140:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 889.819258][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.825978][ T30] audit: type=1326 audit(1755948449.140:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 890.298721][ T30] audit: type=1326 audit(1755948449.250:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12312 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 890.321227][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.192738][T12339] loop8: detected capacity change from 0 to 1024 [ 892.235222][T12338] loop0: detected capacity change from 0 to 1024 [ 892.325605][T12338] EXT4-fs: Ignoring removed orlov option [ 892.386560][T12339] EXT4-fs: Ignoring removed nobh option [ 892.603378][T12339] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.651159][T12338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.789165][T12338] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.454184][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.848927][ T30] audit: type=1326 audit(1755948453.210:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 893.871637][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.010265][ T30] audit: type=1326 audit(1755948453.260:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 894.035233][ T30] audit: type=1326 audit(1755948453.260:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 894.058593][ T30] audit: type=1326 audit(1755948453.270:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 894.293434][T12363] loop8: detected capacity change from 0 to 128 [ 894.536820][T12363] FAT-fs (loop8): Directory bread(block 32) failed [ 894.544696][T12363] FAT-fs (loop8): Directory bread(block 33) failed [ 894.551902][T12363] FAT-fs (loop8): Directory bread(block 34) failed [ 894.559169][T12363] FAT-fs (loop8): Directory bread(block 35) failed [ 894.566141][T12363] FAT-fs (loop8): Directory bread(block 36) failed [ 894.573420][T12363] FAT-fs (loop8): Directory bread(block 37) failed [ 894.580876][T12363] FAT-fs (loop8): Directory bread(block 38) failed [ 894.588044][T12363] FAT-fs (loop8): Directory bread(block 39) failed [ 894.597636][T12363] FAT-fs (loop8): Directory bread(block 40) failed [ 894.606016][T12363] FAT-fs (loop8): Directory bread(block 41) failed [ 894.811936][T12368] loop4: detected capacity change from 0 to 1024 [ 894.829419][T12368] EXT4-fs: Ignoring removed bh option [ 894.870402][T12363] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 894.879721][T12363] FAT-fs (loop8): Filesystem has been set read-only [ 895.010868][T12368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.248651][T12363] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 895.304538][T12373] syz.8.1855: attempt to access beyond end of device [ 895.304538][T12373] loop8: rw=2049, sector=4180, nr_sectors = 24 limit=128 [ 895.325034][T12373] syz.8.1855: attempt to access beyond end of device [ 895.325034][T12373] loop8: rw=2049, sector=4212, nr_sectors = 4 limit=128 [ 895.344424][T12373] buffer_io_error: 6 callbacks suppressed [ 895.344509][T12373] Buffer I/O error on dev loop8, logical block 1053, lost async page write [ 895.363478][T12373] syz.8.1855: attempt to access beyond end of device [ 895.363478][T12373] loop8: rw=2049, sector=4220, nr_sectors = 4 limit=128 [ 895.377458][T12373] Buffer I/O error on dev loop8, logical block 1055, lost async page write [ 895.387020][T12373] syz.8.1855: attempt to access beyond end of device [ 895.387020][T12373] loop8: rw=2049, sector=4224, nr_sectors = 4 limit=128 [ 895.870517][T11542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.306292][T12388] loop2: detected capacity change from 0 to 1024 [ 897.549847][T12388] EXT4-fs: Ignoring removed nobh option [ 897.884832][T12388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.972275][T12402] loop4: detected capacity change from 0 to 1024 [ 897.984493][T12402] EXT4-fs: Ignoring removed orlov option [ 898.150897][T12402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.320756][T12402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.581964][ T30] audit: type=1326 audit(1755948457.950:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 898.607050][ T30] audit: type=1326 audit(1755948457.960:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 898.630997][ T30] audit: type=1326 audit(1755948457.960:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd2f8ebe9 code=0x7ffc0000 [ 898.703954][ T7185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.389654][T12417] loop8: detected capacity change from 0 to 1024 [ 899.440000][T12417] EXT4-fs: Ignoring removed bh option [ 899.465443][T12419] syzkaller0: entered allmulticast mode [ 899.613432][T12419] syzkaller0 (unregistering): left allmulticast mode [ 899.689349][T12417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.760357][T12421] loop4: detected capacity change from 0 to 2048 [ 899.922911][T12421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.028027][ T30] audit: type=1800 audit(1755948459.390:311): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1873" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 900.526818][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.181257][T11542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.845561][T12454] loop4: detected capacity change from 0 to 512 [ 902.910164][ T30] audit: type=1326 audit(1755948462.270:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 902.932906][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.939813][ T30] audit: type=1326 audit(1755948462.290:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 902.963077][ T30] audit: type=1326 audit(1755948462.290:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 902.985844][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.107306][T12454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 903.418479][T12454] EXT4-fs (loop4): 1 truncate cleaned up [ 903.426815][T12454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.581532][T12454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.585589][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.592705][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.092908][T12504] fuse: Unknown parameter 'group_i00000000000000000000' [ 907.233964][ T30] audit: type=1326 audit(1755948466.600:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 907.257315][ T30] audit: type=1326 audit(1755948466.600:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 907.488838][ T30] audit: type=1326 audit(1755948466.680:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 907.513985][ T30] audit: type=1326 audit(1755948466.680:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 907.536160][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.544284][ T30] audit: type=1326 audit(1755948466.680:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a98d8ebe9 code=0x7ffc0000 [ 907.566500][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.802324][T12549] fuse: Unknown parameter 'group_i00000000000000000000' [ 910.898271][ T30] audit: type=1326 audit(1755948470.250:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12547 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 911.005492][ T30] audit: type=1326 audit(1755948470.310:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12547 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 911.028382][ T30] audit: type=1326 audit(1755948470.310:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12547 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671eb8ebe9 code=0x7ffc0000 [ 915.834853][T12607] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1932'. [ 916.440457][T12615] loop0: detected capacity change from 0 to 512 [ 916.618710][T12615] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1934: error while reading EA inode 32 err=-116 [ 916.678669][T12615] EXT4-fs (loop0): Remounting filesystem read-only [ 916.686260][T12615] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 916.697205][T12615] EXT4-fs (loop0): 1 orphan inode deleted [ 916.706152][T12615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.777572][T12615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.741467][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'. [ 920.030698][T12659] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1947'. [ 921.893835][ T30] audit: type=1326 audit(1755948481.240:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12678 comm="syz.8.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 922.105771][ T30] audit: type=1326 audit(1755948481.330:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12678 comm="syz.8.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 922.129832][ T30] audit: type=1326 audit(1755948481.340:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12678 comm="syz.8.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 922.154534][ T30] audit: type=1326 audit(1755948481.350:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12678 comm="syz.8.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 922.182831][ T30] audit: type=1326 audit(1755948481.350:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12678 comm="syz.8.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd258ebe9 code=0x7ffc0000 [ 923.716647][T12704] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1962'. [ 928.731237][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1974'. [ 929.158821][T12749] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1976'. [ 929.978589][T12745] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.989032][T12745] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.076146][T12760] loop2: detected capacity change from 0 to 512 [ 930.216035][T12760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 930.229673][T12760] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.391997][T12745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.433955][T12745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.162202][ T7185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 931.530922][ T4525] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.582381][ T4525] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.751628][ T4525] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.814970][ T4525] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.057204][T12792] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1990'. [ 933.863137][T12800] loop0: detected capacity change from 0 to 1024 [ 933.936532][T12800] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 934.042980][T12800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.098127][T12800] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.1994: missing EA_INODE flag [ 934.112781][T12800] EXT4-fs (loop0): Remounting filesystem read-only [ 934.691183][ T7442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.564351][T12827] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1997'. [ 941.204183][T12884] syzkaller0: entered allmulticast mode [ 941.288115][T12884] syzkaller0 (unregistering): left allmulticast mode [ 942.483500][ T1896] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 942.493244][ T1896] ===================================================== [ 942.502127][ T1896] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2b0b/0x42b0 [ 942.510918][ T1896] nci_ntf_packet+0x2b0b/0x42b0 [ 942.516324][ T1896] nci_rx_work+0x403/0x750 [ 942.521448][ T1896] process_scheduled_works+0xb8e/0x1d80 [ 942.527346][ T1896] worker_thread+0xedf/0x1590 [ 942.532600][ T1896] kthread+0xd59/0xf00 [ 942.542070][ T1896] ret_from_fork+0x1e3/0x310 [ 942.546878][ T1896] ret_from_fork_asm+0x1a/0x30 [ 942.552261][ T1896] [ 942.554807][ T1896] Uninit was stored to memory at: [ 942.560674][ T1896] nci_ntf_packet+0x1f6e/0x42b0 [ 942.565806][ T1896] nci_rx_work+0x403/0x750 [ 942.570654][ T1896] process_scheduled_works+0xb8e/0x1d80 [ 942.576541][ T1896] worker_thread+0xedf/0x1590 [ 942.581911][ T1896] kthread+0xd59/0xf00 [ 942.586199][ T1896] ret_from_fork+0x1e3/0x310 [ 942.591389][ T1896] ret_from_fork_asm+0x1a/0x30 [ 942.596392][ T1896] [ 942.598951][ T1896] Uninit was created at: [ 942.603493][ T1896] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 942.609940][ T1896] kmalloc_reserve+0x13c/0x4b0 [ 942.615023][ T1896] __alloc_skb+0x347/0x7d0 [ 942.621543][ T1896] virtual_ncidev_write+0x6b/0x430 [ 942.627968][ T1896] vfs_write+0x48a/0x15d0 [ 942.632511][ T1896] __x64_sys_write+0x1fb/0x4d0 [ 942.637488][ T1896] x64_sys_call+0x3014/0x3e20 [ 942.643804][ T1896] do_syscall_64+0xd9/0x210 [ 942.648681][ T1896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.654779][ T1896] [ 942.657225][ T1896] CPU: 1 UID: 0 PID: 1896 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT(none) [ 942.668872][ T1896] Tainted: [W]=WARN [ 942.672799][ T1896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 942.683365][ T1896] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 942.689513][ T1896] ===================================================== [ 942.696653][ T1896] Disabling lock debugging due to kernel taint [ 942.703168][ T1896] Kernel panic - not syncing: kmsan.panic set ... [ 942.710223][ T1896] CPU: 1 UID: 0 PID: 1896 Comm: kworker/u8:9 Tainted: G B W syzkaller #0 PREEMPT(none) [ 942.721784][ T1896] Tainted: [B]=BAD_PAGE, [W]=WARN [ 942.726938][ T1896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 942.737292][ T1896] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 942.743185][ T1896] Call Trace: [ 942.746637][ T1896] [ 942.749687][ T1896] __dump_stack+0x26/0x30 [ 942.754247][ T1896] dump_stack_lvl+0x53/0x270 [ 942.759182][ T1896] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 942.765235][ T1896] dump_stack+0x1e/0x25 [ 942.769651][ T1896] vpanic+0x361/0xc50 [ 942.773972][ T1896] panic+0x15d/0x160 [ 942.778167][ T1896] kmsan_report+0x31c/0x320 [ 942.782892][ T1896] ? __msan_warning+0x1b/0x30 [ 942.787770][ T1896] ? nci_ntf_packet+0x2b0b/0x42b0 [ 942.793145][ T1896] ? nci_rx_work+0x403/0x750 [ 942.797969][ T1896] ? process_scheduled_works+0xb8e/0x1d80 [ 942.803960][ T1896] ? worker_thread+0xedf/0x1590 [ 942.809165][ T1896] ? kthread+0xd59/0xf00 [ 942.813785][ T1896] ? ret_from_fork+0x1e3/0x310 [ 942.818744][ T1896] ? ret_from_fork_asm+0x1a/0x30 [ 942.824042][ T1896] ? vprintk_default+0x3f/0x50 [ 942.829114][ T1896] ? vprintk+0x36/0x50 [ 942.833512][ T1896] ? _printk+0x17e/0x1b0 [ 942.838076][ T1896] ? kmsan_get_metadata+0xfb/0x160 [ 942.843512][ T1896] __msan_warning+0x1b/0x30 [ 942.848223][ T1896] nci_ntf_packet+0x2b0b/0x42b0 [ 942.853346][ T1896] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 942.859766][ T1896] nci_rx_work+0x403/0x750 [ 942.864458][ T1896] ? __pfx_nci_rx_work+0x10/0x10 [ 942.869647][ T1896] process_scheduled_works+0xb8e/0x1d80 [ 942.875577][ T1896] worker_thread+0xedf/0x1590 [ 942.880591][ T1896] kthread+0xd59/0xf00 [ 942.884869][ T1896] ? __pfx_worker_thread+0x10/0x10 [ 942.890303][ T1896] ? __pfx_kthread+0x10/0x10 [ 942.895189][ T1896] ret_from_fork+0x1e3/0x310 [ 942.900000][ T1896] ? __pfx_kthread+0x10/0x10 [ 942.905455][ T1896] ret_from_fork_asm+0x1a/0x30 [ 942.910524][ T1896] [ 942.914003][ T1896] Kernel Offset: disabled [ 942.918424][ T1896] Rebooting in 86400 seconds..