last executing test programs: 13.717930782s ago: executing program 4 (id=3738): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES8], 0x0) r3 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0xc010}}], 0x2, 0x40000) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220f00000059d19301"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f00000001c0)={0x2, 0xffffffff, 0x402, 0x10001, 0x7}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x17, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa47acd7, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0xc}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xae}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0x0, 0x4, 0xb, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x5bf, 0x78, &(0x7f00000006c0)=""/120, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0xec, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x8, &(0x7f0000000b40)=[0x1, r6, r7], &(0x7f0000000c00)=[{0x4, 0x1, 0xf, 0x9}, {0x0, 0x1, 0xd, 0x6}, {0x4, 0x4, 0xe, 0x3}, {0x4, 0x5, 0x4}, {0x2, 0x3, 0x5, 0x9}, {0x4, 0x1, 0xf}, {0x5, 0x4, 0xa, 0x2}, {0x5, 0x2, 0x4, 0xa}], 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[], 0x50) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000180)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) 13.404367893s ago: executing program 0 (id=3739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0x6, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1}, 0x20) 12.448134127s ago: executing program 0 (id=3740): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 12.42168779s ago: executing program 3 (id=3741): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) mkdir(0x0, 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', 0x0, &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r6 = socket$packet(0x11, 0x2, 0x300) syz_socket_connect_nvme_tcp() setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x7, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x101, 0x200, 0xa61, 0x9}, 'syz1\x00', 0x4c}) close_range(r1, r5, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r7, 0x0, 0x0, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) 10.969652164s ago: executing program 2 (id=3743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="1b3d"], 0x38}}, 0x0) 10.959704035s ago: executing program 2 (id=3744): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x560f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wake_unlock', 0x600000, 0x45) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) fallocate(r5, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0xffffffe4, 0x0, 0x0, 0xfffffffffdffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x162, &(0x7f0000001200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x12c, 0x2c, 0x0, @remote, @local, {[@dstopts={0x89, 0x9, '\x00', [@pad1, @generic={0x8f, 0x42, "22d1a0a5437922bb816885df28ce765c4d65f9bb4207f2217d9d918a72b9f963cdc4682e09e3cf04c58dafbd4f72cff17da7acf9b8671a5f4a7e3749cac514a98ea7"}, @jumbo={0xc2, 0x4, 0x4}]}, @fragment={0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x68}, @fragment={0x87, 0x0, 0x7, 0x0, 0x0, 0x15, 0x64}, @srh={0x11, 0x4, 0x4, 0x2, 0x3, 0x20, 0x101, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}]}, @srh={0x2, 0xc, 0x4, 0x6, 0xf7, 0x30, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast1]}, @fragment={0x2f, 0x0, 0xf7, 0x0, 0x0, 0x18, 0x64}, @hopopts={0x2e, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x924d69fd6e571bbb}], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfff5}}}}}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000380)={0x1, 0x3ff, 0x105, 0x0, 0xe}) 9.955353054s ago: executing program 4 (id=3745): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") 9.298496269s ago: executing program 0 (id=3746): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getpriority(0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae159", 0xb3}], 0x1}}], 0x1, 0x4000001) dup(r6) 9.29752418s ago: executing program 3 (id=3747): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x44, 0x2c, 0xd27, 0xf0bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 8.897638429s ago: executing program 3 (id=3748): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) r7 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_setup(0x9, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x1, 0x5, 0xffffffffffffffff, 0x0, 0xb, 0x1000000}]) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 8.813788997s ago: executing program 1 (id=3749): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x50, 0x2c, 0xd27, 0xf0bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 8.554090413s ago: executing program 2 (id=3750): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001bc0)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x3a, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) 8.505720677s ago: executing program 1 (id=3751): write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000400}, 0x20000000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 7.292552658s ago: executing program 0 (id=3752): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES8], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0xc010}}], 0x2, 0x40000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220f00000059d19301"], 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={0x2, 0xffffffff, 0x402, 0x10001, 0x7}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x4, 0xf9, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast, {[@generic={0x44, 0x2}]}}}}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{}, &(0x7f0000000a80), &(0x7f0000000ac0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000080), &(0x7f0000000280)=r0}, 0x20) 7.178215999s ago: executing program 3 (id=3753): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000ec0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0xa65}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYRES64, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYBLOB="0000000005800000fff7000000", @ANYRES16=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r7, 0x0) 4.95110931s ago: executing program 1 (id=3754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="1b3d"], 0x38}}, 0x0) 4.669199987s ago: executing program 2 (id=3755): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x3b760b9, 0x0, 0x0, 0x0, 0x0) 4.484060356s ago: executing program 4 (id=3756): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x560f, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wake_unlock', 0x600000, 0x45) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r6, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0xffffffe4, 0x0, 0x0, 0xfffffffffdffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x182, &(0x7f0000001200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14c, 0x2c, 0x0, @remote, @local, {[@dstopts={0x89, 0x9, '\x00', [@pad1, @generic={0x8f, 0x42, "22d1a0a5437922bb816885df28ce765c4d65f9bb4207f2217d9d918a72b9f963cdc4682e09e3cf04c58dafbd4f72cff17da7acf9b8671a5f4a7e3749cac514a98ea7"}, @jumbo={0xc2, 0x4, 0x4}]}, @fragment={0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x68}, @fragment={0x87, 0x0, 0x7, 0x0, 0x0, 0x15, 0x64}, @srh={0x11, 0x4, 0x4, 0x2, 0x3, 0x20, 0x101, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}]}, @srh={0x2, 0x10, 0x4, 0x8, 0xf7, 0x30, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast1, @local, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x2f, 0x0, 0xf7, 0x0, 0x0, 0x18, 0x64}, @hopopts={0x2e, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x924d69fd6e571bbb}], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfff5}}}}}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000380)={0x1, 0x3ff, 0x105, 0x0, 0xe}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r5}, 0x94) 4.389816785s ago: executing program 3 (id=3757): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES8], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0xc010}}], 0x2, 0x40000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220f00000059d19301"], 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={0x2, 0xffffffff, 0x402, 0x10001, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x4, 0xf9, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast, {[@generic={0x44, 0x2}]}}}}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) 4.270009487s ago: executing program 1 (id=3758): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x44, 0x2c, 0xd27, 0xf0bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 4.214927333s ago: executing program 0 (id=3759): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000ec0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0xa65}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES64, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYBLOB="0000000005800000fff7000000", @ANYRES16=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r7, 0x0) 4.213508943s ago: executing program 2 (id=3760): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x560f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wake_unlock', 0x600000, 0x45) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) fallocate(r5, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0xffffffe4, 0x0, 0x0, 0xfffffffffdffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x162, &(0x7f0000001200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x12c, 0x2c, 0x0, @remote, @local, {[@dstopts={0x89, 0x9, '\x00', [@pad1, @generic={0x8f, 0x42, "22d1a0a5437922bb816885df28ce765c4d65f9bb4207f2217d9d918a72b9f963cdc4682e09e3cf04c58dafbd4f72cff17da7acf9b8671a5f4a7e3749cac514a98ea7"}, @jumbo={0xc2, 0x4, 0x4}]}, @fragment={0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x68}, @fragment={0x87, 0x0, 0x7, 0x0, 0x0, 0x15, 0x64}, @srh={0x11, 0x4, 0x4, 0x2, 0x3, 0x20, 0x101, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}]}, @srh={0x2, 0xc, 0x4, 0x6, 0xf7, 0x30, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast1]}, @fragment={0x2f, 0x0, 0xf7, 0x0, 0x0, 0x18, 0x64}, @hopopts={0x2e, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x924d69fd6e571bbb}], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfff5}}}}}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000380)={0x1, 0x3ff, 0x105, 0x0, 0xe}) 1.331816628s ago: executing program 4 (id=3761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x50, 0x2c, 0xd27, 0xf0bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 1.263782435s ago: executing program 3 (id=3762): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") 1.263210795s ago: executing program 0 (id=3763): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 1.221285089s ago: executing program 1 (id=3764): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mkdir(0x0, 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', 0x0, &(0x7f0000000840), 0x1004002, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) syz_socket_connect_nvme_tcp() setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x7, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x101, 0x200, 0xa61, 0x9}, 'syz1\x00', 0x4c}) close_range(r1, r5, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r7, 0x0, 0x0, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.201179471s ago: executing program 4 (id=3765): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 591.220002ms ago: executing program 2 (id=3766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="85c3b5c3b803763fe17a8c8907ff0b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="185377069c0000000000000000000040be11820040d8497ad8dddb36af72860a74349c2959816ce17433732d0b36f86506748b456285aebcaf", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998247856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f0b00f694c5bef739aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404c669485a2e714ec9bb31ae0f201ca2e5b9ece2b035fbe2ee8d90aa87a986a307fe4fe90b7b2a48217f79001e60692c", @ANYRESHEX=0x0], 0x2, 0x5567, &(0x7f000000c4c0)="$eJzs3M1rI+UfAPAnyb6//coPD952YBFa2IRN9wW9Vd3FF+xSfDl40jRJQ3aTTGnStPYk6FE8+J+IgifBi3+DB8/exIPiTVBmnulqrS5bk23a3c8HJt+ZZ5585/sMoeWbhATgqTWX/PpzKVwKZ0MIlRDChVLI90vFlluK4dkQwuUQQvkvW6kYfzBwKoRwLoRwKUsewjfDOCc79dnV8ZWbP73+y9ffnT5x/vOvvp/dqoFZey6E0F+P+1v9GNNOjPeK8ca4m8f+jXER44n+/eI4jXGrvZpn2Grszmvk8Xonzk/XN4dZXOs1mlnsdNfy8fVBvOBw3NnNkz/hXmMjP261V/PYHaZ57OzEurZ34t/LneEo5mkV+T7I04fRaDfG8fZ2O65n/X4em4NRMR7zpq32dhbHRSwuF5ppr5XXsTrJnT7a3ugONreTcXtj2E0Hyc1a/fla/Va1vpG22qP2jWqj37p1I5nv9LJp1VG70V/qpGmn16410/5CMt9pNqv1ejJ/u73abQySer12vXatenOh2LuavHL3naTXSuaz+FJ3sHmq2xsma+lGEp+xkCzWrr+wkFypJ28tryQrb965s7zy9nu337374vJrLxeT9pWVzC9eW1ys1q9VF+sLR2D92f/dR1z/aJL1f1wUfYD1lya7PfBwXmAAB7av/w/T7f8rQf8P7Hfc+/8wzf4/a6ke2v+f+e83+og7UP9bnrz/n6j/Par9/zFeP0xE/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8NT64eQXr+Y7c/H4fDF+sRj6f3FcCiGUQwi//4NKOLUnZ6XIc/Jf5p/8Ww3flkKeIbvG6WI7F0JYKrbf/ve47wIAAAA8ub788PKnsVuPD3OzLojDFN+GKV94f0r5SlnOuR+nlK2cPTwzpWT56/tE2J5StvzOnZlSsviW24lpZXskld3w0cU/B/MFlWIoH2o5AADAoajsCYfbhQAAAHCYPpl1AcxGKTz4EHj3C/ynYyg+2jy75xwAAABwDJVmXQAAAADw2OX9v9//AwAAgCdb/P0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uVEbiOIA/GwwkH8KinJPK7lBGSkhxxyBAtIEJZAW0gA1kFvuuUSwwh4heRek1TJeC/R9km3GRr+ZAS5vLAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06U+1mf9afPkZi+ty9ofr5JoPAAAA8NSu2szrF9Om/S6d/5BOfUrtIiLKiDhXuw9i1MocpJzqwvurR2P4HVEnHPsYp+1tRHxN2/+PXX8KAAAAcL+2q/Wsqdab3bTvAfGamkWb8v23THlFRFTTv5nSyuPuc6aw+vc9jB+Z0uoFrEmmsGbJbXj+2ihXJ22D1iHNZLKsv8S6VXbTLwAA0Kd2JXChCgEAAOAOfO97APSjOO1O9xnHzSHdEHzTagEAAAA3qOh7AAAAAEDn6vr/Fp7/98/fEgAAAODFmuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KVdtZlvV+vZpevLZ+bsD9fJNyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7Yn3sUAGEwBqCf4u8mvf9NHZSIjl2d3oNCSCilAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQM/wnhq/8DRHVU1pE+bUraqWTAlrpoQtc8KeC63zyHn9+SUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GN+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7Yt40qDAD457PPTQuIEFCGACoSAyw0cUtLRxhAEQN/AlKUOiXgUmgz0CoCZYEJZe6CYEQICRS2/g+dG6lL2TpkCBIz6M53ybV1qSnNnUt+P+n5fbYv733vfIry5V0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDaeSdeSoq4nT1MD+PytZu768tZv31Pn7m+eWsua1ncethE37z9+JOfbC9XnxyfrTz5qv5kAAAAOBzaZX0fEbfTrcWsT6bz+j8tj8lq/u+fGcZlPX9v3b+9uz5VvDVX1v+//Xrnhb2JpofzZIOurA76C/en0jmgJU68Zx96RCc/8/nvXtr5B5K8v/H8Tpqfz9a3N268283DI3VkCwA8ihNlnwVT+z8PZX2v4dwAOBw6lcK7rP/b083mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCHnY14qoxbETHX2Y8z27vry6P665u35sp25tq1zeqY2RBpRKysDvppjWuZdJevXP1kaTDoXxoZRDzwrf8eHI+Igxn5AUGMeOvDMb484p+PKS7PqGcV/y5oTUYajQZJ8fkUr3TrveoONiivvcc/ckPfkAAA+N9Ki5bV9bfTrcXstdZMxF8/3F3/v1aJY8z6/85HZ25W56rW/73aVjj55tcufDZ/+crVN1YvLJ3vn+9/+ubJ3lu9U2dPnz47n52rhfmVSPoLTacJAADAE6xbtGr9n8zcv/9/rBLHmPX/59/1vqzO1Vb/j7S/6dd0JgAAAIdRdy967pU//2iNOKLV7cYXS2trl3rDx73nJ4ePtab7iI4UrVr/t2eazgoAAACow85G6679/3OVOMbc/3/6xxd/ro7ZjoijERcjon9i+eLgXH3LmWh1/KFyPlG36ZUCAADQlKNFq+7/p/n9/8neLQ9JRLz+6jAu/9fVOPV/+72vf6rOVb3//1R9S5xIyezwfOT9bERntumMAAAAeBKNu9U7VbSs2P893Vr8+JdjH3Td/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt78DAAD//77oN4s=") bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) getresuid(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = getpid() ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000240)={0x0}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, r6, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180), 0x4) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 223.040108ms ago: executing program 1 (id=3767): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wake_unlock', 0x600000, 0x45) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) 0s ago: executing program 4 (id=3768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0xfffffff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mlockall(0x7) munlockall() setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file2/file0\x00', 0x9980) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) process_madvise(r6, &(0x7f0000000900)=[{&(0x7f0000000600)="1ec9c5ef7100713522314ae40b044d1e0535ea6e2fa074a3dc53c0daa0df0d71e33c7af7d5dab80fdff361420fb003402db2d4863ff5ecaf8fabb4b211b1132baf0b497452b9d22c02afe03f3a0067813a7c6f2e4bf6ace9a7ef5884721a4c10fca3a0c496e47bb6c37ee3642dc03a826ef7bd5ba067c96d62338490e2edef7bb85da916239bcb580e5cfe10e6b969ba6f7949acb87ea2", 0x97}, {&(0x7f00000006c0)="2f181f8b74adcd4fcf975768c92880125bc4f6331a1d51a896172ed5e7db01ab0211f0b9e55da791f8d7a218d2a226195f548e200a2ef5021c6fe4e929bc62bb56a800eb7b401500b89ca1002f7c97eae27e", 0x52}, {&(0x7f0000000740)="46386f18ca291e9cbdaf6f9d7a90cb7aebe838268be7c1de7266e27367de0f2a6dbee53d919c2fbbbca504625754ba6923075749cbf93c7abc08517e212888df", 0x40}, {&(0x7f00000007c0)="65a8446abcb3fc556c3763ba4bde81dd5845b14e13fb3b91d0e9f438118d14e606a95d419f5704ddb77084deb6572a868530048d8f56a0750bd4e152f8f56ec746e48156a532eb697a076ca2789634b6de3dca86d10dc5f874eb9c40f67231ffbd72ceaefdf7d75b9b155411f9b8823ef4d3d3bc0764c89a6d956261525cc44c3cc23af44cb3533ed98b5df6820a411425c1e2", 0x93}, {&(0x7f0000000880)="974d9682a6a8f785700cd0856e5d2f09f03c9fbb98a588f6264882c9292a6d4c596a76318916b3ef7c824176aa480a7109887137f4890817a3e75cbe80fcd9d810f71518724d59f2caad1ae76b64a884d15fd2b27742", 0x56}], 0x5, 0x16, 0x0) kernel console output (not intermixed with test programs): grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1461.470716][ T24] audit: type=1326 audit(1760984589.700:14903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1461.503896][ T24] audit: type=1326 audit(1760984589.730:14904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1461.504605][T14994] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1461.596353][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1462.047404][T15428] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1462.057130][T15428] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.622920][T14994] usb 4-1: can't read configurations, error -71 [ 1462.637755][ T24] audit: type=1326 audit(1760984589.740:14905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1462.663089][ T24] audit: type=1326 audit(1760984589.740:14906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1462.701862][ T24] audit: type=1326 audit(1760984589.760:14907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1462.783634][ T24] audit: type=1326 audit(1760984589.760:14908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1462.809066][ T24] audit: type=1326 audit(1760984589.760:14909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1462.872948][ T24] audit: type=1326 audit(1760984589.790:14910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1462.919084][ T24] audit: type=1326 audit(1760984589.790:14911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1462.962693][T15444] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1462.966122][ T24] audit: type=1326 audit(1760984589.790:14912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15434 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1462.988041][T15444] SELinux: failed to load policy [ 1463.789082][T15451] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1463.798356][T15451] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1465.122613][T15457] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1465.225998][T15457] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1465.258733][T15467] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1465.268099][T15467] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1465.624010][T14994] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1465.739799][T15457] F2FS-fs (loop0): invalid crc value [ 1465.749182][T15457] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1465.973272][T15457] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1465.991059][T15457] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1466.103031][T15485] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 1466.113608][T15485] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1466.331153][T15494] EXT4-fs error (device loop1): ext4_add_entry:2442: inode #12: comm syz.1.3335: Directory hole found for htree leaf block 0 [ 1466.469964][T15457] attempt to access beyond end of device [ 1466.469964][T15457] loop0: rw=2049, want=77968, limit=40427 [ 1466.512388][T14994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.524643][T14994] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1466.537902][T14994] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1466.548043][T14994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.556473][T15490] attempt to access beyond end of device [ 1466.556473][T15490] loop0: rw=2049, want=81920, limit=40427 [ 1466.561959][T14994] usb 4-1: config 0 descriptor?? [ 1466.725809][T15490] attempt to access beyond end of device [ 1466.725809][T15490] loop0: rw=2049, want=53248, limit=40427 [ 1466.981453][T15490] attempt to access beyond end of device [ 1466.981453][T15490] loop0: rw=2049, want=65752, limit=40427 [ 1467.053694][T14994] usb 4-1: string descriptor 0 read error: -71 [ 1467.063981][T14994] usb 4-1: USB disconnect, device number 39 [ 1467.210560][T14137] attempt to access beyond end of device [ 1467.210560][T14137] loop0: rw=1, want=77928, limit=40427 [ 1467.286294][T15500] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue [ 1467.299192][T15500] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1467.975466][T15520] EXT4-fs error (device loop0): ext4_orphan_get:1421: comm syz.0.3339: bad orphan inode 13 [ 1467.986237][T15520] ext4_test_bit(bit=12, block=4) = 1 [ 1467.991577][T15520] is_bad_inode(inode)=0 [ 1467.996016][T15520] NEXT_ORPHAN(inode)=0 [ 1468.000127][T15520] max_ino=32 [ 1468.003350][T15520] i_nlink=1 [ 1468.006762][T15520] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1468.436016][T15534] input: syz1 as /devices/virtual/input/input164 [ 1468.606635][T15532] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1468.614724][T15532] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1468.655882][T15532] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1469.957952][T15553] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1471.330497][T15565] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1471.339524][T15565] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1471.843653][ T5646] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1472.068172][T15584] netlink: 'syz.3.3358': attribute type 12 has an invalid length. [ 1472.257121][ T5646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.267728][ T5646] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1472.276938][ T5646] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1472.286175][ T5646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.304017][ T5646] usb 3-1: config 0 descriptor?? [ 1472.453501][T15588] input: syz1 as /devices/virtual/input/input165 [ 1472.888189][ T5646] usb 3-1: string descriptor 0 read error: -71 [ 1472.918490][ T5646] usb 3-1: USB disconnect, device number 62 [ 1473.050616][T15599] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1473.059751][T15599] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1473.146435][T15238] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1473.513667][T15238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.523883][T15238] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1473.532879][T15238] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1473.541976][T15238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.550821][T15238] usb 1-1: config 0 descriptor?? [ 1474.076681][T15238] usb 1-1: string descriptor 0 read error: -71 [ 1475.246653][T15616] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1475.406252][T13294] udevd[13294]: incorrect ext4 checksum on /dev/loop3 [ 1475.423010][T15238] usb 1-1: USB disconnect, device number 61 [ 1476.188619][T15616] netlink: 'syz.3.3367': attribute type 5 has an invalid length. [ 1476.523654][ T1744] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1476.988036][T15643] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3375: Invalid block bitmap block 0 in block_group 0 [ 1477.002565][T15643] __quota_error: 182 callbacks suppressed [ 1477.002575][T15643] Quota error (device loop4): write_blk: dquota write failed [ 1477.015850][T15643] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1477.025966][T15643] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.3375: Failed to acquire dquot type 0 [ 1477.038765][T15643] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.3375: Freeing blocks not in datazone - block = 0, count = 4096 [ 1477.053386][T15643] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3375: Invalid inode bitmap blk 0 in block_group 0 [ 1477.066715][T15643] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1477.075817][T14137] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1477.084672][T15643] EXT4-fs (loop4): 1 orphan inode deleted [ 1477.090446][T15643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1477.152797][T15643] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.3375: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1477.175410][T15643] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.3375: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1477.256906][T14137] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1477.969541][T15650] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3376: Invalid block bitmap block 0 in block_group 0 [ 1477.983358][T15650] Quota error (device loop1): write_blk: dquota write failed [ 1477.990814][T15650] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1478.000855][T15650] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.3376: Failed to acquire dquot type 0 [ 1478.013621][T15650] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.3376: Freeing blocks not in datazone - block = 0, count = 4096 [ 1478.027260][T15650] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3376: Invalid inode bitmap blk 0 in block_group 0 [ 1478.039998][T15650] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1478.040655][T14137] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 1478.055268][T15650] EXT4-fs (loop1): 1 orphan inode deleted [ 1478.057300][ T1744] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.062875][T15650] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1478.063218][T14137] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1478.074291][ T1744] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1478.111047][ T1744] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1478.118509][T15650] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.3376: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1478.137836][T15650] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.3376: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1478.144052][ T1744] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1478.263218][ T1744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.294215][ T1744] usb 3-1: config 0 descriptor?? [ 1479.349130][T15662] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1479.358451][T15662] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.583817][ T1744] usbhid 3-1:0.0: can't add hid device: -71 [ 1479.591803][ T1744] usbhid: probe of 3-1:0.0 failed with error -71 [ 1479.788795][ T1744] usb 3-1: USB disconnect, device number 63 [ 1480.172213][T15673] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1480.313636][ T341] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1480.345087][T15679] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3382: Invalid block bitmap block 0 in block_group 0 [ 1480.375525][T15679] Quota error (device loop3): write_blk: dquota write failed [ 1480.397172][T15679] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1480.425455][T15679] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3382: Failed to acquire dquot type 0 [ 1480.437261][T15679] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3382: Freeing blocks not in datazone - block = 0, count = 4096 [ 1480.465813][T15679] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3382: Invalid inode bitmap blk 0 in block_group 0 [ 1480.483673][ T613] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1480.501827][ T613] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 1480.522408][T15679] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1480.553595][ T341] usb 1-1: Using ep0 maxpacket: 16 [ 1480.563614][T11459] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1480.584510][T15679] EXT4-fs (loop3): 1 orphan inode deleted [ 1480.599898][T15679] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1480.673710][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.690314][ T341] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1480.709359][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.729550][ T341] usb 1-1: config 0 descriptor?? [ 1480.943692][T11459] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1480.958350][T11459] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1481.005738][T11459] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1481.014894][T11459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.043654][T15685] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1481.324433][T15694] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1481.331901][T15694] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1481.353613][T15694] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1481.388368][T15694] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1482.227308][T15706] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1482.236511][T15706] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1482.538128][T15713] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3389: Invalid block bitmap block 0 in block_group 0 [ 1482.552719][T15713] Quota error (device loop2): write_blk: dquota write failed [ 1482.560292][T15713] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1482.570460][T15713] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3389: Failed to acquire dquot type 0 [ 1482.583004][T15713] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3389: Freeing blocks not in datazone - block = 0, count = 4096 [ 1482.597425][T15713] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3389: Invalid inode bitmap blk 0 in block_group 0 [ 1482.610686][T15713] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1482.619673][ T613] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1482.628467][T11459] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1482.635959][T15713] EXT4-fs (loop2): 1 orphan inode deleted [ 1482.641764][T15713] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1482.689371][T15713] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3389: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1482.715591][T15713] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3389: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1482.755887][ T613] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 1482.773094][T11459] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input166 [ 1482.849147][T11459] usb 5-1: USB disconnect, device number 44 [ 1483.541056][T15724] input: syz1 as /devices/virtual/input/input167 [ 1483.674905][ T341] usbhid 1-1:0.0: can't add hid device: -71 [ 1483.691266][T15719] EXT4-fs (loop1): dax option not supported [ 1483.732637][ T341] usbhid: probe of 1-1:0.0 failed with error -71 [ 1483.770711][ T341] usb 1-1: USB disconnect, device number 62 [ 1484.061823][T15726] syz.1.3391[15726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1484.061911][T15726] syz.1.3391[15726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1484.076972][T11095] Bluetooth: hci0: Frame reassembly failed (-84) [ 1484.254940][ T341] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1484.889259][T15738] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1484.898750][T15738] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.874982][ T341] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1486.030375][ T341] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1486.071574][ T341] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1486.080837][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.103636][T15718] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1486.113721][ T5646] Bluetooth: hci0: command 0x1003 tx timeout [ 1486.119856][T15728] Bluetooth: hci0: sending frame failed (-49) [ 1486.123863][ T341] usb 1-1: can't set config #17, error -71 [ 1486.143702][T15744] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1486.158004][ T341] usb 1-1: USB disconnect, device number 63 [ 1486.287800][T15756] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1486.304071][T15756] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1486.311043][T15756] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1486.422110][T15759] EXT4-fs error (device loop0): ext4_orphan_get:1421: comm syz.0.3402: bad orphan inode 13 [ 1486.565821][T15756] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1486.654670][T15759] ext4_test_bit(bit=12, block=4) = 1 [ 1486.660095][T15759] is_bad_inode(inode)=0 [ 1486.698205][T15759] NEXT_ORPHAN(inode)=0 [ 1486.728927][T15759] max_ino=32 [ 1486.749837][T15759] i_nlink=1 [ 1486.785862][T15759] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1487.817629][T15773] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3403: Invalid block bitmap block 0 in block_group 0 [ 1487.832142][T15773] Quota error (device loop2): write_blk: dquota write failed [ 1487.839652][T15773] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1487.849785][T15773] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3403: Failed to acquire dquot type 0 [ 1487.861959][T15773] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3403: Freeing blocks not in datazone - block = 0, count = 4096 [ 1487.876334][T15773] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3403: Invalid inode bitmap blk 0 in block_group 0 [ 1487.889507][T15773] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1487.898653][T15773] EXT4-fs (loop2): 1 orphan inode deleted [ 1487.904460][T15773] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1488.016084][T15773] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3403: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1488.046296][T15773] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3403: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1488.089512][T14137] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1488.134559][T14137] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1488.173644][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 1488.180772][T15728] Bluetooth: hci0: sending frame failed (-49) [ 1489.424125][T15784] input: syz1 as /devices/virtual/input/input168 [ 1489.661658][T15779] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1489.671097][T15779] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.158973][ T24] audit: type=1326 audit(1760984618.390:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.3.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b710efc9 code=0x7ffc0000 [ 1490.185195][ T24] audit: type=1326 audit(1760984618.390:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.3.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b710efc9 code=0x7ffc0000 [ 1490.209017][ T24] audit: type=1326 audit(1760984618.390:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.3.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b710efc9 code=0x7ffc0000 [ 1490.232796][ T24] audit: type=1326 audit(1760984618.390:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.3.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b710efc9 code=0x7ffc0000 [ 1490.256703][ T24] audit: type=1326 audit(1760984618.390:15099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.3.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b710efc9 code=0x7ffc0000 [ 1490.280862][T14994] Bluetooth: hci0: command 0x1009 tx timeout [ 1490.343748][ T24] audit: type=1326 audit(1760984618.390:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.3.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b710efc9 code=0x7ffc0000 [ 1490.386723][ T24] audit: type=1326 audit(1760984618.390:15101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.3.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b710efc9 code=0x7ffc0000 [ 1490.941176][T15793] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1490.950166][T15793] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1492.060335][T15813] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3412: Invalid block bitmap block 0 in block_group 0 [ 1492.074497][T15813] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3412: Failed to acquire dquot type 0 [ 1492.086483][T15813] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.3412: Freeing blocks not in datazone - block = 0, count = 4096 [ 1492.100161][T15813] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3412: Invalid inode bitmap blk 0 in block_group 0 [ 1492.103843][ T613] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 1492.124278][T15813] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1492.132931][T15813] EXT4-fs (loop0): 1 orphan inode deleted [ 1492.138970][T15813] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1492.154335][T15813] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.3412: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1492.357158][ T7952] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1493.412164][T15834] SELinux: ebitmap: truncated map [ 1493.446072][T15834] SELinux: failed to load policy [ 1493.479655][T15833] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1493.493670][T15833] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1493.583670][ T7952] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.615138][ T7952] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1493.648372][ T7952] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1493.655494][ T7952] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1493.681249][ T7952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.729713][ T7952] usb 4-1: config 0 descriptor?? [ 1493.822350][T15841] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1493.831320][T15841] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1494.186255][T15848] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3420: Invalid block bitmap block 0 in block_group 0 [ 1494.201219][T15848] __quota_error: 447 callbacks suppressed [ 1494.201271][T15848] Quota error (device loop0): write_blk: dquota write failed [ 1494.214923][T15848] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1494.225556][T15848] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3420: Failed to acquire dquot type 0 [ 1494.238001][T15848] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.3420: Freeing blocks not in datazone - block = 0, count = 4096 [ 1494.252577][T15848] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3420: Invalid inode bitmap blk 0 in block_group 0 [ 1494.265749][T14137] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1494.275137][T14137] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1494.284067][T15848] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1494.404668][T15848] EXT4-fs (loop0): 1 orphan inode deleted [ 1494.516428][T15848] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1494.864004][ T7952] usbhid 4-1:0.0: can't add hid device: -71 [ 1494.900186][ T7952] usbhid: probe of 4-1:0.0 failed with error -71 [ 1494.932442][ T7952] usb 4-1: USB disconnect, device number 40 [ 1495.372295][T15861] netlink: 'syz.4.3422': attribute type 12 has an invalid length. [ 1495.872152][T15870] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1495.880146][T15870] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1495.938810][T15870] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1496.740542][T15874] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1496.749785][T15874] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.459688][T15889] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3430: Invalid block bitmap block 0 in block_group 0 [ 1500.476583][T15890] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1500.484618][T15890] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1500.492563][T15889] Quota error (device loop3): write_blk: dquota write failed [ 1500.500036][T15889] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1500.510160][T15889] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3430: Failed to acquire dquot type 0 [ 1500.524387][T15889] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3430: Freeing blocks not in datazone - block = 0, count = 4096 [ 1500.538880][T15889] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3430: Invalid inode bitmap blk 0 in block_group 0 [ 1500.552875][T15889] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1500.561902][T15889] EXT4-fs (loop3): 1 orphan inode deleted [ 1500.567696][T15889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1500.582064][T11095] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1500.849707][T15887] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3430: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1500.876239][T15887] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3430: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1501.002458][T15890] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1501.111739][T11095] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1501.150766][T15899] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1502.563595][ T324] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1502.604918][T15918] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1502.621529][T15918] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1502.638742][T15920] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1502.653926][T15920] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1502.687565][T15920] F2FS-fs (loop1): invalid crc value [ 1502.764128][T15920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1502.963848][ T324] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.023008][ T324] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1503.040058][T15920] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1503.056311][T15920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1503.152344][T15934] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1503.161592][T15934] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1503.396692][ T324] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1503.841949][ T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.133282][T15940] attempt to access beyond end of device [ 1504.133282][T15940] loop1: rw=2049, want=81920, limit=40427 [ 1504.145555][T15941] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1504.154518][T15941] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.188924][T15940] attempt to access beyond end of device [ 1504.188924][T15940] loop1: rw=2049, want=52712, limit=40427 [ 1504.273628][ T324] usb 1-1: string descriptor 0 read error: -71 [ 1504.282521][ T324] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1504.330597][ T324] usb 1-1: USB disconnect, device number 64 [ 1504.433344][T11095] attempt to access beyond end of device [ 1504.433344][T11095] loop1: rw=1, want=77928, limit=40427 [ 1505.542354][T15968] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1505.573693][T15968] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1505.645318][T15965] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1505.653879][T15965] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1505.670626][T15965] F2FS-fs (loop4): invalid crc value [ 1505.782319][T15965] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1505.991266][T15965] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1506.102824][T15965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1506.163104][T15982] EXT4-fs (loop3): Ignoring removed orlov option [ 1506.268746][T15982] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 1506.865822][T15987] attempt to access beyond end of device [ 1506.865822][T15987] loop4: rw=2049, want=81920, limit=40427 [ 1506.882346][T15987] attempt to access beyond end of device [ 1506.882346][T15987] loop4: rw=2049, want=50784, limit=40427 [ 1507.629660][T15995] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1507.638811][T15995] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.380005][T11095] attempt to access beyond end of device [ 1508.380005][T11095] loop4: rw=1, want=77928, limit=40427 [ 1508.513989][T16009] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1508.521312][T16009] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1508.615682][T16009] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1508.713675][ T341] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1509.189383][T16016] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1509.197424][T16016] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1509.269514][T16016] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1509.839099][T16022] input: syz1 as /devices/virtual/input/input170 [ 1510.653869][ T341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.664065][ T341] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1510.673123][ T341] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1510.690401][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.701810][ T341] usb 3-1: config 0 descriptor?? [ 1510.783578][ T5646] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1510.997864][T16028] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1511.020763][T16028] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1511.029122][ T341] usb 3-1: string descriptor 0 read error: -71 [ 1511.040209][ T341] usb 3-1: USB disconnect, device number 64 [ 1511.054804][T16028] F2FS-fs (loop4): invalid crc value [ 1511.061908][T16028] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1511.119247][T16033] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1511.128271][T16033] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.171011][T16028] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1511.178415][T16028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1511.186296][ T5646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.197034][ T5646] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1511.232919][ T5646] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1511.260614][ T5646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.290753][ T5646] usb 4-1: config 0 descriptor?? [ 1511.423375][T16028] attempt to access beyond end of device [ 1511.423375][T16028] loop4: rw=2049, want=78680, limit=40427 [ 1511.468775][T16041] attempt to access beyond end of device [ 1511.468775][T16041] loop4: rw=2049, want=81920, limit=40427 [ 1511.523695][T16041] attempt to access beyond end of device [ 1511.523695][T16041] loop4: rw=2049, want=51816, limit=40427 [ 1511.671920][T16045] input: syz1 as /devices/virtual/input/input171 [ 1511.679344][ T5646] usb 4-1: string descriptor 0 read error: -71 [ 1511.698199][ T5646] usb 4-1: USB disconnect, device number 41 [ 1511.772439][T14256] attempt to access beyond end of device [ 1511.772439][T14256] loop4: rw=1, want=77928, limit=40427 [ 1512.971265][T16053] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1512.980491][T16053] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1513.369997][T16064] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3466: Invalid block bitmap block 0 in block_group 0 [ 1513.384513][T16064] Quota error (device loop2): write_blk: dquota write failed [ 1513.392386][T16064] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1513.402549][T16064] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3466: Failed to acquire dquot type 0 [ 1513.414101][T16064] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3466: Freeing blocks not in datazone - block = 0, count = 4096 [ 1513.433775][T16064] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3466: Invalid inode bitmap blk 0 in block_group 0 [ 1513.483717][T16064] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1513.564531][T14256] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1513.573242][T14256] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:7: Failed to release dquot type 0 [ 1513.651835][T16064] EXT4-fs (loop2): 1 orphan inode deleted [ 1513.685858][T16064] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1513.812349][T16074] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3464: Invalid block bitmap block 0 in block_group 0 [ 1513.826735][T16074] Quota error (device loop4): write_blk: dquota write failed [ 1513.834277][T16074] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1513.844394][T16074] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.3464: Failed to acquire dquot type 0 [ 1513.856531][T16074] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.3464: Freeing blocks not in datazone - block = 0, count = 4096 [ 1513.870938][T16074] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3464: Invalid inode bitmap blk 0 in block_group 0 [ 1513.884264][T16074] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1513.893325][T16074] EXT4-fs (loop4): 1 orphan inode deleted [ 1513.899126][T16074] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1513.940224][T16074] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.3464: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1513.962689][T16074] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.3464: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1513.989729][T14256] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1514.027836][T14256] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:7: Failed to release dquot type 0 [ 1514.322295][T16071] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3465: Invalid block bitmap block 0 in block_group 0 [ 1514.393744][T16071] Quota error (device loop3): write_blk: dquota write failed [ 1514.446837][T16071] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1514.491628][T16071] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3465: Failed to acquire dquot type 0 [ 1514.544372][T16071] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3465: Freeing blocks not in datazone - block = 0, count = 4096 [ 1514.588863][T16071] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3465: Invalid inode bitmap blk 0 in block_group 0 [ 1514.603615][T14256] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1514.655806][T14256] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:7: Failed to release dquot type 0 [ 1514.683576][T15238] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1514.705844][T16071] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1514.719905][T16089] xt_bpf: check failed: parse error [ 1514.768699][T16071] EXT4-fs (loop3): 1 orphan inode deleted [ 1514.785937][T16071] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1514.923840][T16090] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1514.932823][T16090] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.083636][T15238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.099887][T15238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.120148][T15238] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1515.146549][T15238] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1515.164963][T15238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.180517][T15238] usb 1-1: config 0 descriptor?? [ 1515.284617][T16095] netlink: 'syz.1.3472': attribute type 12 has an invalid length. [ 1515.515160][ T24] audit: type=1326 audit(1760984643.750:15546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16101 comm="syz.4.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd2cefc9 code=0x7ffc0000 [ 1515.735573][T16099] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3473: Invalid block bitmap block 0 in block_group 0 [ 1515.753780][T15238] usbhid 1-1:0.0: can't add hid device: -71 [ 1515.760662][T15238] usbhid: probe of 1-1:0.0 failed with error -71 [ 1515.795343][T15238] usb 1-1: USB disconnect, device number 65 [ 1516.224186][ T341] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1516.255147][T16099] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.3473: Failed to acquire dquot type 0 [ 1516.843971][T16099] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.3473: Freeing blocks not in datazone - block = 0, count = 4096 [ 1516.873325][T16099] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3473: Invalid inode bitmap blk 0 in block_group 0 [ 1516.908354][ T613] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 1516.911495][T16099] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1516.930398][T16099] EXT4-fs (loop1): 1 orphan inode deleted [ 1516.936897][T16099] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1516.975219][T16109] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1517.312090][ T341] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.323787][ T341] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1517.338595][ T341] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1517.347707][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.400297][T16121] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1519.409337][T16121] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.463835][ T341] usb 3-1: string descriptor 0 read error: -71 [ 1519.471850][ T341] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1519.612473][ T341] usb 3-1: USB disconnect, device number 65 [ 1520.370590][T16140] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1520.375352][T16138] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1520.379597][T16140] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.388450][T16138] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.442484][T16143] EXT4-fs error (device loop2): ext4_orphan_get:1421: comm syz.2.3483: bad orphan inode 13 [ 1520.474244][T16143] ext4_test_bit(bit=12, block=4) = 1 [ 1520.485866][T16143] is_bad_inode(inode)=0 [ 1520.495277][T16143] NEXT_ORPHAN(inode)=0 [ 1520.503594][T16143] max_ino=32 [ 1520.509948][T16143] i_nlink=1 [ 1520.517211][T16143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1521.085206][T16154] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1522.431183][T16179] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1522.440211][T16179] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.674307][T16186] EXT4-fs error (device loop0): ext4_orphan_get:1421: comm syz.0.3493: bad orphan inode 13 [ 1522.693709][T16186] ext4_test_bit(bit=12, block=4) = 1 [ 1522.699036][T16186] is_bad_inode(inode)=0 [ 1522.703193][T16186] NEXT_ORPHAN(inode)=0 [ 1522.707439][T16186] max_ino=32 [ 1522.710645][T16186] i_nlink=1 [ 1522.713835][T16186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1523.120086][T16184] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1523.128278][T16184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1523.132880][T16191] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3494: Invalid block bitmap block 0 in block_group 0 [ 1523.138369][T16184] F2FS-fs (loop4): invalid crc value [ 1523.152654][T16191] __quota_error: 454 callbacks suppressed [ 1523.152666][T16191] Quota error (device loop1): write_blk: dquota write failed [ 1523.168795][T16191] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1523.168996][T16184] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1523.178784][T16191] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.3494: Failed to acquire dquot type 0 [ 1523.179390][T16191] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.3494: Freeing blocks not in datazone - block = 0, count = 4096 [ 1523.223569][T16191] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3494: Invalid inode bitmap blk 0 in block_group 0 [ 1523.236519][T16191] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1523.245583][T14137] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 1523.254507][T16191] EXT4-fs (loop1): 1 orphan inode deleted [ 1523.260491][T14137] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1523.272271][T16191] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1523.303605][T16184] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1523.310747][T16184] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1523.429718][ T5] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1523.728727][T16207] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1523.737996][T16207] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.106026][T16215] netlink: 'syz.0.3498': attribute type 12 has an invalid length. [ 1525.768740][ T24] audit: type=1326 audit(1760984654.000:15998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.4.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd2cefc9 code=0x7ffc0000 [ 1525.812499][ T24] audit: type=1326 audit(1760984654.030:15999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.4.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd2cefc9 code=0x7ffc0000 [ 1525.836244][ T24] audit: type=1326 audit(1760984654.040:16000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.4.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd2cefc9 code=0x7ffc0000 [ 1525.859959][ T24] audit: type=1326 audit(1760984654.040:16001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.4.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd2cefc9 code=0x7ffc0000 [ 1525.883644][ T24] audit: type=1326 audit(1760984654.040:16002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.4.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9bd2cefc9 code=0x7ffc0000 [ 1525.959098][ T24] audit: type=1326 audit(1760984654.040:16003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.4.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd2cefc9 code=0x7ffc0000 [ 1525.995219][ T24] audit: type=1326 audit(1760984654.040:16004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.4.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd2cefc9 code=0x7ffc0000 [ 1526.019409][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.031511][T16231] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1526.040511][T16231] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1526.924186][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1527.092708][ T5] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1527.444536][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.185324][ T5] usb 3-1: config 0 descriptor?? [ 1528.626996][ T5] usb 3-1: can't set config #0, error -71 [ 1529.074689][ T5] usb 3-1: USB disconnect, device number 66 [ 1529.153515][T16263] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3507: Invalid block bitmap block 0 in block_group 0 [ 1529.169923][T16263] __quota_error: 221 callbacks suppressed [ 1529.169950][T16263] Quota error (device loop3): write_blk: dquota write failed [ 1529.183145][T16263] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1529.193444][T16263] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3507: Failed to acquire dquot type 0 [ 1529.207599][T16263] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3507: Freeing blocks not in datazone - block = 0, count = 4096 [ 1529.223623][T16263] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3507: Invalid inode bitmap blk 0 in block_group 0 [ 1529.240812][T16263] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1529.250224][T16263] EXT4-fs (loop3): 1 orphan inode deleted [ 1529.256084][T16263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1529.335309][T16258] EXT4-fs error (device loop1): ext4_orphan_get:1421: comm syz.1.3509: bad orphan inode 13 [ 1529.346354][T16263] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3507: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1529.371792][T16263] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3507: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1530.154252][T14137] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1530.203458][T14137] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1530.341053][T16258] ext4_test_bit(bit=12, block=4) = 1 [ 1530.409236][T16262] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1530.423570][T16262] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1531.281433][T16258] is_bad_inode(inode)=0 [ 1531.715938][T16258] NEXT_ORPHAN(inode)=0 [ 1531.720044][T16258] max_ino=32 [ 1531.723243][T16258] i_nlink=1 [ 1531.726817][T16258] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1532.052609][T16278] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1532.061664][T16278] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.217803][T16312] EXT4-fs (loop0): Ignoring removed orlov option [ 1534.376053][T16312] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 1536.887537][T16342] input: syz1 as /devices/virtual/input/input173 [ 1537.133994][T16344] netlink: 'syz.3.3528': attribute type 12 has an invalid length. [ 1538.595945][T16358] netlink: 'syz.3.3532': attribute type 12 has an invalid length. [ 1540.155251][T16377] input: syz1 as /devices/virtual/input/input174 [ 1540.556387][T16378] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3538: Invalid block bitmap block 0 in block_group 0 [ 1540.570024][T16378] Quota error (device loop3): write_blk: dquota write failed [ 1540.577485][T16378] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1540.587490][T16378] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3538: Failed to acquire dquot type 0 [ 1540.599019][T16378] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3538: Freeing blocks not in datazone - block = 0, count = 4096 [ 1540.612795][T16378] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3538: Invalid inode bitmap blk 0 in block_group 0 [ 1540.625725][T16378] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1540.634681][T16378] EXT4-fs (loop3): 1 orphan inode deleted [ 1540.639311][T14137] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1540.648943][T16378] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1540.664345][T16378] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3538: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1540.674411][T14137] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1540.695685][T16370] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1540.734545][T16384] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3539: Invalid block bitmap block 0 in block_group 0 [ 1540.752335][T16370] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.763274][T16384] Quota error (device loop1): write_blk: dquota write failed [ 1540.771315][T16384] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1540.781635][T16384] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.3539: Failed to acquire dquot type 0 [ 1540.810712][T16391] netlink: 'syz.0.3540': attribute type 12 has an invalid length. [ 1540.818869][T16384] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.3539: Freeing blocks not in datazone - block = 0, count = 4096 [ 1540.850142][T16384] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3539: Invalid inode bitmap blk 0 in block_group 0 [ 1540.863932][T11095] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 1540.872464][T11095] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1540.884283][T16384] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1540.915048][T16384] EXT4-fs (loop1): 1 orphan inode deleted [ 1540.921232][T16384] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1541.872425][T16398] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1541.880373][T16398] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1541.960760][T16398] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1543.964842][T16410] input: syz1 as /devices/virtual/input/input175 [ 1544.085405][T16415] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1544.110883][T16415] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1544.118583][T16415] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1544.135593][T16415] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1544.289071][T16425] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3549: Invalid block bitmap block 0 in block_group 0 [ 1544.302944][T16425] Quota error (device loop2): write_blk: dquota write failed [ 1544.310464][T16425] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1544.320414][T16425] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3549: Failed to acquire dquot type 0 [ 1544.333009][T16425] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3549: Freeing blocks not in datazone - block = 0, count = 4096 [ 1544.346813][T16425] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3549: Invalid inode bitmap blk 0 in block_group 0 [ 1544.359561][ T1744] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1544.368176][T16425] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1544.376897][T16425] EXT4-fs (loop2): 1 orphan inode deleted [ 1544.382635][T16425] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1544.398158][T16425] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3549: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1544.417371][T16425] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3549: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1544.437367][T11095] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1544.446100][T11095] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1544.923760][ T1744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.934710][ T1744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.945788][ T1744] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1544.958906][ T1744] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1544.968098][ T1744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.022800][ T1744] usb 1-1: config 0 descriptor?? [ 1545.773712][ T1744] usbhid 1-1:0.0: can't add hid device: -71 [ 1545.779878][ T1744] usbhid: probe of 1-1:0.0 failed with error -71 [ 1545.788249][ T1744] usb 1-1: USB disconnect, device number 66 [ 1545.918499][T16444] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3553: Invalid block bitmap block 0 in block_group 0 [ 1545.932261][T16444] Quota error (device loop2): write_blk: dquota write failed [ 1545.943472][T16444] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1545.953807][T16444] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3553: Failed to acquire dquot type 0 [ 1545.965288][T16444] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3553: Freeing blocks not in datazone - block = 0, count = 4096 [ 1545.978999][T16444] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3553: Invalid inode bitmap blk 0 in block_group 0 [ 1545.991956][T16444] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1545.999749][T11095] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1546.000973][T16444] EXT4-fs (loop2): 1 orphan inode deleted [ 1546.009892][T11095] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1546.033902][T16444] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1546.182253][T16444] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3553: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1546.314703][T16439] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1546.323715][T16439] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1546.664520][T16450] EXT4-fs (loop3): Ignoring removed orlov option [ 1546.773704][T16450] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 1547.389283][T16469] netlink: 'syz.2.3558': attribute type 12 has an invalid length. [ 1547.400793][T16463] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3557: Invalid block bitmap block 0 in block_group 0 [ 1547.415665][T16463] Quota error (device loop0): write_blk: dquota write failed [ 1547.423080][T16463] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1547.433542][T16463] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3557: Failed to acquire dquot type 0 [ 1547.445004][T16463] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.3557: Freeing blocks not in datazone - block = 0, count = 4096 [ 1547.569930][T16463] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3557: Invalid inode bitmap blk 0 in block_group 0 [ 1547.583552][T16463] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1547.592894][T16463] EXT4-fs (loop0): 1 orphan inode deleted [ 1547.598711][T16463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1547.614041][T14137] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1547.800607][T14137] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1548.790397][T16465] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1548.813828][T16465] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1548.833823][T16479] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1548.863787][T16479] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1548.892600][T16479] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1550.713125][T16493] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1550.907428][T16502] EXT4-fs error (device loop3): ext4_orphan_get:1421: comm syz.3.3565: bad orphan inode 13 [ 1550.918963][T16504] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1550.927930][T16504] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1550.978102][T16502] ext4_test_bit(bit=12, block=4) = 1 [ 1550.983567][T16502] is_bad_inode(inode)=0 [ 1550.987782][T16502] NEXT_ORPHAN(inode)=0 [ 1550.991884][T16502] max_ino=32 [ 1550.995195][T16502] i_nlink=1 [ 1550.998405][T16502] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1553.679243][T16528] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3569: Invalid block bitmap block 0 in block_group 0 [ 1553.726930][T16528] Quota error (device loop2): write_blk: dquota write failed [ 1553.750565][T16528] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1553.782252][T16528] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3569: Failed to acquire dquot type 0 [ 1553.829581][T16528] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3569: Freeing blocks not in datazone - block = 0, count = 4096 [ 1553.862724][T16528] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3569: Invalid inode bitmap blk 0 in block_group 0 [ 1553.875860][T14137] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1553.887547][T14137] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1553.918710][T16528] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1554.012747][T16528] EXT4-fs (loop2): 1 orphan inode deleted [ 1554.044589][T16528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1554.151815][T16544] EXT4-fs (loop4): dax option not supported [ 1554.158271][T16528] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3569: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1554.517578][T16551] syz.4.3575[16551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1554.518558][T16551] syz.4.3575[16551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1554.594105][T11095] Bluetooth: hci0: Frame reassembly failed (-84) [ 1554.642912][T11095] Bluetooth: hci0: Frame reassembly failed (-84) [ 1554.740633][T16553] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1555.038069][T16560] input: syz1 as /devices/virtual/input/input176 [ 1556.757170][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 1556.763239][T15728] Bluetooth: hci0: sending frame failed (-49) [ 1556.974098][T16562] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1556.985887][T16562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1556.995924][T16562] F2FS-fs (loop3): invalid crc value [ 1557.034426][T16562] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1557.064421][T16574] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3580: Invalid block bitmap block 0 in block_group 0 [ 1557.081513][T16562] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1557.081972][T16574] Quota error (device loop1): write_blk: dquota write failed [ 1557.096026][T16562] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1557.096944][T16574] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1557.161407][T16574] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.3580: Failed to acquire dquot type 0 [ 1557.234229][T16574] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.3580: Freeing blocks not in datazone - block = 0, count = 4096 [ 1557.293816][T16574] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3580: Invalid inode bitmap blk 0 in block_group 0 [ 1557.313697][T11095] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 1557.333348][T16574] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1557.347087][T11095] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1557.370793][T16584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1557.379784][T16584] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1557.437266][T16574] EXT4-fs (loop1): 1 orphan inode deleted [ 1557.478812][T16574] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1557.528575][T16562] attempt to access beyond end of device [ 1557.528575][T16562] loop3: rw=2049, want=81920, limit=40427 [ 1557.574523][T16574] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.3580: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1557.595677][T16562] attempt to access beyond end of device [ 1557.595677][T16562] loop3: rw=2049, want=53248, limit=40427 [ 1557.611491][T16562] attempt to access beyond end of device [ 1557.611491][T16562] loop3: rw=2049, want=58728, limit=40427 [ 1557.644518][T16574] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.3580: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1557.942840][T16596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1557.952447][T16596] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1558.813599][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 1558.822127][T15728] Bluetooth: hci0: sending frame failed (-49) [ 1559.205215][T16612] input: syz1 as /devices/virtual/input/input177 [ 1559.365151][T16607] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3586: Invalid block bitmap block 0 in block_group 0 [ 1559.378890][T16607] Quota error (device loop0): write_blk: dquota write failed [ 1559.386611][T16607] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1559.396807][T16607] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3586: Failed to acquire dquot type 0 [ 1559.408419][T16607] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.3586: Freeing blocks not in datazone - block = 0, count = 4096 [ 1559.422103][T16607] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3586: Invalid inode bitmap blk 0 in block_group 0 [ 1559.434978][T14137] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1559.443561][T14137] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1559.455405][T16607] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1559.464297][T16607] EXT4-fs (loop0): 1 orphan inode deleted [ 1559.470100][T16607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1559.483608][ T3026] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1560.223611][ T3026] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.234262][ T3026] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1560.247437][ T3026] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1560.257220][ T3026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.306642][T16627] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3591: Invalid block bitmap block 0 in block_group 0 [ 1560.320389][T16627] Quota error (device loop3): write_blk: dquota write failed [ 1560.328108][T16627] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1560.338593][T16627] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3591: Failed to acquire dquot type 0 [ 1560.350663][T16627] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3591: Freeing blocks not in datazone - block = 0, count = 4096 [ 1560.364939][T16627] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3591: Invalid inode bitmap blk 0 in block_group 0 [ 1560.378055][T16627] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1560.386745][T14137] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1560.395425][T14137] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1560.395434][T16627] EXT4-fs (loop3): 1 orphan inode deleted [ 1560.395457][T16627] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1560.447978][T16627] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3591: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1560.468554][T16627] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3591: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1560.565289][ T24] audit: type=1326 audit(1760984688.800:16226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1560.610970][ T24] audit: type=1326 audit(1760984688.820:16227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1560.710853][ T24] audit: type=1326 audit(1760984688.820:16228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1560.753826][ T24] audit: type=1326 audit(1760984688.820:16229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1560.784707][T16633] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1560.823600][ T3026] usb 3-1: string descriptor 0 read error: -71 [ 1560.833231][ T3026] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1560.946379][ T1036] Bluetooth: hci0: command 0x1009 tx timeout [ 1564.144235][ T3026] usb 3-1: USB disconnect, device number 67 [ 1564.178462][T16644] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1564.187480][T16644] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1564.697133][T16649] input: syz1 as /devices/virtual/input/input179 [ 1565.114860][T16647] SELinux: ebitmap: truncated map [ 1565.171358][T16647] SELinux: failed to load policy [ 1565.845544][T16664] input: syz1 as /devices/virtual/input/input180 [ 1566.274504][T16668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1566.283556][T16668] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1566.407166][T16674] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 1566.438452][T16674] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1566.634208][T16686] EXT4-fs error (device loop4): ext4_add_entry:2442: inode #12: comm syz.4.3601: Directory hole found for htree leaf block 0 [ 1567.646463][ T3026] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1567.739312][T16692] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3605: Invalid block bitmap block 0 in block_group 0 [ 1567.754364][T16692] __quota_error: 223 callbacks suppressed [ 1567.754384][T16692] Quota error (device loop3): write_blk: dquota write failed [ 1567.767578][T16692] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1567.777678][T16692] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3605: Failed to acquire dquot type 0 [ 1567.790858][T16692] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3605: Freeing blocks not in datazone - block = 0, count = 4096 [ 1567.805099][T16692] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3605: Invalid inode bitmap blk 0 in block_group 0 [ 1567.819871][T16692] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1567.828828][T11095] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1567.838524][T16692] EXT4-fs (loop3): 1 orphan inode deleted [ 1567.844495][T16692] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1567.912136][T16692] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3605: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1567.938337][T16692] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.3605: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1567.997158][T11095] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1568.434758][T16696] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1568.533616][ T3026] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1568.556048][ T3026] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1568.567468][ T3026] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1568.579633][ T3026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.603874][T16690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1568.703185][T16707] input: syz1 as /devices/virtual/input/input182 [ 1568.995554][ T1036] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1569.773715][ T3026] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1569.785876][ T3026] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input181 [ 1569.934269][T16719] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3612: Invalid block bitmap block 0 in block_group 0 [ 1569.948512][T16719] Quota error (device loop2): write_blk: dquota write failed [ 1569.956002][T16719] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1569.966120][T16719] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3612: Failed to acquire dquot type 0 [ 1569.978239][T16719] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3612: Freeing blocks not in datazone - block = 0, count = 4096 [ 1569.992318][T16719] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3612: Invalid inode bitmap blk 0 in block_group 0 [ 1570.005551][T16719] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1570.014613][T16719] EXT4-fs (loop2): 1 orphan inode deleted [ 1570.020366][T16719] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1570.080761][T16719] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3612: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1570.105098][T16719] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3612: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1570.139063][ T49] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1570.163785][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 1570.175770][T16714] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1570.185184][T16714] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1570.858547][T16727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1570.867556][T16727] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1571.101796][ T1036] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.112036][ T1036] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1571.125040][ T1036] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1571.134123][ T1036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.723805][ T1036] usb 5-1: string descriptor 0 read error: -71 [ 1571.732402][ T1036] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1571.814081][ T1036] usb 5-1: USB disconnect, device number 45 [ 1572.018167][T16739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1572.027583][T16739] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1572.095040][ T324] usb 1-1: USB disconnect, device number 67 [ 1572.103542][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1574.831046][T16761] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1574.838700][T16761] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1574.853674][T16761] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1575.068531][T16761] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1575.323156][T16767] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3621: Invalid block bitmap block 0 in block_group 0 [ 1575.337417][T16767] Quota error (device loop2): write_blk: dquota write failed [ 1575.344911][T16767] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1575.354995][T16767] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3621: Failed to acquire dquot type 0 [ 1575.367029][T16767] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3621: Freeing blocks not in datazone - block = 0, count = 4096 [ 1575.381093][T16767] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3621: Invalid inode bitmap blk 0 in block_group 0 [ 1575.394352][T16767] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1575.403216][T11095] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1575.412007][T16767] EXT4-fs (loop2): 1 orphan inode deleted [ 1575.417803][T16767] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1575.549486][T11095] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1576.073585][ T297] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1576.633999][ T297] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.675209][ T297] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1576.750337][ T297] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1576.827595][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.907313][ T297] usb 2-1: config 0 descriptor?? [ 1577.623639][ T297] usb 2-1: string descriptor 0 read error: -71 [ 1577.630507][ T297] usb 2-1: USB disconnect, device number 48 [ 1577.659915][T16788] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1577.693662][T16788] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1577.783173][T16800] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1577.814582][T16799] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1577.831131][T16799] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1577.842290][T16800] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1577.882534][T16800] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1577.913605][ T324] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1578.244098][T16808] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1578.251595][T16808] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1578.264134][T16808] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1578.293627][ T324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.306914][ T324] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1578.316152][ T324] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1578.325256][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.340616][ T324] usb 3-1: config 0 descriptor?? [ 1578.823862][ T297] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1578.916661][T16816] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3632: Invalid block bitmap block 0 in block_group 0 [ 1578.930945][T16816] Quota error (device loop3): write_blk: dquota write failed [ 1578.938476][T16816] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1578.948605][T16816] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3632: Failed to acquire dquot type 0 [ 1578.969556][T16816] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3632: Freeing blocks not in datazone - block = 0, count = 4096 [ 1578.984994][T16816] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3632: Invalid inode bitmap blk 0 in block_group 0 [ 1578.998232][T16816] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1579.007366][ T49] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 1579.017542][T16816] EXT4-fs (loop3): 1 orphan inode deleted [ 1579.023322][T16816] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1579.219292][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 1579.873616][ T324] usb 3-1: string descriptor 0 read error: -71 [ 1579.880375][ T324] usb 3-1: USB disconnect, device number 68 [ 1579.913647][ T297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.923959][ T297] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1579.932918][ T297] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1579.944234][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.952723][ T297] usb 1-1: config 0 descriptor?? [ 1579.976722][T16823] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3634: Invalid block bitmap block 0 in block_group 0 [ 1579.990355][T16823] Quota error (device loop4): write_blk: dquota write failed [ 1579.997811][T16823] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1580.007789][T16823] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.3634: Failed to acquire dquot type 0 [ 1580.019519][T16823] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.3634: Freeing blocks not in datazone - block = 0, count = 4096 [ 1580.033125][T16823] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3634: Invalid inode bitmap blk 0 in block_group 0 [ 1580.049031][ T24] audit: type=1326 audit(1760984708.280:16453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.082438][T11095] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1580.091099][T16823] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1580.099828][T16823] EXT4-fs (loop4): 1 orphan inode deleted [ 1580.105595][T16823] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1580.124324][T16823] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.3634: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1580.182476][T11095] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1580.333353][T16823] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.3634: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1580.418428][ T24] audit: type=1326 audit(1760984708.310:16454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.442665][ T24] audit: type=1326 audit(1760984708.310:16455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.466819][ T24] audit: type=1326 audit(1760984708.310:16456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.490635][ T24] audit: type=1326 audit(1760984708.310:16457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.514532][ T24] audit: type=1326 audit(1760984708.310:16458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.538307][ T24] audit: type=1326 audit(1760984708.310:16459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.562127][ T24] audit: type=1326 audit(1760984708.310:16460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.585873][ T24] audit: type=1326 audit(1760984708.310:16461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.611114][ T297] usb 1-1: string descriptor 0 read error: -71 [ 1580.611232][ T24] audit: type=1326 audit(1760984708.310:16462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1580.620943][ T297] usb 1-1: USB disconnect, device number 68 [ 1580.648551][ T24] audit: type=1326 audit(1760984708.310:16463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16829 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1582.953139][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1585.280876][T16854] input: syz1 as /devices/virtual/input/input184 [ 1585.421562][T16852] SELinux: ebitmap: truncated map [ 1585.455609][T16852] SELinux: failed to load policy [ 1585.513596][ T1744] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1585.536189][ T24] kauditd_printk_skb: 138 callbacks suppressed [ 1585.536204][ T24] audit: type=1326 audit(1760984713.770:16602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1585.575411][T16861] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1585.596081][T16861] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1585.618279][ T24] audit: type=1326 audit(1760984713.770:16603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1585.699332][ T24] audit: type=1326 audit(1760984713.770:16604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1586.105505][T16861] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1586.131089][ T24] audit: type=1326 audit(1760984713.770:16605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1586.188993][ T24] audit: type=1326 audit(1760984713.770:16606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1586.191015][T16869] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3645: Invalid block bitmap block 0 in block_group 0 [ 1586.213485][ T24] audit: type=1326 audit(1760984713.770:16607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1586.250376][ T24] audit: type=1326 audit(1760984713.770:16608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1586.274678][ T24] audit: type=1326 audit(1760984713.770:16609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1586.307794][T16869] Quota error (device loop3): write_blk: dquota write failed [ 1586.313848][ T1744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.333570][ T1744] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1586.338127][ T24] audit: type=1326 audit(1760984713.770:16610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f88f56d5fc9 code=0x7ffc0000 [ 1586.342934][ T1744] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1586.375386][T16869] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.3645: Failed to acquire dquot type 0 [ 1586.400195][ T1744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.449343][T16869] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.3645: Freeing blocks not in datazone - block = 0, count = 4096 [ 1586.471774][T16869] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3645: Invalid inode bitmap blk 0 in block_group 0 [ 1586.493693][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 1586.535643][ T1744] usb 3-1: config 0 descriptor?? [ 1586.549200][T16869] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 1586.615842][T16869] EXT4-fs (loop3): 1 orphan inode deleted [ 1587.025452][T16869] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1587.766999][ T1744] usb 3-1: string descriptor 0 read error: -71 [ 1587.794922][ T1744] usb 3-1: USB disconnect, device number 69 [ 1588.007167][T16887] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3650: Invalid block bitmap block 0 in block_group 0 [ 1588.020825][T16887] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.3650: Failed to acquire dquot type 0 [ 1588.032485][T16887] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.3650: Freeing blocks not in datazone - block = 0, count = 4096 [ 1588.046330][T16887] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3650: Invalid inode bitmap blk 0 in block_group 0 [ 1588.059237][T16887] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1588.067870][T14137] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1588.067967][T16887] EXT4-fs (loop1): 1 orphan inode deleted [ 1588.085072][T16887] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1588.107630][T16887] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.3650: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1588.127507][T16887] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.3650: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1588.954735][T16899] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1588.964172][T16899] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1589.941396][T16915] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1589.952186][T16915] SELinux: failed to load policy [ 1591.814931][T16929] input: syz1 as /devices/virtual/input/input185 [ 1591.822953][T14994] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1591.904767][T16932] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1591.922091][T16932] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.534265][T16946] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1592.553719][T14994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.573624][T16946] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.584405][T14994] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1592.600576][T14994] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1592.624023][T14994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.668067][T14994] usb 2-1: config 0 descriptor?? [ 1593.254965][T16955] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1593.264376][T16955] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.133560][T14994] usb 2-1: string descriptor 0 read error: -71 [ 1594.141716][T14994] usb 2-1: USB disconnect, device number 49 [ 1594.690909][T16971] xt_bpf: check failed: parse error [ 1594.791455][T16968] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1594.800591][T16968] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.924578][T16979] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1594.934292][T16979] SELinux: failed to load policy [ 1595.156317][T16982] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1595.172375][T16982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1595.285473][T16982] F2FS-fs (loop2): invalid crc value [ 1595.316688][T16982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1595.403406][T16982] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1595.410739][T16982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1595.482588][T16993] netlink: 'syz.0.3675': attribute type 12 has an invalid length. [ 1595.567872][T16982] attempt to access beyond end of device [ 1595.567872][T16982] loop2: rw=2049, want=79976, limit=40427 [ 1595.580685][T17001] input: syz1 as /devices/virtual/input/input186 [ 1595.586699][T16996] attempt to access beyond end of device [ 1595.586699][T16996] loop2: rw=2049, want=81920, limit=40427 [ 1595.607867][T16996] attempt to access beyond end of device [ 1595.607867][T16996] loop2: rw=2049, want=53248, limit=40427 [ 1595.624095][T16996] attempt to access beyond end of device [ 1595.624095][T16996] loop2: rw=2049, want=59208, limit=40427 [ 1595.810236][T11095] attempt to access beyond end of device [ 1595.810236][T11095] loop2: rw=1, want=77928, limit=40427 [ 1598.145461][T17009] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3680: Invalid block bitmap block 0 in block_group 0 [ 1598.159243][T17009] __quota_error: 576 callbacks suppressed [ 1598.159253][T17009] Quota error (device loop4): write_blk: dquota write failed [ 1598.189889][T17009] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1598.199945][T17009] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.3680: Failed to acquire dquot type 0 [ 1598.212197][T17009] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.3680: Freeing blocks not in datazone - block = 0, count = 4096 [ 1598.230876][T17009] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3680: Invalid inode bitmap blk 0 in block_group 0 [ 1598.243684][T17009] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1598.252351][T17009] EXT4-fs (loop4): 1 orphan inode deleted [ 1598.258224][T17009] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1598.326929][T14137] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1598.377986][T17018] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3681: Invalid block bitmap block 0 in block_group 0 [ 1598.391713][T17018] Quota error (device loop0): write_blk: dquota write failed [ 1598.399152][T17018] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1598.409117][T17018] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3681: Failed to acquire dquot type 0 [ 1598.481968][T17018] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.3681: Freeing blocks not in datazone - block = 0, count = 4096 [ 1598.496185][T17018] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3681: Invalid inode bitmap blk 0 in block_group 0 [ 1598.508943][T17018] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1598.517592][T17018] EXT4-fs (loop0): 1 orphan inode deleted [ 1598.523346][T17018] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1598.542458][T17018] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.3681: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1598.561964][T17018] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.3681: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1598.590565][T14137] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1598.764822][T14137] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1598.773634][T14137] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 1598.932423][T17025] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1600.776303][T17031] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1600.785280][T17031] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.904573][T17048] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1600.911966][T17048] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1600.922877][T17048] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 1600.955134][T17036] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1600.974337][T17036] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.365075][T17059] netlink: 'syz.0.3689': attribute type 12 has an invalid length. [ 1602.307652][T17070] input: syz1 as /devices/virtual/input/input187 [ 1602.682084][ T359] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1603.213595][ T359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.229718][ T359] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1603.305398][ T359] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1603.349202][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.385458][ T359] usb 4-1: config 0 descriptor?? [ 1603.480822][T17078] EXT4-fs (loop0): Ignoring removed orlov option [ 1603.512839][T17078] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 1603.793586][ T359] usb 4-1: string descriptor 0 read error: -71 [ 1603.802772][T17087] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3694: Invalid block bitmap block 0 in block_group 0 [ 1603.816805][ T359] usb 4-1: USB disconnect, device number 42 [ 1603.833843][T17087] Quota error (device loop1): write_blk: dquota write failed [ 1603.872744][T17087] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1603.904706][T17087] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.3694: Failed to acquire dquot type 0 [ 1603.939533][T17087] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.3694: Freeing blocks not in datazone - block = 0, count = 4096 [ 1603.994666][T17087] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3694: Invalid inode bitmap blk 0 in block_group 0 [ 1604.013604][ T49] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 1604.027002][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 1604.043779][T17087] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1604.067584][T17087] EXT4-fs (loop1): 1 orphan inode deleted [ 1604.086378][T17087] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1605.713205][T17107] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3699: Invalid block bitmap block 0 in block_group 0 [ 1605.728073][T17107] Quota error (device loop4): write_blk: dquota write failed [ 1605.735579][T17107] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1605.745703][T17107] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.3699: Failed to acquire dquot type 0 [ 1605.759442][T17107] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.3699: Freeing blocks not in datazone - block = 0, count = 4096 [ 1605.773597][T17107] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3699: Invalid inode bitmap blk 0 in block_group 0 [ 1605.787063][T17107] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1605.796146][T14256] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1605.804830][T17107] EXT4-fs (loop4): 1 orphan inode deleted [ 1605.810616][T17107] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1605.955342][T17104] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1605.982750][T14256] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:7: Failed to release dquot type 0 [ 1606.506486][T17115] xt_bpf: check failed: parse error [ 1608.318752][T17130] input: syz1 as /devices/virtual/input/input188 [ 1608.665913][T17127] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3702: Invalid block bitmap block 0 in block_group 0 [ 1608.680334][T17127] Quota error (device loop4): write_blk: dquota write failed [ 1608.687964][T17127] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1608.698018][T17127] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.3702: Failed to acquire dquot type 0 [ 1608.710035][T17127] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.3702: Freeing blocks not in datazone - block = 0, count = 4096 [ 1608.723759][T17127] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3702: Invalid inode bitmap blk 0 in block_group 0 [ 1608.723817][T14256] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1608.736545][T17127] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1608.753970][T17127] EXT4-fs (loop4): 1 orphan inode deleted [ 1608.759721][T17127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1608.777306][T17137] input: syz1 as /devices/virtual/input/input189 [ 1608.841980][T14256] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:7: Failed to release dquot type 0 [ 1610.164695][T17149] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3710: Invalid block bitmap block 0 in block_group 0 [ 1610.178943][T17149] Quota error (device loop0): write_blk: dquota write failed [ 1610.186455][T17149] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1610.196549][T17149] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3710: Failed to acquire dquot type 0 [ 1610.208742][T17149] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.3710: Freeing blocks not in datazone - block = 0, count = 4096 [ 1610.222888][T17149] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3710: Invalid inode bitmap blk 0 in block_group 0 [ 1610.236155][T17149] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1610.245033][T14256] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1610.253693][T17149] EXT4-fs (loop0): 1 orphan inode deleted [ 1610.259463][T17149] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1610.368270][T14256] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:7: Failed to release dquot type 0 [ 1612.217041][T17161] input: syz1 as /devices/virtual/input/input190 [ 1613.453366][T17160] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1613.481151][T17160] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1613.533888][T17160] F2FS-fs (loop0): invalid crc value [ 1613.615212][T17160] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1614.863611][ T20] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1614.917054][T17190] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1614.926390][T17190] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.144100][T17160] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1615.151322][T17160] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1615.448404][T17202] input: syz1 as /devices/virtual/input/input191 [ 1615.683594][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.694652][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.704741][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1615.717970][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1615.763317][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.781278][ T20] usb 5-1: config 0 descriptor?? [ 1615.821246][T17206] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1615.833136][T16849] udevd[16849]: incorrect ext4 checksum on /dev/loop1 [ 1615.848842][T16849] udevd[16849]: incorrect ext4 checksum on /dev/loop1 [ 1617.753800][T17226] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1617.763128][T17226] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.191440][T17237] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1619.344665][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 1619.352164][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 1619.362309][ T20] usb 5-1: USB disconnect, device number 46 [ 1619.815982][T17247] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1620.561551][ T20] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1621.737600][T17267] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3740: Invalid block bitmap block 0 in block_group 0 [ 1621.752084][T17267] Quota error (device loop0): write_blk: dquota write failed [ 1621.759582][T17267] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1621.769687][T17267] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3740: Failed to acquire dquot type 0 [ 1621.781915][T17267] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.3740: Freeing blocks not in datazone - block = 0, count = 4096 [ 1621.796255][T17267] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3740: Invalid inode bitmap blk 0 in block_group 0 [ 1621.809447][T17267] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1621.818486][T17267] EXT4-fs (loop0): 1 orphan inode deleted [ 1621.824268][T17267] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1621.882427][T11095] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1621.912561][T11095] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1622.558754][T17279] input: syz1 as /devices/virtual/input/input192 [ 1623.806724][ T20] usb 5-1: device descriptor read/all, error -71 [ 1623.899756][T17278] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1623.909109][T17278] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1624.026620][T17292] input: syz1 as /devices/virtual/input/input193 [ 1624.111725][ T24] audit: type=1326 audit(1760984752.340:17182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1624.322748][ T24] audit: type=1326 audit(1760984752.460:17183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1624.347541][ T24] audit: type=1326 audit(1760984752.460:17184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1624.372551][ T24] audit: type=1326 audit(1760984752.460:17185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1624.403245][T17290] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3745: Invalid block bitmap block 0 in block_group 0 [ 1624.417957][T17290] Quota error (device loop4): write_blk: dquota write failed [ 1624.419132][ T24] audit: type=1326 audit(1760984752.460:17186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17293 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb75c98fc9 code=0x7ffc0000 [ 1624.425545][T17290] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1624.425591][T17290] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.3745: Failed to acquire dquot type 0 [ 1624.470737][T17290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.3745: Freeing blocks not in datazone - block = 0, count = 4096 [ 1624.484336][T17290] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3745: Invalid inode bitmap blk 0 in block_group 0 [ 1624.553652][T17290] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1624.569142][T17290] EXT4-fs (loop4): 1 orphan inode deleted [ 1624.575067][T17290] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1624.598215][T11095] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1625.284661][T17300] EXT4-fs (loop3): Ignoring removed orlov option [ 1625.753854][T17300] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 1625.908930][T17309] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,data_err=ignore,,errors=continue [ 1626.645829][ T1744] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1628.688138][T17325] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3755: Invalid block bitmap block 0 in block_group 0 [ 1628.701848][T17325] __quota_error: 224 callbacks suppressed [ 1628.701860][T17325] Quota error (device loop2): write_blk: dquota write failed [ 1628.715066][T17325] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1628.725025][T17325] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.3755: Failed to acquire dquot type 0 [ 1628.733396][ T1744] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.738545][T17325] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.3755: Freeing blocks not in datazone - block = 0, count = 4096 [ 1628.746952][ T1744] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1628.760602][T17325] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3755: Invalid inode bitmap blk 0 in block_group 0 [ 1628.769271][ T1744] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1628.782207][T14256] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1628.791074][ T1744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.810223][ T1744] usb 1-1: config 0 descriptor?? [ 1628.818698][T17325] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 1628.827945][T17325] EXT4-fs (loop2): 1 orphan inode deleted [ 1628.832389][T14256] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:7: Failed to release dquot type 0 [ 1628.833733][T17325] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1628.886924][T17325] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.3755: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1628.913796][ T1744] usb 1-1: string descriptor 0 read error: -71 [ 1628.927990][ T1744] usb 1-1: USB disconnect, device number 69 [ 1631.878727][T17344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1631.887733][T17344] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1632.227432][T17368] input: syz1 as /devices/virtual/input/input194 [ 1632.595034][T17367] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3765: Invalid block bitmap block 0 in block_group 0 [ 1632.608672][T17367] Quota error (device loop4): write_blk: dquota write failed [ 1632.616100][T17367] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1632.626045][T17367] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.3765: Failed to acquire dquot type 0 [ 1632.637464][T17367] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.3765: Freeing blocks not in datazone - block = 0, count = 4096 [ 1632.651070][T17367] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3765: Invalid inode bitmap blk 0 in block_group 0 [ 1632.665105][T11095] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 1632.681283][T17367] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 1632.689976][T17367] EXT4-fs (loop4): 1 orphan inode deleted [ 1632.695748][T17367] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1632.907228][T11095] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 1633.262998][T17364] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3763: Invalid block bitmap block 0 in block_group 0 [ 1633.303009][T17365] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1633.331112][T17365] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1633.350720][T17364] Quota error (device loop0): write_blk: dquota write failed [ 1633.367809][T17364] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1633.391938][T17364] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3763: Failed to acquire dquot type 0 [ 1633.407491][T17375] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1633.418927][T17375] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.425454][T17365] ================================================================== [ 1633.437534][T17365] BUG: KASAN: use-after-free in __ext4_iget+0x36d/0x40e0 [ 1633.444563][T17365] Read of size 8 at addr ffff88812dba38a8 by task syz.3.3762/17365 [ 1633.452441][T17365] [ 1633.454777][T17365] CPU: 0 PID: 17365 Comm: syz.3.3762 Tainted: G W syzkaller #0 [ 1633.463630][T17365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1633.473687][T17365] Call Trace: [ 1633.477041][T17365] __dump_stack+0x21/0x24 [ 1633.481363][T17365] dump_stack_lvl+0x169/0x1d8 [ 1633.486039][T17365] ? show_regs_print_info+0x18/0x18 [ 1633.491235][T17365] ? thaw_kernel_threads+0x220/0x220 [ 1633.496564][T17365] ? _raw_spin_lock+0x8e/0xe0 [ 1633.501242][T17365] print_address_description+0x7f/0x2c0 [ 1633.506784][T17365] ? __ext4_iget+0x36d/0x40e0 [ 1633.511505][T17365] kasan_report+0xe2/0x130 [ 1633.515920][T17365] ? __ext4_iget+0x36d/0x40e0 [ 1633.520598][T17365] __asan_report_load8_noabort+0x14/0x20 [ 1633.526223][T17365] __ext4_iget+0x36d/0x40e0 [ 1633.530734][T17365] ? idr_replace+0x190/0x190 [ 1633.535320][T17365] ? __kasan_check_write+0x14/0x20 [ 1633.540468][T17365] ? _raw_write_lock+0x8e/0xe0 [ 1633.545225][T17365] ? _raw_write_trylock+0x140/0x140 [ 1633.550429][T17365] ? __proc_create+0x564/0x8d0 [ 1633.555189][T17365] ? __kasan_check_write+0x14/0x20 [ 1633.560298][T17365] ? ext4_get_projid+0x140/0x140 [ 1633.565229][T17365] ? _raw_write_unlock+0x2b/0x60 [ 1633.570159][T17365] ? proc_register+0x34d/0x4e0 [ 1633.574965][T17365] ext4_enable_quotas+0x33b/0x6d0 [ 1633.579985][T17365] ext4_fill_super+0x82a9/0x8b60 [ 1633.584918][T17365] ? ext4_mount+0x40/0x40 [ 1633.589290][T17365] ? set_blocksize+0x1fe/0x3c0 [ 1633.594064][T17365] ? sb_set_blocksize+0xaa/0xf0 [ 1633.599025][T17365] mount_bdev+0x28b/0x3a0 [ 1633.603346][T17365] ? ext4_mount+0x40/0x40 [ 1633.607669][T17365] ext4_mount+0x34/0x40 [ 1633.611823][T17365] legacy_get_tree+0xed/0x190 [ 1633.616495][T17365] ? ext4_chksum+0x160/0x160 [ 1633.621144][T17365] vfs_get_tree+0x89/0x260 [ 1633.625600][T17365] do_new_mount+0x25a/0xa20 [ 1633.630105][T17365] path_mount+0x572/0xc80 [ 1633.634431][T17365] __se_sys_mount+0x318/0x380 [ 1633.639106][T17365] ? __x64_sys_mount+0xd0/0xd0 [ 1633.643932][T17365] ? debug_smp_processor_id+0x17/0x20 [ 1633.649363][T17365] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1633.655428][T17365] __x64_sys_mount+0xbf/0xd0 [ 1633.660013][T17365] do_syscall_64+0x31/0x40 [ 1633.664434][T17365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1633.670354][T17365] RIP: 0033:0x7fc0b711076a [ 1633.674789][T17365] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1633.694567][T17365] RSP: 002b:00007fc0b5b34e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1633.702977][T17365] RAX: ffffffffffffffda RBX: 00007fc0b5b34ef0 RCX: 00007fc0b711076a [ 1633.710954][T17365] RDX: 0000200000000100 RSI: 0000200000000280 RDI: 00007fc0b5b34eb0 [ 1633.718922][T17365] RBP: 0000200000000100 R08: 00007fc0b5b34ef0 R09: 0000000000000000 [ 1633.726934][T17365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000280 [ 1633.734899][T17365] R13: 00007fc0b5b34eb0 R14: 0000000000000baf R15: 0000200000000180 [ 1633.742869][T17365] [ 1633.745196][T17365] Allocated by task 6072: [ 1633.749533][T17365] __kasan_slab_alloc+0xbd/0xf0 [ 1633.754495][T17365] slab_post_alloc_hook+0x5d/0x2f0 [ 1633.759601][T17365] kmem_cache_alloc+0x165/0x2e0 [ 1633.764524][T17365] f2fs_alloc_inode+0x26/0x410 [ 1633.769310][T17365] iget_locked+0x146/0x7d0 [ 1633.773749][T17365] f2fs_iget+0x55/0x4ed0 [ 1633.778014][T17365] f2fs_fill_super+0x45ba/0x6c70 [ 1633.782949][T17365] mount_bdev+0x28b/0x3a0 [ 1633.787275][T17365] f2fs_mount+0x34/0x40 [ 1633.791429][T17365] legacy_get_tree+0xed/0x190 [ 1633.796099][T17365] vfs_get_tree+0x89/0x260 [ 1633.800519][T17365] do_new_mount+0x25a/0xa20 [ 1633.805034][T17365] path_mount+0x572/0xc80 [ 1633.809374][T17365] __se_sys_mount+0x318/0x380 [ 1633.814048][T17365] __x64_sys_mount+0xbf/0xd0 [ 1633.818635][T17365] do_syscall_64+0x31/0x40 [ 1633.823045][T17365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1633.828924][T17365] [ 1633.831357][T17365] Last potentially related work creation: [ 1633.837077][T17365] kasan_save_stack+0x3a/0x60 [ 1633.841748][T17365] __kasan_record_aux_stack+0xd2/0x100 [ 1633.847199][T17365] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1633.853068][T17365] call_rcu+0x10e/0x1050 [ 1633.857305][T17365] evict+0x857/0x910 [ 1633.861191][T17365] iput+0x638/0x7c0 [ 1633.864995][T17365] f2fs_put_super+0x649/0xc00 [ 1633.869670][T17365] generic_shutdown_super+0x149/0x320 [ 1633.875040][T17365] kill_block_super+0x7f/0xf0 [ 1633.879711][T17365] kill_f2fs_super+0x2e7/0x390 [ 1633.884472][T17365] deactivate_locked_super+0xa0/0x100 [ 1633.889839][T17365] deactivate_super+0xaf/0xe0 [ 1633.894512][T17365] cleanup_mnt+0x446/0x500 [ 1633.898938][T17365] __cleanup_mnt+0x19/0x20 [ 1633.903400][T17365] task_work_run+0x127/0x190 [ 1633.907982][T17365] exit_to_user_mode_loop+0xcb/0xe0 [ 1633.913606][T17365] exit_to_user_mode_prepare+0x76/0xa0 [ 1633.919056][T17365] syscall_exit_to_user_mode+0x1d/0x40 [ 1633.924511][T17365] do_syscall_64+0x3d/0x40 [ 1633.928926][T17365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1633.934803][T17365] [ 1633.937129][T17365] The buggy address belongs to the object at ffff88812dba3380 [ 1633.937129][T17365] which belongs to the cache f2fs_inode_cache of size 1520 [ 1633.951705][T17365] The buggy address is located 1320 bytes inside of [ 1633.951705][T17365] 1520-byte region [ffff88812dba3380, ffff88812dba3970) [ 1633.965143][T17365] The buggy address belongs to the page: [ 1633.970775][T17365] page:ffffea0004b6e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812dba5a20 pfn:0x12dba0 [ 1633.982329][T17365] head:ffffea0004b6e800 order:3 compound_mapcount:0 compound_pincount:0 [ 1633.990645][T17365] flags: 0x4000000000010200(slab|head) [ 1633.996101][T17365] raw: 4000000000010200 ffffea000469f400 0000000500000005 ffff8881029c7800 [ 1634.004686][T17365] raw: ffff88812dba5a20 0000000080130001 00000001ffffffff 0000000000000000 [ 1634.013260][T17365] page dumped because: kasan: bad access detected [ 1634.019661][T17365] page_owner tracks the page as allocated [ 1634.025382][T17365] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5999, ts 514683864765, free_ts 512710153052 [ 1634.046989][T17365] prep_new_page+0x179/0x180 [ 1634.051573][T17365] get_page_from_freelist+0x2235/0x23d0 [ 1634.057113][T17365] __alloc_pages_nodemask+0x268/0x5f0 [ 1634.062478][T17365] new_slab+0x84/0x3f0 [ 1634.066545][T17365] ___slab_alloc+0x2a6/0x450 [ 1634.071124][T17365] __slab_alloc+0x63/0xa0 [ 1634.075447][T17365] kmem_cache_alloc+0x1af/0x2e0 [ 1634.080293][T17365] f2fs_alloc_inode+0x26/0x410 [ 1634.085054][T17365] iget_locked+0x146/0x7d0 [ 1634.089465][T17365] f2fs_iget+0x55/0x4ed0 [ 1634.093704][T17365] f2fs_fill_super+0x468e/0x6c70 [ 1634.098657][T17365] mount_bdev+0x28b/0x3a0 [ 1634.102978][T17365] f2fs_mount+0x34/0x40 [ 1634.107132][T17365] legacy_get_tree+0xed/0x190 [ 1634.111802][T17365] vfs_get_tree+0x89/0x260 [ 1634.116210][T17365] do_new_mount+0x25a/0xa20 [ 1634.120706][T17365] page last free stack trace: [ 1634.125373][T17365] __free_pages_ok+0x7fc/0x820 [ 1634.130130][T17365] __free_pages+0xdd/0x380 [ 1634.134534][T17365] __free_slab+0xcf/0x190 [ 1634.138858][T17365] unfreeze_partials+0x15f/0x190 [ 1634.143786][T17365] put_cpu_partial+0xc1/0x180 [ 1634.148461][T17365] __slab_free+0x2c9/0x3a0 [ 1634.152870][T17365] ___cache_free+0x111/0x130 [ 1634.157449][T17365] qlink_free+0x50/0x90 [ 1634.161860][T17365] qlist_free_all+0x5f/0xb0 [ 1634.166361][T17365] kasan_quarantine_reduce+0x14a/0x160 [ 1634.171810][T17365] __kasan_slab_alloc+0x2f/0xf0 [ 1634.176656][T17365] slab_post_alloc_hook+0x5d/0x2f0 [ 1634.181759][T17365] kmem_cache_alloc+0x165/0x2e0 [ 1634.186684][T17365] shmem_alloc_inode+0x1a/0x30 [ 1634.191443][T17365] new_inode_pseudo+0x62/0x210 [ 1634.196199][T17365] new_inode+0x28/0x1e0 [ 1634.200433][T17365] [ 1634.202760][T17365] Memory state around the buggy address: [ 1634.208401][T17365] ffff88812dba3780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1634.216458][T17365] ffff88812dba3800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1634.224622][T17365] >ffff88812dba3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1634.232766][T17365] ^ [ 1634.238123][T17365] ffff88812dba3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1634.246185][T17365] ffff88812dba3980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 1634.254236][T17365] ================================================================== [ 1634.262299][T17365] Disabling lock debugging due to kernel taint [ 1634.281660][T17364] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.3763: Freeing blocks not in datazone - block = 0, count = 4096 [ 1634.285430][ T24] audit: type=1400 audit(1760984762.520:17410): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1634.295666][T17364] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3763: Invalid inode bitmap blk 0 in block_group 0 [ 1634.329621][ T613] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 1634.338592][ T613] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 1634.394015][T17364] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 1634.408101][ T24] audit: type=1400 audit(1760984762.550:17411): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.453912][T17364] EXT4-fs (loop0): 1 orphan inode deleted [ 1634.459774][T17365] EXT4-fs warning (device loop3): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 1634.469086][T17373] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1634.474950][T17364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 1634.495801][ T24] audit: type=1400 audit(1760984762.550:17412): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.495966][T17373] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1634.517638][ T24] audit: type=1400 audit(1760984762.550:17413): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.548294][ T24] audit: type=1400 audit(1760984762.550:17414): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1634.568855][T17365] EXT4-fs (loop3): mount failed [ 1634.575235][T17373] F2FS-fs (loop2): invalid crc value [ 1634.583521][ T24] audit: type=1400 audit(1760984762.550:17415): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1634.607616][T17373] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1634.635658][ T24] audit: type=1400 audit(1760984762.550:17416): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1634.753523][T17373] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1634.770631][T17373] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1634.996115][T17391] attempt to access beyond end of device [ 1634.996115][T17391] loop2: rw=2049, want=80888, limit=40427 [ 1635.021501][T17391] attempt to access beyond end of device [ 1635.021501][T17391] loop2: rw=2049, want=81920, limit=40427 [ 1635.052542][T17391] attempt to access beyond end of device [ 1635.052542][T17391] loop2: rw=2049, want=53248, limit=40427 [ 1635.078501][T17391] attempt to access beyond end of device [ 1635.078501][T17391] loop2: rw=2049, want=58616, limit=40427 [ 1635.198492][T11095] attempt to access beyond end of device [ 1635.198492][T11095] loop2: rw=1, want=77928, limit=40427