last executing test programs: 10.006059555s ago: executing program 3 (id=1997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0xac}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) 8.706939443s ago: executing program 0 (id=2003): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x90, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e") 8.690454684s ago: executing program 3 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0xac}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) 8.657939054s ago: executing program 2 (id=2005): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000140)) mmap(&(0x7f000031e000/0x2000)=nil, 0x2000, 0x2000008, 0x40010, r0, 0x9c365000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) pause() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x32, 0x9}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x1c0810, r8, 0xa8af1000) syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000c00)='./file0\x00', 0x0, &(0x7f0000000c40), 0x1, 0xb9a, &(0x7f0000000c80)="$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") pwrite64(r6, &(0x7f0000000340)="87ea808aa13911aecd594a474e3ee5e4185319d6107c1c57c53788b5a6baf238310cf57bf543a01dd351ef0351bc9bd609110bc77dd1445f0d192771df07c1785a67664642b4f6a7df4f7cc4ad4b955f205f1b9e3f2247f1c6ce1f4baa3c7db78e4fe805ff0903f47c169b3d673672599dffb168ad4d47b4c2c6fad9e0", 0x7d, 0xffffffff) 6.692747213s ago: executing program 4 (id=2007): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000050000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000580)) socket(0x400000000010, 0x3, 0x0) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @remote, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 5.47964508s ago: executing program 2 (id=2009): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x40fd) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.404829991s ago: executing program 3 (id=2010): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f"], 0x58}}, 0x0) 5.266948483s ago: executing program 3 (id=2011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x40fd) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.073093186s ago: executing program 1 (id=2012): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$eJzs3MtvG0UYAPBvN4++m7SURx9Q8xIRhaRJC/TAARBIvSAhwaEcQxqq0rRFTZBoVdEUoXJE8A8ARyQkTlw4gYQQcAJxhTtCqlAvLRyQ0dq7jV0/4jgvqH8/yc7M7oxnv90de7yTdQA9q5Q9JRFbI+LXiBiqZusLlKp/bly7OPXXtYtTSZTLL/+ZVMpdv3Zxqiha1NuSZ0bSiPS9JPY2aXf2/IVTkzMz0+fy/Njc6TfHZs9fePzk6ckT0yemz0wcOXL40PhTT0480VEclxZZn8V1fc87Z/ftPvrqhy9OleO1Hz7Ptndrvr42jqrhjtptpxSlKOcWlg5Wnh9e9qv/t2yrSSf967ghLElfRGSHa6DS/4eiLxYO3lC88O7NzLeNdT9aq40EVkX22bSjYWlf9U9/XgC4TSW6OPSo4hM/+/5bPNZ0ALLOrj6bPU9X4r+RP6pr+iPNvssOV7+x97Wof1f7ly8PLdL+1og4Nv/3x9kjml6HAABYWV9n45/Hmo3/0rqxzfZ8DmU4Ig5ExM6IuCMidkXEnfk46O6IuGeJ7ZduyTeOf37e1FVgHdocEU/nc1v14780L5HczG2rxD+QvH5yZvpgvk9GYmBDlh9v08Y3z//yQat1pZrxX/bI2i/Ggvl2/NG/ob7O8cm5yWWEXOfq5Yg9/c3iT27OBGR7YHdE7Oni9bN9dvLRz/Zl6e1bGtcvHn8bKzDPVP404pHq8Z+PW+IvJNWWWs1Pjm2MmemDY8VZ0ejHn668VJsfqEnXxb+xs5g2dhtsE9nx39z0/M/jL7pBMV87u/Q2rvz2fsvvNI3HP4lj87Ul8vO/5l0gO/8Hk1cq6cF82duTc3PnxiMG8wV1yycW6hb5onwW/8iDzfv/zoh/Psnr7Y2I7CS+NyLui4j9+bbfHxEPLHJEvn/uoTfa76Euz/+43FmxNrL4j7c7/hHDSe18fReJvlPffdWq/c7e/w5XUiP5kk7e/zrdwOXsOwAAAPi/SCtz0Ek6WqRrLk7tis3pzNnZuQOleOvM8epc9XAMpMWVrqGa66Hj+bXhIj9xS/5QROyo/KfRpkp+dOrszLb1DByo3KtT1/8jTUdHq+t+b/VPL8DtY0nzaLV3B37x5cpvDLCm3K8JvUv/h96l/0Pv0v+hdzXr/5cibqzDpgBrzOc/9C79H3qX/g+9S/+HntR4S3zxQwvd3Om/kNh5dFnVVz1RHlqVV55feq2+VYo0an+0o2UiiYjumoi0fZnBDlpft0S6aJlnFtstA8v6TYwssT9PbIiITmtdWrO9WrxDJMm6vTkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsgH8DAAD//0qp3GU=") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x31, @multicast2, 0x4e24, 0xffffffff, 'ovf\x00', 0x10, 0x0, 0xb}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rcu_stall_warning\x00', r0}, 0x18) creat(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) setresuid(0x0, 0xee00, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005900)=ANY=[@ANYBLOB, @ANYBLOB="0800010000b10100240012800b000100697036746e6c00001400028005000400070000000500060006000000bd7be02e0cfb65f3832b8c53d4ecba5568c93db0118c0b16c715f4895640aa9fd1a2b5a4a2b98f1b768a5e97316a098c665c35fd2f4987cbef7747b16da386d823aedf4909000000bd9b4bbfc0947e7a3f97"], 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x11}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0xb0) fcntl$setlease(r6, 0x400, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x48a41, 0x54) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3a}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 5.068219586s ago: executing program 4 (id=2013): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nouid32}, {@resgid}, {@nomblk_io_submit}, {@sysvgroups}]}, 0xdc, 0x577, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000003d80)=[{{&(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="24000000000000000000000007000000071311ac141412ac1e0001ac94143aac1414bb0000000000"], 0x28}}], 0x1, 0x4000) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x1, 0x240080e4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.504170284s ago: executing program 0 (id=2014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x40fd) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.479037045s ago: executing program 1 (id=2015): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000005000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000580)) socket(0x400000000010, 0x3, 0x0) fsmount(0xffffffffffffffff, 0xdfd72f8b669113ff, 0x1) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @remote, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 4.12415709s ago: executing program 4 (id=2016): syz_emit_ethernet(0x4e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES8, @ANYRESHEX=r0, @ANYRES8, @ANYRES16=r0], 0x50) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000300)='./file0/file0\x00', 0x400, &(0x7f0000000340)=ANY=[], 0x1, 0x5527, &(0x7f000000a440)="$eJzs3L1vG2UYAPDH+eg3JUIMbD2pQkqk2qrTpoItQCs+RKqowMAEju1Ybm1fFDtOyMTAiBiY+ScQSEyM/A0MzGyIAYTEgATy3QUSPgQlTtw0v590fu5ev/fc81pVpecuugBOrbnkpx9KcTnOR8R0RFyKyPZLxZZZzsMzEXElIqb2baVi/PeBMxFxISIuj5LnOUvFVx9fG15d+v61H7/8+uzMxU+/+GZyqwYm7dmI6G7k+9vdPKatPN4vxmvDdha7N4dFzL/oPiiO0zxuN9eyDNu1vXm1LN5o5fPTja3+KK53avVRbLXXs/GNXn7B/rC1lyc74X5tMztuNNey2O6nWWzt5nXt7Ob/t+32B3meRpHvvSx9DAZ7MR9v7jTz9Ww8yGK9NyjG87xpo7kzisMiFpeLetppZHWsHeaXfrS93u5t7STD5ma/nfaSpUr1uUr1Vrm6mTaag+bNcq3buHUzmW91RtPKg2atu9xK01anWamn3YVkvlWvl6vVZP52c61d6yXVauVG5Xp5aaHYu5a8fPetpNNI5kfxxXZva9Du9JP1dDPJz1hIFis3nl9IrlaTN1ZWk9V7d+6srL75zu23776w8upLxaS/lJXML15fXCxXr5cXqwunaP0fFEWPcf1wKKWHm372qOoAOEH0/8AkHF3/v3kv4uj7/9D/j8WJ6n+PrP//5NSuHw7lIft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeH9/OfvZKtjOXH18sxp8ohp4qjksRMRURv/6N6ThzIOd0kWf2H+bP/qmGr0qRZRhd42yxXYiI5WL75cmj/hUAAADg8fX5+1c+yrv1/GNu0gVxnPKbNj9fendM+UoRMTv33ZiyTY0+nh5Tsuzf90zsjClbdgPr3JiS5bfcZsaV7T+ZPhDO7QulPEwdazkAAMCxONgJHG8XAgAAwHH6cNIFMBml2HuUufcsOPvL+z8eCJ4/cAQAAABM1KX/dVZp7HUAAAAAj5qs//+39//N7Jvs/X8AAABw8uTv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgN3buJzdtIIoD8LPBhf5TUdV9e5Tu4Bg9QpddVhygl+AI9Aq5AGcguxwhggiPg0KURFE8thXyfZIZxoKfnxFezIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABduqzWi/9/v/9rm7Pbt/PCy/5oWzcAAAC8BdtqvajfzFL/Y3P+c3Pqa9MvIqKMiIfG7qN4d5I5anKqRz5f3avhIqJOOFxj0hwfIuJnc1x/6fpXAAAAgPO1Wa7mabSeXmZDF0Sf0qRN+elXprwiIqrZVaa08pD3LVNY/f8ex59MafUE1jRTWJpyG+dKe5b6cT/O2k3vNEVqyqe/n+3eAQCAHo1Omn5HIQAAAPTp99AFMIwibpcyj0uBk9Q0y3vvT3oAAADAK1QMXQAAAADQuXr8b/8/AAAAOG9p/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6tK3Wi81yNW+bs9u3k+duAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4YX/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlZYRAGwjA6bVMvO8kL++ryQ7JzLQjngPAxgwkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4kX3GZ3z1nfFLHFXVMk38M+5VtWSVWLNKbPmhjwNbv7vqfO5VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GzSqrhG2UNELHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeethDBc+V+bWZpjmsws5ssp8PvHnfGYZ53zcLId99LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgInxh/txkh16RRyX1+4/ub2Z9Q8O9Jm7uw9Xs5bFUZNJHw1v1E+ifu1kuflkAAAAWAxJVd+HEB6le+tZH/fy+j+t7slq/p9eKuKqnj9Y91d9Vftn7c8/Hr82GahXjJM99PLWaHjm+VQ6s5vlHHv68hQ3dfI3n3/3kuQfSPzJzqvjNH+f0Q/37n3UzcOl2acLAPw/p6u+DKrfh7J+0GZiACyMTq3wrur/pNduTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNGO+EF6o4CiGsdvbjzIMntzcP6+/uPlyt2oU7d3brz8wekYYQLm+NhmfCcoOzmW83bt66ujEaDa83H7wZQmhr9A/K6V/9bIqbQ5hRGqdaevMLFsTlhz0v+RyNoMUfSgAAHEtp2bK6/lG6t55di1ZCePrzs/X/27U4TFn/P/78wv36WPX6f9DYDOff2va1r9du3Lz17ta1jSvDK8Mv3zs7eH9w7uL58xfX8u9KimPbaQIAAHCEdctWr//jlefX/0/W4jBl/f/Nj4Pv6mMl6v9D7S/6tZ0JAADAYnvl1D9/R4dcj7rd8O3G9vb1QXGcnJ8tji2k+p8tla1e/ycrbWcFAAAANGG8Ez2z/n+pFocp1/9f/OX13+rPTEIIJ8r1/9ObX40uNTeduTaTPx5eKh9uZwEAAABlPX7iwPp/mu//jydbHuIQwjtvFXH5bwCnqv+Tj7//tT5Wff//ueamOJfifvE+8r4fQqffdkYAAAAcZ8t56+X1/1/p3voXv5/8tGv/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/g0AAP//Cq49jA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000400)=0x5, 0x12) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) 3.452693819s ago: executing program 1 (id=2017): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$eJzs3MtvG0UYAPBvN4++m7SURx9Q8xIRhaRJC/TAARBIvSAhwaEcQxqq0rRFTZBoVdEUoXJE8A8ARyQkTlw4gYQQcAJxhTtCqlAvLRyQ0dq7jV0/4jgvqH8/yc7M7oxnv90de7yTdQA9q5Q9JRFbI+LXiBiqZusLlKp/bly7OPXXtYtTSZTLL/+ZVMpdv3Zxqiha1NuSZ0bSiPS9JPY2aXf2/IVTkzMz0+fy/Njc6TfHZs9fePzk6ckT0yemz0wcOXL40PhTT0480VEclxZZn8V1fc87Z/ftPvrqhy9OleO1Hz7Ptndrvr42jqrhjtptpxSlKOcWlg5Wnh9e9qv/t2yrSSf967ghLElfRGSHa6DS/4eiLxYO3lC88O7NzLeNdT9aq40EVkX22bSjYWlf9U9/XgC4TSW6OPSo4hM/+/5bPNZ0ALLOrj6bPU9X4r+RP6pr+iPNvssOV7+x97Wof1f7ly8PLdL+1og4Nv/3x9kjml6HAABYWV9n45/Hmo3/0rqxzfZ8DmU4Ig5ExM6IuCMidkXEnfk46O6IuGeJ7ZduyTeOf37e1FVgHdocEU/nc1v14780L5HczG2rxD+QvH5yZvpgvk9GYmBDlh9v08Y3z//yQat1pZrxX/bI2i/Ggvl2/NG/ob7O8cm5yWWEXOfq5Yg9/c3iT27OBGR7YHdE7Oni9bN9dvLRz/Zl6e1bGtcvHn8bKzDPVP404pHq8Z+PW+IvJNWWWs1Pjm2MmemDY8VZ0ejHn668VJsfqEnXxb+xs5g2dhtsE9nx39z0/M/jL7pBMV87u/Q2rvz2fsvvNI3HP4lj87Ul8vO/5l0gO/8Hk1cq6cF82duTc3PnxiMG8wV1yycW6hb5onwW/8iDzfv/zoh/Psnr7Y2I7CS+NyLui4j9+bbfHxEPLHJEvn/uoTfa76Euz/+43FmxNrL4j7c7/hHDSe18fReJvlPffdWq/c7e/w5XUiP5kk7e/zrdwOXsOwAAAPi/SCtz0Ek6WqRrLk7tis3pzNnZuQOleOvM8epc9XAMpMWVrqGa66Hj+bXhIj9xS/5QROyo/KfRpkp+dOrszLb1DByo3KtT1/8jTUdHq+t+b/VPL8DtY0nzaLV3B37x5cpvDLCm3K8JvUv/h96l/0Pv0v+hdzXr/5cibqzDpgBrzOc/9C79H3qX/g+9S/+HntR4S3zxQwvd3Om/kNh5dFnVVz1RHlqVV55feq2+VYo0an+0o2UiiYjumoi0fZnBDlpft0S6aJlnFtstA8v6TYwssT9PbIiITmtdWrO9WrxDJMm6vTkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsgH8DAAD//0qp3GU=") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x31, @multicast2, 0x4e24, 0xffffffff, 'ovf\x00', 0x10, 0x0, 0xb}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rcu_stall_warning\x00', r0}, 0x18) creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) setresuid(0x0, 0xee00, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0xb0) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x48a41, 0x54) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3a}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3.121864594s ago: executing program 2 (id=2018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0xac}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) 3.114911985s ago: executing program 3 (id=2019): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000140)) mmap(&(0x7f000031e000/0x2000)=nil, 0x2000, 0x2000008, 0x40010, r0, 0x9c365000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) pause() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x32, 0x9}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x1c0810, r8, 0xa8af1000) syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000c00)='./file0\x00', 0x0, &(0x7f0000000c40), 0x1, 0xb9a, &(0x7f0000000c80)="$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") pwrite64(r6, &(0x7f0000000340)="87ea808aa13911aecd594a474e3ee5e4185319d6107c1c57c53788b5a6baf238310cf57bf543a01dd351ef0351bc9bd609110bc77dd1445f0d192771df07c1785a67664642b4f6a7df4f7cc4ad4b955f205f1b9e3f2247f1c6ce1f4baa3c7db78e4fe805ff0903f47c169b3d673672599dffb168ad4d47b4c2c6fad9e0", 0x7d, 0xffffffff) 3.035094056s ago: executing program 4 (id=2020): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @link_local}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 2.849728878s ago: executing program 1 (id=2021): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f"], 0x58}}, 0x0) 1.743534654s ago: executing program 0 (id=2022): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.663611865s ago: executing program 0 (id=2023): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000050000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000580)) socket(0x400000000010, 0x3, 0x0) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @remote, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 1.649406426s ago: executing program 2 (id=2024): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x90, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e") 1.648227496s ago: executing program 4 (id=2025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x8fff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) chroot(&(0x7f0000000200)='./bus\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000004200)='t', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4d8, &(0x7f0000000a40)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) sendfile(r7, r6, 0x0, 0x3ffff) 1.635348716s ago: executing program 1 (id=2026): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.058954774s ago: executing program 1 (id=2027): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}, {0x0, 0x2e}], 0x2, 0x0, 0x0, 0x20000}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008a1f, &(0x7f0000000300), 0x1, 0x4cc, &(0x7f0000000f00)="$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") r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) socket$inet(0x2, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) 972.814016ms ago: executing program 3 (id=2028): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="6812", @ANYRES16=r2, @ANYBLOB="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"], 0x1268}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1164420, &(0x7f0000000580)={[], [{@context={'context', 0x3d, 'user_u'}}]}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4050) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="726f6469722c726f6469722c696f636861727365743d63703433372c696f636861727365743d63703733372c726f6469722c636f6465706167653d313235312c73686f72746e616d653d77696e39352c726f6469722c757466383d312c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c757466383d302c726f6469722c696f636861727365743d63703836332c00de9784e4d49a8900bd2595c7467be73cb2", @ANYBLOB="3c447410f135ee9f8ba815574354d29ac3806f756ccf451754c64fa77420bbca294a8cc39a6a5b7cfcf86636f6a7e11d1676be702b7019430b6fdb9c92715d1393caeaf6b9d713ba8f56ade5aa0f1050a954b7"], 0x1, 0x2f5, &(0x7f0000000940)="$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") r8 = openat(r7, &(0x7f0000000080)='./file0\x00', 0x183341, 0xe4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000008000000", 0xfe60) r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_socket_bind\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x27, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @ldst={0x3, 0x2, 0x1, 0x4, 0x2, 0xffffffffffffffe0, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0x4, 0xe, 0x7, 0x10, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x4, 0x72, &(0x7f0000000380)=""/114, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, r8, 0x8, &(0x7f0000000440)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r10, r6, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x0, @void, @value}, 0x94) 852.634377ms ago: executing program 2 (id=2029): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) syz_clone(0xf5982500, 0x0, 0x4100, 0x0, 0x0, 0x0) 357.110754ms ago: executing program 0 (id=2030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @empty, 0x400}, 0x1c) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) socket(0x1f, 0x803, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rpcgss_svc_seqno_low\x00', r7, 0x0, 0x83}, 0x18) (async) signalfd(r6, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) socket(0x10, 0x80002, 0x0) 267.752026ms ago: executing program 0 (id=2031): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$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") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x31, @multicast2, 0x4e24, 0xffffffff, 'ovf\x00', 0x10, 0x0, 0xb}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rcu_stall_warning\x00', r0}, 0x18) creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) setresuid(0x0, 0xee00, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0xb0) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x48a41, 0x54) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3a}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 184.754467ms ago: executing program 4 (id=2032): mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',group_id']) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000640)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f00000005c0)="698b795025046c56fdae1c35e2d2b943a92669976742fb747b7124e23cf31ca8a1b2f9b93ecc4487d1cffe823c43d669d45cd0ce87eef19fff81e324c082899cc3b724451fcadf572bbf49") ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 0s ago: executing program 2 (id=2033): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) kernel console output (not intermixed with test programs): t=3333, bcdDevice= 0.40 [ 354.997449][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.009976][ T2147] usb 4-1: config 0 descriptor?? [ 355.094179][ T2146] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.105771][ T2146] usb 3-1: config 0 has no interface number 0 [ 355.114130][ T2146] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.129414][ T2146] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.142730][ T2146] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 355.154607][ T2146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.189642][ T2146] usb 3-1: config 0 descriptor?? [ 355.221806][ T1905] keytouch 0003:0926:3333.0038: fixing up Keytouch IEC report descriptor [ 355.235786][ T1905] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0038/input/input59 [ 355.313504][ T1905] keytouch 0003:0926:3333.0038: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 355.448851][ T4302] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0039/input/input60 [ 355.491009][ T2147] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 355.501916][ T2147] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003A/input/input61 [ 355.533347][ T4302] holtek_kbd 0003:04D9:A055.0039: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 355.603065][ T2147] keytouch 0003:0926:3333.003A: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 355.676059][ T2147] usb 5-1: USB disconnect, device number 16 [ 355.696876][ T2146] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.003B/input/input62 [ 355.812410][ T2146] holtek_kbd 0003:04D9:A055.003B: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 355.893474][ T2146] usb 1-1: USB disconnect, device number 13 [ 355.908163][ T4302] usb 3-1: USB disconnect, device number 18 [ 356.130532][ T2147] usb 4-1: USB disconnect, device number 16 [ 356.482981][ T6696] EXT4-fs (loop4): Ignoring removed oldalloc option [ 356.664957][ T6696] EXT4-fs (loop4): orphan cleanup on readonly fs [ 356.674278][ T6696] __quota_error: 7 callbacks suppressed [ 356.674303][ T6696] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 356.690160][ T6696] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 356.700416][ T6696] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1670: Failed to acquire dquot type 1 [ 356.719241][ T6696] EXT4-fs (loop4): 1 truncate cleaned up [ 356.726578][ T6696] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 359.899617][ T6730] EXT4-fs (loop0): Ignoring removed oldalloc option [ 359.965524][ T6730] EXT4-fs (loop0): orphan cleanup on readonly fs [ 359.977064][ T6730] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 359.988988][ T6730] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 359.999217][ T6730] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1677: Failed to acquire dquot type 1 [ 360.097535][ T6730] EXT4-fs (loop0): 1 truncate cleaned up [ 360.105194][ T6730] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 360.276798][ T6740] EXT4-fs (loop3): Ignoring removed oldalloc option [ 360.315938][ T6740] EXT4-fs (loop3): orphan cleanup on readonly fs [ 360.326718][ T6740] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 360.337844][ T6740] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 360.348196][ T6740] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1681: Failed to acquire dquot type 1 [ 360.434411][ T6740] EXT4-fs (loop3): 1 truncate cleaned up [ 360.443127][ T6740] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 360.562705][ T6744] overlayfs: failed to resolve './file1': -2 [ 361.003911][ T6753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54544 sclass=netlink_route_socket pid=6753 comm=syz.0.1683 [ 361.077442][ T6723] F2FS-fs (loop2): invalid crc value [ 361.341462][ T6723] F2FS-fs (loop2): Found nat_bits in checkpoint [ 361.381016][ T6723] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 361.569336][ T6749] F2FS-fs (loop4): invalid crc value [ 361.739381][ T5] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 361.840343][ T6749] F2FS-fs (loop4): Found nat_bits in checkpoint [ 361.879893][ T6749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 362.390012][ T5] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.400174][ T5] usb 2-1: config 0 has no interface number 0 [ 362.410832][ T5] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.429379][ T5] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.474360][ T5] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 362.513950][ T6780] EXT4-fs (loop3): Ignoring removed oldalloc option [ 362.951416][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.980845][ T5] usb 2-1: config 0 descriptor?? [ 363.165549][ T6780] EXT4-fs (loop3): orphan cleanup on readonly fs [ 363.174792][ T6780] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 363.186408][ T6780] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 363.197232][ T6780] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1690: Failed to acquire dquot type 1 [ 363.212350][ T6780] EXT4-fs (loop3): 1 truncate cleaned up [ 363.219744][ T6780] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 363.517251][ T5] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.003C/input/input63 [ 363.630141][ T5] holtek_kbd 0003:04D9:A055.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 363.894677][ T5] usb 2-1: USB disconnect, device number 19 [ 363.919922][ T6796] EXT4-fs (loop0): Ignoring removed oldalloc option [ 364.034325][ T6802] incfs: Can't find or create .index dir in ./file0 [ 364.109465][ T6796] EXT4-fs (loop0): orphan cleanup on readonly fs [ 364.121842][ T6796] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 364.136237][ T6796] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 364.149084][ T6796] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1694: Failed to acquire dquot type 1 [ 364.163858][ T6796] EXT4-fs (loop0): 1 truncate cleaned up [ 364.182495][ T6796] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 364.328604][ T6802] incfs: mount failed -14 [ 364.657958][ T6806] fido_id[6806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 364.820001][ T6811] overlayfs: failed to resolve './file1': -2 [ 364.908357][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1699'. [ 364.948532][ T6821] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1701'. [ 364.968692][ T6815] tipc: Enabling of bearer rejected, failed to enable media [ 365.041959][ T6815] device syzkaller0 entered promiscuous mode [ 365.258243][ T297] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 365.528802][ T6831] kvm: pic: non byte write [ 365.847710][ T2147] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 365.864643][ T297] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.876935][ T297] usb 3-1: config 0 has no interface number 0 [ 365.886123][ T297] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.900552][ T297] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.912789][ T297] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 365.925616][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.940949][ T297] usb 3-1: config 0 descriptor?? [ 365.990613][ T6842] incfs: Can't find or create .index dir in ./file0 [ 365.999617][ T6842] incfs: mount failed -14 [ 366.078110][ T6847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1709'. [ 366.133722][ T6840] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 366.585360][ T2147] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.630811][ T2147] usb 4-1: config 0 has no interface number 0 [ 366.669052][ T2147] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.695329][ T6853] EXT4-fs (loop4): Ignoring removed oldalloc option [ 366.829151][ T2147] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.066784][ T2147] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 367.268778][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.703214][ T297] usbhid 3-1:0.1: can't add hid device: -71 [ 367.991329][ T2147] usb 4-1: config 0 descriptor?? [ 367.997674][ T297] usbhid: probe of 3-1:0.1 failed with error -71 [ 368.013570][ T297] usb 3-1: USB disconnect, device number 19 [ 368.268675][ T6853] EXT4-fs (loop4): orphan cleanup on readonly fs [ 368.283790][ T6853] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 368.299335][ T6853] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 368.312389][ T6853] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1710: Failed to acquire dquot type 1 [ 368.328160][ T6853] EXT4-fs (loop4): 1 truncate cleaned up [ 368.334771][ T6853] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 368.639610][ T2147] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.003D/input/input64 [ 368.723135][ T2147] holtek_kbd 0003:04D9:A055.003D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 368.739127][ T6866] EXT4-fs (loop0): Ignoring removed orlov option [ 368.745834][ T6866] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 368.761218][ T297] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 368.815627][ T6866] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,sysvgroups,,errors=continue [ 368.856048][ T2147] usb 4-1: USB disconnect, device number 17 [ 369.311504][ T6878] overlayfs: failed to resolve './file1': -2 [ 369.440457][ T297] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.463441][ T297] usb 2-1: config 0 has no interface number 0 [ 369.469913][ T297] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.482491][ T297] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.493503][ T297] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 369.503946][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.517443][ T297] usb 2-1: config 0 descriptor?? [ 369.782993][ T6883] EXT4-fs (loop3): Ignoring removed oldalloc option [ 370.219614][ T6883] EXT4-fs (loop3): orphan cleanup on readonly fs [ 370.262945][ T6883] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 370.274376][ T6883] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 370.285517][ T6883] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1716: Failed to acquire dquot type 1 [ 370.336633][ T6883] EXT4-fs (loop3): 1 truncate cleaned up [ 370.390012][ T6883] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 371.297863][ T297] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.003E/input/input65 [ 371.372360][ T6892] incfs: Can't find or create .index dir in ./file0 [ 371.399386][ T6892] incfs: mount failed -14 [ 371.411917][ T297] holtek_kbd 0003:04D9:A055.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 371.479243][ T297] usb 2-1: USB disconnect, device number 20 [ 371.523954][ T6895] fido_id[6895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 371.606814][ T6899] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1721: dx entry: limit 1024 != root limit 124 [ 371.648489][ T6899] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1721: Corrupt directory, running e2fsck is recommended [ 371.666826][ T6899] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 371.678052][ T6899] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1721: corrupted in-inode xattr [ 371.694292][ T6899] EXT4-fs (loop3): Remounting filesystem read-only [ 371.702163][ T6899] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1721: couldn't read orphan inode 15 (err -117) [ 371.723166][ T6899] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 371.730499][ T6909] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1720'. [ 371.749003][ T6903] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1722: dx entry: limit 1024 != root limit 124 [ 371.778915][ T6903] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1722: Corrupt directory, running e2fsck is recommended [ 371.801780][ T6903] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 371.813154][ T6903] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1722: corrupted in-inode xattr [ 371.837302][ T6899] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1721: dx entry: limit 1024 != root limit 124 [ 371.858014][ T6899] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1721: Corrupt directory, running e2fsck is recommended [ 371.874032][ T6903] EXT4-fs (loop1): Remounting filesystem read-only [ 371.910984][ T6903] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1722: couldn't read orphan inode 15 (err -117) [ 371.928053][ T6905] EXT4-fs (loop2): 1 orphan inode deleted [ 371.928256][ T6903] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 371.962719][ T6905] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 371.963280][ T6899] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1721: dx entry: limit 1024 != root limit 124 [ 371.974527][ T6905] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.110353][ T6899] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1721: Corrupt directory, running e2fsck is recommended [ 372.149901][ T6921] EXT4-fs (loop4): Ignoring removed oldalloc option [ 372.332751][ T6921] EXT4-fs (loop4): orphan cleanup on readonly fs [ 372.342269][ T6921] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 372.354393][ T6921] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 372.365652][ T6921] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1725: Failed to acquire dquot type 1 [ 372.382795][ T6921] EXT4-fs (loop4): 1 truncate cleaned up [ 372.389752][ T6921] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 373.028561][ T6903] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1722: dx entry: limit 1024 != root limit 124 [ 373.056821][ T6903] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1722: Corrupt directory, running e2fsck is recommended [ 373.089216][ T6903] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1722: dx entry: limit 1024 != root limit 124 [ 373.117454][ T6903] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1722: Corrupt directory, running e2fsck is recommended [ 373.581140][ T6931] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 373.584842][ T6940] incfs: Can't find or create .index dir in ./file0 [ 373.598423][ T6940] incfs: mount failed -14 [ 373.908551][ T6944] EXT4-fs (loop2): Ignoring removed oldalloc option [ 373.988187][ T6944] EXT4-fs (loop2): orphan cleanup on readonly fs [ 374.000159][ T6944] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 374.014846][ T6944] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 374.028766][ T6944] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1727: Failed to acquire dquot type 1 [ 374.044733][ T6944] EXT4-fs (loop2): 1 truncate cleaned up [ 374.285026][ T6953] overlayfs: failed to resolve './file1': -2 [ 374.556222][ T6952] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 374.618223][ T6952] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.761079][ T6949] device syzkaller0 entered promiscuous mode [ 375.119457][ T6952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1732'. [ 375.157281][ T6944] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 375.174994][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 375.216636][ T6963] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1735'. [ 375.431047][ T5114] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 375.697255][ T6977] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1738: dx entry: limit 1024 != root limit 124 [ 375.710794][ T6977] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1738: Corrupt directory, running e2fsck is recommended [ 375.729577][ T6977] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 375.739085][ T6977] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1738: corrupted in-inode xattr [ 375.754451][ T6977] EXT4-fs (loop2): Remounting filesystem read-only [ 375.764165][ T6977] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.1738: couldn't read orphan inode 15 (err -117) [ 375.780675][ T6977] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 375.808398][ T6977] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1738: dx entry: limit 1024 != root limit 124 [ 375.822751][ T6977] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1738: Corrupt directory, running e2fsck is recommended [ 375.840338][ T6977] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1738: dx entry: limit 1024 != root limit 124 [ 375.844462][ T5114] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.856149][ T6977] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1738: Corrupt directory, running e2fsck is recommended [ 375.867785][ T5114] usb 1-1: config 0 has no interface number 0 [ 375.891804][ T5114] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.904015][ T5114] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.914982][ T5114] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 375.926233][ T5114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.938363][ T5114] usb 1-1: config 0 descriptor?? [ 375.954170][ T6862] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 376.108111][ T6982] F2FS-fs (loop2): invalid crc value [ 376.115766][ T6982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 376.153546][ T6982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 376.355990][ T6862] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.370574][ T6862] usb 5-1: config 0 has no interface number 0 [ 376.734212][ T6862] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.783039][ T6862] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.953260][ T1905] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 377.076136][ T6862] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 377.086185][ T6862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.133448][ T5114] usbhid 1-1:0.1: can't add hid device: -71 [ 377.141435][ T5114] usbhid: probe of 1-1:0.1 failed with error -71 [ 377.150365][ T6862] usb 5-1: config 0 descriptor?? [ 377.162688][ T5114] usb 1-1: USB disconnect, device number 14 [ 377.254403][ T7006] overlayfs: failed to resolve './file1': -2 [ 377.327370][ T7010] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1749: dx entry: limit 1024 != root limit 124 [ 377.340709][ T7010] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1749: Corrupt directory, running e2fsck is recommended [ 377.357345][ T7010] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 377.366859][ T7010] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1749: corrupted in-inode xattr [ 377.367385][ T7014] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.1750: dx entry: limit 1024 != root limit 124 [ 377.384767][ T7010] EXT4-fs (loop3): Remounting filesystem read-only [ 377.396697][ T7014] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.1750: Corrupt directory, running e2fsck is recommended [ 377.414288][ T7010] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1749: couldn't read orphan inode 15 (err -117) [ 377.430165][ T7014] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 377.442046][ T1905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.450974][ T7014] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1750: corrupted in-inode xattr [ 377.463891][ T1905] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 377.479102][ T7010] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 377.489415][ T1905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.511490][ T7014] EXT4-fs (loop0): Remounting filesystem read-only [ 377.527539][ T7014] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.1750: couldn't read orphan inode 15 (err -117) [ 377.537664][ T1905] usb 2-1: config 0 descriptor?? [ 377.541573][ T7014] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 377.571442][ T7010] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1749: dx entry: limit 1024 != root limit 124 [ 377.582546][ T7014] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.1750: dx entry: limit 1024 != root limit 124 [ 377.585330][ T7010] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1749: Corrupt directory, running e2fsck is recommended [ 377.600039][ T7014] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.1750: Corrupt directory, running e2fsck is recommended [ 377.617951][ T7010] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1749: dx entry: limit 1024 != root limit 124 [ 377.633447][ T7014] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.1750: dx entry: limit 1024 != root limit 124 [ 377.642627][ T7010] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1749: Corrupt directory, running e2fsck is recommended [ 377.656749][ T7014] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.1750: Corrupt directory, running e2fsck is recommended [ 377.686253][ T6862] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.003F/input/input66 [ 377.688057][ T7017] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1749: dx entry: limit 1024 != root limit 124 [ 377.713164][ T7017] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1749: Corrupt directory, running e2fsck is recommended [ 377.764631][ T6862] holtek_kbd 0003:04D9:A055.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 377.902959][ T6862] usb 5-1: USB disconnect, device number 17 [ 378.024110][ T1905] keytouch 0003:0926:3333.0040: fixing up Keytouch IEC report descriptor [ 378.034425][ T1905] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0040/input/input67 [ 378.116844][ T1905] keytouch 0003:0926:3333.0040: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 378.762898][ T2146] usb 2-1: USB disconnect, device number 21 [ 378.904334][ T7041] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 378.917807][ T7041] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.945994][ T7041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1757'. [ 379.460952][ T1905] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 379.525803][ T7057] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1762: dx entry: limit 1024 != root limit 124 [ 379.553939][ T7059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 379.726930][ T7059] EXT4-fs (loop0): 1 truncate cleaned up [ 379.733094][ T7059] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 379.851111][ T1905] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.200544][ T1905] usb 4-1: config 0 has no interface number 0 [ 380.207206][ T1905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.219188][ T1905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.230081][ T1905] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 380.240119][ T1905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.249684][ T1905] usb 4-1: config 0 descriptor?? [ 380.273928][ T7057] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1762: Corrupt directory, running e2fsck is recommended [ 380.308561][ T7057] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 380.329277][ T7057] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1762: corrupted in-inode xattr [ 380.352210][ T7057] EXT4-fs (loop2): Remounting filesystem read-only [ 380.365653][ T7057] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.1762: couldn't read orphan inode 15 (err -117) [ 380.385478][ T7057] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 380.470721][ T7057] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1762: dx entry: limit 1024 != root limit 124 [ 380.600748][ T7057] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1762: Corrupt directory, running e2fsck is recommended [ 380.703653][ T7077] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1762: dx entry: limit 1024 != root limit 124 [ 380.725179][ T7074] EXT4-fs (loop4): Ignoring removed oldalloc option [ 380.857846][ T7077] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1762: Corrupt directory, running e2fsck is recommended [ 380.881445][ T7074] EXT4-fs (loop4): orphan cleanup on readonly fs [ 380.891226][ T7074] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 380.907650][ T7074] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 380.919123][ T7074] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1766: Failed to acquire dquot type 1 [ 380.936596][ T7074] EXT4-fs (loop4): 1 truncate cleaned up [ 380.945236][ T7074] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 381.554440][ T7057] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1762: dx entry: limit 1024 != root limit 124 [ 381.568614][ T7057] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1762: Corrupt directory, running e2fsck is recommended [ 381.606303][ T7080] overlayfs: failed to resolve './file1': -2 [ 381.630162][ T1905] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0041/input/input68 [ 381.712468][ T1905] holtek_kbd 0003:04D9:A055.0041: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 381.809385][ T2146] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 381.815871][ T5114] usb 4-1: USB disconnect, device number 18 [ 381.897755][ T7089] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.1770: dx entry: limit 1024 != root limit 124 [ 381.913547][ T7089] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.1770: Corrupt directory, running e2fsck is recommended [ 381.930601][ T7089] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 381.940010][ T7089] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1770: corrupted in-inode xattr [ 381.959810][ T7089] EXT4-fs (loop0): Remounting filesystem read-only [ 381.967469][ T7089] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.1770: couldn't read orphan inode 15 (err -117) [ 381.981629][ T7089] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 381.982988][ T7092] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 382.013671][ T7092] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.014715][ T7089] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.1770: dx entry: limit 1024 != root limit 124 [ 382.036956][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1771'. [ 382.049267][ T2147] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 382.061832][ T7089] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.1770: Corrupt directory, running e2fsck is recommended [ 382.070023][ T7089] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.1770: dx entry: limit 1024 != root limit 124 [ 382.091538][ T7089] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.1770: Corrupt directory, running e2fsck is recommended [ 382.196742][ T2146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.219282][ T2146] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 382.249025][ T2146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.260239][ T2146] usb 2-1: config 0 descriptor?? [ 382.621849][ T7106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1774'. [ 382.719010][ T7108] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 382.732001][ T7108] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.755770][ T7108] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1775'. [ 382.772682][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 382.776580][ T7118] incfs: Can't find or create .index dir in ./file0 [ 382.784672][ T2146] keytouch 0003:0926:3333.0042: fixing up Keytouch IEC report descriptor [ 382.802727][ T2147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.806137][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1775'. [ 382.827254][ T2147] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 382.827280][ T2147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.837845][ T7118] incfs: mount failed -14 [ 382.847422][ T2147] usb 3-1: config 0 descriptor?? [ 382.857537][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 382.881020][ T2146] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0042/input/input69 [ 383.038004][ T7120] kvm: pic: non byte write [ 383.054710][ T2146] keytouch 0003:0926:3333.0042: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 383.070924][ T7127] overlayfs: failed to resolve './file1': -2 [ 383.468813][ T297] usb 2-1: USB disconnect, device number 22 [ 384.145792][ T7150] EXT4-fs (loop1): 1 orphan inode deleted [ 384.154958][ T7150] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 384.173421][ T7150] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.296441][ T7172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54544 sclass=netlink_route_socket pid=7172 comm=syz.0.1791 [ 385.345011][ T7171] device syzkaller0 entered promiscuous mode [ 385.396809][ T2147] usbhid 3-1:0.0: can't add hid device: -71 [ 385.404516][ T2147] usbhid: probe of 3-1:0.0 failed with error -71 [ 385.462502][ T2147] usb 3-1: USB disconnect, device number 20 [ 385.547492][ T7184] overlayfs: failed to resolve './file1': -2 [ 385.844706][ T7192] EXT4-fs (loop3): Ignoring removed oldalloc option [ 385.937489][ T7192] EXT4-fs (loop3): orphan cleanup on readonly fs [ 385.950346][ T7192] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 385.963357][ T7192] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 385.974224][ T7192] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1797: Failed to acquire dquot type 1 [ 385.987690][ T7192] EXT4-fs (loop3): 1 truncate cleaned up [ 386.112013][ T7192] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 386.797749][ T7199] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1800: dx entry: limit 1024 != root limit 124 [ 386.842228][ T7199] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1800: Corrupt directory, running e2fsck is recommended [ 386.896307][ T7199] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 386.924047][ T7199] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1800: corrupted in-inode xattr [ 386.993709][ T7199] EXT4-fs (loop1): Remounting filesystem read-only [ 387.004652][ T7199] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1800: couldn't read orphan inode 15 (err -117) [ 387.046211][ T7199] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 387.065035][ T7203] F2FS-fs (loop2): invalid crc value [ 387.126782][ T7199] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1800: dx entry: limit 1024 != root limit 124 [ 387.142474][ T7203] F2FS-fs (loop2): Found nat_bits in checkpoint [ 387.150232][ T7199] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1800: Corrupt directory, running e2fsck is recommended [ 387.169470][ T7199] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1800: dx entry: limit 1024 != root limit 124 [ 387.184808][ T7199] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1800: Corrupt directory, running e2fsck is recommended [ 387.203072][ T7199] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1800: dx entry: limit 1024 != root limit 124 [ 387.216019][ T7199] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1800: Corrupt directory, running e2fsck is recommended [ 387.258928][ T7203] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 388.062760][ T7221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54544 sclass=netlink_route_socket pid=7221 comm=syz.4.1804 [ 388.990501][ T7229] EXT4-fs (loop1): Ignoring removed oldalloc option [ 389.198537][ T7227] device syzkaller0 entered promiscuous mode [ 389.324229][ T297] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 389.714514][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.730474][ T297] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 389.747291][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.782402][ T297] usb 1-1: config 0 descriptor?? [ 389.912957][ T7229] EXT4-fs (loop1): orphan cleanup on readonly fs [ 389.920666][ T7229] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 389.931605][ T7229] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 389.941729][ T7229] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1805: Failed to acquire dquot type 1 [ 389.961572][ T7229] EXT4-fs (loop1): 1 truncate cleaned up [ 389.969438][ T7229] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 390.169012][ T7244] EXT4-fs (loop2): 1 orphan inode deleted [ 390.179027][ T7244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 390.192658][ T7244] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.266729][ T7248] overlayfs: failed to resolve './file1': -2 [ 390.276743][ T297] keytouch 0003:0926:3333.0043: fixing up Keytouch IEC report descriptor [ 390.284054][ T4302] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 390.292388][ T297] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0043/input/input70 [ 390.391753][ T7251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1812'. [ 390.417980][ T297] keytouch 0003:0926:3333.0043: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 390.693258][ T4302] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 390.713250][ T4302] usb 5-1: config 0 has no interface number 0 [ 390.722303][ T4302] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.722327][ T4302] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.769218][ T4302] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 390.787265][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.800855][ T4302] usb 5-1: config 0 descriptor?? [ 390.833264][ T297] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 390.994529][ T5114] usb 1-1: USB disconnect, device number 15 [ 391.172950][ T24] audit: type=1326 audit(1748019468.184:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545676969 code=0x7ffc0000 [ 391.204157][ T24] audit: type=1326 audit(1748019468.184:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545676969 code=0x7ffc0000 [ 391.282169][ T4302] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0044/input/input71 [ 391.382753][ T1905] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 391.395574][ T4302] holtek_kbd 0003:04D9:A055.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 391.402959][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.425422][ T297] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 391.442438][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.456031][ T297] usb 2-1: config 0 descriptor?? [ 391.508165][ T4302] usb 5-1: USB disconnect, device number 18 [ 391.752604][ T1905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.762043][ T1905] usb 3-1: config 0 has no interface number 0 [ 391.768931][ T1905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.782475][ T1905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.801733][ T1905] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 391.838405][ T1905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.886923][ T1905] usb 3-1: config 0 descriptor?? [ 391.923617][ T297] keytouch 0003:0926:3333.0045: fixing up Keytouch IEC report descriptor [ 391.937194][ T297] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0045/input/input72 [ 392.041848][ T297] keytouch 0003:0926:3333.0045: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 392.162620][ T406] usb 2-1: USB disconnect, device number 23 [ 392.455954][ T7280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 392.603087][ T7280] EXT4-fs (loop4): 1 truncate cleaned up [ 392.610499][ T7280] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 392.780467][ T1905] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0046/input/input73 [ 393.320477][ T1905] holtek_kbd 0003:04D9:A055.0046: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 393.357702][ T1905] usb 3-1: USB disconnect, device number 21 [ 393.556684][ T7290] fido_id[7290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 393.785393][ T7301] overlayfs: failed to resolve './file1': -2 [ 394.011025][ T406] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 394.390940][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.404223][ T406] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 394.417512][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.430623][ T406] usb 4-1: config 0 descriptor?? [ 394.480309][ T24] audit: type=1326 audit(1748019471.516:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4932f969 code=0x7ffc0000 [ 394.511146][ T24] audit: type=1326 audit(1748019471.516:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4932f969 code=0x7ffc0000 [ 394.781600][ T297] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 394.829756][ T7310] F2FS-fs (loop4): invalid crc value [ 394.883420][ T7310] F2FS-fs (loop4): Found nat_bits in checkpoint [ 394.974296][ T406] keytouch 0003:0926:3333.0047: fixing up Keytouch IEC report descriptor [ 394.998275][ T7310] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 395.007256][ T406] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0047/input/input74 [ 395.110699][ T406] keytouch 0003:0926:3333.0047: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 395.190371][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.417711][ T7325] tipc: Enabling of bearer rejected, already enabled [ 395.503302][ T297] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 395.515736][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.528515][ T297] usb 2-1: config 0 descriptor?? [ 395.722047][ T7328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 395.731339][ T7328] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.763539][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1834'. [ 395.894014][ T1905] usb 4-1: USB disconnect, device number 19 [ 395.926058][ T24] audit: type=1326 audit(1748019472.967:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9807b969 code=0x7ffc0000 [ 395.976391][ T24] audit: type=1326 audit(1748019472.967:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9807b969 code=0x7ffc0000 [ 396.065235][ T297] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 396.076168][ T297] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0048/input/input75 [ 396.152369][ T297] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 396.219896][ T5114] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 396.229759][ T6862] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 396.589597][ T6862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.602270][ T6862] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 396.615715][ T5114] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.625285][ T5114] usb 3-1: config 0 has no interface number 0 [ 396.632893][ T5114] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.646408][ T6862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.658766][ T5114] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.673346][ T6862] usb 1-1: config 0 descriptor?? [ 396.679537][ T5114] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 396.690189][ T5114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.711539][ T5114] usb 3-1: config 0 descriptor?? [ 396.740766][ T2147] usb 2-1: USB disconnect, device number 24 [ 396.753874][ T406] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 396.996336][ T7350] EXT4-fs (loop4): Ignoring removed oldalloc option [ 397.074832][ T7350] EXT4-fs (loop4): orphan cleanup on readonly fs [ 397.084104][ T7350] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 397.095692][ T7350] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 397.106513][ T7350] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1839: Failed to acquire dquot type 1 [ 397.120409][ T7350] EXT4-fs (loop4): 1 truncate cleaned up [ 397.126922][ T7350] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 397.303744][ T6862] keytouch 0003:0926:3333.0049: fixing up Keytouch IEC report descriptor [ 397.320516][ T6862] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0049/input/input76 [ 397.785256][ T6862] keytouch 0003:0926:3333.0049: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 397.808846][ T5114] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.004A/input/input77 [ 397.902507][ T5114] holtek_kbd 0003:04D9:A055.004A: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 397.939963][ T5114] usb 3-1: USB disconnect, device number 22 [ 397.969240][ T7359] fido_id[7359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 398.291704][ T5114] usb 1-1: USB disconnect, device number 16 [ 398.343043][ T7363] EXT4-fs (loop4): Ignoring removed oldalloc option [ 398.475696][ T7363] EXT4-fs (loop4): orphan cleanup on readonly fs [ 398.487326][ T7363] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 398.499556][ T7363] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 398.512459][ T7363] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1841: Failed to acquire dquot type 1 [ 398.534169][ T7363] EXT4-fs (loop4): 1 truncate cleaned up [ 398.548837][ T7363] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 399.343466][ T7371] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1843: dx entry: limit 1024 != root limit 124 [ 399.363047][ T7371] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1843: Corrupt directory, running e2fsck is recommended [ 399.399501][ T7371] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 399.412581][ T7371] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1843: corrupted in-inode xattr [ 399.467882][ T406] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.487817][ T24] audit: type=1326 audit(1748019476.529:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4932f969 code=0x7ffc0000 [ 399.531386][ T406] usb 4-1: config 0 has no interface number 0 [ 399.539737][ T7371] EXT4-fs (loop2): Remounting filesystem read-only [ 399.549346][ T406] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.563691][ T7371] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.1843: couldn't read orphan inode 15 (err -117) [ 399.578355][ T24] audit: type=1326 audit(1748019476.529:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4932f969 code=0x7ffc0000 [ 399.620445][ T406] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.635124][ T7371] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 399.666621][ T406] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 399.713192][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.821800][ T7389] EXT4-fs (loop4): Ignoring removed oldalloc option [ 399.870163][ T7371] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1843: dx entry: limit 1024 != root limit 124 [ 399.948989][ T406] usb 4-1: config 0 descriptor?? [ 399.963777][ T7389] EXT4-fs (loop4): orphan cleanup on readonly fs [ 399.979504][ T7389] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 399.990602][ T7389] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 400.001180][ T7389] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1845: Failed to acquire dquot type 1 [ 400.022536][ T7389] EXT4-fs (loop4): 1 truncate cleaned up [ 400.039149][ T7389] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 400.251651][ T7371] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1843: Corrupt directory, running e2fsck is recommended [ 401.318792][ T7394] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1843: dx entry: limit 1024 != root limit 124 [ 401.336900][ T7394] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1843: Corrupt directory, running e2fsck is recommended [ 401.431652][ T7371] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1843: dx entry: limit 1024 != root limit 124 [ 401.568952][ T7396] EXT4-fs (loop0): Ignoring removed oldalloc option [ 401.627228][ T7371] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1843: Corrupt directory, running e2fsck is recommended [ 401.729074][ T7396] EXT4-fs (loop0): orphan cleanup on readonly fs [ 401.738063][ T7396] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 401.748939][ T7396] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 401.759357][ T7396] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1848: Failed to acquire dquot type 1 [ 401.773741][ T7396] EXT4-fs (loop0): 1 truncate cleaned up [ 401.780685][ T7396] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 402.021854][ T7403] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1850: dx entry: limit 1024 != root limit 124 [ 402.072286][ T7403] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1850: Corrupt directory, running e2fsck is recommended [ 402.106910][ T7403] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 402.138575][ T7403] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1850: corrupted in-inode xattr [ 402.176506][ T7403] EXT4-fs (loop3): Remounting filesystem read-only [ 402.194372][ T7403] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1850: couldn't read orphan inode 15 (err -117) [ 402.216698][ T7403] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 402.251134][ T406] usb 4-1: can't set config #0, error -71 [ 402.259239][ T406] usb 4-1: USB disconnect, device number 20 [ 402.431182][ T7403] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1850: dx entry: limit 1024 != root limit 124 [ 402.448690][ T7403] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1850: Corrupt directory, running e2fsck is recommended [ 402.466178][ T7403] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1850: dx entry: limit 1024 != root limit 124 [ 402.494092][ T7403] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1850: Corrupt directory, running e2fsck is recommended [ 402.516220][ T7407] EXT4-fs (loop4): 1 orphan inode deleted [ 402.525640][ T7407] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 402.539160][ T7413] EXT4-fs (loop0): 1 orphan inode deleted [ 402.546776][ T7413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 402.552247][ T7407] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.556958][ T7413] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.673853][ T7421] EXT4-fs (loop1): Ignoring removed oldalloc option [ 402.695894][ T5114] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 404.099048][ T7421] EXT4-fs (loop1): orphan cleanup on readonly fs [ 404.106918][ T7421] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 404.117726][ T7421] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 404.512251][ T7421] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1853: Failed to acquire dquot type 1 [ 404.526977][ T7421] EXT4-fs (loop1): 1 truncate cleaned up [ 404.533134][ T7421] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 404.660507][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1857'. [ 404.762569][ T7444] tipc: Enabling of bearer rejected, already enabled [ 404.781575][ T5114] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.798256][ T2228] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 404.811733][ T5114] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 404.821813][ T5114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.869125][ T5114] usb 3-1: config 0 descriptor?? [ 405.044672][ T7453] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1861: dx entry: limit 1024 != root limit 124 [ 405.062637][ T7453] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1861: Corrupt directory, running e2fsck is recommended [ 405.080090][ T7453] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 405.096536][ T7452] EXT4-fs (loop0): Ignoring removed orlov option [ 405.111209][ T7453] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1861: corrupted in-inode xattr [ 405.124880][ T7452] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 405.130554][ T7453] EXT4-fs (loop3): Remounting filesystem read-only [ 405.147946][ T7453] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1861: couldn't read orphan inode 15 (err -117) [ 405.163251][ T7453] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 405.176110][ T7452] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,sysvgroups,,errors=continue [ 405.221432][ T7453] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1861: dx entry: limit 1024 != root limit 124 [ 405.254620][ T2228] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.268235][ T2228] usb 5-1: config 0 has no interface number 0 [ 405.279517][ T2228] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.294736][ T7453] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1861: Corrupt directory, running e2fsck is recommended [ 405.321740][ T2228] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.339231][ T7459] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1861: dx entry: limit 1024 != root limit 124 [ 405.354138][ T2228] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 405.366223][ T7459] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1861: Corrupt directory, running e2fsck is recommended [ 405.382965][ T2228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.401278][ T2228] usb 5-1: config 0 descriptor?? [ 405.411212][ T7453] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1861: dx entry: limit 1024 != root limit 124 [ 405.424496][ T7453] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1861: Corrupt directory, running e2fsck is recommended [ 405.435570][ T5114] keytouch 0003:0926:3333.004B: fixing up Keytouch IEC report descriptor [ 405.469568][ T5114] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.004B/input/input78 [ 405.524799][ T7464] netlink: 2876 bytes leftover after parsing attributes in process `syz.3.1864'. [ 405.556213][ T5114] keytouch 0003:0926:3333.004B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 405.910825][ T2228] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.004C/input/input79 [ 405.977782][ T7473] EXT4-fs (loop3): 1 orphan inode deleted [ 405.984614][ T7473] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 405.994995][ T7473] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.017114][ T2228] holtek_kbd 0003:04D9:A055.004C: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 406.101954][ T406] usb 5-1: USB disconnect, device number 19 [ 406.125972][ T2146] usb 3-1: USB disconnect, device number 23 [ 407.015655][ T7484] EXT4-fs (loop0): Ignoring removed oldalloc option [ 407.091047][ T7484] EXT4-fs (loop0): orphan cleanup on readonly fs [ 407.100458][ T7484] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 407.110730][ T7484] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 407.120898][ T7484] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1867: Failed to acquire dquot type 1 [ 407.137074][ T7484] EXT4-fs (loop0): 1 truncate cleaned up [ 407.145338][ T7484] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 408.145843][ T7496] EXT4-fs (loop1): Ignoring removed oldalloc option [ 408.275065][ T7496] EXT4-fs (loop1): orphan cleanup on readonly fs [ 408.286678][ T7496] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 408.298672][ T7496] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 408.313976][ T7496] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1871: Failed to acquire dquot type 1 [ 408.328114][ T7496] EXT4-fs (loop1): 1 truncate cleaned up [ 408.335498][ T7496] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 408.901397][ T7504] tipc: Enabling of bearer rejected, already enabled [ 409.535046][ T7494] F2FS-fs (loop2): invalid crc value [ 409.545432][ T7494] F2FS-fs (loop2): Found nat_bits in checkpoint [ 409.678671][ T7511] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1874: dx entry: limit 1024 != root limit 124 [ 409.698714][ T7511] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1874: Corrupt directory, running e2fsck is recommended [ 409.729206][ T7494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 409.742579][ T7511] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 409.781995][ T5114] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 409.798505][ T7511] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1874: corrupted in-inode xattr [ 409.814745][ T7511] EXT4-fs (loop4): Remounting filesystem read-only [ 409.822595][ T7511] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1874: couldn't read orphan inode 15 (err -117) [ 409.838015][ T7511] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 409.908686][ T7511] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1874: dx entry: limit 1024 != root limit 124 [ 409.922621][ T7511] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1874: Corrupt directory, running e2fsck is recommended [ 409.951042][ T7511] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1874: dx entry: limit 1024 != root limit 124 [ 409.977812][ T7511] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1874: Corrupt directory, running e2fsck is recommended [ 410.043658][ T7511] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1874: dx entry: limit 1024 != root limit 124 [ 410.092177][ T406] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 410.137814][ T7511] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1874: Corrupt directory, running e2fsck is recommended [ 410.223223][ T7527] EXT4-fs (loop3): 1 orphan inode deleted [ 410.229575][ T7527] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 410.240912][ T7527] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.611663][ T406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.622114][ T406] usb 1-1: config 0 has no interface number 0 [ 410.633219][ T406] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.642148][ T5114] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.647405][ T406] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.662267][ T5114] usb 2-1: config 0 has no interface number 0 [ 410.666950][ T2146] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 410.673998][ T5114] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.684053][ T406] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 410.698576][ T5114] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.709548][ T406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.721187][ T5114] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 410.733317][ T406] usb 1-1: config 0 descriptor?? [ 410.739099][ T5114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.763370][ T5114] usb 2-1: config 0 descriptor?? [ 410.891512][ T283] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 410.992608][ T7541] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 411.071467][ T2146] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.081038][ T2146] usb 5-1: config 0 has no interface number 0 [ 411.088401][ T2146] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.100998][ T2146] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.112665][ T2146] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 411.124549][ T2146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.136317][ T2146] usb 5-1: config 0 descriptor?? [ 411.247773][ T406] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.004D/input/input80 [ 411.249178][ T5114] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.004E/input/input81 [ 411.261386][ T283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.287314][ T283] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 411.297878][ T283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.309872][ T283] usb 3-1: config 0 descriptor?? [ 411.323768][ T406] holtek_kbd 0003:04D9:A055.004D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 411.404262][ T5114] holtek_kbd 0003:04D9:A055.004E: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 411.467976][ T406] usb 2-1: USB disconnect, device number 25 [ 411.510491][ T298] usb 1-1: USB disconnect, device number 17 [ 411.629573][ T2146] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.004F/input/input82 [ 411.713509][ T2146] holtek_kbd 0003:04D9:A055.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 411.782262][ T283] keytouch 0003:0926:3333.0050: fixing up Keytouch IEC report descriptor [ 411.794111][ T283] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0050/input/input83 [ 411.845073][ T2146] usb 5-1: USB disconnect, device number 20 [ 411.874571][ T283] keytouch 0003:0926:3333.0050: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 412.035211][ T7552] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1884: dx entry: limit 1024 != root limit 124 [ 412.050087][ T7552] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1884: Corrupt directory, running e2fsck is recommended [ 412.067104][ T7552] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 412.077884][ T7552] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1884: corrupted in-inode xattr [ 412.092037][ T7552] EXT4-fs (loop1): Remounting filesystem read-only [ 412.099563][ T7552] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1884: couldn't read orphan inode 15 (err -117) [ 412.113292][ T7552] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 412.163601][ T7552] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1884: dx entry: limit 1024 != root limit 124 [ 412.178499][ T7552] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1884: Corrupt directory, running e2fsck is recommended [ 412.195518][ T7552] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1884: dx entry: limit 1024 != root limit 124 [ 412.209337][ T7552] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1884: Corrupt directory, running e2fsck is recommended [ 412.263060][ T7556] F2FS-fs (loop0): invalid crc value [ 412.270545][ T7556] F2FS-fs (loop0): Found nat_bits in checkpoint [ 412.293477][ T7556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 412.318473][ T7563] tipc: Enabling of bearer rejected, already enabled [ 412.463854][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1887'. [ 412.487693][ T5114] usb 3-1: USB disconnect, device number 24 [ 412.527089][ T7572] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1888: dx entry: limit 1024 != root limit 124 [ 412.764192][ T7572] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1888: Corrupt directory, running e2fsck is recommended [ 412.824707][ T7570] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1889: dx entry: limit 1024 != root limit 124 [ 412.840506][ T7572] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 412.841388][ T7570] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1889: Corrupt directory, running e2fsck is recommended [ 412.857848][ T7572] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1888: corrupted in-inode xattr [ 412.877413][ T7570] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 412.894555][ T7572] EXT4-fs (loop1): Remounting filesystem read-only [ 412.957904][ T7572] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1888: couldn't read orphan inode 15 (err -117) [ 412.984970][ T7572] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 413.001830][ T7570] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1889: corrupted in-inode xattr [ 413.031186][ T7570] EXT4-fs (loop4): Remounting filesystem read-only [ 413.040969][ T7572] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1888: dx entry: limit 1024 != root limit 124 [ 413.042519][ T7570] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1889: couldn't read orphan inode 15 (err -117) [ 413.073840][ T7572] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1888: Corrupt directory, running e2fsck is recommended [ 413.089342][ T7570] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 413.115192][ T7572] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1888: dx entry: limit 1024 != root limit 124 [ 413.138701][ T7572] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1888: Corrupt directory, running e2fsck is recommended [ 413.281523][ T7570] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1889: dx entry: limit 1024 != root limit 124 [ 413.335904][ T7570] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1889: Corrupt directory, running e2fsck is recommended [ 413.494795][ T7592] EXT4-fs (loop1): Ignoring removed oldalloc option [ 413.582242][ T7570] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1889: dx entry: limit 1024 != root limit 124 [ 413.619965][ T7592] EXT4-fs (loop1): orphan cleanup on readonly fs [ 413.631734][ T7592] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 413.642756][ T7592] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 413.653084][ T7592] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1892: Failed to acquire dquot type 1 [ 413.727246][ T7592] EXT4-fs (loop1): 1 truncate cleaned up [ 413.735019][ T7592] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 414.041788][ T7588] EXT4-fs (loop0): 1 orphan inode deleted [ 414.320777][ T7570] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1889: Corrupt directory, running e2fsck is recommended [ 414.334999][ T7588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 414.734394][ T7588] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.767066][ T7603] EXT4-fs (loop3): Ignoring removed oldalloc option [ 414.809449][ T7603] EXT4-fs (loop3): orphan cleanup on readonly fs [ 414.818994][ T7603] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 414.830157][ T7603] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 414.840117][ T7603] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1894: Failed to acquire dquot type 1 [ 414.860916][ T7603] EXT4-fs (loop3): 1 truncate cleaned up [ 414.867950][ T7603] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 415.780827][ T7599] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 415.877987][ T7614] tipc: Enabling of bearer rejected, already enabled [ 416.071782][ T7622] overlayfs: failed to resolve './file1': -2 [ 416.576058][ T7626] incfs: Can't find or create .index dir in ./file0 [ 416.584398][ T7626] incfs: mount failed -14 [ 416.816341][ T7630] incfs: Can't find or create .index dir in ./file0 [ 416.833899][ T7630] incfs: mount failed -14 [ 417.062826][ T7632] EXT4-fs (loop3): Ignoring removed oldalloc option [ 417.144837][ T7632] EXT4-fs (loop3): orphan cleanup on readonly fs [ 417.156122][ T7632] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 417.167400][ T7632] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 417.179493][ T7632] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1900: Failed to acquire dquot type 1 [ 417.195312][ T7632] EXT4-fs (loop3): 1 truncate cleaned up [ 417.202295][ T7632] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 418.318030][ T7637] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1902: dx entry: limit 1024 != root limit 124 [ 418.684936][ T7637] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1902: Corrupt directory, running e2fsck is recommended [ 418.753149][ T7643] EXT4-fs (loop2): Ignoring removed oldalloc option [ 418.774426][ T7637] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 418.803755][ T7643] EXT4-fs (loop2): orphan cleanup on readonly fs [ 418.868938][ T7643] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 418.881154][ T7643] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 418.892847][ T7643] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1903: Failed to acquire dquot type 1 [ 418.909230][ T7643] EXT4-fs (loop2): 1 truncate cleaned up [ 418.918378][ T7643] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 419.139029][ T7637] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1902: corrupted in-inode xattr [ 419.343273][ T7637] EXT4-fs (loop4): Remounting filesystem read-only [ 419.375419][ T7637] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1902: couldn't read orphan inode 15 (err -117) [ 419.579828][ T7637] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 419.611290][ T7637] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1902: dx entry: limit 1024 != root limit 124 [ 419.625757][ T7637] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1902: Corrupt directory, running e2fsck is recommended [ 419.966205][ T7637] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1902: dx entry: limit 1024 != root limit 124 [ 419.981425][ T7637] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1902: Corrupt directory, running e2fsck is recommended [ 420.054833][ T7655] EXT4-fs (loop1): 1 orphan inode deleted [ 420.062630][ T7655] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 420.072438][ T7655] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.174466][ T7664] kvm: pic: non byte write [ 420.209125][ T7672] tipc: Enabling of bearer rejected, already enabled [ 420.649593][ T7679] netlink: 2876 bytes leftover after parsing attributes in process `syz.0.1913'. [ 420.687745][ T7675] EXT4-fs (loop2): 1 orphan inode deleted [ 420.694218][ T7675] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 420.704566][ T7675] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.188278][ T7687] EXT4-fs (loop1): Ignoring removed oldalloc option [ 422.330861][ T7687] EXT4-fs (loop1): orphan cleanup on readonly fs [ 422.340230][ T7687] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 422.352086][ T7687] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 422.362883][ T7687] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1914: Failed to acquire dquot type 1 [ 422.377027][ T7687] EXT4-fs (loop1): 1 truncate cleaned up [ 422.383683][ T7687] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 423.427203][ T7699] EXT4-fs (loop3): Ignoring removed oldalloc option [ 423.634921][ T7699] EXT4-fs (loop3): orphan cleanup on readonly fs [ 423.645677][ T7699] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 423.656684][ T7699] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 423.670621][ T7699] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1915: Failed to acquire dquot type 1 [ 423.687498][ T7699] EXT4-fs (loop3): 1 truncate cleaned up [ 423.695285][ T7699] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 424.299229][ T7714] incfs: Can't find or create .index dir in ./file0 [ 424.308909][ T7714] incfs: mount failed -14 [ 424.508654][ T7710] EXT4-fs (loop1): Ignoring removed oldalloc option [ 424.540646][ T7710] EXT4-fs (loop1): orphan cleanup on readonly fs [ 424.550107][ T7710] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 424.560776][ T7710] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 424.571047][ T7710] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1918: Failed to acquire dquot type 1 [ 424.598703][ T7710] EXT4-fs (loop1): 1 truncate cleaned up [ 424.607487][ T7710] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 424.756403][ T7706] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1919: dx entry: limit 1024 != root limit 124 [ 424.868850][ T7706] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1919: Corrupt directory, running e2fsck is recommended [ 425.056164][ T7706] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 425.065087][ T7706] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1919: corrupted in-inode xattr [ 425.077582][ T7706] EXT4-fs (loop4): Remounting filesystem read-only [ 425.093707][ T7706] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1919: couldn't read orphan inode 15 (err -117) [ 425.466792][ T7706] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 425.504988][ T7706] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1919: dx entry: limit 1024 != root limit 124 [ 425.518640][ T7706] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1919: Corrupt directory, running e2fsck is recommended [ 425.537768][ T7732] tipc: Enabling of bearer rejected, already enabled [ 425.603801][ T297] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 425.933977][ T5114] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 425.951398][ T7744] EXT4-fs (loop1): Ignoring removed oldalloc option [ 425.973721][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.989015][ T297] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 426.120283][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.158309][ T7744] EXT4-fs (loop1): orphan cleanup on readonly fs [ 426.169179][ T7744] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 426.181088][ T7744] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 426.192235][ T7744] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1928: Failed to acquire dquot type 1 [ 426.208821][ T7744] EXT4-fs (loop1): 1 truncate cleaned up [ 426.273183][ T7744] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 426.589168][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1930'. [ 426.607978][ T297] usb 1-1: config 0 descriptor?? [ 426.653615][ T5114] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 427.313280][ T5114] usb 5-1: config 0 has no interface number 0 [ 427.329218][ T5114] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.371871][ T5114] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.402872][ T5114] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 427.432768][ T5114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.466916][ T5114] usb 5-1: config 0 descriptor?? [ 427.751057][ T2228] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 427.764395][ T297] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 427.823900][ T297] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0051/input/input84 [ 427.936996][ T7757] EXT4-fs (loop1): Ignoring removed oldalloc option [ 428.001425][ T297] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 428.059609][ T7757] EXT4-fs (loop1): orphan cleanup on readonly fs [ 428.069188][ T7757] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 428.080255][ T7757] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 428.090558][ T7757] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1932: Failed to acquire dquot type 1 [ 428.106816][ T7757] EXT4-fs (loop1): 1 truncate cleaned up [ 428.202459][ T2228] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.270189][ T2228] usb 3-1: config 0 has no interface number 0 [ 428.388194][ T2228] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.501963][ T5114] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0052/input/input85 [ 428.569262][ T2228] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.700889][ T2228] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 428.806780][ T5114] holtek_kbd 0003:04D9:A055.0052: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 428.887031][ T2228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.054108][ T7757] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 429.223373][ T2228] usb 3-1: config 0 descriptor?? [ 429.408538][ T5114] usb 5-1: USB disconnect, device number 21 [ 429.451148][ T2147] usb 1-1: USB disconnect, device number 18 [ 429.726327][ T7768] EXT4-fs (loop4): Ignoring removed oldalloc option [ 429.874113][ T7765] fido_id[7765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 429.904022][ T7768] EXT4-fs (loop4): orphan cleanup on readonly fs [ 429.916030][ T7768] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 429.927082][ T7768] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 429.939521][ T7768] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1933: Failed to acquire dquot type 1 [ 429.956284][ T7768] EXT4-fs (loop4): 1 truncate cleaned up [ 429.963510][ T7768] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 431.616331][ T7775] EXT4-fs (loop0): Ignoring removed oldalloc option [ 431.737886][ T7775] EXT4-fs (loop0): orphan cleanup on readonly fs [ 431.748268][ T7775] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 431.759373][ T7775] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 431.769540][ T7775] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1935: Failed to acquire dquot type 1 [ 431.783972][ T7775] EXT4-fs (loop0): 1 truncate cleaned up [ 431.790950][ T7775] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 432.291529][ T2228] usbhid 3-1:0.1: can't add hid device: -71 [ 432.298413][ T2228] usbhid: probe of 3-1:0.1 failed with error -71 [ 432.323951][ T2228] usb 3-1: USB disconnect, device number 25 [ 432.352125][ T7783] incfs: Can't find or create .index dir in ./file0 [ 432.359025][ T7783] incfs: mount failed -14 [ 432.418803][ T7785] tipc: Enabling of bearer rejected, already enabled [ 432.738226][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1941'. [ 432.762970][ T7790] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1936: dx entry: limit 1024 != root limit 124 [ 432.776212][ T7790] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1936: Corrupt directory, running e2fsck is recommended [ 432.791018][ T7790] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 432.800868][ T7790] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1936: corrupted in-inode xattr [ 432.825256][ T7790] EXT4-fs (loop4): Remounting filesystem read-only [ 432.832589][ T7790] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1936: couldn't read orphan inode 15 (err -117) [ 432.845741][ T7790] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 432.846198][ T7793] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1942: dx entry: limit 1024 != root limit 124 [ 432.894772][ T7790] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.1936: dx entry: limit 1024 != root limit 124 [ 432.909190][ T7790] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1936: Corrupt directory, running e2fsck is recommended [ 432.927635][ T7802] tipc: Enabling of bearer rejected, already enabled [ 432.930555][ T7793] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1942: Corrupt directory, running e2fsck is recommended [ 432.954875][ T7793] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 432.964501][ T7793] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1942: corrupted in-inode xattr [ 432.977161][ T7793] EXT4-fs (loop3): Remounting filesystem read-only [ 432.985658][ T7793] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1942: couldn't read orphan inode 15 (err -117) [ 433.003413][ T7793] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 433.030058][ T283] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 433.072534][ T7796] F2FS-fs (loop1): invalid crc value [ 433.081371][ T7796] F2FS-fs (loop1): Found nat_bits in checkpoint [ 433.095233][ T7793] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1942: dx entry: limit 1024 != root limit 124 [ 433.107659][ T7793] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1942: Corrupt directory, running e2fsck is recommended [ 433.113142][ T7796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 433.127320][ T7793] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1942: dx entry: limit 1024 != root limit 124 [ 433.142076][ T7793] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1942: Corrupt directory, running e2fsck is recommended [ 433.169186][ T7793] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1942: dx entry: limit 1024 != root limit 124 [ 433.181279][ T7793] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1942: Corrupt directory, running e2fsck is recommended [ 433.449648][ T283] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.642195][ T283] usb 3-1: config 0 has no interface number 0 [ 433.708089][ T283] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.720367][ T283] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.731301][ T283] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 433.741706][ T283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.754118][ T283] usb 3-1: config 0 descriptor?? [ 433.834521][ T24] audit: type=1326 audit(1748019510.898:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545676969 code=0x7ffc0000 [ 433.863884][ T24] audit: type=1326 audit(1748019510.898:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.3.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545676969 code=0x7ffc0000 [ 433.960558][ T7813] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 434.099283][ T5114] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 434.162852][ T7830] tipc: Enabling of bearer rejected, already enabled [ 434.235092][ T283] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0053/input/input86 [ 434.299295][ T2228] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 434.311796][ T283] holtek_kbd 0003:04D9:A055.0053: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 434.539172][ T5114] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.575520][ T5114] usb 1-1: config 0 has no interface number 0 [ 434.653159][ T5114] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.668292][ T7837] EXT4-fs (loop4): Ignoring removed oldalloc option [ 434.769325][ T2228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.786081][ T5114] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.798477][ T2228] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 434.810481][ T5114] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 434.823590][ T2228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.835765][ T5114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.867319][ T2228] usb 2-1: config 0 descriptor?? [ 434.891074][ T5114] usb 1-1: config 0 descriptor?? [ 434.902563][ T2147] usb 3-1: USB disconnect, device number 26 [ 434.915193][ T7837] EXT4-fs (loop4): orphan cleanup on readonly fs [ 434.926845][ T7837] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 434.939694][ T7837] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 434.951438][ T7837] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1951: Failed to acquire dquot type 1 [ 434.967130][ T7837] EXT4-fs (loop4): 1 truncate cleaned up [ 434.995604][ T7837] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 435.294147][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1953'. [ 435.414217][ T7846] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1954: dx entry: limit 1024 != root limit 124 [ 435.429265][ T7846] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1954: Corrupt directory, running e2fsck is recommended [ 435.446337][ T7846] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 435.455969][ T7846] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1954: corrupted in-inode xattr [ 435.469604][ T7846] EXT4-fs (loop3): Remounting filesystem read-only [ 435.476717][ T7846] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1954: couldn't read orphan inode 15 (err -117) [ 435.477146][ T2228] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 435.489980][ T7846] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 435.504916][ T5114] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0054/input/input87 [ 435.538341][ T2228] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0055/input/input88 [ 435.551485][ T7846] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1954: dx entry: limit 1024 != root limit 124 [ 435.565327][ T7846] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1954: Corrupt directory, running e2fsck is recommended [ 435.622146][ T2228] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 435.679820][ T7853] syz.4.1956[7853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.679896][ T7853] syz.4.1956[7853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.702180][ T5114] holtek_kbd 0003:04D9:A055.0054: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 435.750714][ T2147] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 435.759152][ T5114] usb 1-1: USB disconnect, device number 19 [ 435.862304][ T7857] fido_id[7857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 435.953464][ T7855] F2FS-fs (loop3): invalid crc value [ 435.961095][ T7855] F2FS-fs (loop3): Found nat_bits in checkpoint [ 435.984413][ T7855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 436.231118][ T283] usb 2-1: USB disconnect, device number 26 [ 436.314632][ T2147] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.324670][ T2147] usb 3-1: config 0 has no interface number 0 [ 436.331217][ T2147] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.342386][ T2147] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.355731][ T2147] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 436.367365][ T2147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.392075][ T2147] usb 3-1: config 0 descriptor?? [ 436.550709][ T7873] EXT4-fs (loop0): 1 orphan inode deleted [ 436.557328][ T7873] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 436.567707][ T7873] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.648519][ T7878] tipc: Enabling of bearer rejected, already enabled [ 436.679616][ T7871] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 437.025580][ T2147] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0056/input/input89 [ 437.082175][ T7884] EXT4-fs (loop1): 1 orphan inode deleted [ 437.088330][ T7884] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 437.098085][ T7884] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.123902][ T2147] holtek_kbd 0003:04D9:A055.0056: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 437.146747][ T2147] usb 3-1: USB disconnect, device number 27 [ 437.206223][ T7888] fido_id[7888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 437.293385][ T7890] EXT4-fs (loop3): 1 orphan inode deleted [ 437.299443][ T7890] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 437.309364][ T7890] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.667126][ T7899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 440.441556][ T7907] EXT4-fs (loop4): Ignoring removed oldalloc option [ 440.473608][ T7907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 440.518176][ T7907] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 440.529686][ T7907] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 440.547643][ T7907] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1964: Failed to acquire dquot type 1 [ 440.561577][ T7907] EXT4-fs (loop4): 1 truncate cleaned up [ 440.570058][ T7907] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 440.986146][ T7906] EXT4-fs (loop0): Ignoring removed oldalloc option [ 441.306915][ T7906] EXT4-fs (loop0): orphan cleanup on readonly fs [ 441.314449][ T7906] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 441.319730][ T7915] incfs: Can't find or create .index dir in ./file0 [ 441.324619][ T7906] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 441.340606][ T7906] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1966: Failed to acquire dquot type 1 [ 441.352386][ T7915] incfs: mount failed -14 [ 441.360572][ T7906] EXT4-fs (loop0): 1 truncate cleaned up [ 441.367278][ T7906] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 441.587542][ T7926] overlayfs: failed to resolve './file1': -2 [ 441.666841][ T7925] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1967: dx entry: limit 1024 != root limit 124 [ 441.680375][ T7925] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1967: Corrupt directory, running e2fsck is recommended [ 441.695030][ T7925] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 441.704559][ T7925] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1967: corrupted in-inode xattr [ 441.719073][ T7925] EXT4-fs (loop1): Remounting filesystem read-only [ 441.726193][ T7925] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1967: couldn't read orphan inode 15 (err -117) [ 441.734422][ T7923] F2FS-fs (loop2): invalid crc value [ 441.738836][ T7925] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 441.764375][ T7923] F2FS-fs (loop2): Found nat_bits in checkpoint [ 441.777090][ T7925] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1967: dx entry: limit 1024 != root limit 124 [ 441.789876][ T7925] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1967: Corrupt directory, running e2fsck is recommended [ 441.798219][ T7923] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 441.805747][ T7925] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.1967: dx entry: limit 1024 != root limit 124 [ 441.824916][ T7925] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.1967: Corrupt directory, running e2fsck is recommended [ 441.855374][ T5114] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 442.554428][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1976'. [ 442.591242][ T7947] incfs: Can't find or create .index dir in ./file0 [ 442.598746][ T7947] incfs: mount failed -14 [ 442.625080][ T5114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.648085][ T5114] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 442.667853][ T5114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.679279][ T5114] usb 1-1: config 0 descriptor?? [ 442.788423][ T7952] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 443.158731][ T5114] keytouch 0003:0926:3333.0057: fixing up Keytouch IEC report descriptor [ 443.172047][ T5114] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0057/input/input90 [ 443.257495][ T5114] keytouch 0003:0926:3333.0057: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 443.646483][ T7966] EXT4-fs (loop4): Ignoring removed oldalloc option [ 443.712769][ T7966] EXT4-fs (loop4): orphan cleanup on readonly fs [ 443.721628][ T7966] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 443.733312][ T7966] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 443.743880][ T7966] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1981: Failed to acquire dquot type 1 [ 443.757518][ T7966] EXT4-fs (loop4): 1 truncate cleaned up [ 443.763875][ T7966] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 444.100260][ T2147] usb 1-1: USB disconnect, device number 20 [ 444.560549][ T7976] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1984: dx entry: limit 1024 != root limit 124 [ 444.573712][ T7976] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1984: Corrupt directory, running e2fsck is recommended [ 444.613317][ T7976] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 444.624221][ T7975] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1982: dx entry: limit 1024 != root limit 124 [ 444.690374][ T7976] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1984: corrupted in-inode xattr [ 444.706067][ T7975] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1982: Corrupt directory, running e2fsck is recommended [ 444.725749][ T7976] EXT4-fs (loop3): Remounting filesystem read-only [ 444.734357][ T7976] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1984: couldn't read orphan inode 15 (err -117) [ 444.734485][ T7975] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 444.748350][ T7976] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 444.778576][ T7975] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1982: corrupted in-inode xattr [ 444.810535][ T7975] EXT4-fs (loop2): Remounting filesystem read-only [ 444.824544][ T7975] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.1982: couldn't read orphan inode 15 (err -117) [ 444.837586][ T7984] incfs: Can't find or create .index dir in ./file0 [ 444.845743][ T7984] incfs: mount failed -14 [ 444.850816][ T7975] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 444.881645][ T7976] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1984: dx entry: limit 1024 != root limit 124 [ 444.904040][ T7976] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1984: Corrupt directory, running e2fsck is recommended [ 444.923590][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'. [ 444.934718][ T7987] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.1984: dx entry: limit 1024 != root limit 124 [ 444.968656][ T7975] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1982: dx entry: limit 1024 != root limit 124 [ 444.992064][ T7975] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1982: Corrupt directory, running e2fsck is recommended [ 445.004018][ T7987] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.1984: Corrupt directory, running e2fsck is recommended [ 445.026479][ T7975] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1982: dx entry: limit 1024 != root limit 124 [ 445.044579][ T7982] F2FS-fs (loop1): invalid crc value [ 445.069058][ T7975] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1982: Corrupt directory, running e2fsck is recommended [ 445.085665][ T7975] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1982: dx entry: limit 1024 != root limit 124 [ 445.091583][ T7982] F2FS-fs (loop1): Found nat_bits in checkpoint [ 445.098837][ T7975] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1982: Corrupt directory, running e2fsck is recommended [ 445.144533][ T7993] EXT4-fs (loop4): 1 orphan inode deleted [ 445.151253][ T7993] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 445.151546][ T7982] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 445.161830][ T7993] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.647552][ T8012] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 446.133522][ T2147] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 446.490187][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 446.501698][ T8032] incfs: Can't find or create .index dir in ./file0 [ 446.510067][ T8032] incfs: mount failed -14 [ 446.533294][ T2147] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.553242][ T2147] usb 2-1: config 0 has no interface number 0 [ 446.559734][ T2147] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.571286][ T2147] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.581711][ T2147] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 446.594450][ T8036] EXT4-fs (loop3): Ignoring removed oldalloc option [ 446.662513][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.771504][ T2147] usb 2-1: config 0 descriptor?? [ 446.903897][ T8036] EXT4-fs (loop3): orphan cleanup on readonly fs [ 446.912623][ T8036] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 446.922613][ T8036] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 446.932581][ T8036] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1997: Failed to acquire dquot type 1 [ 446.947259][ T8036] EXT4-fs (loop3): 1 truncate cleaned up [ 446.953595][ T8036] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 449.401683][ T2147] usbhid 2-1:0.1: can't add hid device: -71 [ 449.408389][ T2147] usbhid: probe of 2-1:0.1 failed with error -71 [ 449.418893][ T2147] usb 2-1: USB disconnect, device number 27 [ 449.452518][ T923] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 450.011444][ T923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.023793][ T923] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 450.035434][ T923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.047675][ T923] usb 1-1: config 0 descriptor?? [ 450.326579][ T8059] EXT4-fs (loop3): Ignoring removed oldalloc option [ 450.394132][ T8059] EXT4-fs (loop3): orphan cleanup on readonly fs [ 450.401595][ T8059] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 450.412111][ T8059] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 450.421976][ T8059] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.2004: Failed to acquire dquot type 1 [ 450.434953][ T8059] EXT4-fs (loop3): 1 truncate cleaned up [ 450.441110][ T8059] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 450.492473][ T8065] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 450.834141][ T8069] EXT4-fs (loop1): 1 orphan inode deleted [ 450.840081][ T8069] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 450.849796][ T8069] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.051364][ T8080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2010'. [ 451.340760][ T5114] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 451.360763][ T2147] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 451.502804][ T8085] EXT4-fs (loop4): Ignoring removed orlov option [ 451.509692][ T8085] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 451.520005][ T8087] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.2012: dx entry: limit 1024 != root limit 124 [ 451.532371][ T8085] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,sysvgroups,,errors=continue [ 451.534800][ T8087] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2012: Corrupt directory, running e2fsck is recommended [ 451.574117][ T8087] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 451.583909][ T8087] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.2012: corrupted in-inode xattr [ 451.597519][ T8087] EXT4-fs (loop1): Remounting filesystem read-only [ 451.604409][ T8087] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.2012: couldn't read orphan inode 15 (err -117) [ 451.617778][ T8087] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 451.677663][ T8087] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.2012: dx entry: limit 1024 != root limit 124 [ 451.690604][ T8087] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2012: Corrupt directory, running e2fsck is recommended [ 451.707184][ T8087] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.2012: dx entry: limit 1024 != root limit 124 [ 451.720006][ T8087] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2012: Corrupt directory, running e2fsck is recommended [ 451.734160][ T5114] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.736413][ T8087] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.2012: dx entry: limit 1024 != root limit 124 [ 451.742780][ T5114] usb 3-1: config 0 has no interface number 0 [ 451.756365][ T8087] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2012: Corrupt directory, running e2fsck is recommended [ 451.763363][ T2147] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.794993][ T5114] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.828589][ T2147] usb 4-1: config 0 has no interface number 0 [ 451.836369][ T5114] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.847918][ T2147] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.860764][ T5114] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 451.871296][ T2147] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.882709][ T5114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.891642][ T923] usbhid 1-1:0.0: can't add hid device: -71 [ 451.898053][ T2147] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 451.907944][ T923] usbhid: probe of 1-1:0.0 failed with error -71 [ 451.916207][ T5114] usb 3-1: config 0 descriptor?? [ 451.925687][ T923] usb 1-1: USB disconnect, device number 21 [ 451.933245][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.945010][ T2147] usb 4-1: config 0 descriptor?? [ 452.093693][ T8098] EXT4-fs (loop1): 1 orphan inode deleted [ 452.100565][ T8098] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 452.110493][ T8098] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.529991][ T923] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 452.549469][ T5114] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0058/input/input91 [ 452.566447][ T2147] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0059/input/input92 [ 452.642056][ T5114] holtek_kbd 0003:04D9:A055.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 452.659431][ T5114] usb 3-1: USB disconnect, device number 28 [ 452.714097][ T8108] fido_id[8108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 452.742592][ T2147] holtek_kbd 0003:04D9:A055.0059: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 452.794054][ T2147] usb 4-1: USB disconnect, device number 21 [ 452.919821][ T923] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.939613][ T923] usb 1-1: config 0 has no interface number 0 [ 452.946642][ T923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.968772][ T923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.989783][ T923] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 452.991066][ T8111] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.2017: dx entry: limit 1024 != root limit 124 [ 453.009726][ T923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.015119][ T8111] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2017: Corrupt directory, running e2fsck is recommended [ 453.026749][ T923] usb 1-1: config 0 descriptor?? [ 453.038207][ T8111] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 453.056274][ T8111] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.2017: corrupted in-inode xattr [ 453.127568][ T8111] EXT4-fs (loop1): Remounting filesystem read-only [ 453.135787][ T8111] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.2017: couldn't read orphan inode 15 (err -117) [ 453.148833][ T8111] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 453.251943][ T8111] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.2017: dx entry: limit 1024 != root limit 124 [ 453.286213][ T8111] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2017: Corrupt directory, running e2fsck is recommended [ 453.326226][ T8111] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.2017: dx entry: limit 1024 != root limit 124 [ 453.353264][ T8111] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2017: Corrupt directory, running e2fsck is recommended [ 453.577702][ T8125] EXT4-fs (loop2): Ignoring removed oldalloc option [ 453.684559][ T8125] EXT4-fs (loop2): orphan cleanup on readonly fs [ 453.693902][ T8125] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 453.706923][ T8125] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 453.717871][ T8125] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.2018: Failed to acquire dquot type 1 [ 453.733557][ T8125] EXT4-fs (loop2): 1 truncate cleaned up [ 453.823308][ T923] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.005A/input/input93 [ 453.923857][ T923] holtek_kbd 0003:04D9:A055.005A: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 453.979479][ T8125] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 454.200178][ T8129] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 454.614843][ T923] usb 1-1: USB disconnect, device number 22 [ 454.633336][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2021'. [ 454.692944][ T8135] fido_id[8135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 454.816358][ T8138] syz.4.2025[8138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.816400][ T8138] syz.4.2025[8138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.829037][ T8138] syz.4.2025[8138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.840537][ T8138] syz.4.2025[8138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.853172][ T8138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8138 comm=syz.4.2025 [ 454.953349][ T8138] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 454.953349][ T8138] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 454.953349][ T8138] [ 454.974951][ T8138] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 454.974951][ T8138] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 454.974951][ T8138] [ 454.993474][ T8138] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.218303][ T8138] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 455.337699][ T8138] EXT4-fs (loop4): 1 truncate cleaned up [ 455.344698][ T8138] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue [ 455.369036][ T1188] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 455.382114][ T1188] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 1 [ 455.386341][ T8152] tipc: Enabling of bearer rejected, already enabled [ 455.402436][ T8153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 455.413092][ T24] audit: type=1400 audit(1748019532.488:769): avc: denied { mounton } for pid=8137 comm="syz.4.2025" path="/427/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.437731][ T8138] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 455.457720][ T8153] EXT4-fs (loop1): 1 truncate cleaned up [ 455.464137][ T8153] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,stripe=0x0000000000000009,,errors=continue [ 455.566595][ T24] audit: type=1400 audit(1748019532.639:770): avc: denied { bind } for pid=8150 comm="syz.1.2027" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.591013][ T24] audit: type=1400 audit(1748019532.639:771): avc: denied { node_bind } for pid=8150 comm="syz.1.2027" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 455.645826][ T24] audit: type=1400 audit(1748019532.639:772): avc: denied { connect } for pid=8150 comm="syz.1.2027" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.999661][ T8165] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2030'. [ 456.117311][ T275] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 456.161112][ T8169] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.2031: dx entry: limit 1024 != root limit 124 [ 456.175955][ T24] audit: type=1400 audit(1748019533.079:773): avc: denied { write } for pid=8163 comm="syz.0.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.199060][ T8169] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.2031: Corrupt directory, running e2fsck is recommended [ 456.214710][ T275] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 456.242258][ T24] audit: type=1400 audit(1748019533.079:774): avc: denied { nlmsg_write } for pid=8163 comm="syz.0.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.274758][ T24] audit: type=1400 audit(1748019533.249:775): avc: denied { append } for pid=8150 comm="syz.1.2027" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 456.372527][ T275] ------------[ cut here ]------------ [ 456.431995][ T8169] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 456.441971][ T275] kernel BUG at fs/namei.c:2786! [ 456.447622][ T275] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 456.454175][ T275] CPU: 1 PID: 275 Comm: syz-executor Not tainted 5.10.237-syzkaller #0 [ 456.462568][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 456.472941][ T275] RIP: 0010:may_delete+0x7b1/0x7c0 [ 456.478093][ T275] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 20 25 f5 ff e9 d0 fd ff ff e8 76 35 bb ff 0f 0b e8 6f 35 bb ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 456.487147][ T8169] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.2031: corrupted in-inode xattr [ 456.498229][ T275] RSP: 0018:ffffc90000ba7b38 EFLAGS: 00010293 [ 456.498246][ T275] RAX: ffffffff81a85d91 RBX: ffff8881364a2550 RCX: ffff888123c18000 [ 456.498253][ T275] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 456.498260][ T275] RBP: ffffc90000ba7bb8 R08: 0000000000000004 R09: 0000000000000003 [ 456.498267][ T275] R10: fffff52000174f4c R11: 1ffff92000174f4c R12: ffff88811a24ce60 [ 456.498274][ T275] R13: 1ffff11026c944aa R14: ffff8881364a2568 R15: ffff88810ff57360 [ 456.498284][ T275] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 456.498292][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.498300][ T275] CR2: 00007ffc9f874e80 CR3: 000000010db32000 CR4: 00000000003506a0 [ 456.498312][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.498319][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.498323][ T275] Call Trace: [ 456.498349][ T275] ? __kasan_check_write+0x14/0x20 [ 456.498361][ T275] vfs_rmdir+0x2c/0x3e0 [ 456.498385][ T275] incfs_kill_sb+0xfe/0x210 [ 456.498398][ T275] deactivate_locked_super+0xa0/0x100 [ 456.498408][ T275] deactivate_super+0xaf/0xe0 [ 456.498418][ T275] cleanup_mnt+0x446/0x500 [ 456.498429][ T275] __cleanup_mnt+0x19/0x20 [ 456.498439][ T275] task_work_run+0x127/0x190 [ 456.498451][ T275] do_exit+0xa27/0x2470 [ 456.498476][ T275] ? put_task_struct+0x90/0x90 [ 456.511209][ T8169] EXT4-fs (loop0): Remounting filesystem read-only [ 456.516976][ T275] ? __fdget_pos+0x1f7/0x380 [ 456.525538][ T8169] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.2031: couldn't read orphan inode 15 (err -117) [ 456.534519][ T275] ? ksys_write+0x1da/0x240 [ 456.534531][ T275] ? __ia32_sys_read+0x90/0x90 [ 456.534544][ T275] do_group_exit+0x141/0x310 [ 456.534556][ T275] __x64_sys_exit_group+0x3f/0x40 [ 456.534567][ T275] do_syscall_64+0x31/0x40 [ 456.534580][ T275] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 456.534591][ T275] RIP: 0033:0x7fba9807b969 [ 456.534597][ T275] Code: Unable to access opcode bytes at RIP 0x7fba9807b93f. [ 456.534605][ T275] RSP: 002b:00007ffc458363f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 456.534620][ T275] RAX: ffffffffffffffda RBX: 00007fba980fd8c2 RCX: 00007fba9807b969 [ 456.534626][ T275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 456.534634][ T275] RBP: 0000000000000075 R08: 00007ffc45834195 R09: 00007ffc458376b0 [ 456.534640][ T275] R10: 000000000000000b R11: 0000000000000246 R12: 00007ffc458376b0 [ 456.534647][ T275] R13: 00007fba980fd89d R14: 00000000000700f1 R15: 00007ffc45838780 [ 456.534653][ T275] Modules linked in: [ 456.594180][ T275] ---[ end trace 1b7037188f85ea34 ]--- [ 456.626808][ T8169] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 456.631924][ T275] RIP: 0010:may_delete+0x7b1/0x7c0 [ 456.650019][ T8169] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.2031: dx entry: limit 1024 != root limit 124 [ 456.662052][ T275] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 20 25 f5 ff e9 d0 fd ff ff e8 76 35 bb ff 0f 0b e8 6f 35 bb ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 456.666779][ T8169] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.2031: Corrupt directory, running e2fsck is recommended [ 456.680117][ T275] RSP: 0018:ffffc90000ba7b38 EFLAGS: 00010293 [ 456.713236][ T8169] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.2031: dx entry: limit 1024 != root limit 124 [ 456.716865][ T275] [ 456.732070][ T8169] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.2031: Corrupt directory, running e2fsck is recommended [ 456.740448][ T275] RAX: ffffffff81a85d91 RBX: ffff8881364a2550 RCX: ffff888123c18000 [ 456.740457][ T275] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 456.740464][ T275] RBP: ffffc90000ba7bb8 R08: 0000000000000004 R09: 0000000000000003 [ 456.740471][ T275] R10: fffff52000174f4c R11: 1ffff92000174f4c R12: ffff88811a24ce60 [ 456.740479][ T275] R13: 1ffff11026c944aa R14: ffff8881364a2568 R15: ffff88810ff57360 [ 456.740490][ T275] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 456.740497][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.740505][ T275] CR2: 00007ffc4724df88 CR3: 0000000123ff1000 CR4: 00000000003506a0 [ 456.740518][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.740525][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.740532][ T275] Kernel panic - not syncing: Fatal exception [ 456.740822][ T275] Kernel Offset: disabled [ 456.999057][ T275] Rebooting in 86400 seconds..