last executing test programs: 24m13.502857528s ago: executing program 3 (id=1687): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="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", 0xfa, 0x40040, &(0x7f0000000040)={0x11, 0x1a, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) 24m13.429413538s ago: executing program 3 (id=1689): syz_emit_ethernet(0x52, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e", 0xb, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 24m11.531247654s ago: executing program 3 (id=1697): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e73", 0xc, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 24m10.370069469s ago: executing program 3 (id=1699): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="4bf0156949f57919e513aee6058d125f7894eeeb8c13b8b71f211ca92a0ba747ad851bf81931c42daeeb6f4118334eced692a20ed3a671bb461fca4067c930196520dc6e2e548fc6512e5b2376a562924ca7adc35805e61db49b7d491c6e21181e38318d8f78b34e616fd70c735565c57ff9bce09d42fcb901758e2f7977a6c8b28561a776c78244f31f60bd29da86484ca476fedcb4a60ebcb90081ef7d40ed7e8b85097c4a913c7692446b53fef6dd333d1af280fc157f22597835fc5dd46bfd1c6f8d8965b9860c185e0f99bb412c105e154f624feaef76562c7a015571c40f9c24ff31236cf85cd5aca63bd4bc708dc8f5012b075e75f255", 0xfa, 0x40040, &(0x7f0000000040)={0x11, 0x1a, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) 24m10.075590492s ago: executing program 3 (id=1700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x4000800) r1 = io_uring_setup(0x1379, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0x121}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'batadv_slave_0\x00', {0x2, 0x4e24, @empty}}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) 24m9.903654414s ago: executing program 3 (id=1701): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfd, 0x7ed005f9418ea329}, 0xc) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) r3 = syz_usb_connect$cdc_ncm(0x0, 0x138, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x126, 0x2, 0x1, 0xf, 0x90, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'Z'}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xf, 0x8dd}, {0x6, 0x24, 0x1a, 0xb, 0x12}, [@obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0xba, 0x24, 0x13, 0x9, "88fe3b166cb6b6d110035ee61c3171cbe25e79eae5501ea3c9641180f385d7f69c4a6be234e9e85967e494ef3dce36ede493a09cc5e88f7e7ed272eb57013a478b2b609a18f0c4ae6f5742b7c94d061e0e19f3df23f2f9480a9d7d56929f3b5fbfa3196caeb3a1b1c05f4560d96eaf65f5a35b037bc43d646aca4431f119425c24ef3495abaac65966455e3f6ce738ad7ad7da2588aa69a3c261b81a026ba63bcb62162c01c680e990e0cdece10289a7b7b13dfee3e1"}, @obex={0x5, 0x24, 0x15, 0x100}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xee, 0x81, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x8, 0xc}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x4, 0x1, 0x0, 0x9}, 0x4f, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) write$char_usb(r1, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000280)=0x5) syz_usb_disconnect(r4) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x4c040, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r6) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) 23m54.738107384s ago: executing program 32 (id=1701): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfd, 0x7ed005f9418ea329}, 0xc) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) r3 = syz_usb_connect$cdc_ncm(0x0, 0x138, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x126, 0x2, 0x1, 0xf, 0x90, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'Z'}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xf, 0x8dd}, {0x6, 0x24, 0x1a, 0xb, 0x12}, [@obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0xba, 0x24, 0x13, 0x9, "88fe3b166cb6b6d110035ee61c3171cbe25e79eae5501ea3c9641180f385d7f69c4a6be234e9e85967e494ef3dce36ede493a09cc5e88f7e7ed272eb57013a478b2b609a18f0c4ae6f5742b7c94d061e0e19f3df23f2f9480a9d7d56929f3b5fbfa3196caeb3a1b1c05f4560d96eaf65f5a35b037bc43d646aca4431f119425c24ef3495abaac65966455e3f6ce738ad7ad7da2588aa69a3c261b81a026ba63bcb62162c01c680e990e0cdece10289a7b7b13dfee3e1"}, @obex={0x5, 0x24, 0x15, 0x100}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xee, 0x81, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x8, 0xc}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x4, 0x1, 0x0, 0x9}, 0x4f, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) write$char_usb(r1, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000280)=0x5) syz_usb_disconnect(r4) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x4c040, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r6) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) 26.390230747s ago: executing program 2 (id=5134): prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x1, 0x6214, &(0x7f0000006640)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="140000005204000003000000060007001100000000"], 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) sched_setscheduler(0x0, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) 21.684294078s ago: executing program 2 (id=5138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={0xffffffffffffffff, r0}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x11) close_range(r7, r7, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000181200"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 20.662614711s ago: executing program 4 (id=5141): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[], 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x8, 0x80, 0xf8, 0x6, 0xf7, 0x6d, 0x40, 0x6, 0x7, 0x80, 0x6, 0x7}, 0xe) ioctl$sock_netdev_private(r3, 0x8943, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c462402fab7ff7f00000000000002000300fffeffffdf0200000000000040000000000000000303000000000000000000000a0038000100040004000d0003000000008000000000000000000000070000000000000008000000000040ecc25eeb000000"], 0x78) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="00ea5bd69d713e222cd60cd11db90800000000000000ea4152adefefb2fcccba61cbfd569fa19db9f8c2d61957d809"], 0x1, 0x221, &(0x7f0000000000)="$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") r5 = syz_open_dev$video(0x0, 0xa7, 0x4000) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0xa, @pix={0x0, 0x0, 0x3132564e, 0x4}}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x242) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) getpeername$l2tp(r3, &(0x7f0000000380)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(rfc4106(rfc7539esp(cbc-cast5-avx,sha256-arm64)))\x00'}, 0x58) 19.21735734s ago: executing program 0 (id=5143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x24048004) shmget(0x1, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r4, &(0x7f0000000200)=@ll={0x27, 0x1b, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x40d, 0x14, 0x4, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r5, 0x1, 0xf0bd28, 0x10000000, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'cram\x00\x00\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x10) 18.598512688s ago: executing program 1 (id=5144): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[], 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x8, 0x80, 0xf8, 0x6, 0xf7, 0x6d, 0x40, 0x6, 0x7, 0x80, 0x6, 0x7}, 0xe) ioctl$sock_netdev_private(r3, 0x8943, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c462402fab7ff7f00000000000002000300fffeffffdf0200000000000040000000000000000303000000000000000000000a0038000100040004000d0003000000008000000000000000000000070000000000000008000000000040ecc25eeb000000"], 0x78) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="00ea5bd69d713e222cd60cd11db90800000000000000ea4152adefefb2fcccba61cbfd569fa19db9f8c2d61957d809"], 0x1, 0x221, &(0x7f0000000000)="$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") r5 = syz_open_dev$video(0x0, 0xa7, 0x4000) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0xa, @pix={0x0, 0x0, 0x3132564e, 0x4}}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x242) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) getpeername$l2tp(r3, &(0x7f0000000380)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(rfc4106(rfc7539esp(cbc-cast5-avx,sha256-arm64)))\x00'}, 0x58) 17.71926588s ago: executing program 2 (id=5145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000040)="f3ed65dbd371e240204864279a5a6a8f5bee1965e7ca473e53b2186fa3ac", &(0x7f0000000440)=""/4096, &(0x7f0000000280)="f0d9ae4e054f8be9cc9c64e9ab05397925a6d405b8e34c209b36f80c7896d9274e8c8d53a6567797ce27325b8bde1b011f67478058ee24967afced84f01a16668e417d05bd9f3b6fc272789ddc425a56d3f2aa94fcd22f0eb544efeef8487aba80b790920102e59e06ef78a449e024e916ee13172d1dba", &(0x7f0000001440)="dd939aff8df0b78d7879ca12e79f520a05fb81ad1647c15af38057147d32181aaf5fed3e4dfd36fa742c94c93dd63d39674da8f402c195cf6355734184712ff403edcbd0675e283e3a02c4e4eb29e4ec6318baea9b2971efb9ab2bc9d57ad5c0fd29b877a066ed005208639718d753207fe191beb781229f94b65a9edd13617346bd5ba224caf23fa5ae2c30587b17bec902b7a1deb946925231c423df4e633fbe199cde1ff9213389b03b626492", 0x3, r0}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}]}, 0x24}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r6, 0x0, 0x0, 0x2400c001, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000200)=0x8) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffd4, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) 16.517697505s ago: executing program 4 (id=5147): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0) 16.507139505s ago: executing program 2 (id=5148): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 16.375872897s ago: executing program 0 (id=5149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$eJzs3U9sHNd9B/DfGy3FpdxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRNi3+EWV9Prb43Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cvHU6fSwWwEA7KfLo189dcb9HwAeK1f9/z8AAAAAAAAAAAAAABx0KYp4MlLMXl5N49X7jvqldt/tO2PDI5tXG0hVzUNV+fJX/fSZs+e+9MLQ+W5eak9/QP3d9tl4bfTqxcbLM7dm5ybn5ycnGmPT7eszE5Pb3sNO6290ojoBjVuv3564cWO+ceb5s/d8fGfw/f4njg1eGHr25DPdsmPDIyOj60XqveVrD9yQjq1meByOIk5Giue+99PUiogidn4u6vs79hsNVJ04UXVibHik6shUuzW9UH54pXsiiohGT6Vm9xxtPhZR69vXPmytGbFYNr9s8Imye6OzrbnWtanJxpXW3EJ7oT0zfSV1Wlv2pxFFnE8RSxGx0n//7vqiiFqk+M7R1XQtIg51z8MXq4nBW7ej2MM+bkPZzkZfxFLxCIzZAdYfRbwaKX72zvG4nq8z1bXmCxGvlvmDiLfKfCkilV+McxHvbfI94tFUiyL+shz/C6tporoedK8rl77W+Mr0jZmest3ryke8P9x3pXhI94eBDbk/7rs2Ha1+HpRrUz2KaFVX/NX04L/ZAQAAAAAAAAAAAAAAAGC3DUQRn4kUr/zHn1TziqOal370wtAfDv5q75zxpz9kP2XZ5yNisdjenNzDeWLglXQlpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989npaid03x9vTNxtXWtanOqrDdtX+7a6avra2tNVInmznHcy7mXMq5nHMlZxS5fs5mzvGcizmXci7nXMkZh3L9nM2c4zkXcy7lXM65kjNquX7OZs7xnIs5l3Iu51zJGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jdWU6SIaEaMRyeX+x926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzbvbahGRqn87jpc/zkXzcJmfjOZQmS9F82LOVpW15rceQvvZmb5UxI8jRX/97bsDnse/r/Pu7tcg3vrm+rvP1jp5qPvh4Pv9Txw7emFo5Dee3up12qwBJy61p2/faYwNj4yM9myu5aN/smfbYD5usTtdJyLm33jz9dbU1OTcg78ovwIPUr0c4Z0ffT9fpNqD9dSLR/RF1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xY072ub9v7axXr7/l/f0ze7/T/ZsezH/bqSvFlFfuDXbdyyiPv/Gmyfbt1o3J29OTp87derLQ0NfPnuq73BE/UZ7arLn1a6cLgAAAAAAAAAAAAAAAID9k4r4/UjR+vFqakTEnWq+1uCFoWdPPnMoDlXzre6Zt/3a6NWLjZdnbs3OTc7PT040xqbb12cmJrd7uHo13WtseGRPOvOhBva4/QP1l2dm35hr3/zjhU0/P1K/eG1+Ya51ffOPYyCKiGbvlhNVg8eGR6pGT7Vb01XVK5tOpv/o+lIR/xUprp9rpM/nbXn+/8YZ/vfM/1/cuKM9mv//iZ5t5TFTKuLnkeJ3/urp+HzVziNx3znL5f4uUpw4/7lcLg6X5bpt6DxXoDMzsCz7f5Hin35xb9nufMgn18ue3vaJfUSU4380Unz/L74bv5m33fv8h83H/8jGHe3R+D/Vs+3IPc8r2HHXyeN/MlK89OTb8Vt52wc9/6P77I3jufDd53Ps0fh/qmfbYD7ub+9O1wEAAAAAAAAAAB5pfamIv48UPxyppRfytu38/b+JjTvao7//9emebRO7s17Rh77Y8UkFAAAAgAOiLxXxk0hxc+Htu3Oo753/3TP/8/fW538Opw2fVn/O92vVcwN288//eg3m447vvNsAAAAAAAAAAAAAAAAAAABwoKRUxAt5PfXxaj7/xJbrqS9Hilf+57lcLh0ry3XXgR+sftYvz0yfvDg1NXO9tdC6NjXZGJ1tXZ8s6z4VKVb/9nO5blGtr95db76zxvv6WuxzkWLkH7plO2uxd9cmf2q97Omy7CcixX//471lu+tYf2q97Jmy7N9Eiq//y+Zlj62XPVuW/W6k+NHXG92yR8qy3eejfnq97PPXZ4o9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97a+nuXP68/n9fz9vKW9/sWe9/gzvVOv+D1fr/W71+kPX/q+cKLG51VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWL28mpa7i/fd9Qvtadv3xkbHtm82kCqah6qype/6qfPnD33pReGznfzg+vvts/Ea6NXLzZenrk1Ozc5Pz850Ribbl+fmZjc9h52Wn+jE9UJaNx6/fbEjRvzjTPPn73n4zuD7/c/cWzwwtCzJ5/plh0bHhkZ7SlT63vgo98nbbH9cBTx15Hiue/9NP2wP6KInZ+L+747u9iPbRioOnGi6sTY8EjVkal2a3qh/PBK90QUEY2eSs3uOdqHsdiRZsRi2fyywSfK7o3OtuZa16YmG1dacwvthfbM9JXUaW3Zn0YUcT5FLEXESv/9u+uLIl6PFN85upr+tT/iUPc8fPHy6FdPndm6HcUe9nEbynY2+iKWikdgzA6w/ijinyPFz945Hv/WH1GLzq/4QsSrZf4g4q3ojHcqvxjnIt7b5HvEo6kWRfx/Of4XVtM7/flSXV1XLn2t8ZXpGzM9ZbvXlV2/P+yvgX092gG/NtWjiB9VV/zV9O/+uwYAAAAAAAAAAAAAAAA4QIr49Ujx4rvHUzU/+O6c4vb0zcbV1rWpzrS+7ty/7pzptbW1tUbqZDPneM7FnEs5l3Ou5Iwi18/ZLLO+tjae3y/mXMq5nHMlZxzK9XM2c47nXMy5lHM550rOqOX6OZs5x3Mu5lzKuZxzJec+z2cHAAAAAAAAAAAAAAAAAAAeE0X1T4pvf2M1rfV31pcej04uWw/0Y++XAQAA//8acfcO") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x24048004) shmget(0x1, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r4, &(0x7f0000000200)=@ll={0x27, 0x1b, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x40d, 0x14, 0x4, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r5, 0x1, 0xf0bd28, 0x10000000, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'cram\x00\x00\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x10) 16.273770468s ago: executing program 5 (id=5150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@dax_always}, {@nomblk_io_submit}]}, 0x3, 0x574, &(0x7f00000003c0)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x0, 0x0, 0x8001}]) clock_gettime(0x0, &(0x7f0000000080)) io_pgetevents(0x0, 0x6, 0x0, &(0x7f0000000340), &(0x7f0000000180)={0x0, 0x989680}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_getevents(0x0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0) 15.122449993s ago: executing program 5 (id=5151): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x4, 0x7, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fdd9df25"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4c800) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={0x0}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 15.121460653s ago: executing program 4 (id=5152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$eJzs3M1vFVUfB/Dv3L7w+jzlecQ3BKmCUEVbWxQ1ISTsXBBd6MJtQ0tDKKC0JkKIgcSFWxP9A3Qvf4JRE19WrgxbNbpQEmKgCxbG1MztveW29PYF2l5sP59kyjkzU86ZOf3N3HvyywmwbnWXP4pka5Ifk3RNVWee0D31z8SNi8fLrcjk5Bt/FtXzbt64eLx+av33tpQ/KklPJal8UOSxOdodO3/h1ODo6PC5Wr1v/PTbfWPnLzx38vTgyPDI8Jn+g/2HDr304ssD/ct2ra/+MPHbZ+2vbUxy5taRgc1lf7fWjjVex3LpTvfMe9lg33I31mIPNpSL9oXPn2x2Y1hVbUnK4eqoxn9X2nJ78Lry3c8t7RywoiZLG5oevjQJrGFFZtYraVVPgNVVf9GX33/rW5p/HmCNub576gvgzdrczsT0PEh7KlOFd/Z989WM7/fLqTvJW8de31VuWaF5GAAAAID17MujSZ5NDnc1zP9VVfLQ9Fmd1fLDSR5J8miSHUk1r2dnkl1JHk+yu55PtLDp7I/Z5985/1O5dg+XxwKuH00ON+R2TTSMf822tlrtP2UlHcWJk6PDzyf5b5KedGwo682ztJom+mysF+rzf+VWtl+fC6z141r7rPnoocHxwbu+YGa4fjnZ0T7X+BfTmUDlCD6R5MnF/IffVjPqRrZf+Wt61ysfPnC12endC44/K2ny02T/nPF/O26L+fMz+6rPg776U+FO339y6PNm7Rv/1irjf/P847+taMzXHVt6G19v/+WnZscWHv+5n/+dxZvVDnbW9r03OD5+rj/pLI7duX9g6X1eq+r3o36/yvHv2TP3+///td8pb+ieJHuTPFXLXd5fffcnTyd5JsmBedq8NPLr382Oif/WKsd/aEnxv/TCH5c/2tus/cXF/wvVzvTU9vj8t7DFDlCr+wkAAAAAAADA8qhU18ArKr3T5Uqlt3dqDb/t2VwZPTs2fuDE2XfPDE2tlbctHZV6pldXQz5of7V8uz4wq34wyf+SfNy2qVrvPX52dKjVFw/r3JYm8V/6va3VvQNW3CLWa02yacX7Aay+xcV/I6s3w1qx9PgH1orFxb9VQWEt8v6H9Uv8w/ol/mH9Ev+wfs2O//evHjty64udV1rUHWC1dLS6A0CL3Mu6fgoKd1+o/wWeGpys5ZnfJx379xc2LeZmFsX8T4BWPZEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7i//BAAA//+sAMBz") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@dax_always}, {@nomblk_io_submit}]}, 0x3, 0x574, &(0x7f00000003c0)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x0, 0x0, 0x8001}]) clock_gettime(0x0, &(0x7f0000000080)) io_pgetevents(0x0, 0x6, 0x0, &(0x7f0000000340), &(0x7f0000000180)={0x0, 0x989680}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_getevents(0x0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0) 14.909955797s ago: executing program 0 (id=5153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={0xffffffffffffffff, r0}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000140)=0x11) close_range(r6, r6, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x24, 0x0, &(0x7f0000000180)) 14.307238204s ago: executing program 1 (id=5154): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x7c5f8f2f92ff25d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0xffffffd3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50}, 0x50) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000003c0)={[{@nossd_spread}, {@nodatacow}, {@subvol={'subvol', 0x3d, 'autodefrag'}}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x6b, 0x39, 0x65, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") 14.281759174s ago: executing program 4 (id=5155): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffdd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x1a, 0x0, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x800000, 0x4) r7 = socket$netlink(0x10, 0x3, 0x13) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebaeb51382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYRES32=r12, @ANYBLOB="2c6f6a7b9b91266e996219bc6993e5d9807f594414ca8d973fc4153ac7cd351074a8ee6f7b5ceadd623b7cc607a216cc15de2edf435b7c76c787e9d0870e13361f00d2e76a48a6"], 0x1c}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.988706248s ago: executing program 5 (id=5156): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0) 12.219053041s ago: executing program 0 (id=5157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={0xffffffffffffffff, r0}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x11) close_range(r7, r7, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000181200"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11.110672776s ago: executing program 0 (id=5158): prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x1, 0x6214, &(0x7f0000006640)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="140000005204000003000000060007001100000000"], 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80088c4) ftruncate(0xffffffffffffffff, 0x2000009) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) 9.966920751s ago: executing program 5 (id=5159): prctl$PR_CAPBSET_READ(0x17, 0x26) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.394934554s ago: executing program 0 (id=5160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x24048004) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r4, &(0x7f0000000200)=@ll={0x27, 0x1b, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x40d, 0x14, 0x4, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r5, 0x1, 0xf0bd28, 0x10000000, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'cram\x00\x00\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x10) 7.062101228s ago: executing program 1 (id=5161): renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00004dd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x65efc000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) pipe2$9p(0x0, 0x4080) dup3(r0, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x20040080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}}, 0x0) 6.94337064s ago: executing program 2 (id=5162): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x9, 0x2, 0xfffff034}, {0x28, 0x7, 0x0, 0xaf6e}, {0x6, 0x20, 0x0, 0xa1a}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) 5.926990913s ago: executing program 1 (id=5163): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0x7, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000700)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x20002, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sendmsg$rds(r3, 0x0, 0x20004000) 5.684224786s ago: executing program 4 (id=5164): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x5, &(0x7f0000000080)={[{@discard}, {@discard}, {@discard}, {@snapshot={'cp', 0x3d, 0x2}}, {@nobarrier}, {@norecovery}, {@errors_continue}, {@order_relaxed}]}, 0x1, 0xa0d, &(0x7f0000002080)="$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") open(0x0, 0x143142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) unshare(0x400) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, 0x0, &(0x7f0000001040)) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) 4.245077365s ago: executing program 5 (id=5165): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[], 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x8, 0x80, 0xf8, 0x6, 0xf7, 0x6d, 0x40, 0x6, 0x7, 0x80, 0x6, 0x7}, 0xe) ioctl$sock_netdev_private(r3, 0x8943, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c462402fab7ff7f00000000000002000300fffeffffdf0200000000000040000000000000000303000000000000000000000a0038000100040004000d0003000000008000000000000000000000070000000000000008000000000040ecc25eeb000000"], 0x78) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="00ea5bd69d713e222cd60cd11db90800000000000000ea4152adefefb2fcccba61cbfd569fa19db9f8c2d61957d809"], 0x1, 0x221, &(0x7f0000000000)="$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") r5 = syz_open_dev$video(0x0, 0xa7, 0x4000) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0xa, @pix={0x0, 0x0, 0x3132564e, 0x4}}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x242) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) getpeername$l2tp(r3, &(0x7f0000000380)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(rfc4106(rfc7539esp(cbc-cast5-avx,sha256-arm64)))\x00'}, 0x58) 4.241506635s ago: executing program 1 (id=5175): prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="c693488e87676e91654559e1b561937c3626b195a0c34661fa21ba0a1f14ae0a97324e545aa1622acb7161c85e739e23dc437d1b240cb985ac0c46010f9ae8afb0c5ec6ccb2d8506a7bcc3dddfeb78501925fa65c6dc54a462d3b3dfd1fda0e3ab6dc61db650ddd1cf71a45d7f4ede756f3e9cc48030b9a7db9fbaa09355df5f006be5e108f95c6d3419a343e4fad666bb9732b037b163bd2104b564d4f987c40815fa997526330f155cde52af5a3746f41be07ba2b278f3d9f8a046e9b50b4c5b44a72299e742cc357341caf84e86fac3282b027dd44d9f5f59b3d65d0040c9aa0dc61c401de395eb682912e2b4fca44d34d6328301931584f018ac58f53d492e1257386d9e2e3d46676b984831d80308e5c5e3b69f80a0a5913a63e15fb3ba381b675b957313cbfda0655d0ba9ec4e103cc1bf38978796a80ca0b7de5eb85c59e84bdedb362d8e64945fe97af6f33eb1689881eafa5817487675d779a9f204593c93bbc7713290eefd05cf23ca5ce487a52a41502cede89545d4a424cbad330024a194893057d867b77cecf63d11612d8f74a995d4dfb79f49b7f82d9f7f099fbfbb4847ab3045bd9b8f5bd625a485be07d72c642aff37858858be5d8fa280e42d4a299e53d29f2d5ba9e37ce132d75d4f740ade59a9e17a10d0e63d5d62218ffebd53a2eb04260580c040fe12b74f85721aa67ba210b24df84c152015a131e9675e326f422eda8b5d46a816a9564d1ff289df845e9a87d756a30cbf0afd392a27ef85b487262fcd78ab3bca0acd9a2478c8a91812db757ceafbf5f8d39bff4c4c37f4f38ca797c5f073e843d2fc16b4cc86aa7ac22b4fe35c856a1a89abb9d1f9f71fe8588cbe5ca2582a380c26292a0bd2337e0ed32cb1a80825e3d1d4f416d6f985e2b357b85af60e3318c2ee8a767d40c5a043b604e4adb88b87dfedc1261afc40d71bda8774622696e3a6ef992e992582259b4f9219717b6159770850f384248e7d42fccea92ae6d70c3c0411bf81f2cb5a57fbad3fe7fc3c385c41324342317d043bc6ddfb1d54b5e013c41db8c1aef50505a9252abae4953986d6c065800c90ccaeb1260f2b4afc70575b964cc9e301e5e73507d32ba32f5e21f6b291c61522c6c72ad0fa19219b5b4504c06156296d5902268588804e083b0bd378a7eb9508c7fca8c7dda5fddda9f477e933227fbbf687a12b87de9cccde811b2a280b05f349a80072b74ff5ce9cf28cb39f96ddadbf69f9314f96063a8aecc75e44926767a792dad1cd170513ced020e530d795321c6a49ffc5faaeec91d11f4872c25c1bfbced11b98449633827b1d9e2abf9be63b2f3223fdea39a040d6aa49d6c255edf3582c3e901f409f2bb65b90f51ec674ba6a2b91147dcf0aa2b96f043660157bfcb2306265bbd4f27949bd6fc2b7ebc751e3f26527b2158254601c63dc740af6a0364b66c1ba16bbbade0b94c73dac71bacbe637af67eaa88c13d840c396f38154b78763637c0e1f1190f8530206d1f47b70a8a4e0cbff5ef9bd6694bf1fa9cb595d282c0649c04d1af35b59eac29110abd7aff6bf2abb1df34b2561519155effd24622c88cd86b27534ce3a1db1eb8a52e330d8c95a5bb4d99a2cb7db8f1c9135e598c6a9fad1d0445887ebd70c3c807a830756bbc80cfee769cf6d3267cc89bec4020fef38e3f2be8de7d414f96dd6dd271db4771eafb1bc2e35ee9821df843fc7ed8fc6561572ac67ffd554a8f5d4fbc785dde79944237100aa7266eea3a9271123858822b0e7cd9144e6827626b6beb2b6150f1e475bd2660be389bef8c3e22b6a67c84e48f92844fa4bfd01f63091f0c965d73c1b7032c22eff19ebcb29b3b79a8f61953ef6e5902598c1b5624dd95065c64a5fb9477b52c33b963384d52f424da3c23580e071bdda1e566e14aed1028353e7ebdefad4f1b3c1d9f7525ebf5dfebe210a262c754ee2712a34923ad6332c36572bfde4d46ce7600133d4b2517cb32bf1eaf6b6f9de5b8e0d05fc75935b6b2146f8030ddc18d02ed76c15037d224ae4fcb9a6b6f25f530290b123c3105fef89ed8c04c173dab80fe01aecb67fdd9ad5036ded4ca449e2d48575cf9eed38f93d25cc909f5e73c54467bc109d66d69852f5edad12f491e5da4afb21bf147110e880360f42b8ecd9b6a9de92228490ce4f5aa651c9d7f00535a325a533f2154e685102ee89d0d28dd00d52eeea89be2e598418dc47268e52231ddf608694df48af0c31a0e1b055955bf8d7315eff0ab2ca821f52329139c186f282fbd5b922a77455d8b7d5408e21b6926164b5e51d69450efda698d9e0857bfe86680d2aa594ad260bb2b33f4d8fa5081db6e7f15e9690b3664b0f75ccbfe967d2275022fa2194f6f149ef7460721aaeb7d155d3bc88716a07461e003872bbf1687dc1db2c18090eb7d6990218c0a494e5a020e7728c7857743f79f64215d5c1cba43e9ab0b563305f21c6e6d001bd63a107048386fea338f79cd5f8e65f9d51a33c8a206d2c541b01eb947cc3ff18421685df83168100206328cecf9fc0eeaf16b56f49a244466e0a570ef70cdf9d5782a9e4fbe0a414be66749bf0d0a7e2790326eab20e9b15f2c83c4d47d100b912c0898898b764d0d2bc186d73f43b18d21e8def11b520c2e9c97b25999c1c4b44eb45de01248a70c39ed2df193ada1eb88991f6a5ae8241812a6ed85b07df9f66caaf1cc4c534f6426502974364e5505b6b6b8f375724e1f06caec7613807561deba857926f9ee4ca76d1bbad4e7ec888c366a35756106f5c48011a0fb4f94bb243c63c1ed9eb3a1335e44ce8e48aebd8261f775314a8e4a4555913e5dda31608957df5bb4edba74e27161ba4415f0fc25f179a60eea7449c3c0479edc814360967a6b9ac6a51280dc1b8def3cfc68fca65da953f73a06f8c24249ca887afa0089ccd354de37848b35b56fb58d9e065122620971df41ecae14f06d30fb6150f9f89a18cc04a6191029fda30df2dab4ab533809df9a99fe407e1fed15a4dabe4f664401280df057a683a9252159ed2bf70ea1e38f3508cdb72b128a3b2a70be771a6731ab4d30807595e719467ae2bfc7ec75143fb0c744027e347b3ecd9c0de278cc96a9ae922a600429e3f0023befad918c1617a3ae4f4bc814c124ace051129ed784bc0c19b1f6d03e1dafa952ff8d11a50f0e1b3861146c6e8239a778a92088e0d11d5e9a45b4bf064cedfa5c70be930e59ff0dde2d29997168a7b165c0dc693b5ea57e860124be25a05b16084069f862881e6c57460e0e45abbf6b3745a746a86c108cbecf7e3cb9e1bdfbe5d706cacdb67e60347a8a7d4213dcc59974306192ba41d1b9856c27e24feb96e5366b2db14c1f9ec9f7c92ee3457f3de45ee613a1304b37ba9c04830afce711b3b5afbacd48ab5c4257384c048895ef53c29421acf1a1898654b42e64c18735a8a84eb9790252950e9facf95abb96667673dbd074fe9fb60dd47fd4051baa728f192fdb57cdb20baac0b707c6838dc1d6e03e51ef7c28504aaa7928f61664c24edbe9abbe31df943021d49dbdc3ce2da3496c3813715b516a9c976495e2c8880c7e5fd741e4569facb94c8f9b7c507e6fce5f79287780f8ec1ad496b53c4d9fadfe5d12c360d416858bc5a4dfd6ab9aaab364965c3475ad1008796c430429f819e4d8094e2d9d6b1b0914d3dde84f882d56606e9a296b5c1ab95cfbef0c57f2c6859a31eb48b93c5603492c6f712c7cea55dcd5895c12c4b15ad3d4bcc2727ba6e0f543bd0527854ea35e56ccc585620bb44f7c8e2226e2d0dd8cfdbbca1633e5a4e5062b1ec0f3663469a48ba5bce8869290e8c2451708ae1eb9aaac58ae611b11c703ea549929b45e428fc11ac07530de8f73ec8fcba2634144502ce7ed7afdddfed0457ea1312df1c59ba32130d570c5e640ed697f0014a5c7bbb7043ea0dd6b35d14c532222a57d1acbdfc4b06485eef72c7deb82f8ba1cbd76739b8e9c5e0d5feb8f401b2f4827d2e957d9d93df0b09d24977f7cedd87c6c03c28f800e8a37d519a56a5fae1e3464d7fe8cab92a14a7dc8ea6b8c37a0dfb81b10cbd2ac08ebe96ec8993739894452de6486bdcdb3a2eed58080c74f3d7ac17edcca8724bd445e3f6da7b86a0abf6929806c3db9b14e27adafdd91e654cce018487ac16b49128f1d230c826b5d6b5adf01889fafa8261687b07ce07a78d25c4bf4774ca21ef1b05224e1d3d100674d9cf01b9682c001357834259c43c5b8d14d8cb82c743ae0995cbc87dc1df99b9d58e8c2d7313d81ff9bc1e6f83785d2203a6d3a56e98dcf7f6f534ffe7d9fc1af12774d6aa524a94bbacfdc093ff715511fe78a473f7da5ba5efa2ff72db9611473f9f16d558c9c6f4f57b79065d9c150d8ffbcac1819da6c4b666703bd0fbd0a19c780ad2347e66ff89b00cbba3aa5a8facab704a8110121bfad30fb38e0fd5f5387713a426a685501e6499213545ddb080ab2265bcc10b5b24654a74cdb032fa155785531e821eaba73d344d862742bbc3daa6447ae895775db4d38acef6990be008802eeb1a97119369e58ad14aa6739db697b56354267f1c069a9468dc1fecbbd20f43707ebd749ae37a6953be44bfa6f72874d63c554e27d6bbadaf7241f9e13121a38387a5d177ee36abceb86995912fef6cce612981aaa92da6e6bef86abe01a12ed7c2ea841a46a48ac8c597c5b7b15be85c6ebbd260f6905bd8e49a5123aa7ff781e0d19a6deb5d25a7efdb1416bd76c5b237b6ca4be08e8ce579f5d03fa30922cddf02b49b4e5772852c778c12df6317a9e8dc7ac4bbd236137557188bf7b2b8a97183d9fab3029a555ae63c2ff060d985fca43d4520178da4b374722e1d3e0171c59454d21c3427fb93706e220d576df69bd4b9014c371630cd75c1a38d94d15822c4231e15774e98ca774a179e3341bdaab1839b27dc7e1e16788cbc099373ef92417f88287b8e6b15f30db864455a17b562b34e16691a154950dcc669d2c488b9b72f4c00f520f97d73c5818d48d534ab7877024014ec8283665aad1b2aeaee2fcaa48879b1d5330c83b7b232ccc31df3c80cd23884b5903c9f66c7711a87e86fc63f15babaccb765f9731ca671c2a58a759d62ebad3dbf61c56aa043318a9ed13173e9bb6307ea077d9ba3e512a2ffc5d6f7e89a35316ea01e9e00e88ab5623da38978844fd1a868875590306aaa930516727cfa25dd3167a225dc45c6b9a24bf09ab9bf267429b9c0036ef8dfc09e178a4abb43570522cc350de62ddf8cec5d9a5d690e08dbc08a5c226d14d815e16a3ebff72ec9065d6ec0afc22b4259e742fbcfe8344812c3fbc7f838de6e4f35fbed66e5d29d483e9d0f08643db863dd36600af18363f042570413b66cae4dad1e3114e4208bc416928953ce02bc34f0ccbd0ce0e7cbe63728f7041045d08d3e15aee7ab230d19b153f83f8ac1753c42db6763ef4da1d773d4fc465df0e5f1c43dbeed16d067693ef85fdaa43e49f44a4a5ced8b99977bf528f6569990b0ffecc753db1c17614ac6e2723b9d4513e964e94af03e8d24fef60565d64f5cd0e6241e0f047f08e027b642b9aa001027ec8a659f845dd91fcdcd0c7bb9e3530b78f159163c7a474b0cee1f8affa7771bada0a0cc259812b5dd32995847ec4a458974c8d75f193b451b5118a2e8191fcc828764443872f9c81e6143abefa02204c8558c7f40f0ffc2ecc5376ef51677dfdf15c94fc08219fa99dcaf0b3116bcabafffb1ef6256299994bdb818a7a14b3e076f7141"], 0x1, 0x6214, &(0x7f0000006640)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="140000005204000003000000060007001100000000"], 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80088c4) ftruncate(0xffffffffffffffff, 0x2000009) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) 1.962178635s ago: executing program 4 (id=5166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x24048004) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r4, &(0x7f0000000200)=@ll={0x27, 0x1b, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x40d, 0x14, 0x4, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r5, 0x1, 0xf0bd28, 0x10000000, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'cram\x00\x00\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x10) 91.699249ms ago: executing program 1 (id=5167): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) pipe2$9p(0x0, 0x4080) dup3(r0, r4, 0x0) 41.32124ms ago: executing program 5 (id=5168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={0xffffffffffffffff, r0}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x11) close_range(r7, r7, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000181200"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=5169): renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00004dd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x65efc000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) pipe2$9p(0x0, 0x4080) dup3(r0, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x20040080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): ot be null; rc = [-22] [ 1600.800030][T15494] Bluetooth: hci4: Frame reassembly failed (-84) [ 1600.826554][T21699] erofs: (device loop0): mounted with root inode @ nid 36. [ 1601.347258][T21712] loop4: detected capacity change from 0 to 512 [ 1601.393027][T21712] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1602.166947][T21712] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1602.183328][T21712] EXT4-fs (loop4): Remounting filesystem read-only [ 1602.190872][T21712] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4669: invalid indirect mapped block 1 (level 1) [ 1602.205661][T21712] EXT4-fs (loop4): Remounting filesystem read-only [ 1602.216304][T21712] EXT4-fs (loop4): 1 truncate cleaned up [ 1602.222410][T21712] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1602.286397][T21712] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.4669: bad inode number: 1 [ 1602.304907][T21712] EXT4-fs (loop4): Remounting filesystem read-only [ 1602.618327][T21711] loop5: detected capacity change from 0 to 128 [ 1602.642387][ T4183] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1602.664354][T21699] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1602.683228][ T26] audit: type=1800 audit(4111195418.400:100): pid=21699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4667" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1602.704252][T18140] Bluetooth: hci4: command 0x1003 tx timeout [ 1602.710405][ T4183] Bluetooth: hci4: sending frame failed (-49) [ 1602.726170][T21699] lo speed is unknown, defaulting to 1000 [ 1602.874653][T21711] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1602.970505][T21711] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1602.991812][T21711] vfat filesystem being mounted at /582/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1603.204792][T21718] loop2: detected capacity change from 0 to 2048 [ 1603.382728][T21720] loop0: detected capacity change from 0 to 8 [ 1603.534901][T21720] SQUASHFS error: xz decompression failed, data probably corrupt [ 1603.543167][T21720] SQUASHFS error: Failed to read block 0x108: -5 [ 1603.549572][T21720] SQUASHFS error: Unable to read metadata cache entry [106] [ 1603.556992][T21720] SQUASHFS error: Unable to read inode 0x11f [ 1603.970696][T21718] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1604.839342][T18140] Bluetooth: hci4: command 0x1001 tx timeout [ 1604.845990][ T4183] Bluetooth: hci4: sending frame failed (-49) [ 1606.248033][T21740] loop2: detected capacity change from 0 to 2048 [ 1606.499851][T21740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1606.930066][T18140] Bluetooth: hci4: command 0x1009 tx timeout [ 1606.942064][T21746] loop5: detected capacity change from 0 to 2048 [ 1607.119507][T21746] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1607.251776][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.258152][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.270246][T21758] Device name cannot be null; rc = [-22] [ 1608.321077][T21761] loop0: detected capacity change from 0 to 16 [ 1608.405137][T21761] erofs: (device loop0): mounted with root inode @ nid 36. [ 1609.095347][ T4183] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1609.124610][T21763] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1609.144897][ T26] audit: type=1800 audit(4111195424.860:101): pid=21763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4682" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1609.548937][T21761] lo speed is unknown, defaulting to 1000 [ 1612.463136][T21779] loop0: detected capacity change from 0 to 128 [ 1613.630442][T21779] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1613.691251][T21779] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1614.043075][T21791] loop1: detected capacity change from 0 to 8 [ 1614.403857][T21791] SQUASHFS error: xz decompression failed, data probably corrupt [ 1614.411962][T21791] SQUASHFS error: Failed to read block 0x108: -5 [ 1614.418372][T21791] SQUASHFS error: Unable to read metadata cache entry [106] [ 1614.425777][T21791] SQUASHFS error: Unable to read inode 0x11f [ 1614.628600][T21779] vfat filesystem being mounted at /121/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1619.223478][T21832] loop4: detected capacity change from 0 to 16 [ 1619.461941][T21832] erofs: (device loop4): mounted with root inode @ nid 36. [ 1619.690742][ T5236] Bluetooth: hci4: Frame reassembly failed (-84) [ 1620.526834][ T4183] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1620.549264][T21832] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1620.571877][ T26] audit: type=1800 audit(4111195436.290:102): pid=21832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4698" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1620.770464][T21841] loop0: detected capacity change from 0 to 32768 [ 1620.845005][T21841] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4700 (21841) [ 1620.882959][T21842] loop1: detected capacity change from 0 to 512 [ 1620.915658][T21841] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1620.925071][T21841] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1620.933264][T21841] BTRFS info (device loop0): enabling auto defrag [ 1620.939819][T21841] BTRFS info (device loop0): max_inline at 0 [ 1620.945877][T21841] BTRFS info (device loop0): using free space tree [ 1620.952448][T21841] BTRFS info (device loop0): has skinny extents [ 1621.006661][T21843] lo speed is unknown, defaulting to 1000 [ 1621.064690][T21842] EXT4-fs (loop1): inline encryption not supported [ 1621.143795][T21842] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1621.281262][T21842] EXT4-fs (loop1): 1 truncate cleaned up [ 1621.296388][T21842] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 1621.341571][T21854] loop4: detected capacity change from 0 to 2048 [ 1621.597968][T21854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1621.729870][ T4246] Bluetooth: hci4: command 0x1003 tx timeout [ 1622.143874][ T4183] Bluetooth: hci4: sending frame failed (-49) [ 1622.806351][T21874] loop0: detected capacity change from 0 to 2048 [ 1622.958337][T21885] loop4: detected capacity change from 0 to 512 [ 1623.011900][T21885] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1623.114334][T21874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1623.140561][T21885] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1623.159971][T21885] EXT4-fs (loop4): Remounting filesystem read-only [ 1623.167203][T21885] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4707: invalid indirect mapped block 1 (level 1) [ 1625.444646][T20751] Bluetooth: hci4: command 0x1001 tx timeout [ 1625.595824][ T4183] Bluetooth: hci4: sending frame failed (-49) [ 1625.729603][T21895] loop0: detected capacity change from 0 to 512 [ 1626.083337][T21895] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1626.425893][T21895] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1626.442033][T21895] EXT4-fs (loop0): Remounting filesystem read-only [ 1626.449664][T21895] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4708: invalid indirect mapped block 1 (level 1) [ 1627.061798][T21885] EXT4-fs (loop4): Remounting filesystem read-only [ 1627.216288][T21885] EXT4-fs (loop4): 1 truncate cleaned up [ 1627.334970][T21885] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1627.701588][T20751] Bluetooth: hci4: command 0x1009 tx timeout [ 1628.205554][T21895] EXT4-fs (loop0): Remounting filesystem read-only [ 1628.229491][T21895] EXT4-fs (loop0): 1 truncate cleaned up [ 1628.750623][T21895] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1628.883009][T21894] EXT4-fs error (device loop0): ext4_lookup:1850: inode #2: comm syz.0.4708: bad inode number: 1 [ 1628.896202][T21894] EXT4-fs (loop0): Remounting filesystem read-only [ 1629.011075][T21901] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1629.082612][T21901] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1629.351593][T21915] loop5: detected capacity change from 0 to 512 [ 1630.188158][T21915] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1630.298141][T21915] EXT4-fs (loop5): 1 truncate cleaned up [ 1630.480865][T21915] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1631.186536][T21919] loop0: detected capacity change from 0 to 512 [ 1631.490151][T21931] loop1: detected capacity change from 0 to 40427 [ 1631.555583][T21931] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 1631.564509][T21931] F2FS-fs (loop1): Invalid uid value -1 [ 1631.591251][T21919] EXT4-fs (loop0): inline encryption not supported [ 1631.659968][T21919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1632.136863][T21919] EXT4-fs (loop0): 1 truncate cleaned up [ 1632.156016][T21919] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 1632.187760][T21937] loop5: detected capacity change from 0 to 512 [ 1632.319209][T21937] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1632.573118][T21937] EXT4-fs (loop5): 1 truncate cleaned up [ 1632.676153][T21937] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1635.881313][T21961] loop5: detected capacity change from 0 to 512 [ 1636.337492][T21961] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1637.072139][T21961] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1637.090868][T21961] EXT4-fs (loop5): Remounting filesystem read-only [ 1637.098195][T21961] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4723: invalid indirect mapped block 1 (level 1) [ 1637.115506][T21961] EXT4-fs (loop5): Remounting filesystem read-only [ 1637.124133][T21961] EXT4-fs (loop5): 1 truncate cleaned up [ 1637.130198][T21961] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1637.204255][T21961] EXT4-fs error (device loop5): ext4_lookup:1850: inode #2: comm syz.5.4723: bad inode number: 1 [ 1637.218001][T21961] EXT4-fs (loop5): Remounting filesystem read-only [ 1638.223905][T21975] loop1: detected capacity change from 0 to 8 [ 1638.277169][T21973] loop2: detected capacity change from 0 to 16 [ 1638.870075][T21965] Device name cannot be null; rc = [-22] [ 1638.985209][T21973] erofs: (device loop2): mounted with root inode @ nid 36. [ 1638.985879][T21975] SQUASHFS error: xz decompression failed, data probably corrupt [ 1639.000357][T21975] SQUASHFS error: Failed to read block 0x108: -5 [ 1639.006718][T21975] SQUASHFS error: Unable to read metadata cache entry [106] [ 1639.014153][T21975] SQUASHFS error: Unable to read inode 0x11f [ 1639.460253][ T4180] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1639.483581][T21983] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1639.502589][ T26] audit: type=1800 audit(4111195455.220:103): pid=21983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4727" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1639.558667][T21973] lo speed is unknown, defaulting to 1000 [ 1641.445162][T21997] loop2: detected capacity change from 0 to 40427 [ 1641.538914][T22005] loop1: detected capacity change from 0 to 8 [ 1641.699300][T22003] loop4: detected capacity change from 0 to 1024 [ 1641.873201][T21997] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 1641.882188][T21997] F2FS-fs (loop2): Invalid uid value -1 [ 1641.977658][T22005] SQUASHFS error: xz decompression failed, data probably corrupt [ 1641.985710][T22005] SQUASHFS error: Failed to read block 0x108: -5 [ 1641.992163][T22005] SQUASHFS error: Unable to read metadata cache entry [106] [ 1641.999513][T22005] SQUASHFS error: Unable to read inode 0x11f [ 1642.094764][T22003] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1642.225662][T22003] EXT4-fs (loop4): Ignoring removed bh option [ 1642.232154][T22003] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1643.043239][T22008] Device name cannot be null; rc = [-22] [ 1643.155272][T22003] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1644.924277][T22033] loop1: detected capacity change from 0 to 8 [ 1645.524496][T22034] loop2: detected capacity change from 0 to 512 [ 1645.602124][T22033] SQUASHFS error: xz decompression failed, data probably corrupt [ 1645.610289][T22033] SQUASHFS error: Failed to read block 0x108: -5 [ 1645.616716][T22033] SQUASHFS error: Unable to read metadata cache entry [106] [ 1645.624095][T22033] SQUASHFS error: Unable to read inode 0x11f [ 1645.672465][T22034] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1647.786495][T22034] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1647.806939][T22034] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.814932][T22034] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4737: invalid indirect mapped block 1 (level 1) [ 1647.865635][T22034] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.875603][T22034] EXT4-fs (loop2): 1 truncate cleaned up [ 1647.881617][T22034] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1647.969369][T22034] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.4737: bad inode number: 1 [ 1647.985622][T22034] EXT4-fs (loop2): Remounting filesystem read-only [ 1648.445368][T22048] loop1: detected capacity change from 0 to 512 [ 1648.513884][T22048] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1648.602597][T22048] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1648.620981][T22048] EXT4-fs (loop1): Remounting filesystem read-only [ 1648.628205][T22048] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4742: invalid indirect mapped block 1 (level 1) [ 1648.643036][T22048] EXT4-fs (loop1): Remounting filesystem read-only [ 1648.652106][T22048] EXT4-fs (loop1): 1 truncate cleaned up [ 1648.657822][T22048] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1648.728134][T22048] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.4742: bad inode number: 1 [ 1648.740796][T22048] EXT4-fs (loop1): Remounting filesystem read-only [ 1650.042202][T22068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4744'. [ 1650.306218][T22064] loop4: detected capacity change from 0 to 512 [ 1650.362740][T22073] loop2: detected capacity change from 0 to 2048 [ 1650.419390][T22064] EXT4-fs (loop4): inline encryption not supported [ 1650.464080][T22064] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1650.488460][T22073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1650.515458][T22064] EXT4-fs (loop4): 1 truncate cleaned up [ 1650.528175][T22064] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 1651.572274][T22082] loop5: detected capacity change from 0 to 8 [ 1652.483087][T22082] SQUASHFS error: xz decompression failed, data probably corrupt [ 1652.490981][T22082] SQUASHFS error: Failed to read block 0x108: -5 [ 1652.497387][T22082] SQUASHFS error: Unable to read metadata cache entry [106] [ 1652.504839][T22082] SQUASHFS error: Unable to read inode 0x11f [ 1653.210077][T22094] loop2: detected capacity change from 0 to 2048 [ 1653.358759][T22094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1653.419990][T22102] loop0: detected capacity change from 0 to 128 [ 1653.500749][T22102] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1653.591790][T22102] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1653.625367][T22102] vfat filesystem being mounted at /135/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1654.764036][T22111] loop2: detected capacity change from 0 to 512 [ 1656.153777][T22111] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1656.296101][T22111] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1656.314462][T22111] EXT4-fs (loop2): Remounting filesystem read-only [ 1656.321640][T22111] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4754: invalid indirect mapped block 1 (level 1) [ 1656.336270][T22111] EXT4-fs (loop2): Remounting filesystem read-only [ 1656.343893][T22111] EXT4-fs (loop2): 1 truncate cleaned up [ 1656.349817][T22111] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1656.415884][T22111] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.4754: bad inode number: 1 [ 1656.429318][T22111] EXT4-fs (loop2): Remounting filesystem read-only [ 1656.974075][T22115] loop0: detected capacity change from 0 to 2048 [ 1657.265934][T22115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1657.963237][T22116] lo speed is unknown, defaulting to 1000 [ 1659.128162][T22135] loop0: detected capacity change from 0 to 2048 [ 1659.143236][T22116] chnl_net:caif_netlink_parms(): no params data found [ 1659.223178][T22138] loop1: detected capacity change from 0 to 2048 [ 1659.407852][T22138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1659.420279][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 1659.437166][T22135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1660.493165][T22146] loop4: detected capacity change from 0 to 512 [ 1660.992598][T22146] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1661.490031][T19337] Bluetooth: hci4: command 0x041b tx timeout [ 1662.205769][T22146] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1662.224328][T22146] EXT4-fs (loop4): Remounting filesystem read-only [ 1662.231513][T22146] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4762: invalid indirect mapped block 1 (level 1) [ 1662.246943][T22146] EXT4-fs (loop4): Remounting filesystem read-only [ 1662.254988][T22146] EXT4-fs (loop4): 1 truncate cleaned up [ 1662.260887][T22146] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1662.331242][T22146] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.4762: bad inode number: 1 [ 1662.351581][T22146] EXT4-fs (loop4): Remounting filesystem read-only [ 1662.665830][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.794789][T22158] loop0: detected capacity change from 0 to 2048 [ 1662.847873][T22116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.855488][T22116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.864084][T22116] device bridge_slave_0 entered promiscuous mode [ 1662.873075][T22116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.881795][T22116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.890354][T22116] device bridge_slave_1 entered promiscuous mode [ 1662.919024][T22116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1662.931127][T22116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1662.979182][T22116] team0: Port device team_slave_0 added [ 1662.997483][T22116] team0: Port device team_slave_1 added [ 1663.048688][T22116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.056320][T22116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.082447][T22116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.094349][T22158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1663.550223][ T5237] Bluetooth: hci5: Frame reassembly failed (-84) [ 1663.603707][T22156] loop2: detected capacity change from 0 to 512 [ 1663.961306][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.995264][T22156] EXT4-fs (loop2): inline encryption not supported [ 1664.370873][T22156] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1664.432794][T22116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.441672][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 1664.457140][T22116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.483873][T22116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.555741][T22156] EXT4-fs (loop2): 1 truncate cleaned up [ 1664.597945][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.601704][T22156] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 1664.906885][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.548884][T22175] loop4: detected capacity change from 0 to 40427 [ 1665.557885][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 1665.568519][T22116] device hsr_slave_0 entered promiscuous mode [ 1665.575173][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 1665.583332][T22116] device hsr_slave_1 entered promiscuous mode [ 1665.599877][T22116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1665.607745][T22116] Cannot create hsr debugfs directory [ 1665.619496][T22175] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 1665.628530][T22175] F2FS-fs (loop4): Invalid uid value -1 [ 1667.027098][T17300] Bluetooth: hci4: command 0x0419 tx timeout [ 1667.649883][T19337] Bluetooth: hci5: command 0x1001 tx timeout [ 1667.669991][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 1668.198658][T22201] loop4: detected capacity change from 0 to 512 [ 1668.300266][T22201] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1668.406697][T22201] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1668.425010][T22201] EXT4-fs (loop4): Remounting filesystem read-only [ 1668.432128][T22201] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4774: invalid indirect mapped block 1 (level 1) [ 1668.448232][T22201] EXT4-fs (loop4): Remounting filesystem read-only [ 1668.456078][T22201] EXT4-fs (loop4): 1 truncate cleaned up [ 1668.461854][T22201] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1668.530926][T22201] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.4774: bad inode number: 1 [ 1668.543628][T22201] EXT4-fs (loop4): Remounting filesystem read-only [ 1668.692238][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.698670][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.482568][ T9] bridge0: port 3(gretap0) entered disabled state [ 1669.501610][T22212] loop4: detected capacity change from 0 to 2048 [ 1669.509257][ T9] device gretap0 left promiscuous mode [ 1669.541911][T22212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1669.551200][ T9] bridge0: port 3(gretap0) entered disabled state [ 1669.574513][T22116] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1669.609333][T22116] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1669.729939][T19337] Bluetooth: hci5: command 0x1009 tx timeout [ 1669.839633][T22116] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1670.088275][T22116] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1670.700170][T22226] loop4: detected capacity change from 0 to 512 [ 1670.891182][T22226] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1670.919452][T22116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.983454][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1671.010973][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1671.041146][T22226] EXT4-fs (loop4): 1 truncate cleaned up [ 1671.046937][T22226] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1671.085187][T22116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1671.172397][ T9] device hsr_slave_0 left promiscuous mode [ 1671.188633][ T9] device hsr_slave_1 left promiscuous mode [ 1671.411564][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1671.419257][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.476156][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1672.040010][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1672.071318][ T9] device bridge_slave_1 left promiscuous mode [ 1672.201231][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.770778][ T9] device bridge_slave_0 left promiscuous mode [ 1672.794717][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.882323][ T9] device veth1_macvtap left promiscuous mode [ 1672.888494][ T9] device veth0_macvtap left promiscuous mode [ 1672.926937][ T9] device veth1_vlan left promiscuous mode [ 1672.948120][ T9] device veth0_vlan left promiscuous mode [ 1673.265140][T22253] loop0: detected capacity change from 0 to 2048 [ 1673.368563][T22253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1673.658281][T22255] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1673.687902][T22255] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1673.811849][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1673.919591][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1674.016735][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.051719][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.325794][T22266] loop4: detected capacity change from 0 to 512 [ 1674.381856][T22266] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1675.781349][T22266] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1675.800876][T22266] EXT4-fs (loop4): Remounting filesystem read-only [ 1675.808206][T22266] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4785: invalid indirect mapped block 1 (level 1) [ 1675.824508][T22266] EXT4-fs (loop4): Remounting filesystem read-only [ 1675.832227][T22266] EXT4-fs (loop4): 1 truncate cleaned up [ 1675.837973][T22266] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1675.902887][T22266] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.4785: bad inode number: 1 [ 1675.914721][T22266] EXT4-fs (loop4): Remounting filesystem read-only [ 1676.505562][T22270] loop0: detected capacity change from 0 to 40427 [ 1676.560253][T22270] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 1676.569337][T22270] F2FS-fs (loop0): Invalid uid value -1 [ 1677.571655][ T9] bond0 (unregistering): Released all slaves [ 1677.782161][T22281] loop0: detected capacity change from 0 to 512 [ 1677.868389][T22281] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1679.177546][T22281] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1679.197154][T22281] EXT4-fs (loop0): Remounting filesystem read-only [ 1679.204323][T22281] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4787: invalid indirect mapped block 1 (level 1) [ 1679.220019][T22281] EXT4-fs (loop0): Remounting filesystem read-only [ 1679.227701][T22281] EXT4-fs (loop0): 1 truncate cleaned up [ 1679.233509][T22281] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1679.309635][T22281] EXT4-fs error (device loop0): ext4_lookup:1850: inode #2: comm syz.0.4787: bad inode number: 1 [ 1679.322304][T22281] EXT4-fs (loop0): Remounting filesystem read-only [ 1679.660616][T17582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1679.671109][T17582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1679.770218][T17582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.777320][T17582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.993153][T17582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1680.021784][T17582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1681.160366][T17582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.167476][T17582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.228920][T17582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1681.280534][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1681.289518][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1681.354546][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1681.557356][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1681.591000][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1681.621309][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1681.658185][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1681.712998][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1681.740875][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1681.762965][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1681.776623][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1681.803296][T22116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1682.257059][T22298] loop0: detected capacity change from 0 to 512 [ 1683.130297][T22298] EXT4-fs (loop0): inline encryption not supported [ 1683.191605][T22298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1683.268908][T22116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.282327][T22298] EXT4-fs (loop0): 1 truncate cleaned up [ 1683.296824][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1683.304418][T22298] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 1683.425670][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1683.650655][T22322] loop1: detected capacity change from 0 to 512 [ 1683.808973][T22322] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1684.072125][T22322] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1684.090819][T22322] EXT4-fs (loop1): Remounting filesystem read-only [ 1684.098043][T22322] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4796: invalid indirect mapped block 1 (level 1) [ 1684.114740][T22322] EXT4-fs (loop1): Remounting filesystem read-only [ 1684.123711][T22322] EXT4-fs (loop1): 1 truncate cleaned up [ 1684.129517][T22322] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1684.201775][T22322] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.4796: bad inode number: 1 [ 1684.213730][T22322] EXT4-fs (loop1): Remounting filesystem read-only [ 1684.775269][T22330] loop4: detected capacity change from 0 to 2048 [ 1684.906655][T22330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1685.405001][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1685.461146][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1685.706346][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1685.715819][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1685.753246][T22116] device veth0_vlan entered promiscuous mode [ 1685.780593][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1685.800810][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1685.826394][T22116] device veth1_vlan entered promiscuous mode [ 1685.987319][T16932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1686.006648][T16932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1686.037671][T16932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1686.088452][T16932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1686.171026][T22116] device veth0_macvtap entered promiscuous mode [ 1686.204145][T22116] device veth1_macvtap entered promiscuous mode [ 1686.417619][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1686.462285][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1686.617427][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.671872][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.727178][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.785726][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.919776][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.093937][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.115150][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.128404][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.144477][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.178109][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.251394][T22116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.314111][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.713459][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.776678][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.809564][T22364] loop2: detected capacity change from 0 to 512 [ 1687.917622][T22362] loop0: detected capacity change from 0 to 2048 [ 1687.924458][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.955156][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.998497][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.017172][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.028790][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.045270][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.055892][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.106002][T22116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.152369][T22364] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1688.175943][T22362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1688.246200][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1690.038976][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1690.112820][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1690.123618][T22364] EXT4-fs (loop2): 1 truncate cleaned up [ 1690.132742][T22364] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1690.157823][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1690.189085][T22116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.349299][T22116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.358122][T22116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.386093][T22116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.870766][T22375] loop4: detected capacity change from 0 to 2048 [ 1691.023069][T22375] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1691.228254][T22382] loop0: detected capacity change from 0 to 512 [ 1692.433237][T22382] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1693.098150][T17582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.115624][ T5237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.124445][ T5237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.138795][T16932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1693.167846][T17582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.188519][T17582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1693.207784][T22382] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1693.234099][T22372] loop1: detected capacity change from 0 to 512 [ 1693.337390][T22382] EXT4-fs (loop0): Remounting filesystem read-only [ 1693.357911][T22382] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4808: invalid indirect mapped block 1 (level 1) [ 1693.374758][T22372] EXT4-fs (loop1): inline encryption not supported [ 1693.412357][T22372] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1693.432646][T22382] EXT4-fs (loop0): Remounting filesystem read-only [ 1693.458326][T22392] loop5: detected capacity change from 0 to 512 [ 1693.479259][T22382] EXT4-fs (loop0): 1 truncate cleaned up [ 1693.612436][T22372] EXT4-fs (loop1): 1 truncate cleaned up [ 1693.625480][T22382] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1693.635052][T22372] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 1693.659952][T22392] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1693.681345][T22388] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1693.689918][T22388] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1693.716183][T22392] EXT4-fs (loop5): 1 truncate cleaned up [ 1693.723466][T22392] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1694.070263][T22378] EXT4-fs error (device loop0): ext4_lookup:1850: inode #2: comm syz.0.4808: bad inode number: 1 [ 1694.117185][T22378] EXT4-fs (loop0): Remounting filesystem read-only [ 1694.295907][T22404] loop2: detected capacity change from 0 to 2048 [ 1694.509753][T22404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1694.779021][T22407] loop0: detected capacity change from 0 to 2048 [ 1695.182044][T22407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1695.409878][T20067] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1695.627943][T22417] loop5: detected capacity change from 0 to 1024 [ 1695.747685][T22417] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1695.797617][T22417] EXT4-fs (loop5): Ignoring removed bh option [ 1695.825939][T22417] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1695.896321][T22417] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1696.079796][T20067] usb 2-1: Using ep0 maxpacket: 16 [ 1696.097505][T22423] Device name cannot be null; rc = [-22] [ 1696.158265][T22429] loop0: detected capacity change from 0 to 512 [ 1696.199963][T20067] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.230044][T20067] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1696.242021][T22429] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1696.261711][T20067] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1696.274410][T20067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.293168][T20067] usb 2-1: config 0 descriptor?? [ 1696.329485][T22429] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1696.354899][T22429] EXT4-fs (loop0): Remounting filesystem read-only [ 1696.399144][T22429] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4818: invalid indirect mapped block 1 (level 1) [ 1696.418547][T22429] EXT4-fs (loop0): Remounting filesystem read-only [ 1696.461859][T22429] EXT4-fs (loop0): 1 truncate cleaned up [ 1696.467735][T22429] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1696.505351][T22429] EXT4-fs error (device loop0): ext4_lookup:1850: inode #2: comm syz.0.4818: bad inode number: 1 [ 1696.686293][T22429] EXT4-fs (loop0): Remounting filesystem read-only [ 1698.481028][T22455] loop4: detected capacity change from 0 to 2048 [ 1698.780993][T19337] usb 2-1: USB disconnect, device number 18 [ 1699.097243][T22459] loop0: detected capacity change from 0 to 32768 [ 1699.178595][T22455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1699.243496][T22459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4823 (22459) [ 1700.022295][T22459] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1700.031109][T22459] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1700.039221][T22459] BTRFS info (device loop0): enabling auto defrag [ 1700.045770][T22459] BTRFS info (device loop0): max_inline at 0 [ 1700.051899][T22459] BTRFS info (device loop0): using free space tree [ 1700.058417][T22459] BTRFS info (device loop0): has skinny extents [ 1700.156378][T22474] loop2: detected capacity change from 0 to 16 [ 1700.407785][T22474] erofs: (device loop2): mounted with root inode @ nid 36. [ 1700.562362][T22492] loop1: detected capacity change from 0 to 512 [ 1700.593425][T22492] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1700.766953][T22492] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1700.787704][T22492] EXT4-fs (loop1): Remounting filesystem read-only [ 1700.795265][T22492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4831: invalid indirect mapped block 1 (level 1) [ 1700.811614][T22492] EXT4-fs (loop1): Remounting filesystem read-only [ 1700.819939][T22492] EXT4-fs (loop1): 1 truncate cleaned up [ 1700.825741][T22492] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1701.052340][T22492] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.4831: bad inode number: 1 [ 1701.064497][T22492] EXT4-fs (loop1): Remounting filesystem read-only [ 1701.465425][T21437] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1701.489309][T22500] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1701.511500][ T26] audit: type=1800 audit(4111195517.230:104): pid=22500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4828" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1701.554684][T22500] lo speed is unknown, defaulting to 1000 [ 1703.020618][T22509] loop4: detected capacity change from 0 to 512 [ 1703.918579][T22509] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1704.001071][T22509] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1704.022217][T22509] EXT4-fs (loop4): Remounting filesystem read-only [ 1704.029507][T22509] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4833: invalid indirect mapped block 1 (level 1) [ 1704.045929][T22509] EXT4-fs (loop4): Remounting filesystem read-only [ 1704.055871][T22509] EXT4-fs (loop4): 1 truncate cleaned up [ 1704.061752][T22509] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1704.133598][T22509] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.4833: bad inode number: 1 [ 1704.145725][T22509] EXT4-fs (loop4): Remounting filesystem read-only [ 1704.885738][T22515] loop1: detected capacity change from 0 to 512 [ 1704.958055][T22515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1705.011265][T22515] EXT4-fs (loop1): 1 truncate cleaned up [ 1705.017304][T22515] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1706.966631][T22535] loop1: detected capacity change from 0 to 40427 [ 1707.076198][T22535] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 1707.085197][T22535] F2FS-fs (loop1): Invalid uid value -1 [ 1712.146069][T22570] loop4: detected capacity change from 0 to 8 [ 1712.323875][T22570] SQUASHFS error: xz decompression failed, data probably corrupt [ 1712.332054][T22570] SQUASHFS error: Failed to read block 0x108: -5 [ 1712.338450][T22570] SQUASHFS error: Unable to read metadata cache entry [106] [ 1712.345856][T22570] SQUASHFS error: Unable to read inode 0x11f [ 1713.101346][T22578] loop1: detected capacity change from 0 to 2048 [ 1713.278223][T22578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1713.396186][T22580] loop2: detected capacity change from 0 to 8 [ 1713.759732][T22580] SQUASHFS error: xz decompression failed, data probably corrupt [ 1713.767695][T22580] SQUASHFS error: Failed to read block 0x108: -5 [ 1713.774167][T22580] SQUASHFS error: Unable to read metadata cache entry [106] [ 1713.781552][T22580] SQUASHFS error: Unable to read inode 0x11f [ 1716.684029][T22603] loop2: detected capacity change from 0 to 16 [ 1716.906808][T22603] erofs: (device loop2): mounted with root inode @ nid 36. [ 1717.707789][T21437] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1717.812061][T22618] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1719.010283][ T26] audit: type=1800 audit(4111195534.730:105): pid=22618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4854" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1719.287365][T22629] loop1: detected capacity change from 0 to 2048 [ 1719.390104][T22629] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1720.164058][T22634] loop0: detected capacity change from 0 to 2048 [ 1720.282941][T22634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1720.995702][T22637] loop2: detected capacity change from 0 to 2048 [ 1721.072463][T22637] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1721.374070][T22642] loop5: detected capacity change from 0 to 40427 [ 1721.460083][T22642] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 1721.468932][T22642] F2FS-fs (loop5): Invalid uid value -1 [ 1721.923273][T22654] loop2: detected capacity change from 0 to 512 [ 1723.306329][T22654] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1723.414445][T22654] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1723.431963][T22654] EXT4-fs (loop2): Remounting filesystem read-only [ 1723.439198][T22654] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4866: invalid indirect mapped block 1 (level 1) [ 1723.455709][T22654] EXT4-fs (loop2): Remounting filesystem read-only [ 1723.463774][T22654] EXT4-fs (loop2): 1 truncate cleaned up [ 1723.469627][T22654] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1723.565028][T22654] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.4866: bad inode number: 1 [ 1723.577137][T22654] EXT4-fs (loop2): Remounting filesystem read-only [ 1723.646367][T22648] loop0: detected capacity change from 0 to 2048 [ 1723.945552][T22648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1726.574253][T22673] loop5: detected capacity change from 0 to 16 [ 1727.407471][T22673] erofs: (device loop5): mounted with root inode @ nid 36. [ 1727.692175][T21437] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1727.717365][T22673] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1728.490365][ T26] audit: type=1800 audit(4111195544.210:106): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4872" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1728.635923][T22688] loop0: detected capacity change from 0 to 2048 [ 1728.777365][T22688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1729.974224][T22699] loop4: detected capacity change from 0 to 8 [ 1730.469938][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.476270][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.490691][T22699] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1730.533157][T22699] cramfs: Error -5 while decompressing! [ 1730.539199][T22699] cramfs: ffffffff961c9228(26)->ffff88805f148000(4096) [ 1730.546157][T22699] cramfs: Error -3 while decompressing! [ 1730.551855][T22699] cramfs: ffffffff961c9242(26)->ffff88805f149000(4096) [ 1730.558736][T22699] cramfs: Error -3 while decompressing! [ 1730.564341][T22699] cramfs: ffffffff961c925c(16)->ffff88805f14a000(4096) [ 1730.571322][T22699] cramfs: Error -5 while decompressing! [ 1730.576894][T22699] cramfs: ffffffff961c9228(26)->ffff88805f148000(4096) [ 1730.602680][T22699] cramfs: Error -5 while decompressing! [ 1730.608910][T22699] cramfs: ffffffff961c9228(26)->ffff88805f148000(4096) [ 1730.618410][ T26] audit: type=1800 audit(4111195546.330:107): pid=22699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4876" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1732.901042][T22723] loop0: detected capacity change from 0 to 32768 [ 1733.032398][T22723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4881 (22723) [ 1733.085105][T22723] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1733.094169][T22723] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1733.102625][T22723] BTRFS info (device loop0): enabling auto defrag [ 1733.109791][T22723] BTRFS info (device loop0): max_inline at 0 [ 1733.115868][T22723] BTRFS info (device loop0): using free space tree [ 1733.122461][T22723] BTRFS info (device loop0): has skinny extents [ 1733.835047][T22736] loop5: detected capacity change from 0 to 32768 [ 1734.002806][T22736] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.4885 (22736) [ 1735.399244][T22759] loop1: detected capacity change from 0 to 8 [ 1736.739357][T22759] SQUASHFS error: xz decompression failed, data probably corrupt [ 1736.747410][T22759] SQUASHFS error: Failed to read block 0x108: -5 [ 1736.753993][T22759] SQUASHFS error: Unable to read metadata cache entry [106] [ 1736.761310][T22759] SQUASHFS error: Unable to read inode 0x11f [ 1737.230139][T22723] BTRFS error (device loop0): open_ctree failed: -12 [ 1737.335454][T22778] loop4: detected capacity change from 0 to 8 [ 1737.404578][T22778] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1737.493151][T22778] cramfs: Error -5 while decompressing! [ 1737.498806][T22778] cramfs: ffffffff961cd228(26)->ffff888058214000(4096) [ 1737.505926][T22778] cramfs: Error -3 while decompressing! [ 1737.511552][T22778] cramfs: ffffffff961cd242(26)->ffff888044e0c000(4096) [ 1737.518565][T22778] cramfs: Error -3 while decompressing! [ 1737.524187][T22778] cramfs: ffffffff961cd25c(16)->ffff8880710e3000(4096) [ 1737.531831][T22778] cramfs: Error -5 while decompressing! [ 1737.537466][T22778] cramfs: ffffffff961cd228(26)->ffff888058214000(4096) [ 1737.601092][ T26] audit: type=1800 audit(4111195553.260:108): pid=22778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4890" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1738.287806][T22786] loop4: detected capacity change from 0 to 512 [ 1738.648201][T22783] loop0: detected capacity change from 0 to 40427 [ 1738.791033][T22786] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1739.174663][T22786] EXT4-fs (loop4): 1 truncate cleaned up [ 1739.199976][T22786] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1739.312161][T22783] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 1739.321135][T22783] F2FS-fs (loop0): Invalid uid value -1 [ 1739.373985][T22794] loop5: detected capacity change from 0 to 2048 [ 1739.395455][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4895'. [ 1739.574200][T22794] NILFS (loop5): The specified checkpoint is not a snapshot (checkpoint number=2) [ 1739.577540][T22801] loop2: detected capacity change from 0 to 16 [ 1739.674845][T22801] erofs: (device loop2): mounted with root inode @ nid 36. [ 1739.877262][T21437] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1739.898535][T22805] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1739.929860][ T26] audit: type=1800 audit(4111195555.630:109): pid=22805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4896" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1740.066973][T22805] lo speed is unknown, defaulting to 1000 [ 1740.665903][T22812] loop4: detected capacity change from 0 to 16 [ 1741.017031][T22812] erofs: (device loop4): mounted with root inode @ nid 36. [ 1741.132603][T22815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1741.498660][T22809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.806322][T22817] lo speed is unknown, defaulting to 1000 [ 1742.858602][ T26] audit: type=1800 audit(4111195558.570:110): pid=22816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4898" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1742.864755][ T4183] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1742.960183][T22505] Bluetooth: hci5: command 0x1003 tx timeout [ 1742.966527][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 1745.010860][ T4266] Bluetooth: hci5: command 0x1001 tx timeout [ 1745.027368][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 1745.033779][T22836] loop1: detected capacity change from 0 to 128 [ 1745.081530][T22836] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1745.103192][T22836] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1745.159220][T22836] vfat filesystem being mounted at /347/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1746.256327][T22842] loop4: detected capacity change from 0 to 2048 [ 1746.465527][T22845] loop1: detected capacity change from 0 to 40427 [ 1746.485811][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4907'. [ 1746.525396][T22845] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 1746.534457][T22845] F2FS-fs (loop1): Invalid uid value -1 [ 1746.549085][T22842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1746.950668][T22848] loop2: detected capacity change from 0 to 2048 [ 1747.090209][ T4266] Bluetooth: hci5: command 0x1009 tx timeout [ 1748.066369][T22848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1748.370226][T22858] loop4: detected capacity change from 0 to 16 [ 1748.475294][T22858] erofs: (device loop4): mounted with root inode @ nid 36. [ 1748.579772][ T4183] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1748.675279][T22861] lo speed is unknown, defaulting to 1000 [ 1748.794789][ T26] audit: type=1800 audit(4111195564.510:111): pid=22860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4911" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1749.053822][T22865] loop1: detected capacity change from 0 to 512 [ 1749.084487][T22865] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1749.135360][T22865] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1749.222248][T22865] EXT4-fs (loop1): Remounting filesystem read-only [ 1749.229455][T22865] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4912: invalid indirect mapped block 1 (level 1) [ 1749.246848][T22865] EXT4-fs (loop1): Remounting filesystem read-only [ 1749.273628][T22865] EXT4-fs (loop1): 1 truncate cleaned up [ 1749.286077][T22865] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1750.380328][T22873] loop4: detected capacity change from 0 to 32768 [ 1750.492463][T22865] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.4912: bad inode number: 1 [ 1750.510433][T22873] [ 1750.510433][T22873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1750.510433][T22873] [ 1750.532156][T22873] jfs filesystem being mounted at /378/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1750.756424][T22873] [ 1750.756424][T22873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1750.756424][T22873] [ 1750.767795][T22873] [ 1750.767795][T22873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1750.767795][T22873] [ 1750.778353][T22873] [ 1750.778353][T22873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1750.778353][T22873] [ 1750.792162][T22873] [ 1750.792162][T22873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1750.792162][T22873] [ 1750.805446][T22873] [ 1750.805446][T22873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1750.805446][T22873] [ 1750.846508][ T278] [ 1750.846508][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1750.846508][ T278] [ 1751.475442][T22865] EXT4-fs (loop1): Remounting filesystem read-only [ 1751.707696][T15494] [ 1751.707696][T15494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1751.707696][T15494] [ 1751.714742][T22882] loop5: detected capacity change from 0 to 128 [ 1751.728065][T22881] loop2: detected capacity change from 0 to 2048 [ 1751.744906][T15494] [ 1751.744906][T15494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1751.744906][T15494] [ 1751.782670][ T278] [ 1751.782670][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1751.782670][ T278] [ 1751.804903][T14791] [ 1751.804903][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1751.804903][T14791] [ 1751.841067][T14791] [ 1751.841067][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1751.841067][T14791] [ 1751.853294][T22882] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1752.069604][T22881] NILFS (loop2): The specified checkpoint is not a snapshot (checkpoint number=2) [ 1752.811178][T22882] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1752.831832][T22882] vfat filesystem being mounted at /18/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1753.153685][T22896] loop2: detected capacity change from 0 to 128 [ 1753.160690][T22891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1754.144186][T22896] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1754.258988][T22896] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1754.281426][T22908] loop4: detected capacity change from 0 to 512 [ 1754.319119][T22896] vfat filesystem being mounted at /511/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1755.461600][T22902] loop1: detected capacity change from 0 to 2048 [ 1755.466345][T22910] loop0: detected capacity change from 0 to 32768 [ 1755.474768][T22904] loop5: detected capacity change from 0 to 2048 [ 1755.745216][T22902] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1756.804073][T22910] [ 1756.804073][T22910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1756.804073][T22910] [ 1756.823061][T22910] jfs filesystem being mounted at /173/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1756.911321][T22910] [ 1756.911321][T22910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1756.911321][T22910] [ 1756.921933][T22910] [ 1756.921933][T22910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1756.921933][T22910] [ 1756.932611][T22910] [ 1756.932611][T22910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1756.932611][T22910] [ 1756.943163][T22910] [ 1756.943163][T22910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1756.943163][T22910] [ 1756.953682][T22910] [ 1756.953682][T22910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1756.953682][T22910] [ 1757.473676][T22908] EXT4-fs: failed to create workqueue [ 1757.886686][T22908] EXT4-fs (loop4): mount failed [ 1757.947232][ T278] [ 1757.947232][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1757.947232][ T278] [ 1758.001280][ T5237] [ 1758.001280][ T5237] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.001280][ T5237] [ 1758.022345][T22904] NILFS (loop5): The specified checkpoint is not a snapshot (checkpoint number=2) [ 1758.031895][ T5237] [ 1758.031895][ T5237] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.031895][ T5237] [ 1758.075786][ T278] [ 1758.075786][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.075786][ T278] [ 1758.167913][T18862] [ 1758.167913][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.167913][T18862] [ 1758.193509][T18862] [ 1758.193509][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.193509][T18862] [ 1758.209214][T22920] loop4: detected capacity change from 0 to 512 [ 1758.341767][T22920] EXT4-fs error (device loop4): ext4_fill_super:4841: inode #2: comm syz.4.4928: casefold flag without casefold feature [ 1758.390784][T22917] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1759.469191][T22928] loop1: detected capacity change from 0 to 32768 [ 1759.471172][T22917] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1759.488535][T22920] EXT4-fs (loop4): get root inode failed [ 1759.495438][T22920] EXT4-fs (loop4): mount failed [ 1759.809056][T22928] [ 1759.809056][T22928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1759.809056][T22928] [ 1759.824789][T22928] jfs filesystem being mounted at /353/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1759.915824][T22928] [ 1759.915824][T22928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1759.915824][T22928] [ 1759.926581][T22928] [ 1759.926581][T22928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1759.926581][T22928] [ 1759.937322][T22928] [ 1759.937322][T22928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1759.937322][T22928] [ 1759.948030][T22928] [ 1759.948030][T22928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1759.948030][T22928] [ 1759.958751][T22928] [ 1759.958751][T22928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1759.958751][T22928] [ 1760.041958][ T277] [ 1760.041958][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1760.041958][ T277] [ 1760.949799][T21870] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1761.199579][ T9] [ 1761.199579][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1761.199579][ T9] [ 1761.213156][T21870] usb 1-1: Using ep0 maxpacket: 16 [ 1761.243429][ T9] [ 1761.243429][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1761.243429][ T9] [ 1761.305055][ T277] [ 1761.305055][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1761.305055][ T277] [ 1761.324939][T15134] [ 1761.324939][T15134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1761.324939][T15134] [ 1761.338605][T15134] [ 1761.338605][T15134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1761.338605][T15134] [ 1761.471452][T21870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.491642][T21870] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1762.183520][T22939] loop5: detected capacity change from 0 to 16 [ 1762.276148][T21870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1762.287637][T21870] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1762.298304][T21870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.310015][T22939] erofs: (device loop5): mounted with root inode @ nid 36. [ 1762.311910][T21870] usb 1-1: config 0 descriptor?? [ 1762.484859][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4935'. [ 1762.540076][T21870] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1764.029864][ T26] audit: type=1800 audit(4111195579.750:112): pid=22939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4934" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1764.083535][T21437] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1764.094070][T22950] lo speed is unknown, defaulting to 1000 [ 1764.156236][T22958] loop4: detected capacity change from 0 to 128 [ 1764.157838][ T1112] usb 1-1: USB disconnect, device number 19 [ 1764.231325][T22958] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1764.439353][T22961] loop0: detected capacity change from 0 to 40427 [ 1764.484672][T22964] loop5: detected capacity change from 0 to 2048 [ 1764.489264][T22958] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1764.509037][T22967] loop1: detected capacity change from 0 to 512 [ 1764.523412][T22961] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 1764.532406][T22961] F2FS-fs (loop0): Invalid uid value -1 [ 1764.542928][T22958] vfat filesystem being mounted at /383/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1764.565697][T22964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1764.695063][T22967] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.4941: casefold flag without casefold feature [ 1764.903232][T22967] EXT4-fs (loop1): get root inode failed [ 1764.919911][T22967] EXT4-fs (loop1): mount failed [ 1766.115197][T22967] loop1: detected capacity change from 0 to 1024 [ 1766.134008][T22977] lo speed is unknown, defaulting to 1000 [ 1766.164340][T22967] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1766.171747][T22967] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1766.180555][T22967] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1766.187859][T22967] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 1766.518958][T22987] loop1: detected capacity change from 0 to 16 [ 1766.563423][T22987] erofs: (device loop1): mounted with root inode @ nid 36. [ 1767.808705][T22992] loop5: detected capacity change from 0 to 32768 [ 1769.207540][T22992] [ 1769.207540][T22992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1769.207540][T22992] [ 1770.463334][T22992] jfs filesystem being mounted at /23/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1770.576687][T22995] loop2: detected capacity change from 0 to 2048 [ 1770.630052][T22116] [ 1770.630052][T22116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1770.630052][T22116] [ 1770.697395][T22116] [ 1770.697395][T22116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1770.697395][T22116] [ 1770.788396][T22995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1771.002000][T23006] loop0: detected capacity change from 0 to 8 [ 1772.330759][T23006] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1772.381003][T23003] cramfs: Error -5 while decompressing! [ 1772.386590][T23003] cramfs: ffffffff961c9228(26)->ffff888044943000(4096) [ 1772.393551][T23003] cramfs: Error -3 while decompressing! [ 1772.399119][T23003] cramfs: ffffffff961c9242(26)->ffff888044944000(4096) [ 1772.406041][T23003] cramfs: Error -3 while decompressing! [ 1772.411637][T23003] cramfs: ffffffff961c925c(16)->ffff888044dc3000(4096) [ 1772.418586][T23003] cramfs: Error -5 while decompressing! [ 1772.424162][T23003] cramfs: ffffffff961c9228(26)->ffff888044943000(4096) [ 1772.439098][ T26] audit: type=1800 audit(4111195588.150:113): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4948" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1773.973421][T23017] loop5: detected capacity change from 0 to 32768 [ 1774.223846][T23017] [ 1774.223846][T23017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1774.223846][T23017] [ 1774.238543][T23017] jfs filesystem being mounted at /24/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1774.319791][T23017] [ 1774.319791][T23017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1774.319791][T23017] [ 1774.330560][T23017] [ 1774.330560][T23017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1774.330560][T23017] [ 1774.341271][T23017] [ 1774.341271][T23017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1774.341271][T23017] [ 1774.351953][T23017] [ 1774.351953][T23017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1774.351953][T23017] [ 1774.362589][T23017] [ 1774.362589][T23017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1774.362589][T23017] [ 1774.630508][T23015] loop4: detected capacity change from 0 to 40427 [ 1775.590145][T23015] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 1775.599142][T23015] F2FS-fs (loop4): Invalid uid value -1 [ 1775.615382][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4950'. [ 1775.629936][ T278] [ 1775.629936][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1775.629936][ T278] [ 1775.686165][T18944] [ 1775.686165][T18944] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1775.686165][T18944] [ 1775.875142][T18944] [ 1775.875142][T18944] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1775.875142][T18944] [ 1775.907382][T22116] [ 1775.907382][T22116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1775.907382][T22116] [ 1775.910893][T23023] loop1: detected capacity change from 0 to 2048 [ 1775.954757][ T278] [ 1775.954757][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1775.954757][ T278] [ 1775.979855][T22116] [ 1775.979855][T22116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1775.979855][T22116] [ 1777.080300][T23029] loop0: detected capacity change from 0 to 32768 [ 1778.489471][T23023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1779.100482][T23031] overlayfs: failed to resolve './file1': -2 [ 1779.119451][T23029] [ 1779.119451][T23029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1779.119451][T23029] [ 1779.141001][T23029] jfs filesystem being mounted at /178/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1779.354576][T18862] [ 1779.354576][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1779.354576][T18862] [ 1779.379813][T18862] [ 1779.379813][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1779.379813][T18862] [ 1781.551956][T23043] loop0: detected capacity change from 0 to 16 [ 1782.977295][T23043] erofs: (device loop0): mounted with root inode @ nid 36. [ 1783.409778][T15534] Bluetooth: hci4: command 0x0406 tx timeout [ 1783.571308][T23050] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1783.589779][T23050] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1784.618572][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'. [ 1786.334615][T23088] loop4: detected capacity change from 0 to 32768 [ 1786.507732][T23088] [ 1786.507732][T23088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1786.507732][T23088] [ 1786.521522][T23088] jfs filesystem being mounted at /389/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1786.543804][T23088] [ 1786.543804][T23088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1786.543804][T23088] [ 1786.554498][T23088] [ 1786.554498][T23088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1786.554498][T23088] [ 1786.565096][T23088] [ 1786.565096][T23088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1786.565096][T23088] [ 1786.575702][T23088] [ 1786.575702][T23088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1786.575702][T23088] [ 1786.586305][T23088] [ 1786.586305][T23088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1786.586305][T23088] [ 1786.762490][ T277] [ 1786.762490][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1786.762490][ T277] [ 1786.832483][T23091] loop5: detected capacity change from 0 to 2048 [ 1787.042540][T23091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1787.455874][T22152] [ 1787.455874][T22152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1787.455874][T22152] [ 1787.476516][T22152] [ 1787.476516][T22152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1787.476516][T22152] [ 1787.690203][ T277] [ 1787.690203][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1787.690203][ T277] [ 1788.124318][T14791] [ 1788.124318][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1788.124318][T14791] [ 1788.164347][T14791] [ 1788.164347][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1788.164347][T14791] [ 1788.503988][T23099] loop0: detected capacity change from 0 to 128 [ 1788.601420][T23099] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1788.683766][T23099] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1788.844097][T23099] vfat filesystem being mounted at /183/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1789.860314][T23104] loop5: detected capacity change from 0 to 40427 [ 1789.951442][T23105] loop1: detected capacity change from 0 to 16 [ 1789.971036][T23104] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1789.978905][T23104] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1790.037813][T23104] F2FS-fs (loop5): invalid crc value [ 1790.920722][T23105] erofs: (device loop1): mounted with root inode @ nid 36. [ 1790.997995][T23104] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1791.142079][ T4183] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1791.215270][T23119] lo speed is unknown, defaulting to 1000 [ 1791.238009][T23117] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1791.261679][ T26] audit: type=1800 audit(4111195606.980:114): pid=23117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4976" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1791.401148][T23104] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1791.408369][T23104] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1791.590124][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.596562][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.799234][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4980'. [ 1792.007915][T23134] overlayfs: failed to resolve './file1': -2 [ 1792.386988][T23141] loop0: detected capacity change from 0 to 32768 [ 1793.477142][T23141] [ 1793.477142][T23141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1793.477142][T23141] [ 1793.486585][T23139] loop4: detected capacity change from 0 to 2048 [ 1793.488427][T23141] jfs filesystem being mounted at /185/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1793.987558][T23144] loop2: detected capacity change from 0 to 8 [ 1794.906305][T18862] [ 1794.906305][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1794.906305][T18862] [ 1794.920873][T23144] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1794.949641][T23142] cramfs: Error -5 while decompressing! [ 1794.955284][T23142] cramfs: ffffffff961cd228(26)->ffff888058d1f000(4096) [ 1794.972430][T23139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1794.993339][T23142] cramfs: Error -3 while decompressing! [ 1794.999125][T18862] [ 1794.999125][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1794.999125][T18862] [ 1795.015584][T23142] cramfs: ffffffff961cd242(26)->ffff88805c8da000(4096) [ 1795.057267][T23142] cramfs: Error -3 while decompressing! [ 1795.090342][T23142] cramfs: ffffffff961cd25c(16)->ffff88805c8db000(4096) [ 1795.120909][T23142] cramfs: Error -5 while decompressing! [ 1795.141285][T23142] cramfs: ffffffff961cd228(26)->ffff888058d1f000(4096) [ 1795.156411][ T26] audit: type=1800 audit(4111195610.860:115): pid=23142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4983" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1796.894325][T23162] overlayfs: failed to resolve './file1': -2 [ 1798.874291][T23168] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1798.888830][T23168] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1798.904476][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4994'. [ 1799.851049][T23190] loop4: detected capacity change from 0 to 40427 [ 1802.787232][T23206] loop1: detected capacity change from 0 to 1024 [ 1803.205309][T23213] loop5: detected capacity change from 0 to 32768 [ 1804.675651][T23216] loop2: detected capacity change from 0 to 8 [ 1806.257941][T23217] loop0: detected capacity change from 0 to 8 [ 1807.792857][T23219] loop1: detected capacity change from 0 to 16 [ 1807.853119][T23223] loop2: detected capacity change from 0 to 128 [ 1807.896652][T23222] loop0: detected capacity change from 0 to 2048 [ 1807.906818][T23219] erofs: (device loop1): mounted with root inode @ nid 36. [ 1808.003382][T23223] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1808.070325][ T4183] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1808.150266][T23224] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1808.162238][T23225] lo speed is unknown, defaulting to 1000 [ 1808.178291][ T26] audit: type=1800 audit(4111195623.890:116): pid=23224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5006" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1808.522602][T23223] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1808.550041][T23222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1808.616329][T23223] vfat filesystem being mounted at /524/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1808.695251][T23229] loop4: detected capacity change from 0 to 1024 [ 1809.558186][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5008'. [ 1809.595049][T23229] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1809.633815][T23229] EXT4-fs (loop4): Ignoring removed bh option [ 1809.679787][T23229] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1809.835736][T23249] loop5: detected capacity change from 0 to 128 [ 1809.843285][T23229] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1809.860758][T23245] loop2: detected capacity change from 0 to 2048 [ 1809.931270][T23249] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1809.953923][T23249] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1809.997895][T23249] vfat filesystem being mounted at /36/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1810.002713][T23245] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1811.318660][T23255] loop0: detected capacity change from 0 to 32768 [ 1811.616719][T23255] [ 1811.616719][T23255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1811.616719][T23255] [ 1811.629714][T23255] jfs filesystem being mounted at /191/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1811.712773][T23255] [ 1811.712773][T23255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1811.712773][T23255] [ 1811.723684][T23255] [ 1811.723684][T23255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1811.723684][T23255] [ 1811.734513][T23255] [ 1811.734513][T23255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1811.734513][T23255] [ 1811.745195][T23255] [ 1811.745195][T23255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1811.745195][T23255] [ 1811.755890][T23255] [ 1811.755890][T23255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1811.755890][T23255] [ 1812.473411][ T278] [ 1812.473411][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1812.473411][ T278] [ 1813.150624][ T9] [ 1813.150624][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1813.150624][ T9] [ 1813.186281][ T9] [ 1813.186281][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1813.186281][ T9] [ 1813.240977][ T277] [ 1813.240977][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1813.240977][ T277] [ 1813.269866][T18862] [ 1813.269866][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1813.269866][T18862] [ 1813.300047][T18862] [ 1813.300047][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1813.300047][T18862] [ 1813.578398][T23265] netlink: zone id is out of range [ 1814.074165][T23267] loop1: detected capacity change from 0 to 8 [ 1814.870286][T23267] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1814.905504][T23266] cramfs: Error -5 while decompressing! [ 1814.911312][T23266] cramfs: ffffffff961c9228(26)->ffff888047e0a000(4096) [ 1814.918228][T23266] cramfs: Error -3 while decompressing! [ 1814.923883][T23266] cramfs: ffffffff961c9242(26)->ffff888045420000(4096) [ 1814.930964][T23266] cramfs: Error -3 while decompressing! [ 1814.931527][T23270] loop5: detected capacity change from 0 to 16 [ 1814.937194][T23266] cramfs: ffffffff961c925c(16)->ffff888047de5000(4096) [ 1814.950084][T23266] cramfs: Error -5 while decompressing! [ 1814.955648][T23266] cramfs: ffffffff961c9228(26)->ffff888047e0a000(4096) [ 1814.970026][ T26] audit: type=1800 audit(4111195630.680:117): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5016" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1816.142096][T23277] loop4: detected capacity change from 0 to 32768 [ 1816.383104][T23270] erofs: (device loop5): mounted with root inode @ nid 36. [ 1816.690185][T23277] [ 1816.690185][T23277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1816.690185][T23277] [ 1816.726285][T23277] jfs filesystem being mounted at /398/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1817.084883][T23277] [ 1817.084883][T23277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1817.084883][T23277] [ 1817.095443][T23277] [ 1817.095443][T23277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1817.095443][T23277] [ 1817.105976][T23277] [ 1817.105976][T23277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1817.105976][T23277] [ 1817.116458][T23277] [ 1817.116458][T23277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1817.116458][T23277] [ 1817.127220][T23277] [ 1817.127220][T23277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1817.127220][T23277] [ 1817.151067][ T4183] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1817.184422][T23270] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1819.727953][ T26] audit: type=1800 audit(4111195632.930:118): pid=23270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5018" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1819.876368][ T278] [ 1819.876368][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1819.876368][ T278] [ 1819.916665][T23278] lo speed is unknown, defaulting to 1000 [ 1819.970014][ T5236] [ 1819.970014][ T5236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1819.970014][ T5236] [ 1820.067086][ T5236] [ 1820.067086][ T5236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1820.067086][ T5236] [ 1820.186315][ T277] [ 1820.186315][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1820.186315][ T277] [ 1820.213302][T14791] [ 1820.213302][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1820.213302][T14791] [ 1820.388187][T14791] [ 1820.388187][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1820.388187][T14791] [ 1820.458246][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5021'. [ 1821.360515][T23293] loop4: detected capacity change from 0 to 2048 [ 1821.447095][T23295] loop2: detected capacity change from 0 to 2048 [ 1822.281096][T23293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1822.303775][T23295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1823.588005][T23308] loop5: detected capacity change from 0 to 32768 [ 1823.688396][T23308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5025 (23308) [ 1823.715740][T23308] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1823.724595][T23308] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1823.732795][T23308] BTRFS info (device loop5): enabling auto defrag [ 1823.739301][T23308] BTRFS info (device loop5): max_inline at 0 [ 1823.745353][T23308] BTRFS info (device loop5): using free space tree [ 1823.751934][T23308] BTRFS info (device loop5): has skinny extents [ 1825.095966][T23322] loop0: detected capacity change from 0 to 32768 [ 1826.468579][T23322] [ 1826.468579][T23322] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1826.468579][T23322] [ 1826.480432][T23322] jfs filesystem being mounted at /193/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1828.660966][T23353] loop4: detected capacity change from 0 to 8 [ 1828.667749][T23353] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1828.691136][T23308] BTRFS error (device loop5): open_ctree failed: -12 [ 1828.743803][T23353] cramfs: Error -5 while decompressing! [ 1828.749555][T23353] cramfs: ffffffff961cd228(26)->ffff8880583a0000(4096) [ 1828.756940][T23353] cramfs: Error -3 while decompressing! [ 1828.762648][T23353] cramfs: ffffffff961cd242(26)->ffff888058b83000(4096) [ 1828.769818][T23353] cramfs: Error -3 while decompressing! [ 1828.775482][T23353] cramfs: ffffffff961cd25c(16)->ffff8880481a0000(4096) [ 1828.783119][T23353] cramfs: Error -5 while decompressing! [ 1828.788799][T23353] cramfs: ffffffff961cd228(26)->ffff8880583a0000(4096) [ 1828.859437][ T26] audit: type=1800 audit(4111195644.520:119): pid=23353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5032" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1828.892953][T13399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (13399) [ 1829.380310][T18862] [ 1829.380310][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1829.380310][T18862] [ 1829.529570][T18862] [ 1829.529570][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1829.529570][T18862] [ 1829.577895][T23363] loop1: detected capacity change from 0 to 2048 [ 1829.689239][T23366] loop4: detected capacity change from 0 to 2048 [ 1829.744229][T23363] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1829.844944][T23366] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1830.497590][T23355] ubi: mtd0 is already attached to ubi31 [ 1831.423645][T23377] loop5: detected capacity change from 0 to 2048 [ 1831.498143][T23377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1831.877272][T23385] loop4: detected capacity change from 0 to 32768 [ 1834.507997][T23385] [ 1834.507997][T23385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1834.507997][T23385] [ 1834.519375][T23385] jfs filesystem being mounted at /404/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1835.038859][T14791] [ 1835.038859][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1835.038859][T14791] [ 1835.081396][T14791] [ 1835.081396][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1835.081396][T14791] [ 1836.151558][T23394] loop4: detected capacity change from 0 to 8 [ 1836.400314][T23394] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1836.433037][T23392] cramfs: Error -5 while decompressing! [ 1836.438751][T23392] cramfs: ffffffff961c9228(26)->ffff888051ed1000(4096) [ 1836.445761][T23392] cramfs: Error -3 while decompressing! [ 1836.451361][T23392] cramfs: ffffffff961c9242(26)->ffff888051ed2000(4096) [ 1836.458277][T23392] cramfs: Error -3 while decompressing! [ 1836.463961][T23392] cramfs: ffffffff961c925c(16)->ffff888051ed3000(4096) [ 1836.470955][T23392] cramfs: Error -5 while decompressing! [ 1836.476737][T23392] cramfs: ffffffff961c9228(26)->ffff888051ed1000(4096) [ 1836.483992][ T26] audit: type=1800 audit(4111195652.200:120): pid=23392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5042" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1836.620465][T23401] loop0: detected capacity change from 0 to 2048 [ 1836.939042][T23401] NILFS (loop0): The specified checkpoint is not a snapshot (checkpoint number=2) [ 1837.956935][T23414] loop4: detected capacity change from 0 to 2048 [ 1838.449063][T23406] loop5: detected capacity change from 0 to 32768 [ 1838.460397][T23414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1838.577363][T23421] loop0: detected capacity change from 0 to 16 [ 1838.626829][T23406] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1838.639853][T23406] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1838.660463][T23421] erofs: (device loop0): mounted with root inode @ nid 36. [ 1838.676478][T23406] BTRFS info (device loop5): enabling auto defrag [ 1838.715672][T23406] BTRFS info (device loop5): max_inline at 0 [ 1838.815227][ T4183] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1838.851139][T23423] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1838.870513][T23424] lo speed is unknown, defaulting to 1000 [ 1838.879578][ T26] audit: type=1800 audit(4111195654.590:121): pid=23423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5050" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1839.289749][T23406] BTRFS info (device loop5): using free space tree [ 1839.369904][T23406] BTRFS info (device loop5): has skinny extents [ 1839.618341][T23426] loop1: detected capacity change from 0 to 40427 [ 1839.710466][T23426] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 1839.719392][T23426] F2FS-fs (loop1): Invalid uid value -1 [ 1840.311584][T23406] BTRFS error (device loop5): open_ctree failed: -12 [ 1840.318383][T13399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (13399) [ 1841.356569][T23463] loop5: detected capacity change from 0 to 8 [ 1842.120676][T23463] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1842.184262][T23461] cramfs: Error -5 while decompressing! [ 1842.189935][T23461] cramfs: ffffffff961cd228(26)->ffff888046c4c000(4096) [ 1842.196856][T23461] cramfs: Error -3 while decompressing! [ 1842.202467][T23461] cramfs: ffffffff961cd242(26)->ffff888046d1f000(4096) [ 1842.209760][T23461] cramfs: Error -3 while decompressing! [ 1842.215736][T23461] cramfs: ffffffff961cd25c(16)->ffff888074451000(4096) [ 1842.222861][T23461] cramfs: Error -5 while decompressing! [ 1842.228895][T23461] cramfs: ffffffff961cd228(26)->ffff888046c4c000(4096) [ 1842.236531][ T26] audit: type=1800 audit(4111195657.950:122): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5057" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1843.704212][T23477] loop5: detected capacity change from 0 to 2048 [ 1843.858503][T23477] NILFS (loop5): The specified checkpoint is not a snapshot (checkpoint number=2) [ 1843.918460][T23479] loop1: detected capacity change from 0 to 16 [ 1844.015670][T23479] erofs: (device loop1): mounted with root inode @ nid 36. [ 1844.019974][T23481] loop0: detected capacity change from 0 to 16 [ 1844.511140][T23486] lo speed is unknown, defaulting to 1000 [ 1844.780267][ T26] audit: type=1800 audit(4111195660.410:123): pid=23485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5063" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1844.800079][ T4183] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1844.833460][T23481] erofs: (device loop0): mounted with root inode @ nid 36. [ 1845.095830][ T4183] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1845.119173][T23492] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1845.167434][T23494] lo speed is unknown, defaulting to 1000 [ 1845.609715][ T26] audit: type=1800 audit(4111195660.860:124): pid=23492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5064" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1845.856314][T23499] loop0: detected capacity change from 0 to 512 [ 1845.900934][T23499] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1846.012721][T23499] EXT4-fs (loop0): 1 truncate cleaned up [ 1846.026909][T23499] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1846.062312][T23500] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1846.071714][T23500] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1846.372812][T23510] loop4: detected capacity change from 0 to 512 [ 1846.382548][T23509] loop1: detected capacity change from 0 to 128 [ 1846.446458][T23510] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1846.461176][T23509] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1846.507471][T23509] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1846.521717][T23510] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1846.554056][T23510] EXT4-fs (loop4): Remounting filesystem read-only [ 1846.566547][T23510] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5070: invalid indirect mapped block 1 (level 1) [ 1846.647815][T23509] vfat filesystem being mounted at /387/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1846.716648][T23510] EXT4-fs (loop4): Remounting filesystem read-only [ 1846.887921][T23510] EXT4-fs (loop4): 1 truncate cleaned up [ 1847.824061][T23510] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1848.855408][T23510] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.5070: bad inode number: 1 [ 1848.878750][T23510] EXT4-fs (loop4): Remounting filesystem read-only [ 1849.076226][T23528] loop1: detected capacity change from 0 to 40427 [ 1849.483445][T23528] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 1849.492588][T23528] F2FS-fs (loop1): Invalid uid value -1 [ 1850.118537][T23542] loop2: detected capacity change from 0 to 8 [ 1851.481687][T20751] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1851.929734][T20751] usb 1-1: Using ep0 maxpacket: 16 [ 1852.260290][T23542] SQUASHFS error: xz decompression failed, data probably corrupt [ 1852.268075][T23542] SQUASHFS error: Failed to read block 0x108: -5 [ 1852.274456][T23542] SQUASHFS error: Unable to read metadata cache entry [106] [ 1852.281748][T23542] SQUASHFS error: Unable to read inode 0x11f [ 1852.450606][T20751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.466229][T20751] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1852.479847][T20751] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1852.489847][T20751] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1852.509736][T20751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.599749][ T1109] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1852.631645][T20751] usb 1-1: config 0 descriptor?? [ 1852.678634][T20751] usb 1-1: can't set config #0, error -71 [ 1852.866103][T20751] usb 1-1: USB disconnect, device number 20 [ 1853.749542][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.756229][ T1109] usb 5-1: Using ep0 maxpacket: 16 [ 1853.762334][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.841050][T23562] loop0: detected capacity change from 0 to 40427 [ 1853.945334][T23562] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1853.953150][T23562] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1853.959812][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.968976][T23562] F2FS-fs (loop0): invalid crc value [ 1853.978898][ T1109] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1854.170494][ T1109] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.177257][ T1109] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1854.192548][T23562] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1854.491508][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.055645][ T1109] usb 5-1: config 0 descriptor?? [ 1855.101715][T23579] loop2: detected capacity change from 0 to 2048 [ 1855.112849][T23562] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1855.120777][T23562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1855.184530][ T1109] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1855.252296][T23579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1855.361229][ T1109] usb 5-1: USB disconnect, device number 4 [ 1855.731270][T23590] loop1: detected capacity change from 0 to 16 [ 1856.224717][T23590] erofs: (device loop1): mounted with root inode @ nid 36. [ 1856.231638][T23598] loop4: detected capacity change from 0 to 1024 [ 1856.316774][T23598] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1856.397883][ T4183] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1856.420809][T23594] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1856.442369][T23600] lo speed is unknown, defaulting to 1000 [ 1856.672555][ T26] audit: type=1800 audit(4111195672.160:125): pid=23594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5091" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1856.691613][T23598] EXT4-fs (loop4): Ignoring removed bh option [ 1856.712332][T23598] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1856.950866][T23598] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1857.301116][T23605] loop5: detected capacity change from 0 to 40427 [ 1857.543654][T23605] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 1857.552803][T23605] F2FS-fs (loop5): Invalid uid value -1 [ 1859.613515][T23625] loop0: detected capacity change from 0 to 16 [ 1859.749814][T23625] erofs: (device loop0): mounted with root inode @ nid 36. [ 1859.999810][ T4183] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1860.018693][T23636] lo speed is unknown, defaulting to 1000 [ 1860.028380][T23635] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1860.050946][ T26] audit: type=1800 audit(4111195675.770:126): pid=23635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5092" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1860.732647][T23640] loop0: detected capacity change from 0 to 2048 [ 1861.827005][T23640] NILFS (loop0): The specified checkpoint is not a snapshot (checkpoint number=2) [ 1861.866957][T23646] loop1: detected capacity change from 0 to 40427 [ 1861.905731][T23645] loop2: detected capacity change from 0 to 2048 [ 1861.955387][T23648] loop4: detected capacity change from 0 to 16 [ 1861.961915][T23646] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1861.970206][T23646] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1861.981844][T23646] F2FS-fs (loop1): invalid crc value [ 1861.985930][T23645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1862.043435][T23646] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1862.122228][T23648] erofs: (device loop4): mounted with root inode @ nid 36. [ 1862.134684][T23646] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1862.142514][T23646] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1863.006312][ T4183] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1863.027508][T23655] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1863.046346][ T26] audit: type=1800 audit(4111195678.760:127): pid=23655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5104" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1863.089443][T23655] lo speed is unknown, defaulting to 1000 [ 1863.204689][T23661] loop0: detected capacity change from 0 to 8 [ 1863.215994][T23658] loop5: detected capacity change from 0 to 1024 [ 1863.290912][T23661] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1863.311168][T23658] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1863.317838][T23658] EXT4-fs (loop5): Ignoring removed bh option [ 1863.359757][T23658] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1863.375986][T23661] cramfs: Error -5 while decompressing! [ 1863.416117][T23661] cramfs: ffffffff961c9228(26)->ffff888045474000(4096) [ 1863.464934][T23661] cramfs: Error -3 while decompressing! [ 1863.503553][T23658] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1863.685616][T23661] cramfs: ffffffff961c9242(26)->ffff88807a070000(4096) [ 1863.737989][T23661] cramfs: Error -3 while decompressing! [ 1863.753658][T23661] cramfs: ffffffff961c925c(16)->ffff888072657000(4096) [ 1863.807027][T23661] cramfs: Error -5 while decompressing! [ 1863.865441][T23661] cramfs: ffffffff961c9228(26)->ffff888045474000(4096) [ 1863.901883][ T26] audit: type=1800 audit(4111195679.620:128): pid=23661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5107" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1864.355582][T23675] loop5: detected capacity change from 0 to 8 [ 1864.400499][T23675] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1864.435215][T23675] cramfs: Error -5 while decompressing! [ 1864.440996][T23675] cramfs: ffffffff961cd228(26)->ffff8880739b3000(4096) [ 1864.450706][T23675] cramfs: Error -3 while decompressing! [ 1864.456421][T23675] cramfs: ffffffff961cd242(26)->ffff88805782c000(4096) [ 1864.463411][T23675] cramfs: Error -3 while decompressing! [ 1864.468997][T23675] cramfs: ffffffff961cd25c(16)->ffff88807a3b5000(4096) [ 1864.476047][T23675] cramfs: Error -5 while decompressing! [ 1864.481710][T23675] cramfs: ffffffff961cd228(26)->ffff8880739b3000(4096) [ 1864.492669][ T26] audit: type=1800 audit(4111195680.200:129): pid=23675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5109" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1864.558780][T23678] loop4: detected capacity change from 0 to 16 [ 1864.728166][T23678] erofs: (device loop4): mounted with root inode @ nid 36. [ 1864.838338][T23676] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1864.868690][T23676] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1865.075000][ T4183] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1865.100396][T23683] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1865.177738][ T26] audit: type=1800 audit(4111195680.840:130): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5111" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1865.532981][T23682] lo speed is unknown, defaulting to 1000 [ 1867.636316][T23688] loop5: detected capacity change from 0 to 8 [ 1867.785873][T23691] loop4: detected capacity change from 0 to 40427 [ 1867.830600][T23688] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1867.841577][T23688] cramfs: Error -5 while decompressing! [ 1867.847154][T23688] cramfs: ffffffff961c9228(26)->ffff888071723000(4096) [ 1867.854150][T23688] cramfs: Error -3 while decompressing! [ 1867.859774][T23688] cramfs: ffffffff961c9242(26)->ffff8880589e8000(4096) [ 1867.866672][T23688] cramfs: Error -3 while decompressing! [ 1867.872296][T23688] cramfs: ffffffff961c925c(16)->ffff8880589e9000(4096) [ 1867.879263][T23688] cramfs: Error -5 while decompressing! [ 1867.884957][T23688] cramfs: ffffffff961c9228(26)->ffff888071723000(4096) [ 1867.892110][ T26] audit: type=1800 audit(4111195683.610:131): pid=23688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5122" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1867.989137][T23691] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1867.997101][T23691] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1868.017247][T23692] Device name cannot be null; rc = [-22] [ 1868.045331][T23691] F2FS-fs (loop4): invalid crc value [ 1868.186652][T23691] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1868.279882][T23691] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1868.287109][T23691] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1868.358484][T23696] loop5: detected capacity change from 0 to 2048 [ 1868.430421][T23696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1869.587873][T23704] loop0: detected capacity change from 0 to 512 [ 1869.672736][T23710] loop1: detected capacity change from 0 to 512 [ 1869.759977][T23704] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1869.785061][T23710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1869.929072][T23716] loop2: detected capacity change from 0 to 1024 [ 1870.013787][T23710] EXT4-fs (loop1): 1 truncate cleaned up [ 1870.029757][T23710] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1870.129194][T23704] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1870.164751][T23704] EXT4-fs (loop0): Remounting filesystem read-only [ 1870.884475][T23704] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5115: invalid indirect mapped block 1 (level 1) [ 1870.920351][T23716] EXT4-fs (loop2): Ignoring removed oldalloc option [ 1870.927165][T23716] EXT4-fs (loop2): Ignoring removed bh option [ 1870.940679][T23704] EXT4-fs (loop0): Remounting filesystem read-only [ 1870.959978][T23716] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1870.960650][T23704] EXT4-fs (loop0): 1 truncate cleaned up [ 1871.199849][T23704] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 1872.912600][T23716] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1872.942999][T23736] loop5: detected capacity change from 0 to 8 [ 1874.607896][T23736] SQUASHFS error: xz decompression failed, data probably corrupt [ 1874.615786][T23736] SQUASHFS error: Failed to read block 0x108: -5 [ 1874.622193][T23736] SQUASHFS error: Unable to read metadata cache entry [106] [ 1874.629498][T23736] SQUASHFS error: Unable to read inode 0x11f [ 1874.939774][T20059] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1875.286625][T23749] loop2: detected capacity change from 0 to 8 [ 1875.319761][T20059] usb 5-1: Using ep0 maxpacket: 16 [ 1875.330407][T23749] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1875.355326][T23749] cramfs: Error -5 while decompressing! [ 1875.361135][T23749] cramfs: ffffffff961cd228(26)->ffff888071544000(4096) [ 1875.368143][T23749] cramfs: Error -3 while decompressing! [ 1875.373846][T23749] cramfs: ffffffff961cd242(26)->ffff888071278000(4096) [ 1875.380893][T23749] cramfs: Error -3 while decompressing! [ 1875.386783][T23749] cramfs: ffffffff961cd25c(16)->ffff88805c8f4000(4096) [ 1875.393905][T23749] cramfs: Error -5 while decompressing! [ 1875.399535][T23749] cramfs: ffffffff961cd228(26)->ffff888071544000(4096) [ 1875.406834][ T26] audit: type=1800 audit(4111195691.120:132): pid=23749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5126" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1875.432624][T23750] xt_limit: Overflow, try lower: 330673899/4200216962 [ 1875.456174][T23740] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1875.519874][T23740] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1875.549997][T20059] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.617292][T20059] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1875.648884][T23760] loop2: detected capacity change from 0 to 16 [ 1875.679892][T20059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1875.704375][T20059] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1875.753850][T23760] erofs: (device loop2): mounted with root inode @ nid 36. [ 1875.760376][T20059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.800796][T20059] usb 5-1: config 0 descriptor?? [ 1876.765133][ T4183] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1876.811811][ T26] audit: type=1800 audit(4111195692.490:133): pid=23773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5128" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1876.937457][T23774] lo speed is unknown, defaulting to 1000 [ 1877.054355][T20059] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1877.236024][T23778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1878.109129][T23782] loop5: detected capacity change from 0 to 2048 [ 1878.178976][T23787] loop1: detected capacity change from 0 to 16 [ 1878.274958][T23787] erofs: (device loop1): mounted with root inode @ nid 36. [ 1879.207998][T23791] loop2: detected capacity change from 0 to 32768 [ 1879.322823][T20066] usb 5-1: USB disconnect, device number 5 [ 1879.497687][T23782] NILFS (loop5): The specified checkpoint is not a snapshot (checkpoint number=2) [ 1881.504396][T23791] [ 1881.504396][T23791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1881.504396][T23791] [ 1881.515607][T23791] jfs filesystem being mounted at /543/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1882.047280][T12527] [ 1882.047280][T12527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1882.047280][T12527] [ 1882.489967][T12527] [ 1882.489967][T12527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1882.489967][T12527] [ 1883.958532][T23814] loop1: detected capacity change from 0 to 8 [ 1883.969390][T23815] loop4: detected capacity change from 0 to 8 [ 1884.497526][T23814] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1884.685013][T23811] cramfs: Error -5 while decompressing! [ 1884.690639][T23811] cramfs: ffffffff961c9228(26)->ffff88804660b000(4096) [ 1884.697537][T23811] cramfs: Error -3 while decompressing! [ 1884.703123][T23811] cramfs: ffffffff961c9242(26)->ffff888071424000(4096) [ 1884.710028][T23811] cramfs: Error -3 while decompressing! [ 1884.715576][T23811] cramfs: ffffffff961c925c(16)->ffff888044c28000(4096) [ 1884.722566][T23811] cramfs: Error -5 while decompressing! [ 1884.728120][T23811] cramfs: ffffffff961c9228(26)->ffff88804660b000(4096) [ 1884.735356][ T26] audit: type=1800 audit(4111195700.460:134): pid=23811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5139" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1884.876669][T23815] SQUASHFS error: xz decompression failed, data probably corrupt [ 1884.884783][T23815] SQUASHFS error: Failed to read block 0x108: -5 [ 1884.891189][T23815] SQUASHFS error: Unable to read metadata cache entry [106] [ 1884.898486][T23815] SQUASHFS error: Unable to read inode 0x11f [ 1884.925143][T23817] loop0: detected capacity change from 0 to 2048 [ 1885.630914][T23817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1885.684601][T23831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5145'. [ 1886.056019][T23841] loop1: detected capacity change from 0 to 8 [ 1886.118445][T23841] SQUASHFS error: xz decompression failed, data probably corrupt [ 1886.126525][T23841] SQUASHFS error: Failed to read block 0x108: -5 [ 1886.132989][T23841] SQUASHFS error: Unable to read metadata cache entry [106] [ 1886.140663][T23841] SQUASHFS error: Unable to read inode 0x11f [ 1886.938838][T23842] Device name cannot be null; rc = [-22] [ 1886.984384][T23846] loop4: detected capacity change from 0 to 8 [ 1886.995175][T23846] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1887.017282][T23846] cramfs: Error -5 while decompressing! [ 1887.047067][T23846] cramfs: ffffffff961cd228(26)->ffff88805a3eb000(4096) [ 1887.096773][T23846] cramfs: Error -3 while decompressing! [ 1887.102720][T23846] cramfs: ffffffff961cd242(26)->ffff888056fba000(4096) [ 1887.110121][T23846] cramfs: Error -3 while decompressing! [ 1887.129985][T23846] cramfs: ffffffff961cd25c(16)->ffff888044e88000(4096) [ 1887.185287][T23846] cramfs: Error -5 while decompressing! [ 1887.339877][T23846] cramfs: ffffffff961cd228(26)->ffff88805a3eb000(4096) [ 1887.454337][ T26] audit: type=1800 audit(4111195703.170:135): pid=23846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5147" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1887.573807][T23856] loop5: detected capacity change from 0 to 16 [ 1887.582862][T23858] loop0: detected capacity change from 0 to 2048 [ 1887.637782][T23856] erofs: (device loop5): mounted with root inode @ nid 36. [ 1887.648141][T23858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1887.802309][ T4183] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1888.083609][ T26] audit: type=1800 audit(4111195703.800:136): pid=23861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5150" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1888.289663][T23862] lo speed is unknown, defaulting to 1000 [ 1888.366196][T23865] loop4: detected capacity change from 0 to 16 [ 1888.529446][T23865] erofs: (device loop4): mounted with root inode @ nid 36. [ 1888.655938][ T4183] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1888.699206][T23871] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1888.714042][T23872] lo speed is unknown, defaulting to 1000 [ 1888.728014][ T26] audit: type=1800 audit(4111195704.440:137): pid=23871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5152" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1890.759128][T23881] loop1: detected capacity change from 0 to 32768 [ 1891.268304][T23885] loop5: detected capacity change from 0 to 8 [ 1891.323819][T23885] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1891.335551][T23881] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1891.344456][T23881] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1891.355124][T23881] BTRFS info (device loop1): enabling auto defrag [ 1891.362026][T23881] BTRFS info (device loop1): max_inline at 0 [ 1891.368032][T23881] BTRFS info (device loop1): using free space tree [ 1891.374730][T23881] BTRFS info (device loop1): has skinny extents [ 1891.383616][T23890] xt_limit: Overflow, try lower: 330673899/4200216962 [ 1891.469078][T23885] cramfs: Error -5 while decompressing! [ 1891.607066][T23885] cramfs: ffffffff961c9228(26)->ffff88804799f000(4096) [ 1892.359791][T23885] cramfs: Error -3 while decompressing! [ 1892.365462][T23885] cramfs: ffffffff961c9242(26)->ffff88807f013000(4096) [ 1892.374081][T23885] cramfs: Error -3 while decompressing! [ 1892.380096][T23885] cramfs: ffffffff961c925c(16)->ffff8880479fb000(4096) [ 1892.387432][T23885] cramfs: Error -5 while decompressing! [ 1892.393155][T23885] cramfs: ffffffff961c9228(26)->ffff88804799f000(4096) [ 1892.428692][ T26] audit: type=1800 audit(4111195708.140:138): pid=23885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5156" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1892.800774][T23914] loop0: detected capacity change from 0 to 32768 [ 1894.920992][T23914] [ 1894.920992][T23914] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1894.920992][T23914] [ 1894.935878][T23914] jfs filesystem being mounted at /225/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1896.271972][T23881] BTRFS error (device loop1): open_ctree failed: -12 [ 1896.284273][T10074] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (10074) [ 1896.317177][T18862] [ 1896.317177][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1896.317177][T18862] [ 1896.575340][T18862] [ 1896.575340][T18862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1896.575340][T18862] [ 1898.671738][T23935] loop1: detected capacity change from 0 to 256 [ 1898.719378][T23935] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1898.730819][T23935] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1898.746303][T23935] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1898.801648][T23937] loop4: detected capacity change from 0 to 2048 [ 1898.812133][T23935] exfat filesystem being mounted at /406/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1899.124509][T23937] NILFS (loop4): The specified checkpoint is not a snapshot (checkpoint number=2) [ 1900.448265][T23945] loop1: detected capacity change from 0 to 32768 [ 1900.474405][T23939] loop0: detected capacity change from 0 to 2048 [ 1901.625479][T23945] [ 1901.625479][T23945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1901.625479][T23945] [ 1901.640710][T23945] jfs filesystem being mounted at /407/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1901.665609][T23939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1901.809936][T23951] loop5: detected capacity change from 0 to 8 [ 1902.798332][T23950] loop4: detected capacity change from 0 to 2048 [ 1902.805775][ T26] audit: type=1800 audit(4111195717.600:139): pid=23945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5175" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 1903.242434][T23945] [ 1903.242434][T23945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.242434][T23945] [ 1903.253130][T23945] [ 1903.253130][T23945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.253130][T23945] [ 1903.263737][T23945] [ 1903.263737][T23945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.263737][T23945] [ 1903.274340][T23945] [ 1903.274340][T23945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.274340][T23945] [ 1903.281581][T23950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1903.284958][T23945] [ 1903.284958][T23945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.284958][T23945] [ 1903.308819][ T277] [ 1903.308819][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.308819][ T277] [ 1903.365295][T17582] [ 1903.365295][T17582] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.365295][T17582] [ 1903.376492][T17582] [ 1903.376492][T17582] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.376492][T17582] [ 1903.418515][T15134] [ 1903.418515][T15134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.418515][T15134] [ 1903.432520][T15134] [ 1903.432520][T15134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1903.432520][T15134] [ 1903.490895][ T278] ================================================================== [ 1903.499022][ T278] BUG: KASAN: use-after-free in __lock_acquire+0xf7/0x7c60 [ 1903.506232][ T278] Read of size 8 at addr ffff8880608340d8 by task jfsCommit/278 [ 1903.513870][ T278] [ 1903.516196][ T278] CPU: 1 PID: 278 Comm: jfsCommit Not tainted 5.15.180-syzkaller #0 [ 1903.524158][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1903.534209][ T278] Call Trace: [ 1903.537476][ T278] [ 1903.540394][ T278] dump_stack_lvl+0x168/0x230 [ 1903.545078][ T278] ? show_regs_print_info+0x20/0x20 [ 1903.550278][ T278] ? load_image+0x3b0/0x3b0 [ 1903.554792][ T278] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1903.560176][ T278] ? mark_lock+0x94/0x320 [ 1903.564511][ T278] print_address_description+0x60/0x2d0 [ 1903.570058][ T278] ? __lock_acquire+0xf7/0x7c60 [ 1903.574921][ T278] kasan_report+0xdf/0x130 [ 1903.579338][ T278] ? __lock_acquire+0xf7/0x7c60 [ 1903.584188][ T278] __lock_acquire+0xf7/0x7c60 [ 1903.588887][ T278] ? lock_chain_count+0x20/0x20 [ 1903.593736][ T278] ? finish_lock_switch+0x12f/0x280 [ 1903.598925][ T278] ? finish_lock_switch+0x12f/0x280 [ 1903.604111][ T278] ? finish_task_switch+0x12f/0x640 [ 1903.609351][ T278] ? verify_lock_unused+0x140/0x140 [ 1903.614540][ T278] ? __schedule+0x11c0/0x43b0 [ 1903.619235][ T278] ? rcu_lock_acquire+0x30/0x30 [ 1903.624101][ T278] lock_acquire+0x197/0x3f0 [ 1903.628607][ T278] ? __mutex_lock_common+0x45b/0x2390 [ 1903.633981][ T278] ? release_firmware_map_entry+0x190/0x190 [ 1903.639876][ T278] ? read_lock_is_recursive+0x10/0x10 [ 1903.645244][ T278] ? schedule+0x132/0x1e0 [ 1903.649576][ T278] ? preempt_count_add+0x8d/0x190 [ 1903.654615][ T278] _raw_spin_lock+0x2a/0x40 [ 1903.659129][ T278] ? __mutex_lock_common+0x45b/0x2390 [ 1903.664520][ T278] ? jfs_syncpt+0x21/0x90 [ 1903.668843][ T278] __mutex_lock_common+0x45b/0x2390 [ 1903.674038][ T278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1903.679933][ T278] ? mutex_lock_io_nested+0x60/0x60 [ 1903.685145][ T278] ? __lock_acquire+0x7c60/0x7c60 [ 1903.690168][ T278] ? do_raw_spin_lock+0x11d/0x280 [ 1903.695200][ T278] ? __rwlock_init+0x140/0x140 [ 1903.699975][ T278] mutex_lock_nested+0x17/0x20 [ 1903.704730][ T278] jfs_syncpt+0x21/0x90 [ 1903.708961][ T278] txEnd+0x2e1/0x520 [ 1903.712841][ T278] jfs_lazycommit+0x5ba/0xb20 [ 1903.717503][ T278] ? txFreelock+0x5a0/0x5a0 [ 1903.722091][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1903.727998][ T278] ? sched_dynamic_update+0x210/0x210 [ 1903.733375][ T278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1903.739340][ T278] ? __kthread_parkme+0x157/0x1b0 [ 1903.744382][ T278] kthread+0x436/0x520 [ 1903.748453][ T278] ? txFreelock+0x5a0/0x5a0 [ 1903.752962][ T278] ? kthread_blkcg+0xd0/0xd0 [ 1903.757543][ T278] ret_from_fork+0x1f/0x30 [ 1903.761957][ T278] [ 1903.764965][ T278] [ 1903.767274][ T278] Allocated by task 23945: [ 1903.771681][ T278] __kasan_kmalloc+0xb5/0xf0 [ 1903.776282][ T278] lmLogOpen+0x2c0/0xf90 [ 1903.780511][ T278] jfs_mount_rw+0xf2/0x5c0 [ 1903.784918][ T278] jfs_fill_super+0x5bb/0xaf0 [ 1903.789583][ T278] mount_bdev+0x287/0x3c0 [ 1903.793913][ T278] legacy_get_tree+0xe6/0x180 [ 1903.798599][ T278] vfs_get_tree+0x88/0x270 [ 1903.803017][ T278] do_new_mount+0x24a/0xa40 [ 1903.807508][ T278] __se_sys_mount+0x2d6/0x3c0 [ 1903.812263][ T278] do_syscall_64+0x4c/0xa0 [ 1903.816668][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1903.822547][ T278] [ 1903.824853][ T278] Freed by task 15134: [ 1903.828899][ T278] kasan_set_track+0x4b/0x70 [ 1903.833474][ T278] kasan_set_free_info+0x1f/0x40 [ 1903.838396][ T278] ____kasan_slab_free+0xd5/0x110 [ 1903.843410][ T278] slab_free_freelist_hook+0xea/0x170 [ 1903.848770][ T278] kfree+0xef/0x2a0 [ 1903.852563][ T278] lmLogClose+0x293/0x520 [ 1903.856902][ T278] jfs_umount+0x28f/0x360 [ 1903.861216][ T278] jfs_put_super+0x88/0x190 [ 1903.865705][ T278] generic_shutdown_super+0x130/0x300 [ 1903.871065][ T278] kill_block_super+0x7c/0xe0 [ 1903.875772][ T278] deactivate_locked_super+0x93/0xf0 [ 1903.881043][ T278] cleanup_mnt+0x418/0x4d0 [ 1903.885460][ T278] task_work_run+0x125/0x1a0 [ 1903.890038][ T278] exit_to_user_mode_loop+0x10f/0x130 [ 1903.895415][ T278] exit_to_user_mode_prepare+0xb1/0x140 [ 1903.900944][ T278] syscall_exit_to_user_mode+0x16/0x40 [ 1903.906403][ T278] do_syscall_64+0x58/0xa0 [ 1903.910807][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1903.916796][ T278] [ 1903.919108][ T278] Last potentially related work creation: [ 1903.924818][ T278] kasan_save_stack+0x35/0x60 [ 1903.929492][ T278] kasan_record_aux_stack+0xb8/0x100 [ 1903.934802][ T278] call_rcu+0x179/0x920 [ 1903.938986][ T278] sctp_association_free+0x69d/0x7e0 [ 1903.944295][ T278] sctp_do_sm+0x36b6/0x54f0 [ 1903.948792][ T278] sctp_assoc_bh_rcv+0x3ee/0x630 [ 1903.953718][ T278] sctp_backlog_rcv+0x15f/0x3c0 [ 1903.958558][ T278] __release_sock+0x1b9/0x420 [ 1903.963254][ T278] release_sock+0x5b/0x1b0 [ 1903.967656][ T278] sctp_wait_for_connect+0x37e/0x680 [ 1903.972930][ T278] sctp_sendmsg_to_asoc+0x16c1/0x1c70 [ 1903.978289][ T278] sctp_sendmsg+0x19ae/0x2950 [ 1903.982954][ T278] ____sys_sendmsg+0x5a2/0x8c0 [ 1903.987705][ T278] ___sys_sendmsg+0x1f0/0x260 [ 1903.992369][ T278] __sys_sendmmsg+0x27c/0x4a0 [ 1903.997031][ T278] __x64_sys_sendmmsg+0x9c/0xb0 [ 1904.001863][ T278] do_syscall_64+0x4c/0xa0 [ 1904.006273][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1904.012160][ T278] [ 1904.014479][ T278] Second to last potentially related work creation: [ 1904.021047][ T278] kasan_save_stack+0x35/0x60 [ 1904.025745][ T278] kasan_record_aux_stack+0xb8/0x100 [ 1904.031026][ T278] call_rcu+0x179/0x920 [ 1904.035168][ T278] sctp_association_free+0x69d/0x7e0 [ 1904.040450][ T278] sctp_do_sm+0x36b6/0x54f0 [ 1904.044974][ T278] sctp_assoc_bh_rcv+0x3ee/0x630 [ 1904.049901][ T278] sctp_backlog_rcv+0x15f/0x3c0 [ 1904.054735][ T278] __release_sock+0x1b9/0x420 [ 1904.059482][ T278] release_sock+0x5b/0x1b0 [ 1904.063888][ T278] sctp_wait_for_connect+0x37e/0x680 [ 1904.069160][ T278] sctp_sendmsg_to_asoc+0x16c1/0x1c70 [ 1904.074516][ T278] sctp_sendmsg+0x19ae/0x2950 [ 1904.079191][ T278] ____sys_sendmsg+0x5a2/0x8c0 [ 1904.083939][ T278] ___sys_sendmsg+0x1f0/0x260 [ 1904.088604][ T278] __sys_sendmmsg+0x27c/0x4a0 [ 1904.093353][ T278] __x64_sys_sendmmsg+0x9c/0xb0 [ 1904.098202][ T278] do_syscall_64+0x4c/0xa0 [ 1904.102602][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1904.108485][ T278] [ 1904.110791][ T278] The buggy address belongs to the object at ffff888060834000 [ 1904.110791][ T278] which belongs to the cache kmalloc-1k of size 1024 [ 1904.124822][ T278] The buggy address is located 216 bytes inside of [ 1904.124822][ T278] 1024-byte region [ffff888060834000, ffff888060834400) [ 1904.138169][ T278] The buggy address belongs to the page: [ 1904.143782][ T278] page:ffffea0001820c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60830 [ 1904.153959][ T278] head:ffffea0001820c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1904.162369][ T278] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1904.170440][ T278] raw: 00fff00000010200 ffffea0001e70800 0000000300000003 ffff888016841dc0 [ 1904.179007][ T278] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1904.187567][ T278] page dumped because: kasan: bad access detected [ 1904.193996][ T278] page_owner tracks the page as allocated [ 1904.199690][ T278] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4167, ts 59418073676, free_ts 18895017192 [ 1904.218790][ T278] get_page_from_freelist+0x1b77/0x1c60 [ 1904.224338][ T278] __alloc_pages+0x1e1/0x470 [ 1904.228925][ T278] new_slab+0xc0/0x4b0 [ 1904.232979][ T278] ___slab_alloc+0x81e/0xdf0 [ 1904.237551][ T278] __kmalloc_node+0x200/0x3b0 [ 1904.242214][ T278] qdisc_alloc+0x8d/0xb10 [ 1904.246527][ T278] qdisc_create_dflt+0x5f/0x430 [ 1904.251374][ T278] dev_activate+0x331/0x12b0 [ 1904.255983][ T278] __dev_open+0x32c/0x420 [ 1904.260328][ T278] __dev_change_flags+0x20a/0x6a0 [ 1904.265365][ T278] dev_change_flags+0x82/0x1a0 [ 1904.270126][ T278] do_setlink+0xc01/0x3980 [ 1904.274530][ T278] rtnl_newlink+0x1419/0x17d0 [ 1904.279204][ T278] rtnetlink_rcv_msg+0x9b9/0xe60 [ 1904.284139][ T278] netlink_rcv_skb+0x1e0/0x430 [ 1904.288885][ T278] netlink_unicast+0x77c/0x920 [ 1904.293651][ T278] page last free stack trace: [ 1904.298389][ T278] free_unref_page_prepare+0x637/0x6c0 [ 1904.303846][ T278] free_unref_page+0x94/0x280 [ 1904.308505][ T278] free_contig_range+0x96/0xf0 [ 1904.313246][ T278] destroy_args+0xef/0x8b0 [ 1904.317657][ T278] debug_vm_pgtable+0x318/0x370 [ 1904.322500][ T278] do_one_initcall+0x1ee/0x680 [ 1904.327264][ T278] do_initcall_level+0x137/0x1f0 [ 1904.332199][ T278] do_initcalls+0x4b/0x90 [ 1904.336514][ T278] kernel_init_freeable+0x3ce/0x560 [ 1904.341697][ T278] kernel_init+0x19/0x1b0 [ 1904.346010][ T278] ret_from_fork+0x1f/0x30 [ 1904.350519][ T278] [ 1904.352825][ T278] Memory state around the buggy address: [ 1904.358432][ T278] ffff888060833f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1904.366474][ T278] ffff888060834000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1904.374520][ T278] >ffff888060834080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1904.382563][ T278] ^ [ 1904.389482][ T278] ffff888060834100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1904.397526][ T278] ffff888060834180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1904.405563][ T278] ================================================================== [ 1904.413609][ T278] Disabling lock debugging due to kernel taint [ 1904.419751][ T278] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1904.426927][ T278] CPU: 1 PID: 278 Comm: jfsCommit Tainted: G B 5.15.180-syzkaller #0 [ 1904.436274][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1904.446312][ T278] Call Trace: [ 1904.449586][ T278] [ 1904.452522][ T278] dump_stack_lvl+0x168/0x230 [ 1904.457195][ T278] ? show_regs_print_info+0x20/0x20 [ 1904.462475][ T278] ? load_image+0x3b0/0x3b0 [ 1904.466980][ T278] panic+0x2c9/0x7f0 [ 1904.470892][ T278] ? bpf_jit_dump+0xd0/0xd0 [ 1904.475387][ T278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1904.481270][ T278] ? _raw_spin_unlock+0x40/0x40 [ 1904.486112][ T278] ? __lock_acquire+0xf7/0x7c60 [ 1904.490971][ T278] check_panic_on_warn+0x80/0xa0 [ 1904.496031][ T278] ? __lock_acquire+0xf7/0x7c60 [ 1904.500940][ T278] end_report+0x6d/0xf0 [ 1904.505087][ T278] kasan_report+0x102/0x130 [ 1904.509581][ T278] ? __lock_acquire+0xf7/0x7c60 [ 1904.514551][ T278] __lock_acquire+0xf7/0x7c60 [ 1904.519244][ T278] ? lock_chain_count+0x20/0x20 [ 1904.524086][ T278] ? finish_lock_switch+0x12f/0x280 [ 1904.529272][ T278] ? finish_lock_switch+0x12f/0x280 [ 1904.534480][ T278] ? finish_task_switch+0x12f/0x640 [ 1904.539683][ T278] ? verify_lock_unused+0x140/0x140 [ 1904.544871][ T278] ? __schedule+0x11c0/0x43b0 [ 1904.549540][ T278] ? rcu_lock_acquire+0x30/0x30 [ 1904.554382][ T278] lock_acquire+0x197/0x3f0 [ 1904.558876][ T278] ? __mutex_lock_common+0x45b/0x2390 [ 1904.564235][ T278] ? release_firmware_map_entry+0x190/0x190 [ 1904.570121][ T278] ? read_lock_is_recursive+0x10/0x10 [ 1904.575490][ T278] ? schedule+0x132/0x1e0 [ 1904.579808][ T278] ? preempt_count_add+0x8d/0x190 [ 1904.584829][ T278] _raw_spin_lock+0x2a/0x40 [ 1904.589328][ T278] ? __mutex_lock_common+0x45b/0x2390 [ 1904.594683][ T278] ? jfs_syncpt+0x21/0x90 [ 1904.598995][ T278] __mutex_lock_common+0x45b/0x2390 [ 1904.604188][ T278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1904.610073][ T278] ? mutex_lock_io_nested+0x60/0x60 [ 1904.615258][ T278] ? __lock_acquire+0x7c60/0x7c60 [ 1904.620282][ T278] ? do_raw_spin_lock+0x11d/0x280 [ 1904.625295][ T278] ? __rwlock_init+0x140/0x140 [ 1904.630135][ T278] mutex_lock_nested+0x17/0x20 [ 1904.634886][ T278] jfs_syncpt+0x21/0x90 [ 1904.639033][ T278] txEnd+0x2e1/0x520 [ 1904.642953][ T278] jfs_lazycommit+0x5ba/0xb20 [ 1904.647633][ T278] ? txFreelock+0x5a0/0x5a0 [ 1904.652142][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1904.658045][ T278] ? sched_dynamic_update+0x210/0x210 [ 1904.663529][ T278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1904.669426][ T278] ? __kthread_parkme+0x157/0x1b0 [ 1904.674458][ T278] kthread+0x436/0x520 [ 1904.678521][ T278] ? txFreelock+0x5a0/0x5a0 [ 1904.683012][ T278] ? kthread_blkcg+0xd0/0xd0 [ 1904.687599][ T278] ret_from_fork+0x1f/0x30 [ 1904.692007][ T278] [ 1904.695298][ T278] Kernel Offset: disabled [ 1904.699617][ T278] Rebooting in 86400 seconds..