last executing test programs: 13m47.236642531s ago: executing program 32 (id=3): pipe2$watch_queue(0x0, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.current\x00', 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000017c0)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket(0x840000000002, 0x3, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0xab, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000004000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2804458, &(0x7f0000000000)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x502, &(0x7f0000000240)="$eJzs3d9rY1kdAPDvvW26nZmuyaoP64K7i7vSWXSSduruFh92VxB9WlDX91rbtJSmTWnSdVoG7eAfIIio4JNPvgj+AYLMnyDCgL6LiiI6o4/OXElyq9M2aTPbtJlJPx+4zTn31/ecS3Pur0NOAJfWqxHxXkSMRcQbEVHM56f5tNDK7HfWe3D/9lJrSiLLPvhHEkk+72Bfrfx4RFzrbBKTEfGNr0Z8Ozket7G7t75Yq1W383ylubFVaezu3VjbWFytrlY35+Zm35p/e/7N+Zksd6Z6liLinS//5cc/+MVX3vnN57/zx4W/Xf9uq1hZsVPuiFg6U4AeOvsutI/FgdYx2j6PYEMwltenMDbskgAA0I/WNf7HI+Iz7ev/Yoy1r+YAAACAUZK9OxX/SSIyAAAAYGSlETEVSVrO+wJMRZqWy50+vJ+Mq2mt3mh+bqW+s7ncWhZRikK6slarzuR9hUtRSFr52byP7UH+5pH8XES8EBE/Kl5p58tL9drysB9+AAAAwCVx7ZXD9///LqbtNAAAADBiSj0zAAAAwKhwyw8AAACjz/0/AAAAjLSvvf9+a8oOxvFe/nB3Z73+4Y3lamO9vLGzVF6qb2+VV+v11fZv9m2ctr9avb71hdjcuVVpVhvNSmN3b2GjvrPZXFg7NAQ2AAAAcIFeeOXuH5KI2P/ilfYU+e8AAhzy52EXABiksWEXABia8X5XTM63HMDFK5y6Rt8tBPCMOu303rPzzm8HXxYAAOB8TH/q+Pv/iXzZ6c8GgGeZvj4AcPl4uweXV+HUHoA6/sCo+1jn47ley8/+/j/LnrhQAADAQE21pyQt5+8CpyJNy+WI59vDAhSSlbVadSa/P/h9sfBcKz/b3jLxZAAAAAAAAAAAAAAAAAAAAAAAAAAA+pRlSWQAAADASItI/5rko/xNF1+f6jwVeJiP1XVk1K+fffCTW4vN5vZsxETyz2Jr1kRENH/amb9zMzMkAAAAADwF2vfvN/PP2WGXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR8+D+7aWD6SLj/v1LEVHqFn88Jtufk1GIiKv/SmL8se2SiBgbQPz9OxHxYrf4STzKsqyUl6Jb/CvnHL/UPjTd46cRcW0A8eEyu9tqf97r9v1L49X2Z/fv33g+nVXv9i/9X/s31qP9eb7PGC/d+1WlZ/w7ES+Nd29/DuInnfhJHIn/Wp/xv/XNvb1ey7KfR0x3Pf8kh2JVmhtblcbu3o21jcXV6mp1c25u9q35t+ffnJ+prKzVqvnfrjF++OlfPzqp/ld7xC8drv+x4/96n/V/eO/W/U90koVu8a+/1v38+2KP+Gl+7vtsnm4tnz5I73fSj3v5l797+aT6L/eo/+Qp9b/eZ/3f+Pr3/9TnqgDABWjs7q0v1mrV7RMSk32sc8GJd5+OYkgMKpF9r/P/eLb9nHHzY4nsLJuPxwCKMfEE39PBJobZKgEAAOfh/xf9wy4JAAAAAAAAAAAAAAAAAAAAXF4f8RfCJiOi75WPxtwfTlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE703wAAAP//jl/Y1w==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) 7m38.04702667s ago: executing program 33 (id=880): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000001300)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc00}, 0x2de0d2a06d7aeea8) 7m25.104038084s ago: executing program 34 (id=909): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000000)) 7m9.079868658s ago: executing program 36 (id=972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m1.998300974s ago: executing program 1 (id=1123): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x1, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x29, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast2, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x20000000000000a5, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 6m1.777090052s ago: executing program 4 (id=1124): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000240)) 6m1.735015995s ago: executing program 4 (id=1127): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffee0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000040)='./file1\x00', 0x2) 6m1.371526935s ago: executing program 4 (id=1129): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b00000000"], 0x30}}, 0x0) 4m25.984120136s ago: executing program 6 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 4m25.886485394s ago: executing program 6 (id=1395): socket$unix(0x1, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd(0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/38, 0x26) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m21.96705317s ago: executing program 6 (id=1402): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 4m17.832516954s ago: executing program 6 (id=1409): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x1, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x29, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast2, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x20000000000000a5, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 4m15.890056391s ago: executing program 6 (id=1415): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) 4m14.948479727s ago: executing program 39 (id=1415): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) 3m55.897437865s ago: executing program 2 (id=1469): socket$unix(0x1, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd(0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/38, 0x26) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000000080)) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x358, 0x0) 3m55.027234055s ago: executing program 2 (id=1471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 3m54.97413208s ago: executing program 2 (id=1472): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x550f, &(0x7f000000cf00)="$eJzs3E1vG1UXAODjpGn69faNEAt2HalCSqTaivNRwS5AKz5EqqjAghU4tmO5tT1R7DghKxYsEQv+CQKJFUt+AwvW7BALEDskkGcm0FAQlXBskj6PND5zr6/PnGtVlc5M5ACeWgvJzz+W4npcjojZiLgWkZ2XiiOzkYfnIuJGRMw8cpSK+d8nLkbElYi4Pkqe5ywVb316a3hz/Yc3fvrqm/kLVz/78tvp7RqYtucjorubnx9085i28vigmK8N21nsrg2LmL/RfViM0zweNLezDAe143W1LK628vXp7n5/FHc6tfootto72fxuL79gf9g6zpN94EFtLxs3mttZbPfTLLaO8roOj/L/2476gzxPo8j3QZY+BoPjmM83D5v5fnYfZrHeGxTzed600TwcxWERi8tFPe00sjq2/803/d/2Zru3f5gMm3v9dtpL1ivVFyrV2+XqXtpoDppr5Vq3cXstWWx1RsvKg2atu9FK01anWamn3aVksVWvl6vVZPFOc7td6yXVamW1slxeXyrObiWv3nsn6TSSxVF8ud3bH7Q7/WQn3UvyTywlK5XVF5eSm9Xkrc2tZOv+3bubW2+/d+fdey9tvv5KseixspLFleWVlXJ1ubxSXXp8T/Pndf8fFUX/w/5hYkrTLgDg7NH/A9Nwev3/3v2I0+//Q/8/Fmeq/33C/t/+YUL0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT63v5j5/LTtZyMdXi/n/FVPPFONSRMxExK9/YTYunsg5W+SZ+5v1c3+q4etSZBlG15gvjisRsVEcv/z/tL8FAAAAOL+++PDGJ3m3nr8sTLsgJim/aTNz7f0x5StFxNzC92PKNjN6eXZMybJ/3xficEzZshtYl8aUbD675XZhTNmezOyJcOmRUMrDzETLAQAAJuJkJzDZLgQAAIBJ+njaBTAdpTh+lHn8LDj7y/s/HghePjECAAAAzqDStAsAAAAATl3W//v9PwAAADjf8t//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnbnKWBuI4AP9b3r7gVyTGvVdxB8fwCC5dGg7gJTiAC7yCF+AMuPMIBgydEUG6MOm0jeZ5kjJMW37MELqYmWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSN+a3frLxzef+uYcT/2U6Q0AAADQ5dDs1u2bZao/y+df5FOvcr2KiDoiusbus3i8yZzlnOb3/Z+v72/+aMPXiDbh/B3zfDyNiLf5+PFy6F8BAAAA/l/7zXaVRuvpZTl1gxhTmrSpn78rlFdFRLP8XiitPue9LhTW/r8f4kOhtHYCa1EoLE25PZRK+yvt436ZtVtcFVUq6s6PXRpZrO8AAMCIZjfFuKMQAAAAxvR+6gYwjSp+LWVelgLnqcjLe09uagAAAMA/qJq6AQAAAMDg2vH/SPv/nez/BwAAANNI+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwpEOzW+8321XfnOPp3mO+1nHpTv+eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2Z93FAiBMAiDves7k7n/YaVBY0OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBif15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi535e46jiAIB/Z2Zna6pijJJDRBQ86MWm29ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnstM24PprZpt8PvDmfXcY5n3fBEK+814WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnsaZ8VhcRKn1blb969tFP3th/rCjZ07K0Ur4qTNpB8PLzY/JMvdJQIAAMDhkdX1fUTczXfXij5dLOv/vL6mqPm/fXoS1/X8w3V/3de1f9F++fne83sDLU7GKW56bnM0PP5oKr3/b5bz7Zm/vKJXPvny3UsWC5FG+t72c+O8fJ7J1zdvvtMvwyNtZAsA/BPH6r4K6r+Hin7QZWIAHBq9RuFd1//ZYrc5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALRhvB1P1nESESu9aVy4ff/axn79jZ07K3U7ff36Tnw5vWdxizwizm2Ohsdbnc18u3zl6oX10Wh4qf3gpYjoavS3qulf+GCGiyM6eT6C/yhIqx/2vOTzeAQd/lICAOBAyqtW1PV389214lyyFPHHdw/W/6824pix/r/34elbzbGa9f+gtRnOv9Wti5+uXr5y9fXNi+vnh+eHH79xYvDm4OSZU6fOrJbvSla9MQEAAODf6VetWf+nS4+u/x9txDFj/f/ZN4MvmmNl6v99TRf9us4EAADgcHv25d9/S/Y5n/T78fn61talweS49/nE5NhBqn/bkao16/9sqeusAAAAgDaMt5MH1v/PNuKYcf3/qe9f+LF5zywiFqr1/2Mbn4zOtjedudbGvxN3PUcAAAC6tVC15vp/Xu7/T/e2PKQR8dork7j6GsCZ6v/s3a9+aI7V3P9/sr0pzqV0efI8yn45orfcdUYAAAAcZE9UrSj2f8131z766ej7ffv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2ZwAAAP//uCM2tw==") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000004c0)={@desc={0x1, 0x0, @auto="c19e91c204bff48d"}}) 3m54.033105146s ago: executing program 2 (id=1476): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 3m53.873522769s ago: executing program 2 (id=1478): pipe2$watch_queue(0x0, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000017c0)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, 0x0, 0x200400d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0xab, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000004000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2804458, &(0x7f0000000000)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x502, &(0x7f0000000240)="$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") 3m50.298243748s ago: executing program 2 (id=1487): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) 3m50.245536182s ago: executing program 40 (id=1487): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) 50.604640145s ago: executing program 5 (id=1915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x20000002, 0x0) ptrace$peeksig(0x4209, r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, 0xfffffffffffffffd) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000540)={0x0, 0x2, 0x1, [0xd, 0x6, 0x40, 0x100000001, 0x3], [0x6, 0x80000000, 0xa1, 0x5, 0x1a, 0x31c7fabb, 0x1c, 0x2, 0x8de, 0x8000000000000001, 0x5, 0x800000000003, 0x9, 0x6, 0xfffffffffffffffb, 0x8000, 0x5, 0x4, 0xfffffffffffeffff, 0x859, 0x4c3, 0x3, 0x3, 0x8, 0x7, 0x3, 0x671, 0x3, 0x4, 0x9, 0x100000001, 0x74b, 0x2, 0x2, 0xae5, 0x8d4, 0x2, 0x81, 0x1, 0x3, 0x1, 0x8, 0x10000, 0x3, 0x1000, 0x0, 0x4, 0xc, 0xa, 0x8000000000000000, 0x5, 0x2ee7517, 0x0, 0x76b, 0x1, 0x1ff, 0x5, 0x1, 0x6, 0x4, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x5, 0xf, 0x9dbc, 0xd, 0x2, 0x1, 0x9, 0xffffffffffff8002, 0xb, 0x88e, 0x10000, 0x2, 0xe, 0x0, 0x200000000000006, 0x6, 0x8000000000000001, 0xffffffffffffffff, 0x8, 0x8, 0x10, 0x8, 0xff, 0x4, 0xb6, 0x8, 0x6, 0xaf5, 0x2, 0x5, 0x9, 0xffffffff, 0xffffffffffffffff, 0x2, 0x3ff, 0x8, 0x8, 0x8, 0x3, 0xffffffffffffff3a, 0x0, 0x7fffffff, 0x7, 0x4, 0xfffffffffffffffb, 0x400, 0x8000, 0xcd17, 0x1100, 0xc, 0x8, 0x5, 0x4, 0xd, 0x8000000000000000, 0x8, 0x615e]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0xfffffffffffffffd) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001180)={0x4, 0x3, {0x8, @usage=0x2, r7, 0x5, 0x8, 0xd7, 0x2, 0x20000008, 0x438, @struct={0xffffff7f, 0x10000}, 0x800, 0x3d, [0xf42b, 0xffffffffffffffff, 0x8, 0xd, 0x54fb, 0x3ff]}, {0x2, @usage=0xffffffffffff8000, 0x0, 0x7381, 0xfffffffffffffffb, 0x8000007, 0xf, 0x7, 0x64, @struct={0x3, 0xafe}, 0x6, 0x9, [0x5, 0xfffffffffffffa3e, 0x5, 0x6, 0x7fffffffffffffff, 0x4]}, {0xfffffffffffffffd, @usage=0x1, 0x0, 0xff, 0x3, 0xfffffffffffffffa, 0x9, 0x2, 0xc, @struct={0x8, 0x7}, 0x6, 0x9, [0x8, 0xffffffffffff8000, 0x9, 0x9, 0x6, 0x48]}, {0x8, 0x2, 0x9}}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') setxattr$incfs_size(&(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, &(0x7f0000000340)=0x8, 0x8, 0x2) read$FUSE(r8, &(0x7f00000027c0)={0x2020}, 0x2038) keyctl$unlink(0x9, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 48.156937272s ago: executing program 5 (id=1920): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x1, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x29, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast2, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x20000000000000a5, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 46.048061602s ago: executing program 5 (id=1922): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r2, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000040)='./file1\x00', 0x2) 45.992292496s ago: executing program 5 (id=1924): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 42.789882864s ago: executing program 5 (id=1932): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x1, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x29, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast2, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x20000000000000a5, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 39.788224416s ago: executing program 5 (id=1939): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000001300000000e000000200000000000000000000000000000000000000000000020000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000089d400000000020000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000feffffffffffff"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 39.675234735s ago: executing program 41 (id=1939): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000001300000000e000000200000000000000000000000000000000000000000000020000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000089d400000000020000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000feffffffffffff"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 14.683539607s ago: executing program 8 (id=1991): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_usb_connect(0x4, 0x153, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/492], &(0x7f0000000340)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x1, 0xd, 0x9}, 0x41, &(0x7f0000000680)={0x5, 0xf, 0x41, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xff0f, 0xfffb}, @generic={0xc, 0x10, 0xa, "2002dbbbe41ccde85a"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "df9c77342b601718b5517e8c96e0a80b"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x4, 0x5}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x801}}, {0x27, &(0x7f0000001400)=@string={0x27, 0x3, "5fcffeb3f4e0b15691ab8047280ea4ad98a989145074045b706f8a49701ed12b8bb5efd290"}}, {0x0, 0x0}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x459}}, {0x6f, &(0x7f0000001740)=@string={0x6f, 0x3, "b112fd0d8732b730a461b0afe5490b38fecaa95fa7ddb4347cbca5ee8b0fbf5c2fdf82c18a3a621366201d1d4ffd53e3111d27687e61c83809ed383fc52939111874deced54af29914a5598694ae01f2c5b4babb99973f9f5841ab2edf1ae779103c6d74adf1e9a4619bc5b9f4"}}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r8, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 14.64758683s ago: executing program 0 (id=1992): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x4400}, 0x50) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) futex(&(0x7f0000000680), 0x85, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000380)) syz_usb_connect$cdc_ncm(0x4, 0xf8, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x2, 0x1, 0x81, 0x60, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "331f7ddf3b"}, {0x5, 0x24, 0x0, 0xcd86}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x65, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9f, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x3, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x7, 0xd}}}}}}}]}}, &(0x7f0000000780)={0xffffffffffffff70, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x80, 0xc, 0x5, 0xff, 0x1}, 0xad, &(0x7f00000002c0)={0x5, 0xf, 0xad, 0x5, [@generic={0x64, 0x10, 0xb, "8bafbbc40632d3e2e9ceef3d3c8e471338db1b0540966d5fe16092e91e079593f9bec4078c52d730bed9fac7938a5afb8bfcef054a9f1891e9faf6de48a803ff8e926616abdbc9140cd3e14488d9ca5831d9c03d84254c7cdbf2c37ffa6fb62819"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x4, 0xff0f, 0xfffe, [0xa0c0, 0xc000, 0xc000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x9, 0xa9, 0xc72}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5de469eeed571357d901e51cad0e60df"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x93, 0xff, 0xfff}]}, 0x5, [{0xd5, &(0x7f0000000800)=@string={0xd5, 0x3, "780e0f423c9e2676ece16ebe0c897da37f1819afd4f3e9c62b5c15bae5cf91d83a18bb33a527e308107a8c7f477a4447ecf13e7f5cf149e1a2e22bccfd44ea5aadc9bd4bf01976fdb394e123f3855c49599ff45b6524397000c70699a05c9084baeba10ccb76a89d050f8d7d1b3cdcbe9e999e8078622b4a50abad796b99dff8b313d19bf8e0daf571af932210ff2b66bc7e7b90035de09ac93ee0c45575777ac63ba614b59c8466e07513655b7e525a33a5b2860241e305986a5605b3f98f6a0c71011ab4a59b56cb86b99071d15326bd4c49"}}, {0xe8, &(0x7f0000000440)=@string={0xe8, 0x3, "abb75410f522176cf3eb27ca9864ad9465dbfefcd6d4f9ea80e41b02facd2882c135a3267cad3945473bc4e97da5064c69118b1a41f58d7451e69ae2d6083760e4e943aa2b64a85e91c0fc0972af4852f4c8a3ea249e6d21b1bae7cab68b26ec3775278ebb289e8e0619574bcd0c37c9d0dd5d47376af88965cc190caa262c97418561ec52e08b1f7be17c310562e1b999f1b19efaf31a102b485da9ab19e42ab3ce1aca81a0248faf3e007947638b0e36b23cf4ebeabbe52679ab0da79234f071209d6027d441657ba604c1ff74ab39dade71d4b8bdb70ff268da0275ab631e0bb51dfbcd6a"}}, {0xce, &(0x7f0000000540)=@string={0xce, 0x3, "7cd86055c0dfc4ab26f197cabe526d3343315ac9c4525892a2451687184331db27ba13cfc2e34426544f75269f20673b534dcd295b3483412fe9cd93d90b2870cabebed45b56a31f7115bae9c78d5a73a00482e69db9c9f2ebac2b14950ae5df58a6dd94893815a71ca4f2f733b88d4bf8f977fae86a85b29de003e61625b0497931cc3601b54b82fa6fffb077585e4a310b0a905c164cb84f0ab665683f8ee66eb9db00061a3a3e8944f98196dcf8726c65bc6c1652c215e028f5615fef323b0e7592106c7a76c283aef470"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0xd5, &(0x7f0000000680)=@string={0xd5, 0x3, "aa03c68223b08a726df3823cb163643e0a352fc554b05b08125951ec8df156727f9865374ffcea4346249a313d7bc7d8608ba86e95ac5a34825ac0e1e3c3c1bfa8f7680e5fe39e4cf7612674b219d39f9f32573be0e980f9eb2c61929cca2b3057cfc60c4a74e49b23f31c5a57752d55de4394f54232f4373a70453801164a4abefb5852adbe32784d20c73f0b870726f9ca3d3d32469e9f809344f2b840408c269d3fbc5eeb1ee057e45ca60c60c369818872d9ee67fa41b34346594ff7375971fea7a944f8b21d48c7d71257fa6ea167fa45"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x1) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="403010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 11.884066873s ago: executing program 3 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x20000002, 0x0) ptrace$peeksig(0x4209, r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, 0xfffffffffffffffd) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000540)={0x0, 0x2, 0x1, [0xd, 0x6, 0x40, 0x100000001, 0x3], [0x6, 0x80000000, 0xa1, 0x5, 0x1a, 0x31c7fabb, 0x1c, 0x2, 0x8de, 0x8000000000000001, 0x5, 0x800000000003, 0x9, 0x6, 0xfffffffffffffffb, 0x8000, 0x5, 0x4, 0xfffffffffffeffff, 0x859, 0x4c3, 0x3, 0x3, 0x8, 0x7, 0x3, 0x671, 0x3, 0x4, 0x9, 0x100000001, 0x74b, 0x2, 0x2, 0xae5, 0x8d4, 0x2, 0x81, 0x1, 0x3, 0x1, 0x8, 0x10000, 0x3, 0x1000, 0x0, 0x4, 0xc, 0xa, 0x8000000000000000, 0x5, 0x2ee7517, 0x0, 0x76b, 0x1, 0x1ff, 0x5, 0x1, 0x6, 0x4, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x5, 0xf, 0x9dbc, 0xd, 0x2, 0x1, 0x9, 0xffffffffffff8002, 0xb, 0x88e, 0x10000, 0x2, 0xe, 0x0, 0x200000000000006, 0x6, 0x8000000000000001, 0xffffffffffffffff, 0x8, 0x8, 0x10, 0x8, 0xff, 0x4, 0xb6, 0x8, 0x6, 0xaf5, 0x2, 0x5, 0x9, 0xffffffff, 0xffffffffffffffff, 0x2, 0x3ff, 0x8, 0x8, 0x8, 0x3, 0xffffffffffffff3a, 0x0, 0x7fffffff, 0x7, 0x4, 0xfffffffffffffffb, 0x400, 0x8000, 0xcd17, 0x1100, 0xc, 0x8, 0x5, 0x4, 0xd, 0x8000000000000000, 0x8, 0x615e]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0xfffffffffffffffd) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001180)={0x4, 0x3, {0x8, @usage=0x2, r7, 0x5, 0x8, 0xd7, 0x2, 0x20000008, 0x438, @struct={0xffffff7f, 0x10000}, 0x800, 0x3d, [0xf42b, 0xffffffffffffffff, 0x8, 0xd, 0x54fb, 0x3ff]}, {0x2, @usage=0xffffffffffff8000, 0x0, 0x7381, 0xfffffffffffffffb, 0x8000007, 0xf, 0x7, 0x64, @struct={0x3, 0xafe}, 0x6, 0x9, [0x5, 0xfffffffffffffa3e, 0x5, 0x6, 0x7fffffffffffffff, 0x4]}, {0xfffffffffffffffd, @usage=0x1, 0x0, 0xff, 0x3, 0xfffffffffffffffa, 0x9, 0x2, 0xc, @struct={0x8, 0x7}, 0x6, 0x9, [0x8, 0xffffffffffff8000, 0x9, 0x9, 0x6, 0x48]}, {0x8, 0x2, 0x9}}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$eJzs3T9rZFUUAPDzkjdvZlWYKaxE8IEWVutmW5sJsgExlUsKtdDg7oJkgrALAf/g7Fa2NhYWfgJB8IPY+A0EW8HOVRauvH/MSzKJO8GJaH6/Jod7z3n3vJdL8lLkzgcvHh7cKePeo89/jtEoi41pTONxFpPYiM7DOGb6VQAA/2WPU4rfUuPMpOdOD2URMVpvawDAmpz9+7/sxfki/OHSWgMA1uT2O+++tb27e+vtshzFzuGXR3vVX/bV12Z++158FLO4GzdiHE8i6heFQdRvC1W4k1Ka52VlEq8czo/2qsrD939sr7/9a0RdvxXjmNRDKaW8C9LOm7u3tspGr35e9fFMu/60qr8Z43i+Xb99W+nqby6pj70iXn251//1GMdPH8bHMYs79dqL+i+2yvKN9PXvn71XdVXVZ/OjvWGdt5A2L/UbAwAAAAAAAAAAAAAAAAAAAADA/9r19uycYZSTP5szANvzdzafVPODKDuT4+fzNPVZd6H++UAppXmKb7vzdW6UZZnaxEV9Hi/k/YMFAQAAAAAAAAAAAAAAAAAA4Op68MmnB/uz2d37Fw6uxWKkOw0gj4g/bkdc9MrT3shLUQf5Wa0O2zX3Z7ONNjyek/dHYrPLySLObaO6iYs/loNVkq+d6rkNvvt+1dVHf58zWL7WPxl0u+tgP1v+DIfRjYzaTfJNEb2NVMRTrlWcNZVile1XLJ0ar3zvxbN1MD8nJ7LzGnv9l+bJtSPZybso6qfajLw2aHLbqUGb0ys/sTeeaj/HqCk//bMic1oHAAAAAAAAAAAAAAAAAACs1eK/f5dMPjq3dCMN19YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyqxef/rxDM2+KTU/GwGe8lF3H/wb95fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwNfwUAAP//ThJUUw==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') setxattr$incfs_size(&(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, &(0x7f0000000340)=0x8, 0x8, 0x2) read$FUSE(r8, &(0x7f00000027c0)={0x2020}, 0x2038) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x6000000, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 11.880290853s ago: executing program 7 (id=1995): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffee0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r2, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000040)='./file1\x00', 0x2) 11.416457031s ago: executing program 7 (id=1996): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_usb_connect(0x4, 0x153, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/492], &(0x7f0000000340)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x1, 0xd, 0x9}, 0x41, &(0x7f0000000680)={0x5, 0xf, 0x41, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xff0f, 0xfffb}, @generic={0xc, 0x10, 0xa, "2002dbbbe41ccde85a"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "df9c77342b601718b5517e8c96e0a80b"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x4, 0x5}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x801}}, {0x27, &(0x7f0000001400)=@string={0x27, 0x3, "5fcffeb3f4e0b15691ab8047280ea4ad98a989145074045b706f8a49701ed12b8bb5efd290"}}, {0x0, 0x0}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x459}}, {0x6f, &(0x7f0000001740)=@string={0x6f, 0x3, "b112fd0d8732b730a461b0afe5490b38fecaa95fa7ddb4347cbca5ee8b0fbf5c2fdf82c18a3a621366201d1d4ffd53e3111d27687e61c83809ed383fc52939111874deced54af29914a5598694ae01f2c5b4babb99973f9f5841ab2edf1ae779103c6d74adf1e9a4619bc5b9f4"}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) 9.223451907s ago: executing program 8 (id=1997): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x200006}}], 0x30}}], 0x1, 0x4000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 9.223015017s ago: executing program 3 (id=1998): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_usb_connect(0x4, 0x153, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000276e7f5e7d2197685ce7ea17dfede9d0b3aa82fa1ba3b149e06010203010902410101000010000904bb070cffec8f0d1205be5f2f2b01d7c4e62551a318a5ef2df1046a792f616334d7f259092103000d0122250c0905800420000d090409050803ff030300077c0a16af3d773bc79b666ee39fa77f2795d85368b9296dfdd6efd183504e5c2501a8be3a006d19439f2bb9559812d6f1895a5d32af15b44351634381638069f99addd5e17882156211d3429b956052ccdd4bc5d6aa66f0a28a3e001c92410d2232bef6f4fb7430738e3ea5cc553efac4020809058000000401060009050b020000092a020725018103090009050902000407b4010725018282ff7f09050703c7058106010725018006050007250180e7050009050104ff0300010309050e1000040210400905061e0002090f040905060020000e09070905090100021007ff09050a0893067003070725010102000007250101f50e0083456270d34ceec1d719ad6b7eebb8314692bc9b61915d15779c7f3cc458e92d6353e434134cdd6ab47c35b4a33beaed09cd8740a46f65fe719d051ee58be787733fa1c11f4ea1ab954a03618a52d7a560e9535b79768ac82e38f1276f2e7147612350fe63e16eb41a951189f9216ed1c03496d268da85eb7d0fa4567fdcd1d600"/492], &(0x7f0000000340)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x1, 0xd, 0x9}, 0x41, &(0x7f0000000680)={0x5, 0xf, 0x41, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xff0f, 0xfffb}, @generic={0xc, 0x10, 0xa, "2002dbbbe41ccde85a"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "df9c77342b601718b5517e8c96e0a80b"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x4, 0x5}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x801}}, {0x27, &(0x7f0000001400)=@string={0x27, 0x3, "5fcffeb3f4e0b15691ab8047280ea4ad98a989145074045b706f8a49701ed12b8bb5efd290"}}, {0x0, 0x0}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x459}}, {0x6f, &(0x7f0000001740)=@string={0x6f, 0x3, "b112fd0d8732b730a461b0afe5490b38fecaa95fa7ddb4347cbca5ee8b0fbf5c2fdf82c18a3a621366201d1d4ffd53e3111d27687e61c83809ed383fc52939111874deced54af29914a5598694ae01f2c5b4babb99973f9f5841ab2edf1ae779103c6d74adf1e9a4619bc5b9f4"}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) 8.301651772s ago: executing program 8 (id=2000): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.165308742s ago: executing program 7 (id=2002): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) 8.040354783s ago: executing program 0 (id=2003): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_usb_connect(0x4, 0x153, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/492], &(0x7f0000000340)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x1, 0xd, 0x9}, 0x41, &(0x7f0000000680)={0x5, 0xf, 0x41, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xff0f, 0xfffb}, @generic={0xc, 0x10, 0xa, "2002dbbbe41ccde85a"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "df9c77342b601718b5517e8c96e0a80b"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x4, 0x5}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x801}}, {0x27, &(0x7f0000001400)=@string={0x27, 0x3, "5fcffeb3f4e0b15691ab8047280ea4ad98a989145074045b706f8a49701ed12b8bb5efd290"}}, {0x0, 0x0}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x459}}, {0x6f, &(0x7f0000001740)=@string={0x6f, 0x3, "b112fd0d8732b730a461b0afe5490b38fecaa95fa7ddb4347cbca5ee8b0fbf5c2fdf82c18a3a621366201d1d4ffd53e3111d27687e61c83809ed383fc52939111874deced54af29914a5598694ae01f2c5b4babb99973f9f5841ab2edf1ae779103c6d74adf1e9a4619bc5b9f4"}}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r9, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) 5.876704986s ago: executing program 9 (id=2004): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) 5.871375357s ago: executing program 3 (id=2005): socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303337372c757466382c696f636861727365743d6d616363656c26e207df7469632c6572726f72733d636f6e74696e75652c6e616d6563617365"], 0x1, 0x14f7, &(0x7f0000001580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mlock(&(0x7f000049d000/0x4000)=nil, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 5.857836668s ago: executing program 7 (id=2006): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x61) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) io_setup(0x4, &(0x7f0000000240)) 5.781425194s ago: executing program 9 (id=2007): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) socket(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) 4.771187116s ago: executing program 9 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x20000002, 0x0) ptrace$peeksig(0x4209, r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, 0xfffffffffffffffd) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000540)={0x0, 0x2, 0x1, [0xd, 0x6, 0x40, 0x100000001, 0x3], [0x6, 0x80000000, 0xa1, 0x5, 0x1a, 0x31c7fabb, 0x1c, 0x2, 0x8de, 0x8000000000000001, 0x5, 0x800000000003, 0x9, 0x6, 0xfffffffffffffffb, 0x8000, 0x5, 0x4, 0xfffffffffffeffff, 0x859, 0x4c3, 0x3, 0x3, 0x8, 0x7, 0x3, 0x671, 0x3, 0x4, 0x9, 0x100000001, 0x74b, 0x2, 0x2, 0xae5, 0x8d4, 0x2, 0x81, 0x1, 0x3, 0x1, 0x8, 0x10000, 0x3, 0x1000, 0x0, 0x4, 0xc, 0xa, 0x8000000000000000, 0x5, 0x2ee7517, 0x0, 0x76b, 0x1, 0x1ff, 0x5, 0x1, 0x6, 0x4, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x5, 0xf, 0x9dbc, 0xd, 0x2, 0x1, 0x9, 0xffffffffffff8002, 0xb, 0x88e, 0x10000, 0x2, 0xe, 0x0, 0x200000000000006, 0x6, 0x8000000000000001, 0xffffffffffffffff, 0x8, 0x8, 0x10, 0x8, 0xff, 0x4, 0xb6, 0x8, 0x6, 0xaf5, 0x2, 0x5, 0x9, 0xffffffff, 0xffffffffffffffff, 0x2, 0x3ff, 0x8, 0x8, 0x8, 0x3, 0xffffffffffffff3a, 0x0, 0x7fffffff, 0x7, 0x4, 0xfffffffffffffffb, 0x400, 0x8000, 0xcd17, 0x1100, 0xc, 0x8, 0x5, 0x4, 0xd, 0x8000000000000000, 0x8, 0x615e]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0xfffffffffffffffd) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001180)={0x4, 0x3, {0x8, @usage=0x2, r7, 0x5, 0x8, 0xd7, 0x2, 0x20000008, 0x438, @struct={0xffffff7f, 0x10000}, 0x800, 0x3d, [0xf42b, 0xffffffffffffffff, 0x8, 0xd, 0x54fb, 0x3ff]}, {0x2, @usage=0xffffffffffff8000, 0x0, 0x7381, 0xfffffffffffffffb, 0x8000007, 0xf, 0x7, 0x64, @struct={0x3, 0xafe}, 0x6, 0x9, [0x5, 0xfffffffffffffa3e, 0x5, 0x6, 0x7fffffffffffffff, 0x4]}, {0xfffffffffffffffd, @usage=0x1, 0x0, 0xff, 0x3, 0xfffffffffffffffa, 0x9, 0x2, 0xc, @struct={0x8, 0x7}, 0x6, 0x9, [0x8, 0xffffffffffff8000, 0x9, 0x9, 0x6, 0x48]}, {0x8, 0x2, 0x9}}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') setxattr$incfs_size(&(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, &(0x7f0000000340)=0x8, 0x8, 0x2) read$FUSE(r8, &(0x7f00000027c0)={0x2020}, 0x2038) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x6000000, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 4.768557036s ago: executing program 0 (id=2009): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x1, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x29, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast2, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x20000000000000a5, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 4.71861362s ago: executing program 8 (id=2010): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffee0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r2, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000040)='./file1\x00', 0x2) 4.71628842s ago: executing program 7 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a4006090400"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) 4.256672527s ago: executing program 3 (id=2012): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x550f, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) 4.244818918s ago: executing program 8 (id=2013): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x4400}, 0x50) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) futex(&(0x7f0000000680), 0x85, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000380)) syz_usb_connect$cdc_ncm(0x4, 0xf8, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x2, 0x1, 0x81, 0x60, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "331f7ddf3b"}, {0x5, 0x24, 0x0, 0xcd86}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x65, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9f, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x3, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x7, 0xd}}}}}}}]}}, &(0x7f0000000780)={0xffffffffffffff70, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x80, 0xc, 0x5, 0xff, 0x1}, 0xad, &(0x7f00000002c0)={0x5, 0xf, 0xad, 0x5, [@generic={0x64, 0x10, 0xb, "8bafbbc40632d3e2e9ceef3d3c8e471338db1b0540966d5fe16092e91e079593f9bec4078c52d730bed9fac7938a5afb8bfcef054a9f1891e9faf6de48a803ff8e926616abdbc9140cd3e14488d9ca5831d9c03d84254c7cdbf2c37ffa6fb62819"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x4, 0xff0f, 0xfffe, [0xa0c0, 0xc000, 0xc000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x9, 0xa9, 0xc72}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5de469eeed571357d901e51cad0e60df"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x93, 0xff, 0xfff}]}, 0x5, [{0xd5, &(0x7f0000000800)=@string={0xd5, 0x3, "780e0f423c9e2676ece16ebe0c897da37f1819afd4f3e9c62b5c15bae5cf91d83a18bb33a527e308107a8c7f477a4447ecf13e7f5cf149e1a2e22bccfd44ea5aadc9bd4bf01976fdb394e123f3855c49599ff45b6524397000c70699a05c9084baeba10ccb76a89d050f8d7d1b3cdcbe9e999e8078622b4a50abad796b99dff8b313d19bf8e0daf571af932210ff2b66bc7e7b90035de09ac93ee0c45575777ac63ba614b59c8466e07513655b7e525a33a5b2860241e305986a5605b3f98f6a0c71011ab4a59b56cb86b99071d15326bd4c49"}}, {0xe8, &(0x7f0000000440)=@string={0xe8, 0x3, "abb75410f522176cf3eb27ca9864ad9465dbfefcd6d4f9ea80e41b02facd2882c135a3267cad3945473bc4e97da5064c69118b1a41f58d7451e69ae2d6083760e4e943aa2b64a85e91c0fc0972af4852f4c8a3ea249e6d21b1bae7cab68b26ec3775278ebb289e8e0619574bcd0c37c9d0dd5d47376af88965cc190caa262c97418561ec52e08b1f7be17c310562e1b999f1b19efaf31a102b485da9ab19e42ab3ce1aca81a0248faf3e007947638b0e36b23cf4ebeabbe52679ab0da79234f071209d6027d441657ba604c1ff74ab39dade71d4b8bdb70ff268da0275ab631e0bb51dfbcd6a"}}, {0xce, &(0x7f0000000540)=@string={0xce, 0x3, "7cd86055c0dfc4ab26f197cabe526d3343315ac9c4525892a2451687184331db27ba13cfc2e34426544f75269f20673b534dcd295b3483412fe9cd93d90b2870cabebed45b56a31f7115bae9c78d5a73a00482e69db9c9f2ebac2b14950ae5df58a6dd94893815a71ca4f2f733b88d4bf8f977fae86a85b29de003e61625b0497931cc3601b54b82fa6fffb077585e4a310b0a905c164cb84f0ab665683f8ee66eb9db00061a3a3e8944f98196dcf8726c65bc6c1652c215e028f5615fef323b0e7592106c7a76c283aef470"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0xd5, &(0x7f0000000680)=@string={0xd5, 0x3, "aa03c68223b08a726df3823cb163643e0a352fc554b05b08125951ec8df156727f9865374ffcea4346249a313d7bc7d8608ba86e95ac5a34825ac0e1e3c3c1bfa8f7680e5fe39e4cf7612674b219d39f9f32573be0e980f9eb2c61929cca2b3057cfc60c4a74e49b23f31c5a57752d55de4394f54232f4373a70453801164a4abefb5852adbe32784d20c73f0b870726f9ca3d3d32469e9f809344f2b840408c269d3fbc5eeb1ee057e45ca60c60c369818872d9ee67fa41b34346594ff7375971fea7a944f8b21d48c7d71257fa6ea167fa45"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x1) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="403010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 3.840026051s ago: executing program 0 (id=2014): syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) write$binfmt_format(r5, &(0x7f0000000000)='1\x00', 0x2400) 2.464302091s ago: executing program 0 (id=2015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a4006090400"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) 2.322508393s ago: executing program 9 (id=2016): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000000)) 2.186161464s ago: executing program 3 (id=2017): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020666601880000000000010902240001000000060904000f04030001000921fe0f06012208000905810310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40109a0000009a232d581c8bb086ecdea5"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.428914565s ago: executing program 9 (id=2018): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x24e, 0xfffffffffffffcb7, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 883.304829ms ago: executing program 7 (id=2019): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904000702a35fc30309050803"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 882.773439ms ago: executing program 9 (id=2029): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904000702a35fc3"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 731.864221ms ago: executing program 0 (id=2020): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) 31.051067ms ago: executing program 3 (id=2021): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) getpriority(0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x24b, &(0x7f0000000c40)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x170, 0x6c, 0x0, 0x170, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0xfd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) 0s ago: executing program 8 (id=2022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): filesystem without journal. Quota mode: writeback. [ 753.400552][ T6945] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.596226][ T6957] loop5: detected capacity change from 0 to 128 [ 753.621700][ T6957] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 753.887754][ T6942] , 18-18, 34-34 [ 754.236143][ T6942] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1736: corrupted inode contents [ 754.300036][ T6942] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #3: comm syz.0.1736: mark_inode_dirty error [ 754.328419][ T6942] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1736: corrupted inode contents [ 754.354069][ T6942] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1736: mark_inode_dirty error [ 754.378144][ T6942] __quota_error: 6 callbacks suppressed [ 754.378163][ T6942] Quota error (device loop0): write_blk: dquota write failed [ 754.391941][ T1791] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 754.421042][ T6942] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 754.431880][ T1791] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 754.445737][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 754.452251][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 754.459017][ T286] EXT4-fs (loop3): unmounting filesystem. [ 754.482654][ T6942] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1736: Failed to acquire dquot type 0 [ 754.531411][ T6942] EXT4-fs (loop0): 1 orphan inode deleted [ 754.544568][ T1791] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 756.610016][ T6974] loop3: detected capacity change from 0 to 512 [ 756.686167][ T6942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 756.768009][ T6974] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 756.776443][ T6974] System zones: 0-2, 18-18, 34-34 [ 756.795444][ T6974] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1748: corrupted inode contents [ 756.809230][ T6974] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.1748: mark_inode_dirty error [ 756.823901][ T6974] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1748: corrupted inode contents [ 756.837812][ T6974] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1748: mark_inode_dirty error [ 756.853054][ T6974] Quota error (device loop3): write_blk: dquota write failed [ 756.861270][ T6974] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 756.871869][ T6974] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1748: Failed to acquire dquot type 0 [ 756.896185][ T6974] EXT4-fs (loop3): 1 orphan inode deleted [ 756.902130][ T6974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 756.913550][ T6974] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.036190][ T1791] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 757.116654][ T6942] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.145533][ T1791] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 757.417598][ T6983] loop7: detected capacity change from 0 to 128 [ 757.441625][ T6983] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 757.596957][ T6985] xt_hashlimit: max too large, truncated to 1048576 [ 758.160889][ T1791] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 758.187274][ T286] EXT4-fs (loop3): unmounting filesystem. [ 758.568388][ T6994] loop5: detected capacity change from 0 to 512 [ 759.335513][ T6994] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 759.343515][ T6994] System zones: 0-2, 18-18, 34-34 [ 759.813021][ T6994] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1753: corrupted inode contents [ 759.827756][ T6994] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.1753: mark_inode_dirty error [ 759.839910][ T6994] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1753: corrupted inode contents [ 759.852632][ T6994] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1753: mark_inode_dirty error [ 759.864750][ T6994] Quota error (device loop5): write_blk: dquota write failed [ 759.872216][ T6994] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 759.883053][ T6994] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1753: Failed to acquire dquot type 0 [ 759.896184][ T6994] EXT4-fs (loop5): 1 orphan inode deleted [ 759.902036][ T6994] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 759.911376][ T6994] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.094798][ T7003] loop7: detected capacity change from 0 to 256 [ 760.135615][ T7003] exfat: Deprecated parameter 'utf8' [ 760.140978][ T7003] exfat: Deprecated parameter 'namecase' [ 760.176745][ T7003] exfat: Bad value for 'namecase' [ 760.194992][ T6987] loop9: detected capacity change from 0 to 40427 [ 760.227239][ T5677] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 760.249096][ T6987] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 760.295274][ T5677] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 760.378047][ T4822] EXT4-fs (loop5): unmounting filesystem. [ 760.384174][ T6987] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 760.412933][ T6987] F2FS-fs (loop9): Found nat_bits in checkpoint [ 761.020991][ T7013] loop5: detected capacity change from 0 to 512 [ 761.028022][ T7013] ext4: Unknown parameter 'nouser_xattr' [ 761.568626][ T5735] EXT4-fs (loop0): unmounting filesystem. [ 761.674485][ T475] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 761.808231][ T7026] loop0: detected capacity change from 0 to 512 [ 761.842495][ T7026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 761.900569][ T475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.933698][ T7026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 762.021405][ T7031] xt_hashlimit: max too large, truncated to 1048576 [ 762.115806][ T7026] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.133920][ T28] audit: type=1400 audit(1755137406.786:342): avc: denied { map } for pid=7032 comm="syz.9.1763" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 762.164458][ T475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.174435][ T475] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 762.186881][ T475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.199149][ T475] usb 6-1: config 0 descriptor?? [ 762.280392][ T7038] tipc: Enabling of bearer rejected, failed to enable media [ 763.222166][ T5735] EXT4-fs (loop0): unmounting filesystem. [ 764.678785][ T7051] loop9: detected capacity change from 0 to 512 [ 764.790481][ T475] hid-led 0003:1D34:0004.0053: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.5-1/input0 [ 764.817292][ T7051] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 764.825605][ T7051] System zones: 0-2, 18-18, 34-34 [ 764.848064][ T7051] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1767: corrupted inode contents [ 764.863381][ T7051] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.1767: mark_inode_dirty error [ 764.880130][ T7051] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1767: corrupted inode contents [ 764.895459][ T7051] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1767: mark_inode_dirty error [ 764.911090][ T7051] Quota error (device loop9): write_blk: dquota write failed [ 764.918831][ T7051] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 764.929015][ T7051] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.1767: Failed to acquire dquot type 0 [ 764.956172][ T7051] EXT4-fs (loop9): 1 orphan inode deleted [ 764.962101][ T7051] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 764.974545][ T7051] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.479759][ T475] hid-led 0003:1D34:0004.0053: Dream Cheeky Webmail Notifier initialized [ 765.545535][ T475] usb 6-1: USB disconnect, device number 29 [ 765.552931][ T10] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 765.589093][ T10] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 765.608238][ T7060] loop3: detected capacity change from 0 to 512 [ 765.610341][ T7059] fido_id[7059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 765.622830][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 765.674867][ T7060] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 765.707888][ T7060] System zones: 0-2, 18-18, 34-34 [ 765.744432][ T7060] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1769: corrupted inode contents [ 765.744557][ T442] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 765.795072][ T7060] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.1769: mark_inode_dirty error [ 765.818936][ T7060] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1769: corrupted inode contents [ 765.869687][ T7070] loop5: detected capacity change from 0 to 512 [ 765.951341][ T7060] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1769: mark_inode_dirty error [ 765.968236][ T7070] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #16: comm syz.5.1773: corrupted inode contents [ 765.980459][ T7060] Quota error (device loop3): write_blk: dquota write failed [ 765.988395][ T7060] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 766.006070][ T7070] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #16: comm syz.5.1773: mark_inode_dirty error [ 766.043236][ T7060] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1769: Failed to acquire dquot type 0 [ 766.314532][ T7074] loop7: detected capacity change from 0 to 128 [ 766.328003][ T7074] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 766.569245][ T7074] FAT-fs (loop7): error, clusters badly computed (5 != 1) [ 766.576749][ T7074] FAT-fs (loop7): Filesystem has been set read-only [ 766.587398][ T7074] FAT-fs (loop7): error, clusters badly computed (6 != 2) [ 766.596340][ T7074] FAT-fs (loop7): error, clusters badly computed (7 != 3) [ 766.605465][ T7074] FAT-fs (loop7): error, clusters badly computed (8 != 4) [ 767.035631][ T7060] EXT4-fs (loop3): 1 orphan inode deleted [ 767.052116][ T7070] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #16: comm syz.5.1773: corrupted inode contents [ 767.074388][ T7060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 767.083903][ T1791] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 767.094475][ T7070] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.1773: mark_inode_dirty error [ 767.118529][ T1791] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 767.127254][ T7066] loop9: detected capacity change from 0 to 40427 [ 767.137340][ T7060] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.148204][ T442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.158356][ T442] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 767.170371][ T7070] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #16: comm syz.5.1773: corrupted inode contents [ 767.171731][ T442] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 767.192441][ T7066] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 767.214356][ T7066] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 767.222570][ T7070] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 767.224092][ T442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.330858][ T442] usb 1-1: config 0 descriptor?? [ 767.336504][ T7070] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #16: comm syz.5.1773: corrupted inode contents [ 767.353455][ T7066] F2FS-fs (loop9): Found nat_bits in checkpoint [ 767.354681][ T7070] EXT4-fs error (device loop5): ext4_truncate:4314: inode #16: comm syz.5.1773: mark_inode_dirty error [ 767.393655][ T7070] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 767.689554][ T7070] EXT4-fs (loop5): 1 truncate cleaned up [ 767.706176][ T7070] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 767.721616][ T7070] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.722157][ T2634] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 767.744675][ T7079] loop7: detected capacity change from 0 to 512 [ 767.751345][ T7079] ext4: Unknown parameter 'nouser_xattr' [ 767.760611][ T7066] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 767.768372][ T2634] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:12: Failed to release dquot type 1 [ 767.774666][ T7066] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 767.788702][ T3879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.819281][ T4822] EXT4-fs (loop5): unmounting filesystem. [ 768.130982][ T7088] loop5: detected capacity change from 0 to 512 [ 768.768502][ T7088] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 768.776939][ T7088] System zones: 0-2, 18-18, 34-34 [ 769.012924][ T7095] loop7: detected capacity change from 0 to 512 [ 769.048040][ T7088] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1775: corrupted inode contents [ 769.067393][ T7088] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.1775: mark_inode_dirty error [ 769.086603][ T7088] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1775: corrupted inode contents [ 769.102034][ T7088] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1775: mark_inode_dirty error [ 769.120485][ T7088] Quota error (device loop5): write_blk: dquota write failed [ 769.128618][ T7088] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 769.138940][ T7088] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1775: Failed to acquire dquot type 0 [ 769.179663][ T7088] EXT4-fs (loop5): 1 orphan inode deleted [ 769.185615][ T7088] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 769.199117][ T7088] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.586481][ T1791] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 769.682469][ T442] kovaplus 0003:1E7D:2D50.0054: unknown main item tag 0x0 [ 769.694385][ T442] kovaplus 0003:1E7D:2D50.0054: unknown main item tag 0x0 [ 769.701658][ T442] kovaplus 0003:1E7D:2D50.0054: unknown main item tag 0x0 [ 769.709054][ T7095] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 769.714813][ T442] kovaplus 0003:1E7D:2D50.0054: unknown main item tag 0x0 [ 769.717400][ T7095] System zones: 0-2, 18-18, 34-34 [ 769.734988][ T7095] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1777: corrupted inode contents [ 769.744323][ T442] kovaplus 0003:1E7D:2D50.0054: unknown main item tag 0x0 [ 769.749380][ T1791] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 769.765147][ T442] kovaplus 0003:1E7D:2D50.0054: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 769.765565][ T7095] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #3: comm syz.7.1777: mark_inode_dirty error [ 769.778121][ T4822] EXT4-fs (loop5): unmounting filesystem. [ 769.795558][ T7095] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1777: corrupted inode contents [ 769.808656][ T7095] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.1777: mark_inode_dirty error [ 769.820971][ T7095] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1777: Failed to acquire dquot type 0 [ 769.838846][ T7095] EXT4-fs (loop7): 1 orphan inode deleted [ 769.844799][ T7095] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 769.844988][ T359] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 769.866829][ T7095] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.923970][ T7109] loop5: detected capacity change from 0 to 512 [ 771.048573][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 771.108215][ T7109] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 771.116446][ T7109] System zones: 0-2, 18-18, 34-34 [ 771.137742][ T7109] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1782: corrupted inode contents [ 771.152108][ T7109] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.1782: mark_inode_dirty error [ 771.167954][ T7109] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1782: corrupted inode contents [ 771.182013][ T7109] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1782: mark_inode_dirty error [ 771.197948][ T7109] __quota_error: 3 callbacks suppressed [ 771.198003][ T7109] Quota error (device loop5): write_blk: dquota write failed [ 771.211512][ T7109] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 771.221797][ T7109] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1782: Failed to acquire dquot type 0 [ 771.245260][ T7109] EXT4-fs (loop5): 1 orphan inode deleted [ 771.251152][ T7109] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 771.262590][ T7109] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.693686][ T442] kovaplus 0003:1E7D:2D50.0054: couldn't init struct kovaplus_device [ 771.695449][ T1791] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 771.702138][ T442] kovaplus 0003:1E7D:2D50.0054: couldn't install mouse [ 771.719815][ T442] kovaplus: probe of 0003:1E7D:2D50.0054 failed with error -71 [ 771.731926][ T1791] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 771.733305][ T442] usb 1-1: USB disconnect, device number 26 [ 771.764362][ T309] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 771.771071][ T4822] EXT4-fs (loop5): unmounting filesystem. [ 772.194356][ T309] usb 10-1: Using ep0 maxpacket: 8 [ 772.201539][ T309] usb 10-1: unable to get BOS descriptor or descriptor too short [ 772.260547][ T309] usb 10-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 772.283790][ T309] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 772.883145][ T7127] xt_hashlimit: max too large, truncated to 1048576 [ 772.904023][ T309] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.912469][ T309] usb 10-1: Product: syz [ 772.917151][ T309] usb 10-1: Manufacturer: syz [ 772.921850][ T309] usb 10-1: SerialNumber: syz [ 772.946856][ T7129] loop7: detected capacity change from 0 to 512 [ 772.948333][ T286] EXT4-fs (loop3): unmounting filesystem. [ 772.973593][ T309] snd-usb-audio: probe of 10-1:12.0 failed with error -2 [ 772.988581][ T309] usb 10-1: USB disconnect, device number 17 [ 772.996335][ T3879] udevd[3879]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 773.035084][ T7129] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 773.063298][ T7129] System zones: 0-2, 18-18, 34-34 [ 773.083105][ T7129] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1787: corrupted inode contents [ 773.730183][ T7129] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #3: comm syz.7.1787: mark_inode_dirty error [ 773.753085][ T7129] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1787: corrupted inode contents [ 773.769827][ T7129] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.1787: mark_inode_dirty error [ 773.795884][ T7129] Quota error (device loop7): write_blk: dquota write failed [ 773.804506][ T7129] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 773.815156][ T7129] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1787: Failed to acquire dquot type 0 [ 773.858334][ T7129] EXT4-fs (loop7): 1 orphan inode deleted [ 773.864504][ T7129] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 773.878217][ T7129] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.107370][ T464] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 774.156725][ T464] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 774.216884][ T7144] loop3: detected capacity change from 0 to 512 [ 774.289366][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 774.319824][ T7144] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 774.327964][ T7144] System zones: 0-2, 18-18, 34-34 [ 774.338872][ T7144] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1789: corrupted inode contents [ 774.351365][ T7144] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.1789: mark_inode_dirty error [ 774.364044][ T7144] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1789: corrupted inode contents [ 774.376314][ T7144] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1789: mark_inode_dirty error [ 774.388399][ T7144] Quota error (device loop3): write_blk: dquota write failed [ 774.395969][ T7144] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 774.406734][ T7144] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1789: Failed to acquire dquot type 0 [ 774.420689][ T7144] EXT4-fs (loop3): 1 orphan inode deleted [ 774.426720][ T7144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 774.436167][ T359] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 774.446712][ T7144] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.477292][ T359] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 775.215067][ T7131] loop0: detected capacity change from 0 to 40427 [ 775.243594][ T7131] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 775.262251][ T7131] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 775.276633][ T7131] F2FS-fs (loop0): Found nat_bits in checkpoint [ 775.320966][ T7131] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 775.321196][ T7158] futex_wake_op: syz.7.1794 tries to shift op by -1; fix this program [ 775.328496][ T7131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 775.486105][ T286] EXT4-fs (loop3): unmounting filesystem. [ 775.539562][ T359] Bluetooth: hci0: Frame reassembly failed (-84) [ 776.034394][ T475] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 776.147941][ T7175] loop9: detected capacity change from 0 to 512 [ 776.171026][ T7175] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 776.179105][ T7175] System zones: 0-2, 18-18, 34-34 [ 776.195721][ T7175] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1800: corrupted inode contents [ 776.207816][ T7175] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.1800: mark_inode_dirty error [ 776.220962][ T7175] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1800: corrupted inode contents [ 776.227518][ T7168] loop3: detected capacity change from 0 to 40427 [ 776.239881][ T7175] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1800: mark_inode_dirty error [ 776.252904][ T475] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.253828][ T7168] F2FS-fs (loop3): invalid crc value [ 776.264043][ T475] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.279211][ T7175] Quota error (device loop9): write_blk: dquota write failed [ 776.286692][ T7175] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 776.296678][ T7175] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.1800: Failed to acquire dquot type 0 [ 776.308045][ T475] usb 8-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 776.313212][ T7168] F2FS-fs (loop3): Found nat_bits in checkpoint [ 776.323651][ T475] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.333241][ T7175] EXT4-fs (loop9): 1 orphan inode deleted [ 776.339177][ T7175] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 776.339815][ T10] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 776.364195][ T10] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 776.397002][ T475] usb 8-1: config 0 descriptor?? [ 776.403829][ T7175] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.429241][ T7168] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 776.465711][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 777.804433][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 777.814586][ T1496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 777.898620][ T475] hid-led 0003:1D34:0004.0055: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.7-1/input0 [ 777.914151][ T475] hid-led 0003:1D34:0004.0055: Dream Cheeky Webmail Notifier initialized [ 778.052740][ T309] usb 8-1: USB disconnect, device number 11 [ 778.404418][ T442] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 778.550724][ T7205] loop0: detected capacity change from 0 to 256 [ 778.620414][ T442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.697022][ T442] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 778.954887][ T442] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 779.036163][ T442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.191885][ T442] usb 6-1: config 0 descriptor?? [ 779.407886][ T7207] loop9: detected capacity change from 0 to 256 [ 779.420283][ T7207] exfat: Deprecated parameter 'utf8' [ 779.427216][ T7207] exfat: Deprecated parameter 'namecase' [ 779.433274][ T7207] exfat: Bad value for 'namecase' [ 779.561570][ T6350] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 779.719111][ T7215] loop7: detected capacity change from 0 to 512 [ 781.532495][ T7215] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 782.043100][ T7215] System zones: 0-2, 18-18, 34-34 [ 782.315216][ T442] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 782.321290][ T7215] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1808: corrupted inode contents [ 782.322428][ T442] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 782.337470][ T7227] usb usb7: usbfs: process 7227 (syz.9.1811) did not claim interface 0 before use [ 782.341779][ T442] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 782.364735][ T442] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 782.372126][ T442] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 782.380523][ T442] kovaplus 0003:1E7D:2D50.0056: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 782.394430][ T7215] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #3: comm syz.7.1808: mark_inode_dirty error [ 782.434897][ T7215] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1808: corrupted inode contents [ 782.447061][ T7215] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.1808: mark_inode_dirty error [ 782.462010][ T7215] Quota error (device loop7): write_blk: dquota write failed [ 782.470011][ T7215] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 782.482044][ T7215] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1808: Failed to acquire dquot type 0 [ 782.484443][ T7229] loop9: detected capacity change from 0 to 512 [ 782.516148][ T7215] EXT4-fs (loop7): 1 orphan inode deleted [ 782.531767][ T7215] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 782.541635][ T2634] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 782.551801][ T7229] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 782.552135][ T7215] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.559648][ T7229] System zones: 0-2, 18-18, 34-34 [ 782.560383][ T2634] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:12: Failed to release dquot type 1 [ 782.588125][ T7229] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1812: corrupted inode contents [ 782.600130][ T7229] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.1812: mark_inode_dirty error [ 782.611890][ T7229] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1812: corrupted inode contents [ 782.623892][ T7229] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1812: mark_inode_dirty error [ 782.635803][ T7229] Quota error (device loop9): write_blk: dquota write failed [ 782.643278][ T7229] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 782.653362][ T7229] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.1812: Failed to acquire dquot type 0 [ 782.668458][ T7229] EXT4-fs (loop9): 1 orphan inode deleted [ 782.674309][ T7229] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 782.683579][ T7229] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.698678][ T2634] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 782.725968][ T2634] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:12: Failed to release dquot type 1 [ 782.739389][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 782.759380][ T7234] loop9: detected capacity change from 0 to 512 [ 782.776695][ T7234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 782.797201][ T7234] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 782.806519][ T7234] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.875685][ T442] kovaplus 0003:1E7D:2D50.0056: couldn't init struct kovaplus_device [ 782.901009][ T442] kovaplus 0003:1E7D:2D50.0056: couldn't install mouse [ 782.923619][ T442] kovaplus: probe of 0003:1E7D:2D50.0056 failed with error -71 [ 782.949888][ T442] usb 6-1: USB disconnect, device number 30 [ 782.995826][ T7242] fido_id[7242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 783.132373][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 783.498243][ T7247] loop7: detected capacity change from 0 to 512 [ 783.535383][ T442] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 783.589653][ T7247] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 783.598446][ T7247] System zones: 0-2, 18-18, 34-34 [ 783.624497][ T7247] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1816: corrupted inode contents [ 783.640470][ T7247] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #3: comm syz.7.1816: mark_inode_dirty error [ 783.658531][ T7247] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1816: corrupted inode contents [ 783.676002][ T7247] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.1816: mark_inode_dirty error [ 783.694183][ T7247] Quota error (device loop7): write_blk: dquota write failed [ 783.702535][ T7247] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 783.712977][ T7247] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1816: Failed to acquire dquot type 0 [ 783.741503][ T7247] EXT4-fs (loop7): 1 orphan inode deleted [ 783.747474][ T7247] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 783.762426][ T1791] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 783.776111][ T7247] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.558250][ T1791] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 784.584603][ T442] usb 6-1: Using ep0 maxpacket: 8 [ 784.591373][ T442] usb 6-1: unable to get BOS descriptor or descriptor too short [ 784.603097][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 784.619124][ T4135] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 784.620912][ T442] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 784.635351][ T28] audit: type=1400 audit(1755137429.296:343): avc: denied { unlink } for pid=4135 comm="syz-executor" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 784.833719][ T7253] loop3: detected capacity change from 0 to 128 [ 784.848776][ T7253] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 784.935867][ T7253] FAT-fs (loop3): error, clusters badly computed (5 != 1) [ 784.943416][ T7253] FAT-fs (loop3): Filesystem has been set read-only [ 784.951601][ T7253] FAT-fs (loop3): error, clusters badly computed (6 != 2) [ 784.959448][ T7253] FAT-fs (loop3): error, clusters badly computed (7 != 3) [ 784.967832][ T7253] FAT-fs (loop3): error, clusters badly computed (8 != 4) [ 785.634124][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 785.672736][ T442] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 785.684538][ T442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.692829][ T442] usb 6-1: Product: syz [ 785.702949][ T442] usb 6-1: Manufacturer: syz [ 785.707689][ T442] usb 6-1: SerialNumber: syz [ 785.995155][ T7267] xt_hashlimit: max too large, truncated to 1048576 [ 786.159542][ T442] snd-usb-audio: probe of 6-1:12.0 failed with error -2 [ 786.175946][ T3879] udevd[3879]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 786.193798][ T442] usb 6-1: USB disconnect, device number 31 [ 786.200111][ T462] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 786.246798][ T5299] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 786.392823][ T7274] loop0: detected capacity change from 0 to 128 [ 786.405408][ T7274] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 786.483873][ T5299] usb 8-1: Using ep0 maxpacket: 8 [ 786.493159][ T5299] usb 8-1: unable to get BOS descriptor or descriptor too short [ 786.503133][ T7274] FAT-fs (loop0): error, clusters badly computed (5 != 1) [ 786.510415][ T7274] FAT-fs (loop0): Filesystem has been set read-only [ 786.518152][ T7274] FAT-fs (loop0): error, clusters badly computed (6 != 2) [ 786.525911][ T7274] FAT-fs (loop0): error, clusters badly computed (7 != 3) [ 786.534182][ T7274] FAT-fs (loop0): error, clusters badly computed (8 != 4) [ 786.753367][ T5299] usb 8-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 786.872686][ T5299] usb 8-1: config 12 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 787.310499][ T5299] usb 8-1: config 12 interface 0 has no altsetting 0 [ 787.327617][ T462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.393240][ T5299] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 787.405887][ T462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.406810][ T5299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.416019][ T462] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 787.434603][ T462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.442181][ T5299] usb 8-1: Product: syz [ 787.443393][ T462] usb 4-1: config 0 descriptor?? [ 787.452116][ T5299] usb 8-1: Manufacturer: syz [ 787.492635][ T5299] usb 8-1: SerialNumber: syz [ 787.528470][ T7284] loop9: detected capacity change from 0 to 512 [ 787.544413][ T442] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 787.583683][ T7284] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 787.591823][ T7284] System zones: 0-2, 18-18, 34-34 [ 787.599562][ T7284] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1826: corrupted inode contents [ 787.612432][ T7284] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.1826: mark_inode_dirty error [ 787.625101][ T7284] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1826: corrupted inode contents [ 787.637654][ T7284] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1826: mark_inode_dirty error [ 787.649890][ T7284] __quota_error: 3 callbacks suppressed [ 787.649906][ T7284] Quota error (device loop9): write_blk: dquota write failed [ 787.682574][ T7284] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 787.694792][ T7284] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.1826: Failed to acquire dquot type 0 [ 787.708308][ T7284] EXT4-fs (loop9): 1 orphan inode deleted [ 787.714088][ T7284] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 787.723809][ T7284] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.730761][ T5299] usb 8-1: selecting invalid altsetting 0 [ 787.736137][ T442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.754372][ T19] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 787.762870][ T5299] snd-usb-audio: probe of 8-1:12.0 failed with error -2 [ 787.764598][ T442] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 787.780721][ T6350] udevd[6350]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 787.784944][ T442] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 787.801989][ T5299] usb 8-1: USB disconnect, device number 12 [ 787.808018][ T442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.827277][ T442] usb 6-1: config 0 descriptor?? [ 787.832767][ T1791] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 787.848819][ T1791] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 787.954350][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 787.966362][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 787.984990][ T19] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 788.006107][ T19] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 788.015667][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.023760][ T19] usb 1-1: Product: syz [ 788.028009][ T19] usb 1-1: Manufacturer: syz [ 788.032723][ T19] usb 1-1: SerialNumber: syz [ 788.123617][ T462] hid-led 0003:1D34:0004.0057: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.3-1/input0 [ 788.137697][ T462] hid-led 0003:1D34:0004.0057: Dream Cheeky Webmail Notifier initialized [ 788.266652][ T442] kovaplus 0003:1E7D:2D50.0058: unknown main item tag 0x0 [ 788.273882][ T442] kovaplus 0003:1E7D:2D50.0058: unknown main item tag 0x0 [ 788.284675][ T19] snd-usb-audio: probe of 1-1:12.0 failed with error -2 [ 788.304592][ T19] usb 1-1: USB disconnect, device number 27 [ 788.320591][ T442] kovaplus 0003:1E7D:2D50.0058: unknown main item tag 0x0 [ 788.330838][ T442] kovaplus 0003:1E7D:2D50.0058: unknown main item tag 0x0 [ 788.341465][ T442] kovaplus 0003:1E7D:2D50.0058: unknown main item tag 0x0 [ 788.365154][ T442] kovaplus 0003:1E7D:2D50.0058: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 788.381021][ T462] usb 4-1: USB disconnect, device number 42 [ 789.036037][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 789.160764][ T442] kovaplus 0003:1E7D:2D50.0058: couldn't init struct kovaplus_device [ 790.304367][ T442] kovaplus 0003:1E7D:2D50.0058: couldn't install mouse [ 790.312248][ T442] kovaplus: probe of 0003:1E7D:2D50.0058 failed with error -71 [ 790.337419][ T442] usb 6-1: USB disconnect, device number 32 [ 790.552372][ T464] Bluetooth: hci0: Frame reassembly failed (-84) [ 790.975517][ T7316] loop7: detected capacity change from 0 to 256 [ 791.063296][ T464] Bluetooth: hci0: Frame reassembly failed (-84) [ 791.231655][ T3879] udevd[3879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 791.362145][ T7317] fido_id[7317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 791.491487][ T7302] loop9: detected capacity change from 0 to 40427 [ 791.507231][ T7302] F2FS-fs (loop9): invalid crc value [ 791.529081][ T7302] F2FS-fs (loop9): Found nat_bits in checkpoint [ 791.569407][ T7302] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 791.618808][ T4135] syz-executor: attempt to access beyond end of device [ 791.618808][ T4135] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 791.836151][ T7324] loop9: detected capacity change from 0 to 128 [ 791.842956][ T7324] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 791.858471][ T7324] FAT-fs (loop9): error, clusters badly computed (5 != 1) [ 791.865717][ T7324] FAT-fs (loop9): Filesystem has been set read-only [ 791.872416][ T7324] FAT-fs (loop9): error, clusters badly computed (6 != 2) [ 791.879639][ T7324] FAT-fs (loop9): error, clusters badly computed (7 != 3) [ 791.886860][ T7324] FAT-fs (loop9): error, clusters badly computed (8 != 4) [ 792.024318][ T442] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 792.204387][ T442] usb 6-1: Using ep0 maxpacket: 8 [ 792.211053][ T442] usb 6-1: unable to get BOS descriptor or descriptor too short [ 792.508814][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 792.510375][ T442] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 792.514978][ T1496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 792.528207][ T442] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 792.579996][ T442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.592178][ T7327] loop3: detected capacity change from 0 to 512 [ 792.598854][ T7327] ext4: Unknown parameter 'nouser_xattr' [ 792.610480][ T442] usb 6-1: Product: syz [ 792.614995][ T442] usb 6-1: Manufacturer: syz [ 792.620232][ T442] usb 6-1: SerialNumber: syz [ 792.673989][ T6350] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 793.183553][ T7331] loop0: detected capacity change from 0 to 512 [ 793.187379][ T442] snd-usb-audio: probe of 6-1:12.0 failed with error -2 [ 793.190258][ T7331] ext4: Unknown parameter 'nouser_xattr' [ 793.215582][ T3879] udevd[3879]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 793.245751][ T442] usb 6-1: USB disconnect, device number 33 [ 793.286915][ T6350] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 793.784358][ T19] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 793.792105][ T462] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 793.920708][ T7344] xt_hashlimit: max too large, truncated to 1048576 [ 794.195595][ T462] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.205513][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.216540][ T462] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 794.229428][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.239350][ T19] usb 10-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 794.250701][ T462] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 794.260945][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.304422][ T7348] loop3: detected capacity change from 0 to 512 [ 794.329020][ T462] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.400232][ T19] usb 10-1: config 0 descriptor?? [ 794.407064][ T7348] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 794.415864][ T7348] System zones: 0-2, 18-18, 34-34 [ 794.434987][ T7348] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1845: corrupted inode contents [ 794.449689][ T7348] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.1845: mark_inode_dirty error [ 794.469016][ T7348] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1845: corrupted inode contents [ 794.482628][ T7348] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1845: mark_inode_dirty error [ 794.512455][ T7348] Quota error (device loop3): write_blk: dquota write failed [ 794.520896][ T7348] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 794.531056][ T7348] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1845: Failed to acquire dquot type 0 [ 794.568398][ T7348] EXT4-fs (loop3): 1 orphan inode deleted [ 794.574447][ T7348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 794.586093][ T7348] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.276380][ T462] usb 8-1: config 0 descriptor?? [ 795.296811][ T2634] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 795.311937][ T2634] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:12: Failed to release dquot type 1 [ 795.331016][ T286] EXT4-fs (loop3): unmounting filesystem. [ 795.418259][ T7364] loop0: detected capacity change from 0 to 512 [ 795.449110][ T7364] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 795.457402][ T7364] System zones: 0-2, 18-18, 34-34 [ 795.681329][ T7367] loop3: detected capacity change from 0 to 128 [ 795.707999][ T7367] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 797.756983][ T7364] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1846: corrupted inode contents [ 797.769099][ T7364] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #3: comm syz.0.1846: mark_inode_dirty error [ 797.781053][ T7364] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1846: corrupted inode contents [ 797.793130][ T7364] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1846: mark_inode_dirty error [ 797.804979][ T7364] Quota error (device loop0): write_blk: dquota write failed [ 797.812427][ T7364] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 797.822407][ T7364] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1846: Failed to acquire dquot type 0 [ 797.835740][ T7364] EXT4-fs (loop0): 1 orphan inode deleted [ 797.841674][ T7364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 797.851228][ T7364] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.877613][ T19] usbhid 10-1:0.0: can't add hid device: -71 [ 797.884051][ T19] usbhid: probe of 10-1:0.0 failed with error -71 [ 797.892995][ T10] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 797.917405][ T10] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 797.934644][ T7363] FAT-fs (loop3): error, clusters badly computed (5 != 1) [ 797.941922][ T7363] FAT-fs (loop3): Filesystem has been set read-only [ 797.948928][ T7363] FAT-fs (loop3): error, clusters badly computed (6 != 2) [ 797.956433][ T7363] FAT-fs (loop3): error, clusters badly computed (7 != 3) [ 797.963677][ T7363] FAT-fs (loop3): error, clusters badly computed (8 != 4) [ 797.984223][ T442] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 798.594985][ T5735] EXT4-fs (loop0): unmounting filesystem. [ 798.605973][ T19] usb 10-1: USB disconnect, device number 18 [ 798.613329][ T462] usbhid 8-1:0.0: can't add hid device: -71 [ 798.625015][ T462] usbhid: probe of 8-1:0.0 failed with error -71 [ 798.645889][ T462] usb 8-1: USB disconnect, device number 13 [ 798.709141][ T7388] loop0: detected capacity change from 0 to 256 [ 799.028584][ T7384] xt_hashlimit: max too large, truncated to 1048576 [ 800.468768][ T7399] loop0: detected capacity change from 0 to 512 [ 800.559869][ T7399] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 800.568053][ T7399] System zones: 0-2, 18-18, 34-34 [ 800.591929][ T7399] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1861: corrupted inode contents [ 800.607151][ T7399] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #3: comm syz.0.1861: mark_inode_dirty error [ 800.643321][ T7399] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1861: corrupted inode contents [ 800.664477][ T7399] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1861: mark_inode_dirty error [ 800.680032][ T7399] Quota error (device loop0): write_blk: dquota write failed [ 800.688543][ T7399] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 800.698923][ T7399] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1861: Failed to acquire dquot type 0 [ 800.727741][ T7399] EXT4-fs (loop0): 1 orphan inode deleted [ 800.733626][ T7399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 800.745236][ T7399] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.856492][ T464] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 800.927958][ T464] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 801.297018][ T7407] loop9: detected capacity change from 0 to 128 [ 801.323072][ T7407] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 802.260348][ T7406] FAT-fs (loop9): error, clusters badly computed (5 != 1) [ 802.267745][ T7406] FAT-fs (loop9): Filesystem has been set read-only [ 802.274488][ T7406] FAT-fs (loop9): error, clusters badly computed (6 != 2) [ 802.281665][ T7406] FAT-fs (loop9): error, clusters badly computed (7 != 3) [ 802.288940][ T7406] FAT-fs (loop9): error, clusters badly computed (8 != 4) [ 802.459721][ T5735] EXT4-fs (loop0): unmounting filesystem. [ 802.567086][ T7415] loop7: detected capacity change from 0 to 128 [ 802.582431][ T7415] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 802.675398][ T7415] FAT-fs (loop7): error, clusters badly computed (5 != 1) [ 802.682848][ T7415] FAT-fs (loop7): Filesystem has been set read-only [ 802.691199][ T7415] FAT-fs (loop7): error, clusters badly computed (6 != 2) [ 802.699051][ T7415] FAT-fs (loop7): error, clusters badly computed (7 != 3) [ 802.707533][ T7415] FAT-fs (loop7): error, clusters badly computed (8 != 4) [ 803.500596][ T7423] loop0: detected capacity change from 0 to 512 [ 803.556196][ T7423] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 803.564092][ T7423] System zones: 0-2, 18-18, 34-34 [ 803.581284][ T7423] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1866: corrupted inode contents [ 803.595229][ T7423] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #3: comm syz.0.1866: mark_inode_dirty error [ 803.607258][ T7423] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1866: corrupted inode contents [ 803.668179][ T7423] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1866: mark_inode_dirty error [ 803.680031][ T7423] Quota error (device loop0): write_blk: dquota write failed [ 803.687670][ T7423] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 803.697749][ T7423] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1866: Failed to acquire dquot type 0 [ 803.711191][ T7423] EXT4-fs (loop0): 1 orphan inode deleted [ 803.716993][ T7423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 803.726850][ T7423] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.314591][ T5677] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 804.341712][ T5677] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 804.401498][ T5735] EXT4-fs (loop0): unmounting filesystem. [ 804.464468][ T462] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 804.558487][ T7445] loop5: detected capacity change from 0 to 128 [ 804.565679][ T7445] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 804.588193][ T7445] FAT-fs (loop5): error, clusters badly computed (5 != 1) [ 804.595631][ T7445] FAT-fs (loop5): Filesystem has been set read-only [ 804.602369][ T7445] FAT-fs (loop5): error, clusters badly computed (6 != 2) [ 804.609567][ T7445] FAT-fs (loop5): error, clusters badly computed (7 != 3) [ 804.616958][ T7445] FAT-fs (loop5): error, clusters badly computed (8 != 4) [ 804.637556][ T7448] loop0: detected capacity change from 0 to 512 [ 804.739056][ T462] usb 10-1: Using ep0 maxpacket: 8 [ 804.753403][ T7448] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 804.755112][ T462] usb 10-1: unable to get BOS descriptor or descriptor too short [ 804.761448][ T7448] System zones: 0-2, 18-18, 34-34 [ 804.772447][ T462] usb 10-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 804.775949][ T7448] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1876: corrupted inode contents [ 804.787152][ T462] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 805.244804][ T7448] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #3: comm syz.0.1876: mark_inode_dirty error [ 805.257463][ T7448] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.1876: corrupted inode contents [ 805.270086][ T7448] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1876: mark_inode_dirty error [ 805.281806][ T462] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.290173][ T462] usb 10-1: Product: syz [ 805.290204][ T7448] Quota error (device loop0): write_blk: dquota write failed [ 805.294643][ T462] usb 10-1: Manufacturer: syz [ 805.307801][ T7448] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 805.319064][ T7448] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1876: Failed to acquire dquot type 0 [ 805.399285][ T7458] loop7: detected capacity change from 0 to 128 [ 805.414078][ T7458] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 805.434071][ T462] usb 10-1: SerialNumber: syz [ 805.451004][ T7458] FAT-fs (loop7): error, clusters badly computed (5 != 1) [ 805.458745][ T7458] FAT-fs (loop7): Filesystem has been set read-only [ 805.467547][ T7458] FAT-fs (loop7): error, clusters badly computed (6 != 2) [ 805.475977][ T7458] FAT-fs (loop7): error, clusters badly computed (7 != 3) [ 805.483344][ T7458] FAT-fs (loop7): error, clusters badly computed (8 != 4) [ 805.976859][ T7460] loop3: detected capacity change from 0 to 256 [ 806.267370][ T7448] EXT4-fs (loop0): 1 orphan inode deleted [ 806.273479][ T7448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 806.289871][ T7448] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.328027][ T1791] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 806.338440][ T1791] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 806.353356][ T7467] loop5: detected capacity change from 0 to 128 [ 806.383814][ T7467] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 807.156714][ T7467] FAT-fs (loop5): error, clusters badly computed (5 != 1) [ 807.163985][ T7467] FAT-fs (loop5): Filesystem has been set read-only [ 807.174856][ T5735] EXT4-fs (loop0): unmounting filesystem. [ 807.242653][ T462] usb 10-1: can't set config #12, error -71 [ 807.258848][ T462] usb 10-1: USB disconnect, device number 19 [ 808.229869][ T7488] loop7: detected capacity change from 0 to 512 [ 808.236953][ T7488] ext4: Unknown parameter 'nouser_xattr' [ 808.321711][ T7493] loop5: detected capacity change from 0 to 512 [ 808.349708][ T7493] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 808.357673][ T7493] System zones: 0-2, 18-18, 34-34 [ 808.367210][ T7493] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1887: corrupted inode contents [ 808.379740][ T7493] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.1887: mark_inode_dirty error [ 808.393489][ T7493] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1887: corrupted inode contents [ 808.406442][ T7493] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1887: mark_inode_dirty error [ 808.420206][ T7493] Quota error (device loop5): write_blk: dquota write failed [ 808.427781][ T7493] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 808.437790][ T7493] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1887: Failed to acquire dquot type 0 [ 808.451032][ T7493] EXT4-fs (loop5): 1 orphan inode deleted [ 808.457315][ T7493] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 808.467121][ T7493] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.654010][ T464] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 808.656304][ T3879] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 808.665068][ T464] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 808.688281][ T4822] EXT4-fs (loop5): unmounting filesystem. [ 808.714385][ T19] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 808.913569][ T7500] loop5: detected capacity change from 0 to 128 [ 808.929007][ T7500] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 809.036589][ T7500] FAT-fs (loop5): error, clusters badly computed (5 != 1) [ 809.043975][ T7500] FAT-fs (loop5): Filesystem has been set read-only [ 809.052457][ T7500] FAT-fs (loop5): error, clusters badly computed (6 != 2) [ 809.060602][ T7500] FAT-fs (loop5): error, clusters badly computed (7 != 3) [ 809.069476][ T7500] FAT-fs (loop5): error, clusters badly computed (8 != 4) [ 810.304326][ T462] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 810.307803][ T7510] loop3: detected capacity change from 0 to 512 [ 810.312151][ T442] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 810.376123][ T7510] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 810.385166][ T7510] System zones: 0-2, 18-18, 34-34 [ 810.418119][ T7510] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1896: corrupted inode contents [ 810.433645][ T7510] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.1896: mark_inode_dirty error [ 810.455615][ T7510] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1896: corrupted inode contents [ 810.471473][ T7510] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1896: mark_inode_dirty error [ 810.489197][ T7510] Quota error (device loop3): write_blk: dquota write failed [ 810.497622][ T7510] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 810.508361][ T7510] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1896: Failed to acquire dquot type 0 [ 810.770338][ T7510] EXT4-fs (loop3): 1 orphan inode deleted [ 810.776694][ T7510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 810.792842][ T7510] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.844612][ T7516] loop5: detected capacity change from 0 to 128 [ 810.859165][ T7516] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 811.054962][ T7516] FAT-fs (loop5): error, clusters badly computed (5 != 1) [ 811.062211][ T7516] FAT-fs (loop5): Filesystem has been set read-only [ 811.069022][ T7516] FAT-fs (loop5): error, clusters badly computed (6 != 2) [ 811.076242][ T7516] FAT-fs (loop5): error, clusters badly computed (7 != 3) [ 811.083476][ T7516] FAT-fs (loop5): error, clusters badly computed (8 != 4) [ 811.091199][ T5677] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 811.103210][ T5677] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 811.144551][ T442] usb 1-1: Using ep0 maxpacket: 8 [ 811.171266][ T442] usb 1-1: unable to get BOS descriptor or descriptor too short [ 811.171675][ T286] EXT4-fs (loop3): unmounting filesystem. [ 811.180051][ T442] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 811.203788][ T442] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 811.281157][ T7529] loop7: detected capacity change from 0 to 256 [ 811.369144][ T442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.404716][ T442] usb 1-1: Product: syz [ 811.522421][ T442] usb 1-1: Manufacturer: syz [ 811.597525][ T442] usb 1-1: SerialNumber: syz [ 811.897020][ T442] usb 1-1: can't set config #12, error -71 [ 812.021821][ T442] usb 1-1: USB disconnect, device number 28 [ 812.160914][ T7533] loop5: detected capacity change from 0 to 512 [ 812.311119][ T7539] xt_hashlimit: max too large, truncated to 1048576 [ 812.494966][ T7533] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 812.502794][ T7533] System zones: 0-2, 18-18, 34-34 [ 812.601225][ T7533] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1903: corrupted inode contents [ 812.613741][ T7533] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.1903: mark_inode_dirty error [ 812.626336][ T7533] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.1903: corrupted inode contents [ 812.638900][ T7533] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1903: mark_inode_dirty error [ 812.650884][ T7533] Quota error (device loop5): write_blk: dquota write failed [ 812.658471][ T7533] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 812.668976][ T7533] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.1903: Failed to acquire dquot type 0 [ 812.672634][ T7527] loop3: detected capacity change from 0 to 40427 [ 812.689232][ T7527] F2FS-fs (loop3): invalid crc value [ 812.695643][ T7533] EXT4-fs (loop5): 1 orphan inode deleted [ 812.701567][ T7533] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 812.711067][ T7533] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.723231][ T464] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 812.732674][ T7527] F2FS-fs (loop3): Found nat_bits in checkpoint [ 812.734848][ T464] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 812.760115][ T7527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 812.786252][ T286] syz-executor: attempt to access beyond end of device [ 812.786252][ T286] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 812.893443][ T4822] EXT4-fs (loop5): unmounting filesystem. [ 813.142860][ T7555] loop9: detected capacity change from 0 to 128 [ 813.176882][ T7555] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 814.488114][ T7554] FAT-fs (loop9): error, clusters badly computed (5 != 1) [ 814.495336][ T7554] FAT-fs (loop9): Filesystem has been set read-only [ 814.502372][ T7554] FAT-fs (loop9): error, clusters badly computed (6 != 2) [ 814.509811][ T7554] FAT-fs (loop9): error, clusters badly computed (7 != 3) [ 814.517112][ T7554] FAT-fs (loop9): error, clusters badly computed (8 != 4) [ 814.631773][ T7564] loop5: detected capacity change from 0 to 512 [ 814.924771][ T7566] loop0: detected capacity change from 0 to 256 [ 816.299543][ T7564] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 816.555538][ T7573] loop7: detected capacity change from 0 to 128 [ 816.562372][ T7573] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 816.601802][ T7573] FAT-fs (loop7): error, clusters badly computed (5 != 1) [ 816.609466][ T7573] FAT-fs (loop7): Filesystem has been set read-only [ 816.616364][ T7573] FAT-fs (loop7): error, clusters badly computed (6 != 2) [ 816.623727][ T7573] FAT-fs (loop7): error, clusters badly computed (7 != 3) [ 816.631010][ T7573] FAT-fs (loop7): error, clusters badly computed (8 != 4) [ 817.605974][ T7583] loop5: detected capacity change from 0 to 256 [ 819.257694][ T7596] xt_hashlimit: max too large, truncated to 1048576 [ 821.033204][ T7593] loop7: detected capacity change from 0 to 512 [ 821.076703][ T7593] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 821.084697][ T7593] System zones: 0-2, 18-18, 34-34 [ 821.091092][ T7593] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1919: corrupted inode contents [ 821.105365][ T7593] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #3: comm syz.7.1919: mark_inode_dirty error [ 821.118296][ T7593] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1919: corrupted inode contents [ 821.131465][ T7593] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.1919: mark_inode_dirty error [ 821.143947][ T7593] Quota error (device loop7): write_blk: dquota write failed [ 821.151747][ T7593] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 821.162371][ T7593] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1919: Failed to acquire dquot type 0 [ 821.177393][ T7593] EXT4-fs (loop7): 1 orphan inode deleted [ 821.183392][ T7593] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 821.193067][ T7593] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.205210][ T6742] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 821.220853][ T6742] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 821.240110][ T7609] loop5: detected capacity change from 0 to 1024 [ 822.925176][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 822.935061][ T7609] EXT4-fs: Ignoring removed bh option [ 823.056333][ T7609] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 823.059795][ T7605] loop3: detected capacity change from 0 to 40427 [ 823.077121][ T7605] F2FS-fs (loop3): invalid crc value [ 823.199489][ T7627] loop7: detected capacity change from 0 to 128 [ 823.206624][ T7627] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 823.661917][ T7627] FAT-fs (loop7): error, clusters badly computed (5 != 1) [ 823.669251][ T7627] FAT-fs (loop7): Filesystem has been set read-only [ 823.677653][ T7627] FAT-fs (loop7): error, clusters badly computed (6 != 2) [ 823.685733][ T7627] FAT-fs (loop7): error, clusters badly computed (7 != 3) [ 823.694379][ T7627] FAT-fs (loop7): error, clusters badly computed (8 != 4) [ 823.985143][ T7605] F2FS-fs (loop3): Found nat_bits in checkpoint [ 824.155749][ T7609] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.1924: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 824.213694][ T7632] loop0: detected capacity change from 0 to 128 [ 824.220499][ T7632] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 824.245273][ T7632] FAT-fs (loop0): error, clusters badly computed (5 != 1) [ 824.252482][ T7632] FAT-fs (loop0): Filesystem has been set read-only [ 824.259409][ T7632] FAT-fs (loop0): error, clusters badly computed (6 != 2) [ 824.266632][ T7632] FAT-fs (loop0): error, clusters badly computed (7 != 3) [ 824.273835][ T7632] FAT-fs (loop0): error, clusters badly computed (8 != 4) [ 824.317130][ T7609] EXT4-fs (loop5): Remounting filesystem read-only [ 824.367333][ T4822] EXT4-fs error (device loop5): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /157/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 824.390782][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 824.449920][ T7640] loop9: detected capacity change from 0 to 256 [ 824.517856][ T4822] EXT4-fs error (device loop5): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /157/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 824.614506][ T19] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 824.636707][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 824.648915][ T4822] EXT4-fs error (device loop5): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 824.681881][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 824.749276][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 824.772429][ T4822] EXT4-fs error (device loop5): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /157/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 824.802538][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 824.814046][ T4822] EXT4-fs error (device loop5): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /157/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 824.855161][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 824.918108][ T7644] loop3: detected capacity change from 0 to 512 [ 824.929766][ T4822] EXT4-fs error (device loop5): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 825.893200][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 825.899928][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 826.405628][ T19] usb 8-1: Using ep0 maxpacket: 8 [ 826.416934][ T4822] EXT4-fs error (device loop5): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /157/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 826.455921][ T19] usb 8-1: unable to get BOS descriptor or descriptor too short [ 826.483145][ T19] usb 8-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 826.494630][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 826.501215][ T4822] EXT4-fs error (device loop5): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /157/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 826.524355][ T7644] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 826.532137][ T7644] System zones: 0-2, 18-18, 34-34 [ 826.544197][ T7644] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1931: corrupted inode contents [ 826.556853][ T7644] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.1931: mark_inode_dirty error [ 826.569452][ T7644] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.1931: corrupted inode contents [ 826.581959][ T19] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 826.591456][ T7644] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1931: mark_inode_dirty error [ 826.605218][ T7644] Quota error (device loop3): write_blk: dquota write failed [ 826.612697][ T7644] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 826.622997][ T7644] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1931: Failed to acquire dquot type 0 [ 826.636276][ T7644] EXT4-fs (loop3): 1 orphan inode deleted [ 826.642127][ T7644] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 826.651879][ T7644] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.691354][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 826.698244][ T4822] EXT4-fs error (device loop5): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 826.728064][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 826.744026][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 826.763360][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 826.828449][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 826.829074][ T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.845465][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 826.850912][ T19] usb 8-1: Product: syz [ 826.869679][ T19] usb 8-1: Manufacturer: syz [ 826.874664][ T19] usb 8-1: SerialNumber: syz [ 826.879944][ T5677] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 826.880903][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 826.889964][ T5677] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 826.921230][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 826.927640][ T286] EXT4-fs (loop3): unmounting filesystem. [ 826.936792][ T7651] loop9: detected capacity change from 0 to 16 [ 826.956203][ T7651] erofs: (device loop9): mounted with root inode @ nid 36. [ 826.982807][ T4822] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 827.040506][ T335] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 827.137923][ T19] snd-usb-audio: probe of 8-1:12.0 failed with error -2 [ 827.153600][ T3879] udevd[3879]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 827.179248][ T19] usb 8-1: USB disconnect, device number 14 [ 827.186292][ T7658] xt_hashlimit: max too large, truncated to 1048576 [ 827.239021][ T7660] loop9: detected capacity change from 0 to 512 [ 827.245577][ T335] usb 1-1: Using ep0 maxpacket: 8 [ 827.258759][ T335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 827.274896][ T335] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 827.287292][ T7660] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 827.295203][ T335] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 827.304746][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.313283][ T7660] System zones: 0-2, 18-18, 34-34 [ 827.318738][ T335] usb 1-1: Product: syz [ 827.323023][ T335] usb 1-1: Manufacturer: syz [ 827.328696][ T1791] tipc: Left network mode [ 827.336215][ T335] usb 1-1: SerialNumber: syz [ 827.344416][ T7660] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1937: corrupted inode contents [ 827.358180][ T7660] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.1937: mark_inode_dirty error [ 827.370504][ T7660] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1937: corrupted inode contents [ 827.382896][ T7660] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1937: mark_inode_dirty error [ 827.394981][ T7660] Quota error (device loop9): write_blk: dquota write failed [ 827.402604][ T7660] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 827.413040][ T7660] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.1937: Failed to acquire dquot type 0 [ 827.426254][ T7660] EXT4-fs (loop9): 1 orphan inode deleted [ 827.432181][ T7660] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 827.441668][ T7660] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.494691][ T359] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 827.512080][ T359] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 827.578822][ T335] snd-usb-audio: probe of 1-1:12.0 failed with error -2 [ 827.592601][ T335] usb 1-1: USB disconnect, device number 29 [ 827.597991][ T3879] udevd[3879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 827.642101][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.649637][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.658257][ T7664] device bridge_slave_0 entered promiscuous mode [ 827.667775][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.675659][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.683209][ T7664] device bridge_slave_1 entered promiscuous mode [ 827.766844][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.773983][ T7664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.781414][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.788493][ T7664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.826489][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.836455][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.844155][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.866591][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.875624][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.882836][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.892959][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.902168][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.909287][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.949609][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 827.965556][ T1791] device bridge_slave_1 left promiscuous mode [ 827.983518][ T1791] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.996475][ T5677] Bluetooth: hci0: Frame reassembly failed (-84) [ 828.007101][ T1791] device bridge_slave_0 left promiscuous mode [ 828.620450][ T1791] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.682402][ T1791] device veth1_macvtap left promiscuous mode [ 828.688964][ T1791] device veth0_vlan left promiscuous mode [ 830.424815][ T1496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 830.442763][ T7684] loop0: detected capacity change from 0 to 512 [ 830.449425][ T7684] ext4: Unknown parameter 'nouser_xattr' [ 830.547839][ T6350] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 830.601067][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 831.080861][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 831.325013][ T7694] loop0: detected capacity change from 0 to 128 [ 831.332076][ T7694] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 832.331692][ T7664] device veth0_vlan entered promiscuous mode [ 832.346342][ T7664] device veth1_macvtap entered promiscuous mode [ 832.353358][ T7694] FAT-fs (loop0): error, clusters badly computed (5 != 1) [ 832.360569][ T7694] FAT-fs (loop0): Filesystem has been set read-only [ 832.367348][ T7694] FAT-fs (loop0): error, clusters badly computed (6 != 2) [ 832.374591][ T7694] FAT-fs (loop0): error, clusters badly computed (7 != 3) [ 832.381849][ T7694] FAT-fs (loop0): error, clusters badly computed (8 != 4) [ 832.389960][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 832.401807][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 832.411229][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 832.421533][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 832.430063][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 832.438718][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 832.447535][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 832.455707][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 832.464197][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 832.472972][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 832.483770][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 832.522871][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 832.530693][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 832.549566][ T7689] loop9: detected capacity change from 0 to 40427 [ 832.577294][ T7689] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 832.593388][ T7689] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 832.611246][ T7689] F2FS-fs (loop9): invalid crc value [ 832.680666][ T7707] loop0: detected capacity change from 0 to 256 [ 833.218272][ T7689] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 834.027520][ T7716] loop8: detected capacity change from 0 to 512 [ 835.276209][ T7716] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 835.284037][ T7716] System zones: 0-2, 18-18, 34-34 [ 835.427937][ T7716] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #3: comm syz.8.1946: corrupted inode contents [ 835.440262][ T7716] EXT4-fs error (device loop8): ext4_dirty_inode:6121: inode #3: comm syz.8.1946: mark_inode_dirty error [ 835.452692][ T7716] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #3: comm syz.8.1946: corrupted inode contents [ 835.465892][ T7716] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #3: comm syz.8.1946: mark_inode_dirty error [ 835.790372][ T7716] Quota error (device loop8): write_blk: dquota write failed [ 835.797915][ T7716] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 835.808346][ T7716] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.1946: Failed to acquire dquot type 0 [ 835.821978][ T7716] EXT4-fs (loop8): 1 orphan inode deleted [ 835.827987][ T7716] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 835.837514][ T6742] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 835.848240][ T7716] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.903641][ T6742] EXT4-fs error (device loop8): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 836.039903][ T7664] EXT4-fs (loop8): unmounting filesystem. [ 836.085363][ T7738] xt_hashlimit: max too large, truncated to 1048576 [ 836.864880][ T335] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 837.159335][ T335] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.276589][ T335] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 837.504547][ T335] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 837.739878][ T335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.744289][ T28] audit: type=1326 audit(1755137482.396:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.7.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 837.752143][ T7749] binder: BINDER_SET_CONTEXT_MGR already set [ 837.771425][ T28] audit: type=1326 audit(1755137482.406:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.7.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 837.778837][ T7750] loop0: detected capacity change from 0 to 128 [ 837.800889][ T28] audit: type=1326 audit(1755137482.406:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.7.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 837.807641][ T7750] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 837.830732][ T28] audit: type=1326 audit(1755137482.406:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.7.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 837.867962][ T7749] binder: 7748:7749 ioctl 4018620d 200000000040 returned -16 [ 837.876853][ T7750] FAT-fs (loop0): error, clusters badly computed (5 != 1) [ 837.882031][ T335] usb 9-1: config 0 descriptor?? [ 837.884047][ T7750] FAT-fs (loop0): Filesystem has been set read-only [ 837.890496][ T28] audit: type=1326 audit(1755137482.406:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.7.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 837.895785][ T7750] FAT-fs (loop0): error, clusters badly computed (6 != 2) [ 837.924952][ T28] audit: type=1326 audit(1755137482.406:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.7.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 837.926538][ T7750] FAT-fs (loop0): error, clusters badly computed (7 != 3) [ 837.957119][ T7750] FAT-fs (loop0): error, clusters badly computed (8 != 4) [ 837.976264][ T28] audit: type=1326 audit(1755137482.406:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.7.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 839.534488][ T335] usbhid 9-1:0.0: can't add hid device: -71 [ 839.540484][ T335] usbhid: probe of 9-1:0.0 failed with error -71 [ 839.579315][ T335] usb 9-1: USB disconnect, device number 2 [ 839.717628][ T7761] loop0: detected capacity change from 0 to 40427 [ 839.738001][ T7761] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 839.752877][ T7761] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 839.782833][ T7761] F2FS-fs (loop0): invalid crc value [ 839.825744][ T7761] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 839.884511][ T7773] loop8: detected capacity change from 0 to 256 [ 841.625931][ T7779] loop3: detected capacity change from 0 to 256 [ 842.887619][ T7786] xt_hashlimit: max too large, truncated to 1048576 [ 842.890666][ T7787] loop9: detected capacity change from 0 to 512 [ 843.087406][ T7787] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 843.095842][ T7787] System zones: 0-2, 18-18, 34-34 [ 843.148259][ T7787] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1967: corrupted inode contents [ 843.162717][ T7787] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.1967: mark_inode_dirty error [ 843.184694][ T7787] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1967: corrupted inode contents [ 843.199547][ T7787] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1967: mark_inode_dirty error [ 843.216081][ T7787] __quota_error: 19 callbacks suppressed [ 843.216144][ T7787] Quota error (device loop9): write_blk: dquota write failed [ 843.229634][ T7787] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 843.239991][ T7787] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.1967: Failed to acquire dquot type 0 [ 843.268493][ T7787] EXT4-fs (loop9): 1 orphan inode deleted [ 843.274514][ T7787] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 843.286216][ T7787] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.416817][ T1791] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 844.140636][ T1791] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 844.295279][ T7798] loop8: detected capacity change from 0 to 128 [ 844.308116][ T7798] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 844.583523][ T7798] FAT-fs (loop8): error, clusters badly computed (5 != 1) [ 844.590948][ T7798] FAT-fs (loop8): Filesystem has been set read-only [ 844.599313][ T7798] FAT-fs (loop8): error, clusters badly computed (6 != 2) [ 844.607354][ T7798] FAT-fs (loop8): error, clusters badly computed (7 != 3) [ 844.615862][ T7798] FAT-fs (loop8): error, clusters badly computed (8 != 4) [ 845.034847][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 845.180562][ T7806] loop3: detected capacity change from 0 to 1024 [ 845.187515][ T7806] EXT4-fs: Ignoring removed i_version option [ 845.219365][ T7806] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1972: Invalid block bitmap block 0 in block_group 0 [ 845.243359][ T7806] Quota error (device loop3): write_blk: dquota write failed [ 845.250833][ T7806] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 845.261016][ T7806] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1972: Failed to acquire dquot type 0 [ 845.272528][ T7806] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1972: Freeing blocks not in datazone - block = 0, count = 4096 [ 845.286275][ T7806] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1972: Invalid inode bitmap blk 0 in block_group 0 [ 845.300338][ T7806] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 845.300436][ T7811] loop8: detected capacity change from 0 to 128 [ 845.311636][ T7806] EXT4-fs (loop3): 1 orphan inode deleted [ 845.315846][ T7811] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 845.321010][ T7806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 845.342447][ T5677] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 845.357515][ T7811] FAT-fs (loop8): error, clusters badly computed (5 != 1) [ 845.364922][ T7811] FAT-fs (loop8): Filesystem has been set read-only [ 845.370093][ T5677] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 0 [ 845.371615][ T7811] FAT-fs (loop8): error, clusters badly computed (6 != 2) [ 845.390710][ T7811] FAT-fs (loop8): error, clusters badly computed (7 != 3) [ 845.398168][ T7811] FAT-fs (loop8): error, clusters badly computed (8 != 4) [ 845.424343][ T442] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 845.605400][ T442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 845.616640][ T442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.626750][ T442] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 845.635948][ T442] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.646091][ T442] usb 10-1: config 0 descriptor?? [ 845.698215][ T7819] loop7: detected capacity change from 0 to 512 [ 845.731313][ T7819] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 845.739483][ T7819] System zones: 0-2, 18-18, 34-34 [ 845.746978][ T7819] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1977: corrupted inode contents [ 845.760324][ T335] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 845.769769][ T7819] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #3: comm syz.7.1977: mark_inode_dirty error [ 845.781713][ T7819] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.1977: corrupted inode contents [ 845.793847][ T7819] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.1977: mark_inode_dirty error [ 845.811095][ T7819] Quota error (device loop7): write_blk: dquota write failed [ 845.818706][ T7819] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 845.828882][ T7819] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1977: Failed to acquire dquot type 0 [ 845.841784][ T7819] EXT4-fs (loop7): 1 orphan inode deleted [ 845.847792][ T7819] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 845.858894][ T7819] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.955823][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.966054][ T335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 845.986512][ T335] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 846.033776][ T6742] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 846.044000][ T6742] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 846.086020][ T286] EXT4-fs (loop3): unmounting filesystem. [ 846.097761][ T442] savu 0003:1E7D:2D5A.0059: unknown main item tag 0x4 [ 846.105291][ T442] savu 0003:1E7D:2D5A.0059: item fetching failed at offset 6/8 [ 846.113158][ T442] savu 0003:1E7D:2D5A.0059: parse failed [ 846.119385][ T442] savu: probe of 0003:1E7D:2D5A.0059 failed with error -22 [ 846.222065][ T7826] loop8: detected capacity change from 0 to 256 [ 846.230655][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.870377][ T442] usb 10-1: USB disconnect, device number 21 [ 846.935467][ T335] usb 1-1: config 0 descriptor?? [ 848.638000][ T335] usbhid 1-1:0.0: can't add hid device: -71 [ 848.647148][ T335] usbhid: probe of 1-1:0.0 failed with error -71 [ 848.655186][ T335] usb 1-1: USB disconnect, device number 30 [ 848.669573][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 848.717320][ T28] audit: type=1326 audit(1755137493.376:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 848.858339][ T7848] loop0: detected capacity change from 0 to 256 [ 848.902632][ T28] audit: type=1326 audit(1755137493.376:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 848.969042][ T7849] cgroup: Need name or subsystem set [ 849.255947][ T28] audit: type=1326 audit(1755137493.376:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 849.349662][ T28] audit: type=1326 audit(1755137493.376:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 849.413194][ T28] audit: type=1326 audit(1755137493.376:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 849.447648][ T28] audit: type=1326 audit(1755137493.376:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 849.471214][ T28] audit: type=1326 audit(1755137493.376:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 849.520836][ T28] audit: type=1326 audit(1755137493.376:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 849.556175][ T7851] loop7: detected capacity change from 0 to 512 [ 852.036763][ T7851] EXT4-fs warning (device loop7): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop7. [ 852.102449][ T28] audit: type=1326 audit(1755137493.376:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 852.255319][ T28] audit: type=1326 audit(1755137493.376:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.7.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f539818ebe9 code=0x7ffc0000 [ 852.440702][ T7867] loop7: detected capacity change from 0 to 1024 [ 852.447505][ T7867] EXT4-fs: Ignoring removed i_version option [ 852.482581][ T7867] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.1988: Invalid block bitmap block 0 in block_group 0 [ 852.500112][ T7867] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1988: Failed to acquire dquot type 0 [ 853.185990][ T7874] loop9: detected capacity change from 0 to 128 [ 853.193096][ T7874] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 854.496180][ T7867] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.1988: Freeing blocks not in datazone - block = 0, count = 4096 [ 854.518392][ T7867] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.1988: Invalid inode bitmap blk 0 in block_group 0 [ 854.670791][ T7867] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 854.681434][ T7867] EXT4-fs (loop7): 1 orphan inode deleted [ 854.687497][ T7867] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 854.794615][ T7868] FAT-fs (loop9): error, clusters badly computed (5 != 1) [ 854.801816][ T7868] FAT-fs (loop9): Filesystem has been set read-only [ 854.808645][ T7868] FAT-fs (loop9): error, clusters badly computed (6 != 2) [ 854.815919][ T7868] FAT-fs (loop9): error, clusters badly computed (7 != 3) [ 854.823273][ T7868] FAT-fs (loop9): error, clusters badly computed (8 != 4) [ 854.830808][ T531] __quota_error: 19 callbacks suppressed [ 854.830824][ T531] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 854.852057][ T531] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:8: Failed to release dquot type 0 [ 854.934468][ T442] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 854.952838][ T7884] loop3: detected capacity change from 0 to 256 [ 855.086567][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 855.278769][ T442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.356961][ T442] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 855.548145][ T442] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 855.733925][ T442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.752139][ T442] usb 1-1: config 0 descriptor?? [ 857.876822][ T7892] loop9: detected capacity change from 0 to 512 [ 858.053101][ T7892] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 858.061391][ T7892] System zones: 0-2, 18-18, 34-34 [ 858.089433][ T7892] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1994: corrupted inode contents [ 858.480828][ T7892] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.1994: mark_inode_dirty error [ 858.494212][ T7892] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1994: corrupted inode contents [ 858.506870][ T7892] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1994: mark_inode_dirty error [ 858.519213][ T7892] Quota error (device loop9): write_blk: dquota write failed [ 858.527095][ T7892] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 858.537183][ T7892] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.1994: Failed to acquire dquot type 0 [ 858.550575][ T7892] EXT4-fs (loop9): 1 orphan inode deleted [ 858.557540][ T7892] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 858.567467][ T7892] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.592463][ T442] usbhid 1-1:0.0: can't add hid device: -71 [ 858.592989][ T1791] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 858.608813][ T1791] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 858.611660][ T442] usbhid: probe of 1-1:0.0 failed with error -71 [ 858.632288][ T442] usb 1-1: USB disconnect, device number 31 [ 858.708554][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 858.725570][ T7906] loop9: detected capacity change from 0 to 512 [ 858.746207][ T7906] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 858.754158][ T7906] System zones: 0-2, 18-18, 34-34 [ 858.760068][ T7906] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1999: corrupted inode contents [ 858.772496][ T7906] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.1999: mark_inode_dirty error [ 858.785477][ T7906] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.1999: corrupted inode contents [ 858.798138][ T7906] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1999: mark_inode_dirty error [ 858.811307][ T7906] Quota error (device loop9): write_blk: dquota write failed [ 858.819446][ T7906] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 858.829993][ T7906] EXT4-fs error (device loop9): ext4_acquire_dquot:6801: comm syz.9.1999: Failed to acquire dquot type 0 [ 858.844984][ T7906] EXT4-fs (loop9): 1 orphan inode deleted [ 858.851131][ T7906] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 858.861031][ T359] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 858.866197][ T7906] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.871217][ T359] EXT4-fs error (device loop9): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 858.901296][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 858.918348][ T7912] loop9: detected capacity change from 0 to 512 [ 858.925969][ T7912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 858.957502][ T7912] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 858.966936][ T7912] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.990186][ T359] Bluetooth: hci0: Frame reassembly failed (-84) [ 859.124862][ T1382] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 861.201928][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 861.225555][ T4135] EXT4-fs (loop9): unmounting filesystem. [ 861.279034][ T7927] loop3: detected capacity change from 0 to 256 [ 861.286590][ T7927] exfat: Deprecated parameter 'utf8' [ 861.294969][ T7927] exfat: Deprecated parameter 'namecase' [ 861.301004][ T7927] exfat: Bad value for 'namecase' [ 861.414020][ T7936] loop7: detected capacity change from 0 to 1024 [ 861.421243][ T7936] EXT4-fs: Ignoring removed i_version option [ 861.428749][ T1382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.440260][ T1382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.456770][ T1382] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 861.467178][ T1382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.505984][ T7936] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.2006: Invalid block bitmap block 0 in block_group 0 [ 861.830768][ T7936] Quota error (device loop7): write_blk: dquota write failed [ 861.838673][ T7936] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 861.849523][ T7936] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.2006: Failed to acquire dquot type 0 [ 861.867180][ T7936] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.2006: Freeing blocks not in datazone - block = 0, count = 4096 [ 861.886674][ T7936] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.2006: Invalid inode bitmap blk 0 in block_group 0 [ 861.902834][ T7936] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 861.914074][ T7936] EXT4-fs (loop7): 1 orphan inode deleted [ 861.920252][ T7936] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 862.068913][ T1382] usb 9-1: config 0 descriptor?? [ 862.427744][ T1382] usb 9-1: can't set config #0, error -71 [ 862.437686][ T1382] usb 9-1: USB disconnect, device number 3 [ 862.453821][ T1791] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 862.630322][ T7950] xt_hashlimit: max too large, truncated to 1048576 [ 862.776306][ T7951] loop9: detected capacity change from 0 to 256 [ 862.885681][ T1791] EXT4-fs error (device loop7): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 0 [ 863.006867][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 864.714400][ T1382] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 864.768066][ T7953] loop3: detected capacity change from 0 to 40427 [ 864.790391][ T7953] F2FS-fs (loop3): invalid crc value [ 864.796052][ T335] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 864.815263][ T7953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 864.867404][ T7953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 864.914362][ T1382] usb 8-1: Using ep0 maxpacket: 8 [ 864.925966][ T1382] usb 8-1: unable to get BOS descriptor or descriptor too short [ 864.944746][ T1382] usb 8-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 864.964352][ T475] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 864.976449][ T1382] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 864.991208][ T335] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.003568][ T1382] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.012285][ T335] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 865.027185][ T1382] usb 8-1: Product: syz [ 865.031528][ T1382] usb 8-1: Manufacturer: syz [ 865.306267][ T1382] usb 8-1: SerialNumber: syz [ 865.311180][ T335] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 865.321627][ T335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.331893][ T335] usb 9-1: config 0 descriptor?? [ 865.414338][ T475] usb 1-1: Using ep0 maxpacket: 8 [ 865.421244][ T475] usb 1-1: unable to get BOS descriptor or descriptor too short [ 865.429775][ T475] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 865.441999][ T475] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 865.451615][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.459824][ T475] usb 1-1: Product: syz [ 865.464047][ T475] usb 1-1: Manufacturer: syz [ 865.468815][ T475] usb 1-1: SerialNumber: syz [ 865.535893][ T1382] snd-usb-audio: probe of 8-1:12.0 failed with error -2 [ 865.544081][ T1382] usb 8-1: USB disconnect, device number 15 [ 865.544324][ T462] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 865.720038][ T475] snd-usb-audio: probe of 1-1:12.0 failed with error -2 [ 865.728642][ T475] usb 1-1: USB disconnect, device number 32 [ 865.736619][ T462] usb 4-1: Using ep0 maxpacket: 32 [ 865.742078][ T7975] Driver unsupported XDP return value 0 on prog (id 749) dev N/A, expect packet loss! [ 865.743285][ T462] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.763995][ T462] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 865.765292][ T335] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 865.785283][ T3879] udevd[3879]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 865.785340][ T462] usb 4-1: config 0 interface 0 has no altsetting 0 [ 865.801768][ T335] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 865.813810][ T462] usb 4-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 865.827756][ T335] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 865.836349][ T335] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 865.843651][ T462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.844319][ T335] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 865.854398][ T462] usb 4-1: config 0 descriptor?? [ 865.866123][ T335] kovaplus 0003:1E7D:2D50.005A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.8-1/input0 [ 865.934751][ T3849] udevd[3849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 866.275659][ T462] smartjoyplus 0003:6666:8801.005B: item fetching failed at offset 5/8 [ 866.284080][ T462] smartjoyplus 0003:6666:8801.005B: parse failed [ 866.290686][ T462] smartjoyplus: probe of 0003:6666:8801.005B failed with error -22 [ 866.420325][ T5677] Bluetooth: hci0: Frame reassembly failed (-84) [ 866.511235][ T5299] usb 4-1: USB disconnect, device number 44 [ 866.534421][ T475] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 866.544319][ T1382] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 866.578424][ T335] kovaplus 0003:1E7D:2D50.005A: couldn't init struct kovaplus_device [ 866.593409][ T335] kovaplus 0003:1E7D:2D50.005A: couldn't install mouse [ 866.742283][ T335] kovaplus: probe of 0003:1E7D:2D50.005A failed with error -71 [ 866.782150][ T335] usb 9-1: USB disconnect, device number 4 [ 866.788191][ T1382] usb 10-1: Using ep0 maxpacket: 8 [ 866.793480][ T475] usb 8-1: Using ep0 maxpacket: 8 [ 866.810684][ T1382] usb 10-1: unable to get BOS descriptor or descriptor too short [ 866.818766][ T475] usb 8-1: unable to get BOS descriptor or descriptor too short [ 866.830904][ T1382] usb 10-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 866.841531][ T475] usb 8-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 866.851900][ T475] usb 8-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 866.862861][ T1382] usb 10-1: config 12 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 866.876333][ T475] usb 8-1: config 12 interface 0 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0 [ 866.886339][ T1382] usb 10-1: config 12 interface 0 has no altsetting 0 [ 866.893365][ T475] usb 8-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.906922][ T475] usb 8-1: config 12 interface 0 has no altsetting 0 [ 866.915168][ T1382] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 866.924751][ T1382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.933145][ T1382] usb 10-1: Product: syz [ 866.937560][ T475] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 866.946680][ T475] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.954906][ T1382] usb 10-1: Manufacturer: syz [ 866.959625][ T1382] usb 10-1: SerialNumber: syz [ 866.964390][ T475] usb 8-1: Product: syz [ 866.968875][ T475] usb 8-1: Manufacturer: syz [ 866.973747][ T475] usb 8-1: SerialNumber: syz [ 967.154182][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 967.161201][ C1] (detected by 1, t=10002 jiffies, g=54665, q=320 ncpus=2) [ 967.168579][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295033930-4295023928), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 967.182090][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g54665 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 967.193289][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 967.203263][ C1] rcu: RCU grace-period kthread stack dump: [ 967.209152][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 967.220061][ C1] Call Trace: [ 967.223439][ C1] [ 967.226384][ C1] __schedule+0xb87/0x14e0 [ 967.230915][ C1] ? release_firmware_map_entry+0x194/0x194 [ 967.236873][ C1] ? __mod_timer+0x7ae/0xb30 [ 967.241520][ C1] schedule+0xbd/0x170 [ 967.245606][ C1] schedule_timeout+0x12c/0x2e0 [ 967.250503][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 967.255883][ C1] ? __cfi_process_timeout+0x10/0x10 [ 967.261211][ C1] ? prepare_to_swait_event+0x308/0x320 [ 967.266770][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 967.271686][ C1] ? rcu_gp_init+0xf10/0xf10 [ 967.276403][ C1] rcu_gp_kthread+0x95/0x370 [ 967.281041][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 967.286268][ C1] ? __kasan_check_read+0x11/0x20 [ 967.291526][ C1] ? __kthread_parkme+0x142/0x180 [ 967.296610][ C1] kthread+0x281/0x320 [ 967.300699][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 967.306107][ C1] ? __cfi_kthread+0x10/0x10 [ 967.310893][ C1] ret_from_fork+0x1f/0x30 [ 967.315352][ C1] [ 967.318452][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 967.324795][ C1] Sending NMI from CPU 1 to CPUs 0: [ 967.330016][ C0] NMI backtrace for cpu 0 [ 967.330030][ C0] CPU: 0 PID: 7982 Comm: syz.0.2020 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 967.330049][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 967.330057][ C0] RIP: 0010:unwind_next_frame+0x43/0x700 [ 967.330081][ C0] Code: 00 00 fc ff df 49 89 fe 49 c1 ee 03 41 0f b6 04 16 84 c0 0f 85 07 06 00 00 83 3b 00 0f 84 73 05 00 00 4c 89 75 90 4c 8d 73 58 <4d> 89 f5 49 c1 ed 03 41 80 7c 15 00 00 74 12 4c 89 f7 e8 f6 5f 7f [ 967.330094][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00000002 [ 967.330136][ C0] RAX: 0000000000000000 RBX: ffffc900000077e8 RCX: 0000000000007800 [ 967.330148][ C0] RDX: dffffc0000000000 RSI: ffffffff813420b9 RDI: ffffc900000077e8 [ 967.330159][ C0] RBP: ffffc900000077d8 R08: ffffc900000078b0 R09: ffffc900000078a8 [ 967.330171][ C0] R10: 0000000000000010 R11: 1ffff92000000efd R12: ffff888114e0e540 [ 967.330183][ C0] R13: 0000000000000001 R14: ffffc90000007840 R15: ffffc900000077e8 [ 967.330194][ C0] FS: 00007f04a90246c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 967.330208][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 967.330220][ C0] CR2: 0000001b33312ff8 CR3: 000000012c910000 CR4: 00000000003526b0 [ 967.330236][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 967.330246][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 967.330257][ C0] Call Trace: [ 967.330262][ C0] [ 967.330268][ C0] ? native_apic_msr_write+0x39/0x50 [ 967.330290][ C0] ? native_apic_msr_write+0x39/0x50 [ 967.330309][ C0] ? __kernel_text_address+0xd/0x30 [ 967.330328][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 967.330385][ C0] arch_stack_walk+0x124/0x150 [ 967.330407][ C0] ? native_apic_msr_write+0x39/0x50 [ 967.330427][ C0] stack_trace_save+0x98/0xe0 [ 967.330445][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 967.330477][ C0] ? __stack_depot_save+0x36/0x480 [ 967.330540][ C0] ? __alloc_pages+0x450/0x450 [ 967.330581][ C0] ? memset+0x35/0x40 [ 967.330601][ C0] kasan_set_track+0x4b/0x70 [ 967.330616][ C0] ? kasan_set_track+0x4b/0x70 [ 967.330630][ C0] ? kasan_save_alloc_info+0x25/0x30 [ 967.330649][ C0] ? __kasan_slab_alloc+0x72/0x80 [ 967.330665][ C0] ? slab_post_alloc_hook+0x4f/0x2d0 [ 967.330701][ C0] ? kmem_cache_alloc+0x16e/0x330 [ 967.330718][ C0] ? __sigqueue_alloc+0x13f/0x210 [ 967.330737][ C0] ? __send_signal_locked+0x19d/0xb70 [ 967.330754][ C0] ? send_signal_locked+0x422/0x580 [ 967.330772][ C0] ? do_send_sig_info+0xd6/0x210 [ 967.330789][ C0] ? group_send_sig_info+0x118/0x2b0 [ 967.330806][ C0] ? do_bpf_send_signal+0x82/0x150 [ 967.330862][ C0] ? irq_work_run_list+0x18b/0x2b0 [ 967.330909][ C0] ? irq_work_run+0x6a/0xf0 [ 967.330926][ C0] ? __sysvec_irq_work+0x75/0x1c0 [ 967.330946][ C0] ? sysvec_irq_work+0xa1/0xc0 [ 967.330985][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 967.331002][ C0] ? native_apic_msr_write+0x39/0x50 [ 967.331030][ C0] kasan_save_alloc_info+0x25/0x30 [ 967.331050][ C0] __kasan_slab_alloc+0x72/0x80 [ 967.331067][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 967.331085][ C0] ? __sigqueue_alloc+0x13f/0x210 [ 967.331104][ C0] ? __sigqueue_alloc+0x13f/0x210 [ 967.331123][ C0] kmem_cache_alloc+0x16e/0x330 [ 967.331140][ C0] ? __sigqueue_alloc+0x13f/0x210 [ 967.331159][ C0] __sigqueue_alloc+0x13f/0x210 [ 967.331179][ C0] __send_signal_locked+0x19d/0xb70 [ 967.331196][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 967.331220][ C0] send_signal_locked+0x422/0x580 [ 967.331239][ C0] do_send_sig_info+0xd6/0x210 [ 967.331258][ C0] group_send_sig_info+0x118/0x2b0 [ 967.331276][ C0] ? __cfi_group_send_sig_info+0x10/0x10 [ 967.331297][ C0] do_bpf_send_signal+0x82/0x150 [ 967.331318][ C0] irq_work_run_list+0x18b/0x2b0 [ 967.331336][ C0] ? irq_work_run+0xf0/0xf0 [ 967.331356][ C0] irq_work_run+0x6a/0xf0 [ 967.331372][ C0] __sysvec_irq_work+0x75/0x1c0 [ 967.331393][ C0] sysvec_irq_work+0xa1/0xc0 [ 967.331409][ C0] [ 967.331414][ C0] [ 967.331419][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 967.331435][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 967.331466][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 3a cc 56 01 5d c3 0f 1f 84 00 00 00 00 [ 967.331478][ C0] RSP: 0018:ffffc90004affc20 EFLAGS: 00000246 [ 967.331493][ C0] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 967.331504][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 967.331514][ C0] RBP: ffffc90004affc20 R08: dffffc0000000000 R09: fffff5200095ff81 [ 967.331525][ C0] R10: 0000000000000000 R11: ffffffff81342080 R12: 0000000000000000 [ 967.331536][ C0] R13: dffffc0000000001 R14: ffffffff86491b60 R15: dffffc0000000000 [ 967.331549][ C0] ? __cfi_native_apic_msr_write+0x10/0x10 [ 967.331573][ C0] x2apic_send_IPI_self+0x6f/0x80 [ 967.331592][ C0] arch_irq_work_raise+0x98/0xf0 [ 967.331611][ C0] __irq_work_queue_local+0x115/0x190 [ 967.331630][ C0] irq_work_queue+0x9e/0x150 [ 967.331647][ C0] bpf_send_signal_common+0x2b2/0x420 [ 967.331667][ C0] ? __set_printk_clr_event+0x80/0x80 [ 967.331690][ C0] bpf_send_signal+0x19/0x20 [ 967.331706][ C0] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 967.331723][ C0] bpf_trace_run2+0xff/0x250 [ 967.331742][ C0] ? __cfi_bpf_trace_run2+0x10/0x10 [ 967.331763][ C0] __bpf_trace_sys_enter+0x62/0x70 [ 967.331779][ C0] trace_sys_enter+0x3d/0x50 [ 967.331793][ C0] syscall_trace_enter+0xf3/0x150 [ 967.331809][ C0] syscall_enter_from_user_mode+0x1f/0x30 [ 967.331828][ C0] do_syscall_64+0x24/0xa0 [ 967.331872][ C0] ? clear_bhb_loop+0x30/0x80 [ 967.331888][ C0] ? clear_bhb_loop+0x30/0x80 [ 967.331904][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.331920][ C0] RIP: 0033:0x7f04a812add9 [ 967.331932][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 967.331944][ C0] RSP: 002b:00007f04a9023b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 967.331959][ C0] RAX: ffffffffffffffda RBX: 00007f04a83b6098 RCX: 00007f04a812add9 [ 967.331971][ C0] RDX: 00007f04a9023b40 RSI: 00007f04a9023c70 RDI: 0000000000000011 [ 967.331982][ C0] RBP: 00007f04a83b6090 R08: 0000000000000000 R09: 0000000000000000 [ 967.331992][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.332002][ C0] R13: 00007f04a83b6128 R14: 00007ffc2e852eb0 R15: 00007ffc2e852f98 [ 967.332017][ C0] [ 1145.614324][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 277s! [ 1145.623364][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 278s! [ 1145.632446][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 277s! [ 1145.641545][ C0] Showing busy workqueues and worker pools: [ 1145.647460][ C0] workqueue events: flags=0x0 [ 1145.652249][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 1145.652299][ C0] pending: kfree_rcu_monitor, kvmclock_sync_fn, kvmclock_sync_fn, kvmclock_sync_fn, kvmclock_sync_fn, kvmclock_sync_fn [ 1145.652391][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=9/256 refcnt=10 [ 1145.652424][ C0] pending: vmstat_shepherd, release_one_tty, release_one_tty, kfree_rcu_monitor, psi_avgs_work, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, kvmclock_sync_fn [ 1145.652691][ C0] workqueue events_long: flags=0x0 [ 1145.704013][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 1145.704061][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 1145.721363][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 1145.721420][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup [ 1145.721503][ C0] workqueue events_unbound: flags=0x2 [ 1145.744436][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6 [ 1145.744473][ C0] pending: fsnotify_connector_destroy_workfn, fsnotify_mark_destroy_workfn, toggle_allocation_gate, flush_memcg_stats_dwork [ 1145.744663][ C0] workqueue events_power_efficient: flags=0x80 [ 1145.771251][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 1145.771304][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker [ 1145.771543][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.771582][ C0] pending: check_lifetime [ 1145.771645][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1145.810671][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.810720][ C0] pending: vmstat_update [ 1145.810755][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.810790][ C0] pending: vmstat_update [ 1145.810820][ C0] workqueue writeback: flags=0x4a [ 1145.840442][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 1145.840488][ C0] pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 1145.840605][ C0] workqueue kblockd: flags=0x18 [ 1145.859801][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 1145.859842][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 1145.859914][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 1145.859948][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 1145.859984][ C0] workqueue usb_hub_wq: flags=0x4 [ 1145.894722][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 1145.894769][ C0] in-flight: 475:hub_event hub_event, 1382:hub_event hub_event [ 1145.894961][ C0] workqueue dm_bufio_cache: flags=0x8 [ 1145.915966][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.916006][ C0] pending: work_fn [ 1145.916085][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 1145.933587][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 1145.933628][ C0] pending: addrconf_verify_work [ 1145.933735][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 1145.933798][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 1145.933833][ C0] pending: addrconf_verify_work [ 1145.933857][ C0] inactive: addrconf_verify_work [ 1145.933888][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1145.978982][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 1145.979029][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material, wg_packet_handshake_send_worker [ 1145.979086][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1146.003843][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.003891][ C0] pending: wg_packet_encrypt_worker [ 1146.003924][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1146.022273][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.022325][ C0] pending: wg_packet_handshake_send_worker [ 1146.022357][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1146.041203][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.041251][ C0] pending: wg_packet_encrypt_worker [ 1146.041290][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1146.059639][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1146.059674][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1146.059714][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1146.081589][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.081630][ C0] pending: wg_packet_encrypt_worker [ 1146.081656][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.081693][ C0] pending: wg_packet_encrypt_worker [ 1146.081716][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1146.113295][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1146.113333][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1146.113370][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1146.135337][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.135379][ C0] pending: wg_packet_encrypt_worker [ 1146.135402][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.135436][ C0] pending: wg_packet_encrypt_worker [ 1146.135464][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1146.166857][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.166893][ C0] pending: wg_packet_handshake_send_worker [ 1146.166928][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1146.185658][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.185697][ C0] pending: wg_packet_encrypt_worker [ 1146.185723][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.185757][ C0] pending: wg_packet_encrypt_worker [ 1146.185781][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1146.217534][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.217585][ C0] pending: wg_packet_handshake_send_worker [ 1146.217614][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1146.236347][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.236402][ C0] pending: wg_packet_encrypt_worker [ 1146.236434][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.236472][ C0] pending: wg_packet_encrypt_worker [ 1146.236497][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1146.267889][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.267930][ C0] pending: wg_packet_handshake_send_worker [ 1146.267956][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1146.286636][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.286678][ C0] pending: wg_packet_encrypt_worker [ 1146.286708][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.286741][ C0] pending: wg_packet_encrypt_worker [ 1146.286766][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1146.318538][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.318581][ C0] pending: wg_packet_encrypt_worker [ 1146.318610][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.318643][ C0] pending: wg_packet_encrypt_worker [ 1146.318667][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1146.350493][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.350537][ C0] pending: wg_packet_encrypt_worker [ 1146.350562][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.350598][ C0] pending: wg_packet_encrypt_worker [ 1146.350622][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1146.382095][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.382131][ C0] pending: wg_packet_handshake_send_worker [ 1146.382164][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1146.401071][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.401107][ C0] pending: wg_packet_encrypt_worker [ 1146.401134][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.401176][ C0] pending: wg_packet_encrypt_worker [ 1146.401200][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1146.432950][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.432988][ C0] pending: wg_packet_handshake_send_worker [ 1146.433013][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1146.451918][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.451959][ C0] pending: wg_packet_encrypt_worker [ 1146.451984][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.452031][ C0] pending: wg_packet_encrypt_worker [ 1146.452057][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1146.483527][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.483566][ C0] pending: wg_packet_handshake_send_worker [ 1146.483592][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1146.502277][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.502324][ C0] pending: wg_packet_encrypt_worker [ 1146.502351][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.502385][ C0] pending: wg_packet_encrypt_worker [ 1146.502408][ C0] workqueue hci0: flags=0xa0012 [ 1146.533719][ C0] pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=3 [ 1146.533756][ C0] pending: hci_cmd_timeout [ 1146.533850][ C0] workqueue hci0: flags=0xa0012 [ 1146.550851][ C0] pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=3 [ 1146.550885][ C0] in-flight: 1496:hci_power_on [ 1146.550913][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=279s workers=5 idle: 335 389 5299 [ 1146.550968][ C0] pool 5: cpus=0-1 flags=0x4 nice=-20 hung=278s workers=3 idle: 45 1569