last executing test programs: 15m0.751562181s ago: executing program 32 (id=16): fanotify_mark(0xffffffffffffffff, 0x1, 0x100018, 0xffffffffffffffff, 0x0) open(0x0, 0x14507e, 0x0) fanotify_init(0x10, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000840) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 14m36.487910947s ago: executing program 33 (id=52): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24f7, 0x0, &(0x7f0000000240), &(0x7f0000019080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 14m13.298625079s ago: executing program 34 (id=78): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd08, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x0) sendfile(r6, r4, 0x0, 0x80000000) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000740)=r8, 0x4) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000940)=[@out_dx={0xaa, 0x28, {0x1caf, 0x1, 0x4}}, @cpuid={0x14, 0x18, {0xacc7, 0x280}}, @wrmsr={0x1e, 0x20, {0xaae, 0x81}}, @wrmsr={0x1e, 0x20, {0xa4e, 0xffffffffaef15f5d}}, @wr_crn={0x46, 0x20, {0x3, 0x3ff}}, @uexit={0x0, 0x18}, @cpuid={0x14, 0x18, {0x5, 0x10000}}, @in_dx={0x82, 0x20, {0xd6f9, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x7a94}}, @wrmsr={0x1e, 0x20, {0x999, 0x7}}, @wr_crn={0x46, 0x20, {0x4, 0xff}}, @wr_crn={0x46, 0x20}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @wrmsr={0x1e, 0x20, {0xa38, 0x1}}, @wr_drn={0x6e, 0x20, {0x1, 0x10001}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x67, {"c461fde7560fc744240034000000c744240200980000ff2c24400f794662400f01c86564640f7e670766ba4300b8a88a0000ef66b809000f00d0c74424002b010000c74424020b000000ff2c24410f01c2c4c1c9563e"}}, @wrmsr={0x1e, 0x20, {0x63b, 0x100000000}}, @wr_drn={0x6e, 0x20, {0x6, 0x3}}, @wrmsr={0x1e, 0x20, {0x372, 0x10000}}, @wrmsr={0x1e, 0x20, {0x8f3, 0x2}}, @out_dx={0xaa, 0x28, {0x4220, 0x0, 0x80000000}}, @wrmsr={0x1e, 0x20, {0xa64, 0x2}}, @wr_drn={0x6e, 0x20, {0x7, 0x6240}}, @rdmsr={0x32, 0x18, {0x9fc}}, @wr_drn={0x6e, 0x20, {0x1, 0x6a07}}, @rdmsr={0x32, 0x18, {0xd90}}, @in_dx={0x82, 0x20, {0x17b6, 0x1}}, @wr_crn={0x46, 0x20, {0x4, 0x9}}, @rdmsr={0x32, 0x18, {0xa72}}, @wr_drn={0x6e, 0x20, {0x2, 0x5}}, @in_dx={0x82, 0x20, {0x7b3e, 0x4}}], 0x41f}) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80081, 0x36) pwrite64(r9, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) 13m46.113202152s ago: executing program 35 (id=103): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000008d00)={0x2020}, 0x2020) 12m14.280863451s ago: executing program 36 (id=207): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r5}, 0x18) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000240)) r6 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r1, 0x0, r6, 0x0, 0x7fff, 0x6) 10m35.436291461s ago: executing program 37 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x80800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000019140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, 0x0, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) r7 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7ffffffffffffffe, 0x0, 0x0, r7}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, r2, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r2, 0x3}) syz_mount_image$squashfs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x5, 0x1b8, &(0x7f0000000140)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x65) 10m24.998801079s ago: executing program 6 (id=394): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000001380)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@quiet}, {@shortname_win95}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81) 10m20.708212685s ago: executing program 6 (id=397): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x2, 0x0) splice(r3, 0x0, r1, 0x0, 0x1c, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 10m19.2192669s ago: executing program 6 (id=399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) 10m15.406081841s ago: executing program 6 (id=402): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$eJzs3c9rHFUcAPA3k7RJan8ktYcKggsWFJWQ9KRGME3TH0lbI9UWESHdJNs2ssmWZCMeeog3wZPgQTwUBW85SQ5e65/gxaOeC3rwIghiZHdn053JLlnrbmLL53PYt/N+J9+Z2TeH3RcnyrcXV3OLq7n8cq40f3P1dO6jUnFtqRDiPdJ0/AN7Nz7t6cZ50kafff995jQzc/b8O9dPh/DDwk8Ptra2tkJFb2hqtOH9H7/fnW9M6+JMm0q/zXvrlPdDCCd2zKuiJ4Tw3vchRCGEM0neRJIOhBCOhFrZ9buf3ch1aDZ9Sbo5dmp6495m6789CuGr4jOv3Fr69fmesV9e6tDwAAAAAAAAAAAAAAAAAAA85i5cnbn29shouB+F3o2o9n3dvsbyJG31/ditjnluD/5aAAAAAAAAAAAAAAAAAAAA+H96+P3/XHQ82rlf92SSjrdov/Vm9+dI90y9NTN5bmQ02f89aiiZOVZ5fTXJ+u1MTxhqsu97dv/3M5n+m+//HnVs/vX51ccdDFE8nDqO4+HhEL5JNn4/GR2Ki6XV8ss3S2vLCx2bxmMrHf/a7v2p6CQb+rcb/4lM/93f///pHWdT5fhG506xJ1o6/j0t6/WHqK34n82024v48+jS8e+t5g00Vhiv3QC+/SQKn/fuHv/JTP/div/REEIuqsw1l7oDVNYwlfxW6xXS0vE/UM1L3TqTf2Ql/s2u/z8z8T+X6X+/7v/r2Q8imkrH/2A1rz9V4+H1PxTvfv2fz/S/H/GvzH/d539b0vFPfvmtN1Wl+p9s9/5/IdN/t+J/LU7meTRKnQEbUS2/1e/VkZaOf/+O8ofPf3Fb67+LmfZ79fxXH7f+/Fe//b8Y1Z7/aC4d/4GW9dq9/qcy7bp9/x+vrv94VOn4H6rmpdfOg9XXduM/nem/O/E/uP1uPLP+/7uvtgD42vqvLen4P1XLjBtrrFdfq+u/aPf1/6VM//ux/qvMfz3u7qhPinT8D7esV4n/j218/l/OtOt+/EMYsdZ/ZOn4H2lZr3r99+8e/yuZdt2O/wvd7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgMTCRpIMhiodTx3E8PBzC2eT4ZDgUzeUXZueKpfkPVkOYTPJz4Xh0q1iayxdnF5dLC4XZfLFYmg/hXFJ+IvRHq8VSeXYpf+f8dl8D0e1CfqU8V8iXQwgXkvxnw5F6X3OL5aX8nRDCxe2yY3Fp5c7t/PLswuLK6yMjIyNhansOQ1Hh43JhuVwbvVYawvR228GoYXLV4kvbczkcfVhaW1nOF6v5lxvaFEvz+WJDmytJ2RdhKCqvrC3P58uF2WLpVn28/TSepJNTV9+9enl0R/mNqJZO7O20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiX7o+99mUIobd2FIcQxutvomb1v/u58MbsX1c+3Rw7Nb1xb/NBq3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWGXjlEqBoIwAM+uRazEY1iFpLONKKKFEcETaO0JPIwexUt4BwsLWwsR4gYkL3mkea/6vmZgf3Z2YAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1rm86+9vmzYixeFPVcXb4/vH//y61Jez+fsHe5iR3bm66c8vmrb8e9rIT8vRZ5eH9Pvr+SFm6uh1sifTffozNH062jLX0r4tzTe+exwp1xHRlfwk5VzX63oBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUXfBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//hykaaw==") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r0, 0x103, 0x1) getdents64(r0, 0x0, 0x0) 10m12.572943456s ago: executing program 3 (id=406): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000001380)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@quiet}, {@shortname_win95}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81) 10m11.197169873s ago: executing program 3 (id=409): syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_emit_ethernet(0xed, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c69"], 0x60}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x44000) r7 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000100)={0x2, 0x2, 0x0, [{0x7, 0x8001, 0x3, 0xff, 0x6, 0xfd, 0x9, '\x00', 0x8}, {0x7, 0x1, 0x6, 0x5, 0xe, 0x89, 0x7, '\x00', 0x89}]}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0) 10m10.610039306s ago: executing program 6 (id=411): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) 10m7.786049671s ago: executing program 3 (id=415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)='+{', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000021c0)="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", 0x3c1}], 0x1, &(0x7f0000005480)=ANY=[@ANYBLOB="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"], 0x198}}], 0x2, 0x4000001) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbe}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0902cc4ba750f4a1d1666fc9663700dc72b3925e"}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c045}, 0x840) read$FUSE(r1, &(0x7f0000002a00)={0x2020}, 0x2020) 10m6.700882555s ago: executing program 6 (id=416): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 10m5.874794536s ago: executing program 3 (id=418): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000001380)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@quiet}, {@shortname_win95}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81) 10m4.50752843s ago: executing program 3 (id=420): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6651cb5e0a3eeda1a7777d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db07", {0x2, 0x1ff}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) 10m3.508925808s ago: executing program 3 (id=422): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, r2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 9m58.900216854s ago: executing program 7 (id=425): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x54, &(0x7f0000000080)={0x11, 0xc, r0, 0x1, 0x3, 0x6, @random="90607e30937f"}, 0x14) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x413}}}, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 9m57.671519097s ago: executing program 7 (id=426): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x60005000) r0 = fsopen(&(0x7f0000000240)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) 9m56.267382614s ago: executing program 7 (id=428): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x0, 0x810c, 0xff, 0xfffffffc, 0xffffff94, 0xa, 0x8, r5}, &(0x7f0000000480)=0x20) 9m53.902849586s ago: executing program 7 (id=430): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004d29000800010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x4, &(0x7f0000000100)={0x17, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04db517b5452b3b94bce47509d"}}) 9m51.407317001s ago: executing program 38 (id=416): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 9m50.287745117s ago: executing program 7 (id=435): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet6(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e03fb0520"], 0x7) dup(0xffffffffffffffff) 9m47.525703677s ago: executing program 39 (id=422): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, r2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 9m45.574144012s ago: executing program 7 (id=438): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000054d000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6eb, &(0x7f0000001780)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$int_in(r4, 0x0, &(0x7f0000000180)=0x7) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000800000000008000f374ea261003f1d45000c42e18f2c252c02b2d8178b0cc5b9a5b36b32e36cc9561359fc8f7ced99b097d394f47a7fb87746858526cfd20da5e0f10b2353efbe9812f52c04000f55894f035bf89c2ff9dc62a4b7ca6e0c91"], 0x24}}, 0x0) fadvise64(r5, 0x400, 0x4, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18}, 0xfffffdef) 9m28.117493666s ago: executing program 40 (id=438): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000054d000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6eb, &(0x7f0000001780)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$int_in(r4, 0x0, &(0x7f0000000180)=0x7) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000800000000008000f374ea261003f1d45000c42e18f2c252c02b2d8178b0cc5b9a5b36b32e36cc9561359fc8f7ced99b097d394f47a7fb87746858526cfd20da5e0f10b2353efbe9812f52c04000f55894f035bf89c2ff9dc62a4b7ca6e0c91"], 0x24}}, 0x0) fadvise64(r5, 0x400, 0x4, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18}, 0xfffffdef) 3m39.712253373s ago: executing program 4 (id=1253): ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) clock_gettime(0x5, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000}) 3m38.945974139s ago: executing program 4 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) 3m38.014412271s ago: executing program 4 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) 3m37.170808433s ago: executing program 4 (id=1263): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3m36.578156145s ago: executing program 4 (id=1267): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, &(0x7f0000001080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xfffffbffa003e45b, 0x700000000000000) 3m34.578494606s ago: executing program 4 (id=1273): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x2e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 3m18.884953106s ago: executing program 41 (id=1273): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x2e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1m20.48267926s ago: executing program 1 (id=1760): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 1m20.16765157s ago: executing program 1 (id=1761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@usrjquota}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x6, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0xffffffffda48a110, 0x7, 0x20000000089, 0x3, 0x6, 0x7ffffffe, 0x6, 0x801, 0x6, 0x2, 0x8001, 0xffffffffffffffff, 0x800001, 0x3, 0xc, 0x5, 0x200, 0xb9c, 0x2000000000011cb, 0xff, 0x40, 0xd}) write$P9_RREAD(r3, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r3, r2, 0x0, 0x3ffff) 1m18.686635065s ago: executing program 1 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163636573733dbf", @ANYBLOB=',']) 1m17.764289806s ago: executing program 1 (id=1770): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/122, 0x7a}], 0x1}}], 0x1, 0x40000007, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) 1m16.85072439s ago: executing program 1 (id=1774): mount(0x0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') 1m16.386257854s ago: executing program 1 (id=1777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m1.072248668s ago: executing program 42 (id=1777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 13.687734864s ago: executing program 0 (id=2060): r0 = syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x20, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.132869246s ago: executing program 0 (id=2077): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$pptp(0x18, 0x1, 0x2) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r8, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 8.7881175s ago: executing program 0 (id=2087): r0 = syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x20, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.044457122s ago: executing program 5 (id=2101): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 5.376993794s ago: executing program 0 (id=2104): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1000000}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xa, 0xcbf, 0x4, @remote, @empty, 0x10, 0x8, 0x40, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0x4038a09, 0x4, @private1, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3, 0x200}}) 5.186410694s ago: executing program 9 (id=2106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) fstatfs(r0, &(0x7f0000000540)=""/80) rt_sigpending(0x0, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x3, 0x5}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000340)=""/220, 0x45, 0xdc, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f100"/20], 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00005f1000/0x1000)=nil, 0x1000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 5.152902855s ago: executing program 5 (id=2107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 4.731333032s ago: executing program 0 (id=2109): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980), 0x0, 0x20008000) close(0x3) 4.614792999s ago: executing program 5 (id=2110): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x2}, 0x61) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xf0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5a}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x50d789ab}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xca2}, @NL80211_ATTR_VENDOR_DATA={0xc1, 0xc5, "86a82d98304681a6524408030029f3d2516177c1e4a5acd57bbe461004b91229002e1fbee9215e73f4d4f268fa3cc992cd802e998a22288bfc99acf7249d7f4dbc1dae3e1acd15dbf2c236e7e7a31b1f83947fec33ba148c9221b33ac135e12ae1ced1c7c1d8bccf6028d4ccc5b84a53e934240ef63f5d2fc8c0e94c3a893e213246ae451f96176a5b4b3a06c4d729ead754c390082de0c71d1639c25c1da0ba0d0ff4e83e9a45e31999b30f613b4ce462d7cd8d13f1ac00f8efa8a7b2"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008045) r6 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcePE9X+apuk/ZtrX/wAAAMCImR12AgAAAMCFc/0PAAAAo8/1PwAAAIy0r7z+enNKO79/vfrm/t5m7c3bq5X6Zmlrb6W0UtvdKa3XauutZ/Ztnbe/aq2289nY3rtbblTqjXJ9/+DOVm1vu3FnIyYvpUEAAADAKU9+/P7vkog4/NxUa2qaGHZSwKUYPyol2Tyn9//+ifb83UtKCrgUY3285t1r+cudJ8Djbbx7QY++Doye4rATAIYuOWd9z8E7v87mnxhsPgAAwODNfSz//v951wMRh4VLSA+4QDoxXF1d9//TmWElAly61v3/fgfyOFmAkVLsawQgMMr+7/v/50rTh0oIAAAYuOnWlBRK2dd701EolEoRN1s/C1BM1jaqlfmIeCIifjtTvNasL7S2TPoYIwAAAAAAAAAAAAAAAAAAAAAAAAAAROup3EmkAAAAwEiLKPwp+WX7Wf5zM89Pd38/MJH8q/WTwBMR8dYP3/j+3eVGY3ehufxvR8sbP8iWvziMbzAAAACAbp3r9Nb8n8POBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR896Dt1c6Ux8vnxpU3L98ISJm8+KPx2RrPhnFiLj+9yTGT2yXRMTYAOIf3ouIj+bFT5ppHYXMiz+IN+Gc+DGbvQt58W8MID5cZfebx5/X8vpfIZ5tzfP733jE/9Q/qN7Hvzg6/o316P83+4zx1Ds/K/eMfy/iqfH8408nftIj/nN9xv/61w4Oeq1LfxQx1/n8aR3xTkY4LpUbWzvl+v7B7Y2t5fXKemV7cXHh5aVXll5ami+vbVQr2b+5Mb7z9M/fP6v913M//5Ism97tfz5nf3mfSf955+6DD3cqh6fj33ouJ/6vfpy94nT8QhbnU1m5uX6uUz5sl0965qe/eeas9q8et7/4MP//t3rttNupjvJ0v386AMAFqO8fbC5Xq5XdkS00r9IfgTQUHsHCtwa6wzRN02afyll1PyL62U8SA25pIT+f40LPI8Cwj0wAAMCgHZ/0DzsTAAAAAAAAAAAAAAAAAAAAuLou4ylr3TGPH4GcDOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HfAAAA//9nf9fz") sendmsg$key(r6, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 4.248417159s ago: executing program 8 (id=2111): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xfff2, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x49, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) 4.120453223s ago: executing program 0 (id=2113): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) clock_adjtime(0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.538276385s ago: executing program 9 (id=2114): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000180), &(0x7f00000000c0)=r1}, 0x20) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.442522115s ago: executing program 2 (id=2115): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc01c2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") 3.237600141s ago: executing program 5 (id=2116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x1, 0x40000040, 0x0) 3.097679529s ago: executing program 8 (id=2117): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 2.822711437s ago: executing program 5 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 2.586878559s ago: executing program 2 (id=2119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x840) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef87910905090020000108"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.413409049s ago: executing program 8 (id=2120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 2.316248327s ago: executing program 5 (id=2121): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000080)={0x0, 0x6a6e, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0xfc, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000800)="2f653db1cf70", 0x0, 0x4, 0x0, 0x1, 0x0}) 2.26278561s ago: executing program 9 (id=2122): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="180038740fe4fa52f970000004000000185b00000c00000000000000000000001c8b0c00010000009500000000000000c9006328c6ad7c5d961d6cea20708a784ad8d530ed179bf68d7c791f9879534fd757ca0c2b2977c67eddb975fda445abeada6929a8f19f"], &(0x7f0000000040)='syzkaller\x00', 0x101, 0x5a, &(0x7f0000000080)=""/90, 0x40f00, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4, 0x101, 0xd66d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x1, 0x204, 0xb}, {0x1, 0x2, 0x7, 0xc}, {0x2, 0x4, 0xf, 0xcce05b769719a18d}, {0x4, 0x5, 0x4, 0xb}, {0x3, 0x4, 0xa, 0x9}], 0x10, 0x4dc878d7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) close(r4) 1.896931188s ago: executing program 9 (id=2123): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980), 0x0, 0x20008000) close(0x3) 1.868368133s ago: executing program 8 (id=2124): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 1.560283025s ago: executing program 2 (id=2125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000009700000050"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000080)=0x10, 0x0) 1.417502502s ago: executing program 8 (id=2126): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[], 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeff9) 1.375599047s ago: executing program 9 (id=2127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a0200"], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x2e}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.110849324s ago: executing program 2 (id=2128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r2, 0xa, 0x21) fcntl$setlease(r2, 0x400, 0x1) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r2, r3, 0x0) 524.69986ms ago: executing program 8 (id=2129): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="71050509030602a607ff039e20bec62d6416e1ffffffffffff7f"], 0x1a) 500.614867ms ago: executing program 2 (id=2130): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 455.172842ms ago: executing program 9 (id=2131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=2132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) getegid() kernel console output (not intermixed with test programs): us supports timestamps until 2038-01-19 (0x7fffffff) [ 954.086981][ T7068] usb 2-1: USB disconnect, device number 35 [ 954.108298][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.269276][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 954.314263][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 955.971396][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.984860][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.347732][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.356136][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.809147][ T7139] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 957.358936][ T7139] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 957.368678][ T7139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.376866][ T7139] usb 3-1: Product: syz [ 957.381795][ T7139] usb 3-1: Manufacturer: syz [ 957.386553][ T7139] usb 3-1: SerialNumber: syz [ 957.458770][ T7068] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 957.493312][ T7139] usb 3-1: config 0 descriptor?? [ 957.669732][ T7068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.681247][ T7068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.692329][ T7068] usb 6-1: New USB device found, idVendor=056a, idProduct=a6de, bcdDevice=de.f5 [ 957.701841][ T7068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.880248][ T7068] usb 6-1: config 0 descriptor?? [ 957.965332][ T7139] airspy 3-1:0.0: Board ID: 00 [ 957.970534][ T7139] airspy 3-1:0.0: Firmware version: [ 958.167595][ T7139] airspy 3-1:0.0: usb_control_msg() failed -32 request 11 [ 958.202425][ T7139] airspy 3-1:0.0: Registered as swradio24 [ 958.208609][ T7139] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 958.451902][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1427'. [ 958.560030][ T7068] usbhid 6-1:0.0: can't add hid device: -71 [ 958.563648][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1427'. [ 958.567086][ T7068] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 958.778419][ T7068] usb 6-1: USB disconnect, device number 3 [ 959.842408][ T7139] usb 3-1: USB disconnect, device number 30 [ 960.275652][T11631] loop2: detected capacity change from 0 to 512 [ 960.419675][T11631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.432962][T11631] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 960.492484][ T30] audit: type=1326 audit(1759096981.369:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 960.515597][ T30] audit: type=1326 audit(1759096981.389:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 960.542337][ T30] audit: type=1326 audit(1759096981.399:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 960.567026][ T30] audit: type=1326 audit(1759096981.399:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 960.593071][ T30] audit: type=1326 audit(1759096981.399:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 961.015528][ T30] audit: type=1326 audit(1759096981.529:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 961.039026][ T30] audit: type=1326 audit(1759096981.529:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 961.062489][ T30] audit: type=1326 audit(1759096981.549:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 961.085615][ T30] audit: type=1326 audit(1759096981.549:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 961.112661][ T30] audit: type=1326 audit(1759096981.569:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.9.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 961.320892][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.851124][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.858315][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.054295][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 962.115275][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 962.260706][ T7139] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 962.457262][ T7139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.469387][ T7139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.479587][ T7139] usb 1-1: New USB device found, idVendor=056a, idProduct=a6de, bcdDevice=de.f5 [ 962.489096][ T7139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.808387][ T7139] usb 1-1: config 0 descriptor?? [ 962.880149][T11664] loop9: detected capacity change from 0 to 1024 [ 962.912519][T11664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 962.956716][T11664] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 963.107363][T11664] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 963.180210][T11664] EXT4-fs (loop9): orphan cleanup on readonly fs [ 963.187295][T11664] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.1443: Freeing blocks not in datazone - block = 0, count = 4096 [ 963.245322][T11664] EXT4-fs (loop9): 1 orphan inode deleted [ 963.257521][T11664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 963.440440][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.528567][ T7139] usbhid 1-1:0.0: can't add hid device: -71 [ 963.535090][ T7139] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 963.625045][ T7139] usb 1-1: USB disconnect, device number 26 [ 964.499966][T11688] 9pnet_fd: Insufficient options for proto=fd [ 964.544435][T11687] loop5: detected capacity change from 0 to 512 [ 964.860870][T11687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.874203][T11687] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 965.264255][T11702] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1455'. [ 965.356622][T11702] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1455'. [ 965.430627][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.091222][T11713] loop5: detected capacity change from 0 to 1024 [ 966.191192][T11713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 966.256484][T11713] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 966.327719][T11713] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 966.346597][T11713] EXT4-fs (loop5): orphan cleanup on readonly fs [ 966.353911][T11713] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1458: Freeing blocks not in datazone - block = 0, count = 4096 [ 966.403516][T11713] EXT4-fs (loop5): 1 orphan inode deleted [ 966.411716][T11713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 966.430844][ T7068] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 966.570435][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.640700][ T7068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.652597][ T7068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.662990][ T7068] usb 3-1: New USB device found, idVendor=056a, idProduct=a6de, bcdDevice=de.f5 [ 966.672527][ T7068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.806512][T11727] 9pnet_fd: Insufficient options for proto=fd [ 966.841517][ T7068] usb 3-1: config 0 descriptor?? [ 966.976080][T11725] loop9: detected capacity change from 0 to 512 [ 967.164085][T11725] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 967.448417][T11725] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1463: invalid indirect mapped block 4294967295 (level 0) [ 967.542761][ T7068] usbhid 3-1:0.0: can't add hid device: -71 [ 967.552819][ T7068] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 967.570473][T11725] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1463: invalid indirect mapped block 4294967295 (level 1) [ 967.630889][ T7068] usb 3-1: USB disconnect, device number 31 [ 967.702241][T11725] EXT4-fs (loop9): 1 orphan inode deleted [ 967.709292][T11725] EXT4-fs (loop9): 1 truncate cleaned up [ 967.716791][T11725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.081836][T11741] loop5: detected capacity change from 0 to 512 [ 968.155330][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.177032][T11746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1470'. [ 968.240686][T11746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1470'. [ 968.466325][T11741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.482554][T11741] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 968.650460][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 968.650529][ T30] audit: type=1800 audit(1759096989.549:196): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1468" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 969.110576][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.563602][T11766] netlink: 'syz.0.1477': attribute type 13 has an invalid length. [ 969.640682][T11767] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 970.240214][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.248649][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.428896][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1481'. [ 970.576554][T11766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.604204][T11766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.792633][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1483'. [ 970.888644][ T5869] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 970.911060][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1483'. [ 971.139650][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.152889][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.163092][ T5869] usb 3-1: New USB device found, idVendor=056a, idProduct=a6de, bcdDevice=de.f5 [ 971.172530][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.330886][ T5869] usb 3-1: config 0 descriptor?? [ 971.761102][ T4329] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.833291][ T4268] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.834747][T11787] loop5: detected capacity change from 0 to 512 [ 971.880954][ T4268] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.929396][ T4268] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.981600][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 971.988627][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 972.013875][ T5869] usb 3-1: USB disconnect, device number 32 [ 972.109292][T11787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.122757][T11787] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 972.301597][ T30] audit: type=1800 audit(1759096993.199:197): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1486" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 972.616246][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.881237][T11800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 972.946510][T11799] loop9: detected capacity change from 0 to 512 [ 973.036145][T11799] EXT4-fs: Ignoring removed mblk_io_submit option [ 973.108884][T11799] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 973.166908][T11805] loop2: detected capacity change from 0 to 512 [ 973.240242][T11799] EXT4-fs (loop9): 1 truncate cleaned up [ 973.248328][T11799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.293259][T11805] EXT4-fs: Ignoring removed nobh option [ 973.438740][T11805] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1493: iget: bad i_size value: 38620345925642 [ 973.480362][T11805] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1493: couldn't read orphan inode 15 (err -117) [ 973.589586][T11805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.785786][ T30] audit: type=1800 audit(1759096994.689:198): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1493" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 973.793842][T11805] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1493: bg 0: block 5: invalid block bitmap [ 973.909095][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.023345][T11817] netlink: 'syz.0.1496': attribute type 10 has an invalid length. [ 974.043399][T11817] team0: Port device dummy0 added [ 974.115622][T11818] netlink: 'syz.0.1496': attribute type 10 has an invalid length. [ 974.263914][T11818] team0: Port device dummy0 removed [ 974.281586][T11818] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 974.506811][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.013620][T11828] loop2: detected capacity change from 0 to 512 [ 975.088756][ T5869] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 975.170279][T11828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.184359][T11828] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.214868][T11832] loop9: detected capacity change from 0 to 512 [ 975.312612][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 975.341193][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 975.353838][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 975.421374][T11832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.436548][T11832] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 975.444698][ T5869] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 975.456850][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.465613][ T5869] usb 2-1: Product: syz [ 975.470175][ T5869] usb 2-1: Manufacturer: syz [ 975.474927][ T5869] usb 2-1: SerialNumber: syz [ 975.542502][ T5869] usb 2-1: config 0 descriptor?? [ 975.619357][ T30] audit: type=1800 audit(1759096996.529:199): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1502" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 975.667189][ T5869] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 975.677088][ T5869] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 975.954141][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 975.969532][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.096537][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.164390][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.175925][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.186366][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=a6de, bcdDevice=de.f5 [ 976.195817][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.208872][ T5869] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 976.226541][ T24] usb 1-1: config 0 descriptor?? [ 976.229096][ T5869] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 976.333919][ T5869] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 976.342209][ T5869] em28xx 2-1:0.0: No AC97 audio processor [ 976.711853][T11849] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1505'. [ 976.763455][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1505'. [ 976.940462][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 976.947109][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 977.041246][ T24] usb 1-1: USB disconnect, device number 27 [ 977.708765][T11857] loop2: detected capacity change from 0 to 2048 [ 978.128375][ T5868] usb 2-1: USB disconnect, device number 36 [ 978.136120][ T5868] em28xx 2-1:0.0: Disconnecting em28xx [ 978.209892][ T5868] em28xx 2-1:0.0: Freeing device [ 979.101159][T11879] netlink: 'syz.2.1514': attribute type 10 has an invalid length. [ 979.162883][T11881] loop9: detected capacity change from 0 to 512 [ 979.289919][T11881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.303170][T11881] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.347500][T11889] netlink: 'syz.2.1514': attribute type 10 has an invalid length. [ 979.429278][T11879] team0: Port device dummy0 added [ 979.476113][T11889] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 979.547700][T11889] team0: Failed to send options change via netlink (err -105) [ 979.561713][T11889] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 979.572432][T11889] team0: Port device dummy0 removed [ 979.594377][T11889] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 980.073550][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.209468][T11896] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1519'. [ 980.218872][T11896] ksmbd: Unknown IPC event: 4, ignore. [ 980.305703][T11904] loop1: detected capacity change from 0 to 512 [ 980.363314][T11903] netlink: 'syz.2.1521': attribute type 10 has an invalid length. [ 980.371693][T11903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1521'. [ 980.381734][T11903] macvlan0: entered promiscuous mode [ 980.388338][T11903] macvlan0: entered allmulticast mode [ 980.393925][T11903] veth1_vlan: entered allmulticast mode [ 980.402412][T11903] bridge0: port 3(macvlan0) entered blocking state [ 980.409565][T11903] bridge0: port 3(macvlan0) entered disabled state [ 980.423533][T11903] bridge0: port 3(macvlan0) entered blocking state [ 980.430745][T11903] bridge0: port 3(macvlan0) entered forwarding state [ 980.474536][T11904] EXT4-fs: Ignoring removed nobh option [ 980.550304][T11905] tipc: Started in network mode [ 980.557654][T11905] tipc: Node identity f669ff484e81, cluster identity 4711 [ 980.567373][T11905] tipc: Enabled bearer , priority 0 [ 980.679040][T11899] tipc: Resetting bearer [ 980.679991][T11904] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1523: iget: bad i_size value: 38620345925642 [ 980.847476][T11899] tipc: Disabling bearer [ 980.853996][T11904] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1523: couldn't read orphan inode 15 (err -117) [ 981.001665][T11904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.295534][ T30] audit: type=1800 audit(1759097002.189:200): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1523" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 981.322196][T11904] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1523: bg 0: block 5: invalid block bitmap [ 981.362064][T11904] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 981.380131][T11904] EXT4-fs (loop1): This should not happen!! Data will be lost [ 981.380131][T11904] [ 981.390566][T11904] EXT4-fs (loop1): Total free blocks count 0 [ 981.396720][T11904] EXT4-fs (loop1): Free/Dirty block details [ 981.403098][T11904] EXT4-fs (loop1): free_blocks=0 [ 981.408400][T11904] EXT4-fs (loop1): dirty_blocks=16 [ 981.413663][T11904] EXT4-fs (loop1): Block reservation details [ 981.420592][T11904] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 981.982701][ T8083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.522209][T11931] loop5: detected capacity change from 0 to 512 [ 982.796422][T11931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.815090][T11931] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 983.005085][ T30] audit: type=1800 audit(1759097003.899:201): pid=11931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1529" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 983.046834][T11944] syz.9.1531 uses obsolete (PF_INET,SOCK_PACKET) [ 983.403463][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.887117][T11954] loop9: detected capacity change from 0 to 512 [ 983.951110][T11954] EXT4-fs: Ignoring removed mblk_io_submit option [ 984.013094][T11956] loop5: detected capacity change from 0 to 512 [ 984.030364][T11954] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 984.060597][T11956] EXT4-fs: Ignoring removed oldalloc option [ 984.066833][T11956] EXT4-fs: inline encryption not supported [ 984.073341][T11956] EXT4-fs: Ignoring removed mblk_io_submit option [ 984.161794][T11956] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 984.184188][T11954] EXT4-fs (loop9): 1 truncate cleaned up [ 984.192515][T11954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.419933][T11956] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1534: bg 0: block 64: padding at end of block bitmap is not set [ 984.539472][T11956] Quota error (device loop5): write_blk: dquota write failed [ 984.551964][T11956] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 984.565064][T11956] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1534: Failed to acquire dquot type 0 [ 984.580285][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.689939][T11956] EXT4-fs (loop5): 1 truncate cleaned up [ 984.697498][T11956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.909730][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1534'. [ 985.531630][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.685938][T11981] loop9: detected capacity change from 0 to 512 [ 985.906907][T11981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.920992][T11981] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 986.038197][ T30] audit: type=1800 audit(1759097006.909:202): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1544" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 986.135096][T11988] loop1: detected capacity change from 0 to 512 [ 986.182116][ T30] audit: type=1326 audit(1759097007.019:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.2.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 986.207085][ T30] audit: type=1326 audit(1759097007.069:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.2.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 986.326315][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.448291][T11988] EXT4-fs (loop1): orphan cleanup on readonly fs [ 986.550061][T11988] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1545: bg 0: block 248: padding at end of block bitmap is not set [ 986.583729][T11988] Quota error (device loop1): write_blk: dquota write failed [ 986.589214][ T30] audit: type=1326 audit(1759097007.159:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.2.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 986.592617][T11988] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 986.617646][ T30] audit: type=1326 audit(1759097007.159:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.2.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 986.627665][T11988] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1545: Failed to acquire dquot type 1 [ 986.662303][ T30] audit: type=1326 audit(1759097007.169:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.2.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 986.685368][ T30] audit: type=1326 audit(1759097007.169:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.2.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 986.711778][ T30] audit: type=1326 audit(1759097007.169:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.2.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 986.823873][T11988] EXT4-fs (loop1): 1 truncate cleaned up [ 986.900939][T11988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 987.008323][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 987.039361][T11988] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 987.067708][T11988] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 987.192275][T12006] loop5: detected capacity change from 0 to 512 [ 987.204148][ T8083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.220154][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 987.258788][T12006] EXT4-fs: Ignoring removed mblk_io_submit option [ 987.288629][ T5868] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 987.297666][ T5868] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 987.308727][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.326276][T12006] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 987.423797][ T5868] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 987.434151][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.443191][ T5868] usb 1-1: Product: syz [ 987.447532][ T5868] usb 1-1: Manufacturer: syz [ 987.452691][ T5868] usb 1-1: SerialNumber: syz [ 987.463025][T12006] EXT4-fs (loop5): 1 truncate cleaned up [ 987.472511][T12006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.946198][ T5868] usb 1-1: 0:2 : does not exist [ 988.223873][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.825626][T11872] usb 1-1: USB disconnect, device number 28 [ 991.695148][T12073] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 991.705907][T12073] tipc: Enabled bearer , priority 10 [ 992.814807][T12083] sd 0:0:1:0: device reset [ 992.820901][ T5868] tipc: Node number set to 3102277448 [ 993.398919][T12087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1576'. [ 994.805142][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1580'. [ 994.850599][T12095] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 995.478660][T12108] loop5: detected capacity change from 0 to 512 [ 995.538528][T12109] loop1: detected capacity change from 0 to 512 [ 995.685867][T12108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.699350][T12108] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.790907][T12109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.804131][T12109] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 995.859114][T12109] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.876982][T12111] loop9: detected capacity change from 0 to 1024 [ 996.051673][T12111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.620334][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.863110][T11872] lo speed is unknown, defaulting to 1000 [ 996.869520][T11872] syz2: Port: 1 Link DOWN [ 996.946173][T12128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1588'. [ 997.433587][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.158553][ T5869] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 998.469680][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 998.524383][ T5869] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 998.533127][ T5869] usb 3-1: config 0 has no interface number 0 [ 998.540299][ T5869] usb 3-1: config 0 interface 184 has no altsetting 0 [ 998.572049][ T5868] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 998.657023][ T5869] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 998.666682][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.675191][ T5869] usb 3-1: Product: syz [ 998.683282][ T5869] usb 3-1: Manufacturer: syz [ 998.689935][ T5869] usb 3-1: SerialNumber: syz [ 998.860923][ T5868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.871767][ T5868] usb 10-1: config 1 has no interfaces? [ 999.040327][ T5868] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 999.050090][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.058712][ T5868] usb 10-1: Product: syz [ 999.063113][ T5868] usb 10-1: Manufacturer: syz [ 999.068191][ T5868] usb 10-1: SerialNumber: syz [ 999.111562][ T5869] usb 3-1: config 0 descriptor?? [ 999.161891][ T5869] smsc75xx v1.0.0 [ 999.165898][ T5869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 999.177060][ T5869] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 999.772260][ T5868] usb 10-1: USB disconnect, device number 50 [ 999.895104][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 1001.129692][T12167] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1600'. [ 1001.146264][T12166] loop1: detected capacity change from 0 to 512 [ 1001.176797][T11872] usb 3-1: USB disconnect, device number 33 [ 1001.409179][T12173] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1603'. [ 1001.425011][T12166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.438236][T12166] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.735891][T12181] loop5: detected capacity change from 0 to 128 [ 1002.007124][ T8083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.498181][T12188] loop2: detected capacity change from 0 to 1024 [ 1002.507456][T12188] EXT4-fs: Ignoring removed i_version option [ 1002.519084][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.519084][T12181] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1002.533154][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.533154][T12181] loop5: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 1002.547411][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.547411][T12181] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1002.561407][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.561407][T12181] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1002.578741][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.578741][T12181] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1002.592892][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.592892][T12181] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1002.606948][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.606948][T12181] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1002.620948][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.620948][T12181] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 1002.634947][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.634947][T12181] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 1002.648919][T12181] syz.5.1604: attempt to access beyond end of device [ 1002.648919][T12181] loop5: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 1002.681220][ T9] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1002.802491][T12188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.815326][T12188] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.936643][T12188] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1607: lblock 0 mapped to illegal pblock 0 (length 1) [ 1002.986117][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.996847][ T9] usb 10-1: config 1 has no interfaces? [ 1003.033497][T12188] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1003.046427][T12188] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1003.046427][T12188] [ 1003.172286][ T9] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1003.183196][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.196236][ T9] usb 10-1: Product: syz [ 1003.201865][ T9] usb 10-1: Manufacturer: syz [ 1003.206723][ T9] usb 10-1: SerialNumber: syz [ 1003.489571][ T9] usb 10-1: USB disconnect, device number 51 [ 1003.648801][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1004.059886][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1614'. [ 1004.399532][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1004.628952][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1004.698882][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1004.707286][ T9] usb 3-1: config 0 has no interface number 0 [ 1004.714665][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1004.769604][T12224] netlink: 'syz.1.1617': attribute type 3 has an invalid length. [ 1004.868448][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1004.877726][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.886544][ T9] usb 3-1: Product: syz [ 1004.891180][ T9] usb 3-1: Manufacturer: syz [ 1004.895941][ T9] usb 3-1: SerialNumber: syz [ 1005.005661][ T9] usb 3-1: config 0 descriptor?? [ 1005.071800][ T9] smsc75xx v1.0.0 [ 1005.075609][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1005.086852][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1005.689018][T12234] loop8: detected capacity change from 8 to 7 [ 1005.708506][T12237] bpf: Bad value for 'gid' [ 1005.922954][T12239] hub 6-0:1.0: USB hub found [ 1005.968759][T12239] hub 6-0:1.0: 1 port detected [ 1007.197590][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1627'. [ 1007.318993][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1007.446881][T11872] usb 3-1: USB disconnect, device number 34 [ 1007.515530][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.526624][ T9] usb 1-1: config 1 has no interfaces? [ 1007.640724][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1007.650502][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.658949][ T9] usb 1-1: Product: syz [ 1007.663368][ T9] usb 1-1: Manufacturer: syz [ 1007.668508][ T9] usb 1-1: SerialNumber: syz [ 1008.029814][ T9] usb 1-1: USB disconnect, device number 29 [ 1008.457552][ T9] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 1008.466833][ T9] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 1008.475247][ T9] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 1008.597023][ T9] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 1009.244013][T12269] fido_id[12269]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1012.258461][ T5868] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1012.448457][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 1012.500373][ T5868] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1012.512555][ T5868] usb 3-1: config 0 has no interface number 0 [ 1012.520417][ T5868] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1012.583257][ T5868] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1012.593359][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.602453][ T5868] usb 3-1: Product: syz [ 1012.609638][ T5868] usb 3-1: Manufacturer: syz [ 1012.615412][ T5868] usb 3-1: SerialNumber: syz [ 1012.792161][ T5868] usb 3-1: config 0 descriptor?? [ 1012.820400][ T5868] smsc75xx v1.0.0 [ 1012.824591][ T5868] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1012.835896][ T5868] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1013.358246][ T5868] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1013.559184][ T5868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.570478][ T5868] usb 10-1: config 1 has no interfaces? [ 1013.620068][ T5868] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1013.632663][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.644544][ T5868] usb 10-1: Product: syz [ 1013.650064][ T5868] usb 10-1: Manufacturer: syz [ 1013.654917][ T5868] usb 10-1: SerialNumber: syz [ 1014.001147][ T5868] usb 10-1: USB disconnect, device number 52 [ 1014.854671][T12332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1015.309008][ T5868] usb 3-1: USB disconnect, device number 35 [ 1015.665323][T12348] loop1: detected capacity change from 0 to 1024 [ 1015.810346][T12348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.760670][ T8083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.271731][T12382] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1017.450752][T11872] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1017.674116][T11872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.684549][T11872] usb 2-1: config 1 has no interfaces? [ 1017.731811][ T30] audit: type=1326 audit(1759097038.629:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1017.744182][T11872] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1017.755690][ T30] audit: type=1326 audit(1759097038.629:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1017.764509][T11872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.764626][T11872] usb 2-1: Product: syz [ 1017.764717][T11872] usb 2-1: Manufacturer: syz [ 1017.805549][T11872] usb 2-1: SerialNumber: syz [ 1017.950027][ T30] audit: type=1326 audit(1759097038.729:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1017.973412][ T30] audit: type=1326 audit(1759097038.729:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1017.996891][ T30] audit: type=1326 audit(1759097038.739:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1018.019982][ T30] audit: type=1326 audit(1759097038.749:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1018.045961][ T30] audit: type=1326 audit(1759097038.769:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1018.070377][ T30] audit: type=1326 audit(1759097038.769:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1018.093703][ T30] audit: type=1326 audit(1759097038.769:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1018.116424][ T30] audit: type=1326 audit(1759097038.769:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.9.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1018.144904][ T5868] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1018.322071][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 1018.336681][ T5868] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1018.349831][ T5868] usb 3-1: config 0 has no interface number 0 [ 1018.356130][ T5868] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1018.436329][ T5868] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1018.449178][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.457381][ T5868] usb 3-1: Product: syz [ 1018.463920][ T5868] usb 3-1: Manufacturer: syz [ 1018.469228][ T5868] usb 3-1: SerialNumber: syz [ 1018.550521][T11872] usb 2-1: USB disconnect, device number 37 [ 1018.551134][ T5868] usb 3-1: config 0 descriptor?? [ 1018.598441][ T5868] smsc75xx v1.0.0 [ 1018.602242][ T5868] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1018.615278][ T5868] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1018.654781][T12401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1019.748334][T12422] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1020.416949][T12433] loop5: detected capacity change from 0 to 512 [ 1020.559980][T12433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.573341][T12433] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.714069][T12433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.069724][T11872] usb 3-1: USB disconnect, device number 36 [ 1021.109033][ T5868] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1021.302010][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 1021.364828][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.375516][ T5868] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1021.385123][ T5868] usb 2-1: config 1 has no interface number 1 [ 1021.392975][ T5868] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 82, using maximum allowed: 30 [ 1021.404105][ T5868] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1021.442293][T12453] loop2: detected capacity change from 0 to 512 [ 1021.484812][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1021.494297][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.503019][ T5868] usb 2-1: Product: syz [ 1021.507349][ T5868] usb 2-1: Manufacturer: syz [ 1021.512645][ T5868] usb 2-1: SerialNumber: syz [ 1021.604487][T12453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.619621][T12453] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.720419][T11872] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1021.931830][T11872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.942355][T11872] usb 1-1: config 1 has no interfaces? [ 1022.022710][T11872] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1022.034421][T11872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.043500][T11872] usb 1-1: Product: syz [ 1022.047936][T11872] usb 1-1: Manufacturer: syz [ 1022.052714][T11872] usb 1-1: SerialNumber: syz [ 1022.179391][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.367550][T11872] usb 1-1: USB disconnect, device number 30 [ 1022.457234][T12468] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1023.283770][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.290720][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.386586][T12488] loop5: detected capacity change from 0 to 512 [ 1023.460513][T11872] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1023.506808][T12488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.520291][T12488] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.652009][T12488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.688855][T11872] usb 1-1: Using ep0 maxpacket: 32 [ 1023.751624][T11872] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1023.760277][T11872] usb 1-1: config 0 has no interface number 0 [ 1023.770649][T11872] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1023.861691][T11872] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1023.872920][T11872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.882615][T11872] usb 1-1: Product: syz [ 1023.886947][T11872] usb 1-1: Manufacturer: syz [ 1023.892126][T11872] usb 1-1: SerialNumber: syz [ 1024.010071][T11872] usb 1-1: config 0 descriptor?? [ 1024.033706][T12500] loop9: detected capacity change from 0 to 128 [ 1024.045433][T11872] smsc75xx v1.0.0 [ 1024.050002][T11872] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1024.061198][T11872] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1024.139338][ T24] usb 2-1: USB disconnect, device number 38 [ 1024.422650][T12507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1024.839835][T12513] loop9: detected capacity change from 0 to 1024 [ 1024.880645][T12513] EXT4-fs: Ignoring removed bh option [ 1024.886424][T12513] EXT4-fs: inline encryption not supported [ 1024.946320][T12513] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1025.046305][T12513] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.1699: lblock 2 mapped to illegal pblock 2 (length 1) [ 1025.142368][T12513] __quota_error: 1 callbacks suppressed [ 1025.142449][T12513] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1025.157105][T12513] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.1699: lblock 0 mapped to illegal pblock 48 (length 1) [ 1025.178247][T12513] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1025.187322][T12513] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1699: Failed to acquire dquot type 0 [ 1025.218548][T12513] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1025.238684][ T5868] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1025.239821][T12513] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.1699: mark_inode_dirty error [ 1025.295497][T12513] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1025.309137][T12513] EXT4-fs (loop9): 1 orphan inode deleted [ 1025.320335][T12513] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.348043][ T1315] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1025.417159][ T1315] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1025.426708][ T1315] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 1025.443817][T12513] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #2: block 16: comm syz.9.1699: lblock 0 mapped to illegal pblock 16 (length 1) [ 1025.472566][ T5868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.483112][ T5868] usb 6-1: config 1 has no interfaces? [ 1025.509384][ T5868] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1025.520984][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.529644][ T5868] usb 6-1: Product: syz [ 1025.533978][ T5868] usb 6-1: Manufacturer: syz [ 1025.539001][ T5868] usb 6-1: SerialNumber: syz [ 1025.545441][T12532] netlink: 244 bytes leftover after parsing attributes in process `syz.9.1699'. [ 1025.556759][T12532] ksmbd: Unknown IPC event: 4, ignore. [ 1025.597337][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1025.651279][ T24] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1025.736206][T12513] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #2: block 16: comm syz.9.1699: lblock 0 mapped to illegal pblock 16 (length 1) [ 1025.806904][ T5868] usb 6-1: USB disconnect, device number 4 [ 1025.843855][T12533] loop2: detected capacity change from 0 to 1024 [ 1025.876794][T12533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1025.885141][T12533] ext4: Unknown parameter 'smackfshat' [ 1026.079465][T12533] ecryptfs: Unknown parameter '³(' [ 1026.174212][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.225538][ T7136] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1026.257062][ T7136] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1026.284901][ T7136] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1026.576486][ T5868] usb 1-1: USB disconnect, device number 31 [ 1026.697697][T12549] loop9: detected capacity change from 0 to 512 [ 1026.820000][T12549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.833365][T12549] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.898891][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1026.934322][T11872] hid-generic 0000:0003:0001.0011: unknown main item tag 0x0 [ 1026.944075][T11872] hid-generic 0000:0003:0001.0011: unknown main item tag 0x0 [ 1027.023919][T11872] hid-generic 0000:0003:0001.0011: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1027.050939][T12549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.123013][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1027.157525][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.168497][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1027.177641][ T24] usb 2-1: config 1 has no interface number 1 [ 1027.186176][ T24] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 82, using maximum allowed: 30 [ 1027.197416][ T24] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1027.268298][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1027.277671][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.286113][ T24] usb 2-1: Product: syz [ 1027.290577][ T24] usb 2-1: Manufacturer: syz [ 1027.295325][ T24] usb 2-1: SerialNumber: syz [ 1027.405512][T12565] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1028.275927][T12580] netlink: 'syz.2.1716': attribute type 2 has an invalid length. [ 1028.285456][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 1028.660078][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'. [ 1028.803236][T12589] loop2: detected capacity change from 0 to 128 [ 1028.875377][ T30] audit: type=1800 audit(1759097049.779:221): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1719" name="file1" dev="loop2" ino=1048667 res=0 errno=0 [ 1029.093600][ T24] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1029.259021][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1029.283902][ T24] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1029.292746][ T24] usb 10-1: config 0 has no interface number 0 [ 1029.300806][ T24] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1029.362019][ T24] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1029.372361][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.381018][ T24] usb 10-1: Product: syz [ 1029.385479][ T24] usb 10-1: Manufacturer: syz [ 1029.390452][ T24] usb 10-1: SerialNumber: syz [ 1029.432089][ T24] usb 10-1: config 0 descriptor?? [ 1029.444753][ T24] smsc75xx v1.0.0 [ 1029.448816][ T24] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1029.464497][ T24] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 1029.493544][T12598] hub 8-0:1.0: USB hub found [ 1029.579548][T12598] hub 8-0:1.0: 1 port detected [ 1029.610201][ T30] audit: type=1326 audit(1759097050.509:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1029.635110][ T30] audit: type=1326 audit(1759097050.519:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1029.659160][ T30] audit: type=1326 audit(1759097050.519:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1029.682520][ T30] audit: type=1326 audit(1759097050.519:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1029.708957][ T30] audit: type=1326 audit(1759097050.519:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1029.852344][ T24] usb 2-1: USB disconnect, device number 39 [ 1029.897408][ T30] audit: type=1326 audit(1759097050.669:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.380179][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1030.380254][ T30] audit: type=1326 audit(1759097051.279:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.528769][ T30] audit: type=1326 audit(1759097051.319:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.552479][ T30] audit: type=1326 audit(1759097051.329:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.576552][ T30] audit: type=1326 audit(1759097051.329:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.599792][ T30] audit: type=1326 audit(1759097051.379:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.623498][ T30] audit: type=1326 audit(1759097051.379:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.649791][ T30] audit: type=1326 audit(1759097051.399:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.673753][ T30] audit: type=1326 audit(1759097051.399:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.696708][ T30] audit: type=1326 audit(1759097051.399:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1030.719625][ T30] audit: type=1326 audit(1759097051.409:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1031.010748][T12625] loop5: detected capacity change from 0 to 512 [ 1031.026467][T12625] EXT4-fs: Ignoring removed mblk_io_submit option [ 1031.086368][T12625] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1031.158580][T12625] EXT4-fs (loop5): 1 truncate cleaned up [ 1031.166340][T12625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.412823][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 1031.644281][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.085830][ T9] usb 10-1: USB disconnect, device number 53 [ 1032.238393][ T5868] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1032.452021][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 1032.474488][T12658] loop2: detected capacity change from 0 to 512 [ 1032.497112][ T5868] usb 2-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 1032.508818][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.582672][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.592240][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.601715][ T5868] usb 2-1: Product: syz [ 1032.606050][ T5868] usb 2-1: Manufacturer: syz [ 1032.611022][ T5868] usb 2-1: SerialNumber: syz [ 1032.627367][T12658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.641685][T12658] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.799917][T12658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.844530][T12667] 9pnet_fd: Insufficient options for proto=fd [ 1033.038336][ T5868] usb 2-1: 0:2 : does not exist [ 1034.478509][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1034.677532][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 1034.688755][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1034.732122][ T24] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1034.741545][ T24] usb 6-1: config 0 has no interface number 0 [ 1034.748537][ T24] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1034.840061][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1034.851065][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.859475][ T24] usb 6-1: Product: syz [ 1034.864012][ T24] usb 6-1: Manufacturer: syz [ 1034.869048][ T24] usb 6-1: SerialNumber: syz [ 1034.989460][T11872] usb 2-1: USB disconnect, device number 40 [ 1035.111730][ T24] usb 6-1: config 0 descriptor?? [ 1035.150175][ T24] smsc75xx v1.0.0 [ 1035.578949][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1035.590250][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1035.600302][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1035.611616][ T24] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1036.767657][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1036.767730][ T30] audit: type=1326 audit(1759097057.669:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cd78eec9 code=0x7ffc0000 [ 1036.869953][ T30] audit: type=1326 audit(1759097057.709:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb8cd78eec9 code=0x7ffc0000 [ 1036.895407][ T30] audit: type=1326 audit(1759097057.709:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cd78eec9 code=0x7ffc0000 [ 1036.919630][ T30] audit: type=1326 audit(1759097057.709:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cd78eec9 code=0x7ffc0000 [ 1037.064650][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'. [ 1037.151580][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1037.320981][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1037.343187][ T24] usb 3-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 1037.354091][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1037.398987][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1037.408498][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.416669][ T24] usb 3-1: Product: syz [ 1037.421362][ T24] usb 3-1: Manufacturer: syz [ 1037.426125][ T24] usb 3-1: SerialNumber: syz [ 1037.639206][ T5868] usb 6-1: USB disconnect, device number 5 [ 1037.752851][T12736] loop1: detected capacity change from 0 to 512 [ 1037.821627][T12736] EXT4-fs: Ignoring removed mblk_io_submit option [ 1037.858734][T12736] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1037.992911][ T24] usb 3-1: 0:2 : does not exist [ 1038.046407][T12736] EXT4-fs (loop1): 1 truncate cleaned up [ 1038.054430][T12736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.190207][ T30] audit: type=1804 audit(1759097059.079:271): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1761" name="/newroot/271/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 1038.485445][T12746] netlink: 'syz.0.1764': attribute type 2 has an invalid length. [ 1038.493892][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'. [ 1038.604254][T12748] loop5: detected capacity change from 0 to 512 [ 1038.728906][ T8083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.799539][T12748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.812646][T12748] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.953584][T12748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.149614][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 1039.280843][T12758] 9p: Unknown access argument ¿: -22 [ 1040.225583][ T5868] usb 3-1: USB disconnect, device number 37 [ 1040.509954][T12774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1772'. [ 1040.790884][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1773'. [ 1040.801904][T12776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.945339][T12776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.966147][ T24] IPVS: starting estimator thread 0... [ 1042.060610][T12802] IPVS: using max 240 ests per chain, 12000 per kthread [ 1042.379541][T12807] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 1042.468684][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1042.672122][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1042.749047][ T24] usb 3-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 1042.760202][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1042.870055][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.880389][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.889470][ T24] usb 3-1: Product: syz [ 1042.893791][ T24] usb 3-1: Manufacturer: syz [ 1042.899023][ T24] usb 3-1: SerialNumber: syz [ 1043.232530][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 1043.265105][T12817] loop9: detected capacity change from 0 to 1024 [ 1043.276388][T12817] EXT4-fs: Ignoring removed bh option [ 1043.282633][T12817] EXT4-fs: inline encryption not supported [ 1043.340480][T12817] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1043.382528][T12817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1043.406989][ T24] usb 3-1: 0:2 : does not exist [ 1043.443158][T12817] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.1787: lblock 2 mapped to illegal pblock 2 (length 1) [ 1043.531716][T12817] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1043.542105][T12817] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.1787: lblock 0 mapped to illegal pblock 48 (length 1) [ 1043.604442][T12817] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1043.618878][T12817] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1787: Failed to acquire dquot type 0 [ 1043.675463][T12827] 9pnet_fd: Insufficient options for proto=fd [ 1043.696411][T12817] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1043.730081][T12817] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.1787: mark_inode_dirty error [ 1043.791640][T12817] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1043.803092][T12817] EXT4-fs (loop9): 1 orphan inode deleted [ 1043.810920][T12817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.826878][ T1798] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1043.885756][ T30] audit: type=1326 audit(1759097064.789:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.0.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1043.909741][ T30] audit: type=1326 audit(1759097064.789:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.0.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1043.945388][ T1798] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1043.954475][ T1798] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 1043.990532][ T30] audit: type=1326 audit(1759097064.879:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.0.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1044.013990][ T30] audit: type=1326 audit(1759097064.879:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.0.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1044.037038][ T30] audit: type=1326 audit(1759097064.879:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.0.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1044.062186][ T30] audit: type=1326 audit(1759097064.879:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.0.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1044.086204][ T30] audit: type=1326 audit(1759097064.879:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.0.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1044.431081][T12817] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.569417][T12817] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz.9.1787: Invalid inode table block 1 in block_group 0 [ 1044.642870][T12817] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1044.689199][T12817] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz.9.1787: mark_inode_dirty error [ 1045.418749][T11872] usb 3-1: USB disconnect, device number 38 [ 1045.749375][T12846] loop2: detected capacity change from 0 to 512 [ 1045.819200][T12829] Bluetooth: hci5: command 0x0406 tx timeout [ 1045.841677][T12846] EXT4-fs: Ignoring removed mblk_io_submit option [ 1045.918606][T12846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1046.001069][T12846] EXT4-fs (loop2): 1 truncate cleaned up [ 1046.009199][T12846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.546906][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.200656][T12885] loop2: detected capacity change from 0 to 512 [ 1049.255577][T12885] EXT4-fs: Ignoring removed mblk_io_submit option [ 1049.308181][T12885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1049.415202][T12885] EXT4-fs (loop2): 1 truncate cleaned up [ 1049.484689][T12885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.637308][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1049.637378][ T30] audit: type=1804 audit(1759097070.539:281): pid=12885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1807" name="/newroot/260/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 1050.361070][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.459765][ T30] audit: type=1326 audit(1759097073.349:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1052.483370][ T30] audit: type=1326 audit(1759097073.349:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1052.506321][ T30] audit: type=1326 audit(1759097073.389:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1052.529582][ T30] audit: type=1326 audit(1759097073.389:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1052.553064][ T30] audit: type=1326 audit(1759097073.389:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1052.578629][ T30] audit: type=1326 audit(1759097073.389:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1052.602147][ T30] audit: type=1326 audit(1759097073.389:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1052.624903][ T30] audit: type=1326 audit(1759097073.409:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1052.649509][ T30] audit: type=1326 audit(1759097073.409:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1053.214039][T12946] bond0: (slave dummy0): Releasing backup interface [ 1053.293085][T12946] bridge_slave_0: left allmulticast mode [ 1053.293186][T12946] bridge_slave_0: left promiscuous mode [ 1053.294083][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.325616][T12946] bridge_slave_1: left allmulticast mode [ 1053.325724][T12946] bridge_slave_1: left promiscuous mode [ 1053.326716][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.378099][T12946] bond0: (slave bond_slave_0): Releasing backup interface [ 1053.385767][T12946] bond0: (slave bond_slave_1): Releasing backup interface [ 1053.401207][T12946] team0: Port device team_slave_0 removed [ 1053.501184][T12946] team0: Port device team_slave_1 removed [ 1053.509039][T12946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.538943][T12946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.558931][T12950] netlink: 'syz.2.1822': attribute type 21 has an invalid length. [ 1053.568923][T12950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1822'. [ 1053.746948][T12950] netlink: 'syz.2.1822': attribute type 5 has an invalid length. [ 1053.756135][T12950] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1822'. [ 1054.943560][T12969] 9pnet_fd: Insufficient options for proto=fd [ 1055.025162][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1055.025238][ T30] audit: type=1326 audit(1759097075.919:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.9.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1055.055991][ T30] audit: type=1326 audit(1759097075.919:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.9.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1055.079027][ T30] audit: type=1326 audit(1759097075.919:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.9.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1055.103650][ T30] audit: type=1326 audit(1759097075.919:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.9.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1055.344761][ T30] audit: type=1326 audit(1759097076.049:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.9.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1056.728369][T12996] loop5: detected capacity change from 0 to 164 [ 1057.719852][T12829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1057.734663][T12829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1057.759974][T12829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1057.785720][T12829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1057.801119][T12829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1058.091235][T13006] lo speed is unknown, defaulting to 1000 [ 1058.337400][T13017] loop9: detected capacity change from 0 to 512 [ 1058.469179][T13017] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1058.701118][T13017] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1850: invalid indirect mapped block 4294967295 (level 0) [ 1058.772737][ T30] audit: type=1326 audit(1759097079.679:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13025 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1058.776578][T13017] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1850: invalid indirect mapped block 4294967295 (level 1) [ 1058.868366][ T30] audit: type=1326 audit(1759097079.709:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13025 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1058.924533][T13017] EXT4-fs (loop9): 1 orphan inode deleted [ 1058.930798][T13017] EXT4-fs (loop9): 1 truncate cleaned up [ 1058.938620][T13017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.048410][ T30] audit: type=1326 audit(1759097079.819:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc953c1785 code=0x7ffc0000 [ 1059.072267][ T30] audit: type=1326 audit(1759097079.879:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13025 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1059.096474][ T30] audit: type=1326 audit(1759097079.879:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13025 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1059.399824][T13006] chnl_net:caif_netlink_parms(): no params data found [ 1059.622747][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.900283][T12829] Bluetooth: hci4: command tx timeout [ 1060.034228][T13040] loop9: detected capacity change from 0 to 164 [ 1061.423970][T13006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.432160][T13006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.440003][T13006] bridge_slave_0: entered allmulticast mode [ 1061.452990][T13006] bridge_slave_0: entered promiscuous mode [ 1061.601542][T13006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.612817][T13006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.620827][T13006] bridge_slave_1: entered allmulticast mode [ 1061.630388][T13006] bridge_slave_1: entered promiscuous mode [ 1061.782313][T13006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.869988][T13006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.005868][T12829] Bluetooth: hci4: command tx timeout [ 1062.030470][T13068] loop2: detected capacity change from 0 to 512 [ 1062.104584][T13006] team0: Port device team_slave_0 added [ 1062.121415][T13006] team0: Port device team_slave_1 added [ 1062.185254][T13068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1062.310454][T13006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.314939][T13068] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1864: invalid indirect mapped block 4294967295 (level 0) [ 1062.317534][T13006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.360134][T13006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.409973][T13068] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1864: invalid indirect mapped block 4294967295 (level 1) [ 1062.481942][T13006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.489192][T13006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.515812][T13006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.534742][T13068] EXT4-fs (loop2): 1 orphan inode deleted [ 1062.543641][T13068] EXT4-fs (loop2): 1 truncate cleaned up [ 1062.552526][T13068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.176728][T13006] hsr_slave_0: entered promiscuous mode [ 1063.178201][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.186782][T13006] hsr_slave_1: entered promiscuous mode [ 1063.837039][T13089] loop2: detected capacity change from 0 to 512 [ 1063.864371][T13089] EXT4-fs: Ignoring removed nobh option [ 1064.065257][T12829] Bluetooth: hci4: command tx timeout [ 1064.099102][T13089] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1870: iget: bad i_size value: 38620345925642 [ 1064.179284][T13089] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1870: couldn't read orphan inode 15 (err -117) [ 1064.274416][T13089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.431679][T13089] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1870: bg 0: block 5: invalid block bitmap [ 1064.509237][T13089] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 1064.524197][T13089] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1064.524197][T13089] [ 1064.535648][T13089] EXT4-fs (loop2): Total free blocks count 0 [ 1064.542466][T13089] EXT4-fs (loop2): Free/Dirty block details [ 1064.548701][T13089] EXT4-fs (loop2): free_blocks=0 [ 1064.553793][T13089] EXT4-fs (loop2): dirty_blocks=16 [ 1064.564373][T13089] EXT4-fs (loop2): Block reservation details [ 1064.570916][T13089] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 1065.077513][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.223621][T13006] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1065.331730][T13006] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1065.461783][T13006] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1065.579631][T13006] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1065.728876][ T5869] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1065.807262][ T5869] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1066.141111][T12829] Bluetooth: hci4: command tx timeout [ 1066.257023][T13115] loop2: detected capacity change from 0 to 128 [ 1066.362357][T13115] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1066.418167][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1066.418239][ T30] audit: type=1326 audit(1759097087.279:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.454212][T13115] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1066.483341][T13119] loop5: detected capacity change from 0 to 512 [ 1066.573108][T13119] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1066.593246][ T30] audit: type=1326 audit(1759097087.379:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.616834][ T30] audit: type=1326 audit(1759097087.379:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.639744][ T30] audit: type=1326 audit(1759097087.379:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.662555][ T30] audit: type=1326 audit(1759097087.429:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.687635][ T30] audit: type=1326 audit(1759097087.429:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.711365][ T30] audit: type=1326 audit(1759097087.429:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.734176][ T30] audit: type=1326 audit(1759097087.429:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.758261][ T30] audit: type=1326 audit(1759097087.519:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1066.783120][ T30] audit: type=1326 audit(1759097087.549:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1067.148412][T13119] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1879: invalid indirect mapped block 4294967295 (level 0) [ 1067.235908][T13119] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1879: invalid indirect mapped block 4294967295 (level 1) [ 1067.279382][ T4268] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1067.301789][T13119] EXT4-fs (loop5): 1 orphan inode deleted [ 1067.308113][T13119] EXT4-fs (loop5): 1 truncate cleaned up [ 1067.315584][T13119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.331382][T13006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.555248][T13006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.656189][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.663802][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.810626][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.818251][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.862980][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.348468][T13134] loop5: detected capacity change from 0 to 128 [ 1068.910590][T13138] net_ratelimit: 3 callbacks suppressed [ 1068.910667][T13138] IPVS: fo: TCP 172.20.20.170:0 - no destination available [ 1069.186971][T13142] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1885'. [ 1069.363567][T13145] loop5: detected capacity change from 0 to 512 [ 1069.506967][T13145] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1069.770088][T13145] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1069.793418][T13148] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1069.820479][ T3686] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.989114][ T3686] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.184369][ T3686] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.421135][ T3686] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.663163][T13006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.830054][T11872] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1070.904847][T11872] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1071.023590][ T3686] bridge_slave_1: left allmulticast mode [ 1071.029799][ T3686] bridge_slave_1: left promiscuous mode [ 1071.036237][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.158459][ T3686] bridge_slave_0: left allmulticast mode [ 1071.164339][ T3686] bridge_slave_0: left promiscuous mode [ 1071.171208][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.039279][T13172] loop2: detected capacity change from 0 to 128 [ 1072.070902][ T3686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.161049][ T3686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.209949][ T3686] bond0 (unregistering): Released all slaves [ 1072.211792][T13175] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1896'. [ 1072.807531][T13178] netdevsim netdevsim0: Direct firmware load for ./bus failed with error -2 [ 1072.816815][T13178] netdevsim netdevsim0: Falling back to sysfs fallback for: ./bus [ 1072.941959][ T3686] hsr_slave_0: left promiscuous mode [ 1072.972829][ T3686] hsr_slave_1: left promiscuous mode [ 1072.980801][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.989663][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.035604][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.043641][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.059427][ T3686] batman_adv: batadv0: Interface deactivated: vlan0 [ 1073.066466][ T3686] batman_adv: batadv0: Removing interface: vlan0 [ 1073.113758][ T3686] veth1_macvtap: left promiscuous mode [ 1073.121670][ T3686] veth0_macvtap: left promiscuous mode [ 1073.132110][ T3686] veth1_vlan: left promiscuous mode [ 1073.137632][ T3686] veth0_vlan: left promiscuous mode [ 1073.173957][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1073.174034][ T30] audit: type=1326 audit(1759097094.069:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.416952][ T30] audit: type=1326 audit(1759097094.129:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.445465][ T30] audit: type=1326 audit(1759097094.139:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.471455][ T30] audit: type=1326 audit(1759097094.139:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.495913][ T30] audit: type=1326 audit(1759097094.199:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.496118][ T30] audit: type=1326 audit(1759097094.199:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.496311][ T30] audit: type=1326 audit(1759097094.209:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.496506][ T30] audit: type=1326 audit(1759097094.209:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.496706][ T30] audit: type=1326 audit(1759097094.229:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.496906][ T30] audit: type=1326 audit(1759097094.229:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1073.894365][ T3686] team0 (unregistering): Port device team_slave_1 removed [ 1073.931468][T13193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1902'. [ 1073.972657][ T3686] team0 (unregistering): Port device team_slave_0 removed [ 1074.205096][T13191] loop5: detected capacity change from 0 to 1024 [ 1074.503408][T13199] tipc: Started in network mode [ 1074.503576][T13199] tipc: Node identity 06be9ffd1d5, cluster identity 4711 [ 1074.504250][T13199] tipc: Enabled bearer , priority 0 [ 1074.557534][T13199] tipc: Disabling bearer [ 1074.737627][ T3686] IPVS: stop unused estimator thread 0... [ 1075.635501][T13006] veth0_vlan: entered promiscuous mode [ 1075.796870][T13214] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1909'. [ 1075.842366][T13006] veth1_vlan: entered promiscuous mode [ 1076.546292][T13006] veth0_macvtap: entered promiscuous mode [ 1076.575738][T13006] veth1_macvtap: entered promiscuous mode [ 1077.109509][T13006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.346413][T13006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.646083][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.893395][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.974537][T13227] loop5: detected capacity change from 0 to 512 [ 1078.038448][ T3592] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.052742][T13227] EXT4-fs: Ignoring removed mblk_io_submit option [ 1078.108803][T13227] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1078.141475][ T3592] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.362608][T13227] EXT4-fs (loop5): 1 truncate cleaned up [ 1078.371479][T13227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.519093][T13234] loop2: detected capacity change from 0 to 256 [ 1078.647227][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1078.647403][ T30] audit: type=1804 audit(1759097099.549:356): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1915" name="/newroot/289/file0/bus" dev="loop2" ino=1048672 res=1 errno=0 [ 1078.915771][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.808905][T13252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1921'. [ 1080.225395][T13258] loop5: detected capacity change from 0 to 1024 [ 1080.261161][T13258] EXT4-fs: Ignoring removed bh option [ 1080.267090][T13258] EXT4-fs: inline encryption not supported [ 1080.328831][T13258] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1080.449873][T13258] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1923: lblock 2 mapped to illegal pblock 2 (length 1) [ 1080.566897][T13258] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1080.575536][T13258] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1923: lblock 0 mapped to illegal pblock 48 (length 1) [ 1080.659116][T13258] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1080.668347][T13258] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1923: Failed to acquire dquot type 0 [ 1080.721356][T13258] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1080.748446][T13258] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1923: mark_inode_dirty error [ 1080.828736][T13258] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1080.839669][T13258] EXT4-fs (loop5): 1 orphan inode deleted [ 1080.847318][T13258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.874838][ T3592] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1080.942977][ T3592] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1080.952044][ T3592] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 0 [ 1081.093164][T13258] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 16: comm syz.5.1923: lblock 0 mapped to illegal pblock 16 (length 1) [ 1082.709547][T11238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.813805][T13276] loop2: detected capacity change from 0 to 512 [ 1082.848909][T11238] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1082.873648][T13276] EXT4-fs: Ignoring removed mblk_io_submit option [ 1082.899394][T13276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1082.903825][T11238] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1082.993013][T13276] EXT4-fs (loop2): 1 truncate cleaned up [ 1082.993298][T11238] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1083.000923][T13276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.402591][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.817231][T13294] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1933'. [ 1084.740581][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.747263][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1085.168976][T13316] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1939'. [ 1085.178530][T13316] ksmbd: Unknown IPC event: 3, ignore. [ 1085.243028][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1939'. [ 1085.252554][T13322] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1939'. [ 1085.558775][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.566818][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.831139][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.839485][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.968695][T13333] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1945'. [ 1087.221509][T13348] loop2: detected capacity change from 0 to 512 [ 1087.345242][T13348] EXT4-fs (loop2): too many log groups per flexible block group [ 1087.353857][T13348] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 1087.429549][T13348] EXT4-fs (loop2): mount failed [ 1087.672446][T13360] loop9: detected capacity change from 0 to 512 [ 1087.722630][T13360] EXT4-fs: Ignoring removed mblk_io_submit option [ 1087.787239][T13360] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1087.903922][T13360] EXT4-fs (loop9): 1 truncate cleaned up [ 1087.911821][T13360] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.144217][ T30] audit: type=1800 audit(1759097109.049:357): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1953" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1088.444771][T13384] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1958'. [ 1088.655819][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.982515][T13389] netlink: 'syz.2.1960': attribute type 153 has an invalid length. [ 1089.009492][T13394] random: crng reseeded on system resumption [ 1089.147547][T13394] Restarting kernel threads ... [ 1089.212597][T13394] Done restarting kernel threads. [ 1089.919760][T13406] netlink: 360 bytes leftover after parsing attributes in process `syz.5.1967'. [ 1090.084925][T13416] loop9: detected capacity change from 0 to 512 [ 1090.152872][T13416] EXT4-fs: Ignoring removed mblk_io_submit option [ 1090.228195][T13416] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1090.341341][T13416] EXT4-fs (loop9): 1 truncate cleaned up [ 1090.350020][T13416] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.512544][ T30] audit: type=1800 audit(1759097111.399:358): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1971" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1090.706107][ T7136] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.717240][T13426] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1973'. [ 1090.858258][T13432] random: crng reseeded on system resumption [ 1091.399103][T13446] loop8: detected capacity change from 0 to 1024 [ 1091.419677][ T5868] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1091.514194][T13446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.599174][ T5868] usb 10-1: Using ep0 maxpacket: 16 [ 1091.626225][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.637648][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.648391][ T5868] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.665280][ T5868] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1091.676532][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.756295][ T5868] usb 10-1: config 0 descriptor?? [ 1091.804020][T13446] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.1980: inode #4: comm syz.8.1980: iget: illegal inode # [ 1091.836933][ T5868] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input55 [ 1091.851905][ T5148] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1091.881044][T13446] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1980: error while reading EA inode 4 err=-117 [ 1091.942519][ T5148] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1092.008661][ T5148] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1092.059819][ T5148] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1092.229432][T13006] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.327974][ T7068] usb 10-1: USB disconnect, device number 54 [ 1092.535729][ T30] audit: type=1326 audit(1759097113.439:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1092.558896][ T30] audit: type=1326 audit(1759097113.449:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1092.581625][ T30] audit: type=1326 audit(1759097113.449:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1092.606996][ T30] audit: type=1326 audit(1759097113.459:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1092.630456][ T30] audit: type=1326 audit(1759097113.459:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1092.721644][T13468] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1988'. [ 1092.948119][ T30] audit: type=1326 audit(1759097113.589:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1093.835039][T13490] loop5: detected capacity change from 0 to 164 [ 1094.063952][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1997'. [ 1094.459207][T13503] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2000'. [ 1094.472868][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1999'. [ 1094.474537][ T30] audit: type=1326 audit(1759097115.379:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.588371][ T30] audit: type=1326 audit(1759097115.429:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.612719][ T30] audit: type=1326 audit(1759097115.429:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.638585][ T30] audit: type=1326 audit(1759097115.429:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.661405][ T30] audit: type=1326 audit(1759097115.429:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.684297][ T30] audit: type=1326 audit(1759097115.449:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.707419][ T30] audit: type=1326 audit(1759097115.459:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.731412][ T30] audit: type=1326 audit(1759097115.459:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.756279][ T30] audit: type=1326 audit(1759097115.459:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.784292][ T30] audit: type=1326 audit(1759097115.459:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.0.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194338eec9 code=0x7ffc0000 [ 1094.886528][T13508] loop9: detected capacity change from 0 to 1764 [ 1096.426544][T13538] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2013'. [ 1097.046211][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2017'. [ 1097.058867][ T7068] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1097.096408][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2018'. [ 1097.129577][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2018'. [ 1097.223666][T13552] team0: Port device team_slave_1 removed [ 1097.244783][ T7068] usb 6-1: device descriptor read/64, error -71 [ 1097.489668][ T7068] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1097.669012][ T7068] usb 6-1: device descriptor read/64, error -71 [ 1097.787158][ T7068] usb usb6-port1: attempt power cycle [ 1098.190621][ T7068] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1098.265682][ T7068] usb 6-1: device descriptor read/8, error -71 [ 1098.405890][T13573] loop8: detected capacity change from 0 to 164 [ 1098.538259][ T7068] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1098.601165][ T7068] usb 6-1: device descriptor read/8, error -71 [ 1098.718346][ T7068] usb usb6-port1: unable to enumerate USB device [ 1098.823073][T13582] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2027'. [ 1099.303689][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 1100.283368][T13605] loop9: detected capacity change from 0 to 164 [ 1100.928602][T13619] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2041'. [ 1101.674014][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 1102.068263][ T7068] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1102.238154][ T7068] usb 10-1: device descriptor read/64, error -71 [ 1102.451185][T13644] netlink: 144 bytes leftover after parsing attributes in process `syz.8.2050'. [ 1102.490329][ T7068] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1102.652017][T13644] loop8: detected capacity change from 0 to 512 [ 1102.676109][ T7068] usb 10-1: device descriptor read/64, error -71 [ 1102.764571][T13650] loop2: detected capacity change from 0 to 164 [ 1102.803607][ T7068] usb usb10-port1: attempt power cycle [ 1103.188370][ T7068] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1103.230441][T13660] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2055'. [ 1103.260533][ T7068] usb 10-1: device descriptor read/8, error -71 [ 1103.530038][ T7068] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1103.585549][ T7068] usb 10-1: device descriptor read/8, error -71 [ 1103.700219][ T7068] usb usb10-port1: unable to enumerate USB device [ 1103.861447][T13669] lo speed is unknown, defaulting to 1000 [ 1104.418117][ T7068] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1104.589163][ T7068] usb 1-1: Using ep0 maxpacket: 16 [ 1104.611050][ T7068] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1104.622380][ T7068] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1104.736610][ T7068] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1104.746301][ T7068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.755840][ T7068] usb 1-1: Product: syz [ 1104.760341][ T7068] usb 1-1: Manufacturer: syz [ 1104.765185][ T7068] usb 1-1: SerialNumber: syz [ 1104.933712][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1104.933841][ T30] audit: type=1326 audit(1759097125.839:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1104.968698][ T30] audit: type=1326 audit(1759097125.839:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1105.235943][ T30] audit: type=1326 audit(1759097125.909:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9538d97f code=0x7ffc0000 [ 1105.259930][ T30] audit: type=1326 audit(1759097125.909:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1105.286240][ T30] audit: type=1326 audit(1759097125.909:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1105.309986][ T30] audit: type=1326 audit(1759097125.919:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1105.333058][ T30] audit: type=1326 audit(1759097125.919:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1105.356323][ T30] audit: type=1326 audit(1759097125.929:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1105.379173][ T30] audit: type=1326 audit(1759097125.929:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1105.403794][ T30] audit: type=1326 audit(1759097125.939:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13687 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9538eec9 code=0x7ffc0000 [ 1105.439974][ T7068] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1105.447587][ T7068] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1105.527012][T13694] loop5: detected capacity change from 0 to 164 [ 1105.886304][T13704] loop9: detected capacity change from 0 to 512 [ 1105.993474][T13707] lo speed is unknown, defaulting to 1000 [ 1106.191334][T13712] netdevsim netdevsim5: Direct firmware load for ./bus failed with error -2 [ 1106.205065][T13712] netdevsim netdevsim5: Falling back to sysfs fallback for: ./bus [ 1106.248030][T13704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.261210][T13704] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.278302][T13704] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.960414][T13722] netlink: 264 bytes leftover after parsing attributes in process `syz.9.2073'. [ 1107.217282][ T7068] usb 1-1: USB disconnect, device number 32 [ 1107.977704][T13743] loop9: detected capacity change from 0 to 164 [ 1108.463396][T13749] loop8: detected capacity change from 0 to 512 [ 1108.660317][T13749] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.677067][T13749] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.721921][T13757] netdevsim netdevsim5: Direct firmware load for ./bus failed with error -2 [ 1108.731323][T13757] netdevsim netdevsim5: Falling back to sysfs fallback for: ./bus [ 1108.761662][T13749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.938488][ T7068] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1109.124623][ T7068] usb 1-1: Using ep0 maxpacket: 16 [ 1109.153019][ T7068] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1109.164772][ T7068] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1109.256746][ T7068] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1109.266362][ T7068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.275052][ T7068] usb 1-1: Product: syz [ 1109.281805][ T7068] usb 1-1: Manufacturer: syz [ 1109.286580][ T7068] usb 1-1: SerialNumber: syz [ 1109.313713][T13769] loop2: detected capacity change from 0 to 512 [ 1109.353305][T13769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1109.476788][T13769] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2089: invalid indirect mapped block 4294967295 (level 0) [ 1109.632012][T13769] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2089: invalid indirect mapped block 4294967295 (level 1) [ 1109.696531][T13769] EXT4-fs (loop2): 1 orphan inode deleted [ 1109.703011][T13769] EXT4-fs (loop2): 1 truncate cleaned up [ 1109.711088][T13769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.869294][ T7068] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1109.876994][ T7068] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1110.282502][ T8299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.348277][T13785] netlink: 'syz.8.2094': attribute type 6 has an invalid length. [ 1110.625105][T13794] loop2: detected capacity change from 0 to 164 [ 1111.350060][T13806] loop2: detected capacity change from 0 to 512 [ 1111.553068][T13806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.566722][T13806] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.615302][T13806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.636927][T13799] sctp: failed to load transform for md5: -2 [ 1111.885441][T13820] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1112.002224][ T7068] usb 1-1: USB disconnect, device number 33 [ 1112.556029][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1112.556104][ T30] audit: type=1326 audit(1759097133.449:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.9.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1112.585555][ T30] audit: type=1326 audit(1759097133.459:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.9.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1112.608591][ T30] audit: type=1326 audit(1759097133.469:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.9.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1112.631414][ T30] audit: type=1326 audit(1759097133.469:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.9.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1112.654376][ T30] audit: type=1326 audit(1759097133.469:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.9.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1112.679958][ T30] audit: type=1326 audit(1759097133.489:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.9.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f7b5598eec9 code=0x7ffc0000 [ 1112.804792][T13837] netlink: 'syz.8.2108': attribute type 6 has an invalid length. [ 1113.037661][T13839] loop5: detected capacity change from 0 to 512 [ 1113.163925][T13839] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1113.176889][T13839] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1113.260986][T13839] EXT4-fs (loop5): mount failed [ 1114.317585][T13862] loop2: detected capacity change from 0 to 512 [ 1114.410350][T13862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.424521][T13862] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.458433][T13862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.718745][T13871] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1115.288320][ T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1115.331274][ T9] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1116.360123][T13897] loop8: detected capacity change from 0 to 256 [ 1116.522312][ T30] audit: type=1804 audit(1759097137.419:441): pid=13897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2126" name="/newroot/41/file0/bus" dev="loop8" ino=1048677 res=1 errno=0 [ 1117.202148][T13908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1117.389805][ T4268] ===================================================== [ 1117.397108][ T4268] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2753/0x42b0 [ 1117.404919][ T4268] nci_ntf_packet+0x2753/0x42b0 [ 1117.410009][ T4268] nci_rx_work+0x403/0x750 [ 1117.414554][ T4268] process_scheduled_works+0xb91/0x1d80 [ 1117.420656][ T4268] worker_thread+0xedf/0x1590 [ 1117.425506][ T4268] kthread+0xd5c/0xf00 [ 1117.429833][ T4268] ret_from_fork+0x233/0x380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1117.436917][ T4268] ret_from_fork_asm+0x1a/0x30 [ 1117.442223][ T4268] [ 1117.444612][ T4268] Uninit was created at: [ 1117.451678][ T4268] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1117.457928][ T4268] kmalloc_reserve+0x13c/0x4b0 [ 1117.462853][ T4268] __alloc_skb+0x347/0x7d0 [ 1117.469880][ T4268] virtual_ncidev_write+0x6b/0x430 [ 1117.475166][ T4268] vfs_write+0x48a/0x15d0 [ 1117.480509][ T4268] __x64_sys_write+0x1fb/0x4d0 [ 1117.485438][ T4268] x64_sys_call+0x3014/0x3e20 [ 1117.490457][ T4268] do_syscall_64+0xd9/0x210 [ 1117.495087][ T4268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.502373][ T4268] [ 1117.504780][ T4268] CPU: 1 UID: 0 PID: 4268 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(none) [ 1117.514801][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1117.525170][ T4268] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 1117.531003][ T4268] ===================================================== [ 1117.538125][ T4268] Disabling lock debugging due to kernel taint [ 1117.544362][ T4268] Kernel panic - not syncing: kmsan.panic set ... [ 1117.550902][ T4268] CPU: 1 UID: 0 PID: 4268 Comm: kworker/u8:18 Tainted: G B syzkaller #0 PREEMPT(none) [ 1117.562187][ T4268] Tainted: [B]=BAD_PAGE [ 1117.566424][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1117.576596][ T4268] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 1117.582304][ T4268] Call Trace: [ 1117.585670][ T4268] [ 1117.588667][ T4268] __dump_stack+0x26/0x30 [ 1117.593144][ T4268] dump_stack_lvl+0x53/0x270 [ 1117.597868][ T4268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1117.603917][ T4268] dump_stack+0x1e/0x25 [ 1117.608203][ T4268] vpanic+0x361/0xc50 [ 1117.612334][ T4268] panic+0x15d/0x160 [ 1117.616399][ T4268] kmsan_report+0x31c/0x320 [ 1117.621029][ T4268] ? __msan_warning+0x1b/0x30 [ 1117.625818][ T4268] ? nci_ntf_packet+0x2753/0x42b0 [ 1117.630973][ T4268] ? nci_rx_work+0x403/0x750 [ 1117.635749][ T4268] ? process_scheduled_works+0xb91/0x1d80 [ 1117.641627][ T4268] ? worker_thread+0xedf/0x1590 [ 1117.646623][ T4268] ? kthread+0xd5c/0xf00 [ 1117.650972][ T4268] ? ret_from_fork+0x233/0x380 [ 1117.655860][ T4268] ? ret_from_fork_asm+0x1a/0x30 [ 1117.660949][ T4268] ? ret_from_fork_asm+0x1a/0x30 [ 1117.666046][ T4268] ? kmsan_get_metadata+0xfb/0x160 [ 1117.671297][ T4268] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1117.677778][ T4268] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1117.683997][ T4268] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1117.689970][ T4268] ? stack_depot_save_flags+0x615/0x7b0 [ 1117.695639][ T4268] ? kmsan_get_metadata+0xfb/0x160 [ 1117.700888][ T4268] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1117.707346][ T4268] ? kmsan_get_metadata+0xfb/0x160 [ 1117.712684][ T4268] __msan_warning+0x1b/0x30 [ 1117.717305][ T4268] nci_ntf_packet+0x2753/0x42b0 [ 1117.722288][ T4268] ? kmsan_internal_task_create+0x40/0x50 [ 1117.728161][ T4268] nci_rx_work+0x403/0x750 [ 1117.732698][ T4268] ? __pfx_nci_rx_work+0x10/0x10 [ 1117.737750][ T4268] process_scheduled_works+0xb91/0x1d80 [ 1117.743513][ T4268] worker_thread+0xedf/0x1590 [ 1117.748377][ T4268] kthread+0xd5c/0xf00 [ 1117.752570][ T4268] ? __pfx_worker_thread+0x10/0x10 [ 1117.757876][ T4268] ? __pfx_kthread+0x10/0x10 [ 1117.762581][ T4268] ret_from_fork+0x233/0x380 [ 1117.767287][ T4268] ? __pfx_kthread+0x10/0x10 [ 1117.771999][ T4268] ret_from_fork_asm+0x1a/0x30 [ 1117.776946][ T4268] [ 1117.780201][ T4268] Kernel Offset: disabled [ 1117.784566][ T4268] Rebooting in 86400 seconds..