last executing test programs: 24.792049442s ago: executing program 4 (id=215): symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000ffffffffffffffd08500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 24.671106817s ago: executing program 4 (id=216): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x17ff, 0x0, 0x2}, 0x18, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file5\x00', 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'caif0\x00', {0x4}, 0x2}) r4 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x1d, 0x6, @vifc_lcl_addr=@rand_addr=0x64010100, @private=0xa010102}, 0x10) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', r7, 0x20, 0x20, 0x6, 0x5, {{0x2f, 0x4, 0x0, 0x8, 0xbc, 0x64, 0x0, 0x4, 0x29, 0x0, @local, @private=0xa010101, {[@cipso={0x86, 0x3f, 0x1, [{0x2, 0x7, "8a8f75820d"}, {0x7, 0x6, "e50338a4"}, {0x5, 0x8, "809f1f5f36da"}, {0x6, 0x6, "a739fe03"}, {0x2, 0xd, "953e76ed57de24e2577479"}, {0x5, 0x11, "974cf038f1fcc7ec049319a2a31907"}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x37, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x80, 0x0, 0x8, [0x2, 0x8]}, @cipso={0x86, 0x4d, 0x2, [{0x0, 0xd, "0735ac924719c76e088a0a"}, {0x2, 0x3, 'j'}, {0x0, 0xf, "ab2e78bd7ff4d683aa6eb182f8"}, {0x1, 0x8, "125fa5c9eb4d"}, {0x7, 0xd, "f608d54ca139f69ed09453"}, {0x7, 0x5, "3a551b"}, {0x7, 0x9, "ab016a8354f826"}, {0x2, 0x5, "1a5ee3"}]}, @end]}}}}}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000005500080026bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00030300ac14140c0000000000000000000000000800000020000100", @ANYRES32=r7, @ANYBLOB="00020300fc0000000000000000000000000000010000000020000100", @ANYRES32=r7, @ANYBLOB="010201007f0000010000200000000000000000000000000020000100", @ANYRES32=r7, @ANYBLOB="01020400ac1414aa0000000000000000000000008edd0000"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@remote, r8}, 0x14) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f0000000040)={0x804aee86dff2febf, 0x40, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x48d, 0xce50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x77, 0x6, 0x1, {0x22, 0xbae}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xd1}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x5b, 0x7, 0x1, 0x20, 0x2}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x3, [{0x9e, &(0x7f0000000480)=@string={0x9e, 0x3, "3d3146852e25d97e530becbc938f3bd3d80e0eaab53deff900939a37b86b5da3c4b54bc8ab4ef2c78067bab814db4f2cef459a8e2fccd4af1a4ccce9c614c2160c84eee47cdca39d073a6ce23a793fca693c3a39831bec6e84721a181f455372a33e37a0a554893e433ad41e9bab4c7dcff5a5ef5232dd1931b630589c7c0f394063e794b46cd8c374de1559f33facaf5ee5bea80a66b0aff071e83a"}}, {0xfc, &(0x7f0000000540)=@string={0xfc, 0x3, "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"}}, {0x4d, &(0x7f0000000640)=@string={0x4d, 0x3, "4b34b59fd09a91499c3364f4bb74afc66e9e660b376319ac74702196504c7c537987ed932df8aad13f00867ec123cb7602a126c895a90026142aa5f84fd0e3fe8c249df7b2d80d0d9a6920"}}]}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x200, 0xff00, 0x8000, 0xa1a, 0x1}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000100)={0x6, 'dvmrp0\x00', {}, 0x7c2a}) 21.651029578s ago: executing program 4 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x13}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x1000) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000048050000000a000000060001003a"], 0x1c}}, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000040)={'a', ' *:* ', 'rm\x00'}, 0x9) 21.644279799s ago: executing program 4 (id=248): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000700)=ANY=[], 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_null}, {@index_on}]}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x24941a, 0x0, 0x0, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getpid() syz_open_dev$tty20(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket(0x10, 0x80002, 0x0) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x70bd27, 0xfffffffd, [@sadb_address={0x3, 0x6, 0x0, 0x120, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20000002}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}}, @sadb_x_sa2={0x2, 0x13, 0xb7, 0x0, 0x0, 0x70bd25, 0x23e}]}, 0x60}, 0x1, 0x7}, 0x0) io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x2, 0x2b8}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) 20.497353745s ago: executing program 4 (id=254): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x522, &(0x7f0000000c40)="$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") 19.49656319s ago: executing program 4 (id=261): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r0, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) syz_read_part_table(0x4011, &(0x7f0000004040)="$eJzszC0KQkEYBdA7Lxi0mN2ExawYXYrFJlgsbsXkMgSLC3EdCjJpwDSY3jnp8v3c2eu2TVKWx8P+lMaQ5P1NmyEpSVZ1U9rTEXom63uS6X/q5z/m50sNk5723XXx6PkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEMAAAAgDB/6zzaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBDAQAA//+lNQn4") 19.454685259s ago: executing program 32 (id=261): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r0, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) syz_read_part_table(0x4011, &(0x7f0000004040)="$eJzszC0KQkEYBdA7Lxi0mN2ExawYXYrFJlgsbsXkMgSLC3EdCjJpwDSY3jnp8v3c2eu2TVKWx8P+lMaQ5P1NmyEpSVZ1U9rTEXom63uS6X/q5z/m50sNk5723XXx6PkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEMAAAAgDB/6zzaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBDAQAA//+lNQn4") 3.603795074s ago: executing program 5 (id=492): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}}}, &(0x7f00000008c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@journal_async_commit}, {@resgid}, {@minixdf}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@resuid={'resuid', 0x3d, r0}}, {@noquota}]}, 0x3, 0x469, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file7/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000110001002bbd700010dbdf257f000001000000000000000000000000000004d402006c003a58804973169c3e3a5577c4f041e38a157199464733be70b744b602f2913e85b9c4c522957c16"], 0x28}}, 0x0) chdir(&(0x7f0000000400)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040100000000000010000000000000002000010000000000"], 0x24, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000280)={&(0x7f0000000300)=0xc, 0xfffffffd, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000013c0)}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r8, r7, 0x4, r7}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0, 0x4}, {0xa, 0x0, 0x7, @mcast1}, r9, 0x800}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r9}}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) 3.528618594s ago: executing program 2 (id=493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91101d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2b76, 0x4) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x2002, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x26b8}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fffffffffffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 3.277344957s ago: executing program 2 (id=498): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x84) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r3, 0x8938, &(0x7f00000001c0)={'ip6tnl0\x00', @ifru_ivalue=0x2}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000240)=0x8, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x8, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000400)=@fd={0x4, 0x3, 0x4, 0x2, 0x800, {0x77359400}, {0x5, 0x2, 0x9, 0x4, 0x2, 0x80, "d46f2c71"}, 0x2, 0x4, {0xffffffffffffffff}, 0x4, 0x0, r7}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xe}]}, 0x24}}, 0x40080) r10 = syz_open_dev$loop(&(0x7f00000005c0), 0x7ff, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000640)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r11, &(0x7f00000006c0)={0x9, 0x108, 0xfa00, {r12, 0xb, "d53a2d", "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"}}, 0x110) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x80, 0x10, 0xfff, 0x8000, {{0x10, 0x4, 0x1, 0x26, 0x40, 0x67, 0x0, 0x40, 0x7aff1c8b2fe998fb, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@cipso={0x86, 0x2b, 0x3, [{0x2, 0x8, "2bc6d1cc2bf5"}, {0x7, 0xb, "0391392a9255e08f26"}, {0x5, 0x8, "72c1fc1b3203"}, {0x1, 0x6, "02778471"}, {0x3, 0x4, "2ab1"}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001540)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f0000001000)={0x500, r13, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8, 0x1, r16}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0xf8, 0x6, 0x5}, {0x6, 0x1, 0x1, 0x565}, {0x4, 0x2, 0x8, 0xfffffff4}, {0xab7d, 0xa2, 0x3, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x34d1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x500}}, 0x4) 2.139449519s ago: executing program 2 (id=500): pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x4a, &(0x7f0000000640), 0x4) pipe2$watch_queue(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x56}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) splice(r0, 0x0, r5, &(0x7f00000002c0), 0x2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c636f6465706167653d3836352c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c696f636861727365743d69736f383835392d372c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c00ee5d348576f7ab56a085bab7988357ac4cdf9af0a17d2d0e7c5db618573e465688abe00298ca73e21d74eec9f8e84d60ea6c1bd688be564098cb27bdb71c1e03b6"], 0x1, 0x294, &(0x7f0000000500)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 1.249162998s ago: executing program 1 (id=504): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_udp(0x2, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) 1.246610557s ago: executing program 0 (id=505): symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000d000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 1.219002745s ago: executing program 2 (id=506): r0 = socket$inet_udp(0x2, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@nobarrier}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x1000000000000ca, 0xfffffffffffffffc, 0x0, 0x922, 0x4, 0xfffffffffffffffc, 0x5166}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x3308840, &(0x7f0000000200)={[], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x12e02, 0xe8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000004240), 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001200), 0x10) close(r2) socketpair(0x3, 0x3, 0x7ff, &(0x7f0000000100)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x110, r1, 0xa700000) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000023591be4bf9060101000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400080000000c000300686173683a6970000c000300686173683a697000febfdf86bebe55422fc95c724b029f179c1ef6395872b3a87e4c64cabed00dddb019129c1594fed2f8e900e32bebd96000abcb8b1f38e7adc44cb9d789dbe670"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x80) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x0, [0xffffffbf, 0xb, 0x80000001]}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x12040, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000140)) ioprio_set$pid(0x2, 0x0, 0x0) 1.062149903s ago: executing program 0 (id=508): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) (async) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="000000b814", 0x5}, {&(0x7f0000000340)="2cc44c5c", 0x4}], 0x4}, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xe, 0x6, 0x2) (async) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xe, 0x6, 0x2) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4006, &(0x7f0000000c00)=0x7, 0x6, 0x2) (async) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4006, &(0x7f0000000c00)=0x7, 0x6, 0x2) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 1.024993287s ago: executing program 3 (id=509): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) pread64(r1, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x1}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440881, 0x150) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xf, 0x4) 838.110209ms ago: executing program 2 (id=510): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES8=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0], 0x50) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x75, &(0x7f0000000280)) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040d1403c80080000000800116000003000000000001007d64b35d34b1d85b15521c360e000000167cff59251242d106e6db9544b103ef810428cbc662cb3589f9a8c80000109bbd09ee9b67635b5dd8f09e219678628c309a70484380775f1dfd66004a444397da616ccc5c192f3d48cc8777"], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000100)={0x1}, 0x0) landlock_restrict_self(r2, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x20004851) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2010, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x801, 0x8000) 772.870552ms ago: executing program 3 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000c000600000000000000150eaea31a02937bb46e000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x200}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x659f, 0x4) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000200000020"], 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) recvmmsg(r2, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20841, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r0, 0x7, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e9a}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xe}]}, &(0x7f0000000700)='syzkaller\x00', 0xf, 0x1c, &(0x7f0000000740)=""/28, 0x41100, 0x1a, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f0000000780)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000007c0)=[r0, r7, r8, r7], &(0x7f0000000800)=[{0x3, 0x2, 0x7, 0x2}], 0x10, 0x5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@fallback=r6, r10, 0x7, 0x6, r11, @void, @value=r12, @void, @void, r9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r0, r1, 0x28, 0x38, r7, @void, @void, @void, @value=r13, r9}, 0x20) 772.314715ms ago: executing program 0 (id=512): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0x0) (async) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 64) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x7f, @mcast2, 0xa}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) (async, rerun: 64) sendmsg$inet_sctp(r1, &(0x7f0000001b40)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x1, @local, 0x6}, 0x1c, &(0x7f0000001a80)=[{&(0x7f00000000c0)="4e1ead987c3e3f5b9988dd7a6e0c82ecca5db845b5d92eba07703bf4c5819e93e9ee8b9d7506b6ee429be14e98814d9cbda000a36d7be6836f9d637cadb9a31eb3a048f3d49e49b086470b56c42fefb1efe83103a6748f11a2afb50261ecd1c9ea790a3084d702feb9cdae87bb54817de9d5d26afc01f70a51ac52c01303c66551a2d2bf237e6a3eb2dcd737324c29e04cbf6d", 0x93}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="0a9a552e7afe51b912011c0694bc436c8d41966294b3af4df2d362c5c64d382d38d5cf47945ab9c290e477bf6df5d5", 0x2f}, {&(0x7f0000001780)="78ebfdac67343ca052e30371d4879946fe2af3c753c9a82e6080b4fa88628f698382089bc3ab7d098c84631880e5c55197eacfaf92bdd2b722ddeeafc22fe2f01e693bd6b253fe63bd390050bd528619f47f3b8a49c2e655b3ed9aa06f682a95c1d34a336d94ad3baec3ee6a6434d06e22deb7042048eaf73792140b50d4919f511b3a4c5c184a49b0a9b6acef4e61181067794b1a7fb377f3d1705c6466e8f4ce24555f6e61d1009574b9a88a6dace9616907a4654f834955cc08acec0c4a2d26a591ad70f9e392a1a653331cf4db12ad8118303b766855e67d611760d880cb96ee5339f81eee21da058715903ade4cc3bddda644ff0c1a8bf9862fadb31f", 0xff}, {&(0x7f0000001880)="0b3ecd7ca3c2b159d5de2206f48b3d0ceff08aab07", 0x15}, {&(0x7f00000018c0)="a9c1159a022d24c12fad91ed665e1954144dbbe95299f046b1ec8529af3d16ae48374221369dfd56f859e83cc382b71882b2334989aa890813dbcad1d56d8791a66b92dea92afb3f039d21cd83f6de6e2662f618f263d7a4a711c67f8ba583ff4bd08919a5731502ae527a3a7938ccf2fecd6d92569642050c67881bfa2c676f454bede64fd477908094e7c520eaded2af265a0578ab261653c7c6bcf170a3", 0x9f}, {&(0x7f0000001980)="4f0ee3fd9315716739045b2ff2d05bd34305ef6f3055013bfa934db1c486d58962123843b8470640ff26ea931ed958946285a5cbf711ec3a1380bd77645df546443e6cc4a911b7539ed9008acf1313ce98c45ae6839ef68b3abb603815ed791a44de368a416daf9660fe7baebb1d3bfbf11f35575b9fc08166a4ee8365ad1158b9482be9fc85f9603a78fc1203ddfb80647bf706e591b0b11b7820", 0x9b}, {&(0x7f0000001a40)="0d57327f49019587b47a10067128518a037bf32c25a855ee065766c9fbe3779268aec486", 0x24}], 0x8, &(0x7f0000001b00)=[@init={0x18, 0x84, 0x0, {0x4, 0x3, 0x2, 0x1000}}], 0x18, 0x8000}, 0x40) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 685.030313ms ago: executing program 5 (id=513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6b4}, 0x3f) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001600010a000000000000000000000000040000000c"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7fffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) 635.922335ms ago: executing program 3 (id=514): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0xb66c3409bf854d4a) 557.161561ms ago: executing program 5 (id=515): prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e00080026bd7000fcdbdf250000", @ANYBLOB="04010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x70, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x70}}, 0x20000000) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xffffffffffffffff, &(0x7f0000010180)=0x60) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2804, 0x10100}, 0x0, 0x0, &(0x7f0000000000)) (async) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f0", 0xf9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) process_mrelease(r10, 0x0) r12 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x7dee}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), 0xffffffffffffffff) (async) r15 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r15, 0x40146f2c, &(0x7f00000000c0)={0x9, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r15, 0x40026f33, &(0x7f0000000100)=0xd5a2) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r15, 0x40026f34, &(0x7f0000000040)=0xd5a2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x30, r14, 0x101, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x17, {0x13, 0x2, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r14, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS={{0x13}, 0x81}}}, 0x7) 556.601194ms ago: executing program 0 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000440)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xbd}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x898}]}]}, 0x40}}, 0x0) 544.636665ms ago: executing program 3 (id=517): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, 0x0, 0x0, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x1ac, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x134, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x42}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x1, 0xffffffffffffffff, 0x3, 0x1, 0x6}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000104000000000000020000005c0800000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r1, 0xc17a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2080}, 0x4000080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000280)={r6}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r6, 0x9}, 0x8) 485.125884ms ago: executing program 2 (id=518): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000040000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=ANY=[], 0x0, 0x400) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000380)="05051600d3fc140000004788031c09103c285e99cd38b13170aac452f91a7433541c162c8a2b", 0x26, 0x4, &(0x7f0000000140)={0x11, 0x11, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000)=0xfffffffb, 0x4) 424.81951ms ago: executing program 0 (id=519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000180)='./file1\x00', 0x64000106) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="28000100030000000000000000000000f4ffffffffffffff776f726b64697200"], 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000004c0)={0x20, 0x4b0, 0x690, 0x320, 0x10001, 0x1, 0x0, 0x2, {0x0, 0x8001, 0x1}, {0x100, 0x1}, {0x771fc400, 0xfff, 0x1}, {0x9, 0x3, 0x1}, 0x0, 0x2, 0x2, 0xa7a2, 0x0, 0x2, 0x5, 0xa57, 0x6, 0x3bc, 0xe4, 0x1, 0x2, 0x200, 0x0, 0x7}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000002c0)={0x2}) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="680100000d0a010800000000000000000a0000010900010073797a30000000004401038040010080180101803c00028008000340000000040800034000000004080003400000000408000340000000010900020073797a30000000000900020073797a310000000086000100c7e20a7385e7d0109c9504de031594a19cdffae8778cfb072be7fb56accf88f8da60a0031f72efa108984811b05fb575e2f336013867d6e5d83e1776e316081742d2af31154d6987f3594c15e3d43397cb608d958d1b72e86629cb5231437e49872dde55c9a83d3cda70b361c37d8f9db80fc49325ac01ea7d99323949653e90cf190000500002800900020073797a30000000000900020073797a30000000000900020073797a32000000000900020073797a300000000008000340000000030900020073797a3100000000080003400000000324000640a0903c716e26c2bc10c295ca70b79dcfeafc8b6e0928e5ec49709db6a086ebff04000380"], 0x168}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x100) setresuid(0x0, 0xee01, 0x0) r6 = geteuid() msgctl$IPC_SET(r5, 0x1, &(0x7f0000002880)={{0x0, 0x0, 0xee00, r6, 0xffffffffffffffff, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x8000, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x14010, &(0x7f00000001c0)=ANY=[@ANYBLOB='usrquota=p,\x00'/28]) 344.680712ms ago: executing program 5 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) dup(r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000240)={[], [{@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '&\'.'}}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r2 = fanotify_init(0x1, 0x20000) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fanotify_mark(r2, 0x1, 0x8100011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071000000000000000000000020000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcb, &(0x7f0000000980)=""/203, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x100, 0x0, 0x180000}, 0x10}, 0x94) close(0x4) read$FUSE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000800000080000000000000067656e65766500000c000280060005004e220000883ab5b6df81028a0a6e7378be5b5de643bad0187a6296a2eb251569444c6c339309e27631580fb4135262047a9d6e829bb0d0d688a7dc68630511838934893669b90f3da9b38b65c1da52bf7bfb5381dbc870e911ceac9f665db705d93644c45e3b368f"], 0x3c}}, 0x0) r8 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r8, 0xffffffffffffffff, 0x100020) waitid(0x1, r8, &(0x7f0000000000), 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000004db34f72b6b9f30d57f7aa90d980b7e1c388297b0829fa121a9475c502eb53c0d6dd64de01", @ANYRES16=r5, @ANYBLOB="3f9d2bbd7000fedbdf251700000008000300", @ANYRES32=r11, @ANYBLOB="3c00308014000400d713459a7a000000000000000000000005000200fb0000001c000180050002000000000008000100020000000800040000040000"], 0x58}}, 0x0) r12 = socket$packet(0x11, 0x6, 0x300) setsockopt$packet_int(r12, 0x107, 0x18, 0x0, 0x0) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) 234.926716ms ago: executing program 3 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x32314752, 0x0, 0x2, [{}, {0x0, 0x800}, {}, {0x80000000}, {0xfffffffc}, {0x9}]}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x32314752, 0x0, 0x2, [{}, {0x0, 0x800}, {}, {0x80000000}, {0xfffffffc}, {0x9}]}}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x6, 0x1, 0x80, "9070f301a58da4b18427dc3282c761eb4dd920ad05eb6b1cba9282f7bf887268", 0x33524742}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r0, 0x400454dc, &(0x7f0000001700)) 220.783301ms ago: executing program 1 (id=522): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x5, 0x0, 0x0, 0x8000000000000000, 0x0, 0x25, 0x7, 0x40}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x980902, 0x5}) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008040) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x183000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3, 0x6}}, './file0\x00'}) 141.091402ms ago: executing program 5 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$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") (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x2, 0x0, &(0x7f0000000340)) lsetxattr$security_smack_transmute(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x4, 0x0) (async) recvmmsg(r1, &(0x7f0000005b40)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000002080), 0x0, &(0x7f0000002100)=""/51, 0x33}, 0xef}, {{&(0x7f0000002140)=@can, 0x80, &(0x7f0000003400)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/197, 0xc5}, {&(0x7f00000032c0)=""/81, 0x51}, {&(0x7f0000003340)=""/173, 0xad}], 0x4, &(0x7f0000003440)=""/254, 0xfe}, 0xe387}, {{&(0x7f0000003540)=@ethernet, 0x80, &(0x7f0000003680)=[{&(0x7f00000035c0)=""/135, 0x87}], 0x1}, 0x5}, {{&(0x7f00000036c0)=@rc, 0x80, &(0x7f0000005a00)=[{&(0x7f0000003740)=""/88, 0x58}, {&(0x7f00000037c0)=""/90, 0x5a}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/246, 0xf6}, {&(0x7f0000005940)=""/31, 0x1f}, {&(0x7f0000005980)=""/79, 0x4f}], 0x7, &(0x7f0000005a80)=""/157, 0x9d}, 0x1}], 0x4, 0x2, 0x0) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0x1, 0x4) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@nodelalloc}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}]}, 0x1, 0x4ef, &(0x7f0000000940)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r7 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{}], 0x1, 0x2000, 0x0, 0x3) (async) fallocate(r6, 0x20, 0x4000, 0x3000000) 132.587934ms ago: executing program 1 (id=524): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}]]}, 0x34}}, 0x0) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="cc70", 0x2}], 0x1}, 0x8001) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) (rerun: 64) 130.317026ms ago: executing program 3 (id=525): r0 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) brk(0x20ff3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000100)="e610d126ea49451055fc6b7fc4e7a48d36b4a6ed0be79ab2a27bb6945e635733d03a14824fc30f32faa8d213d3f9484ef32a49872b0915c6193d0acc124763c2226a6e2be014701029d8a27b1ce8907d1548d87f41589a7ae5131dc28586b582429cb9845b36973ce14c4f49720493effb585afd006f39db5248cb56551c3a1117081f30cc7fb0f558466751b1d375533ba7e95d6042815ae69c4c28f5744d035092bb51700a02f74578f8faaff7495dcd048bbe856b332b") socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a0000c4050001000700000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x44}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240fe"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8000, 0x20, 0xfffffeff, 0xf510, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x64, 0x0, 0x2f, 0x4, 0x0, @loopback, @multicast2}}}}) 101.375747ms ago: executing program 1 (id=526): r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0xc0801, 0x60) fcntl$notify(r1, 0x402, 0x1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r2}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x40102, 0x299) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000400)) keyctl$invalidate(0x15, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.822946ms ago: executing program 0 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4f9, &(0x7f00000008c0)="$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") 5.392333ms ago: executing program 1 (id=528): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) close(0x4) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c6, &(0x7f00000001c0)="$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") 618.472µs ago: executing program 1 (id=529): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 0s ago: executing program 5 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2f) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x13) getsockopt$MRT6(r1, 0x29, 0x1, 0x0, &(0x7f0000002040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f00001800128008000100677265000c0002800899d37e9e00000700ac1414aa"], 0x44}}, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x4, 0x11, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2e0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) symlinkat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, &(0x7f00000001c0)='./file1\x00') ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000200)={0x2, 0x7, 0x8, 0x10800, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000000c0)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 28.664278][ T4701] cgroup: Unknown subsys name 'net' [ 28.795097][ T4701] cgroup: Unknown subsys name 'cpuset' [ 28.797103][ T4701] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.946324][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.740017][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.740415][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.750725][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.751039][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.751183][ T4726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.751355][ T4726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.751579][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.751979][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.752237][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.752485][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.752754][ T4726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.754894][ T4726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.755056][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.755300][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.766054][ T4729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.767474][ T4729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.768796][ T4729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.770488][ T4727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.775786][ T4729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.777236][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.778750][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.780375][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.781997][ T4727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.783400][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.785439][ T4729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.143807][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.145410][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.145492][ T4715] bridge_slave_0: entered allmulticast mode [ 30.147097][ T4715] bridge_slave_0: entered promiscuous mode [ 30.148342][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.148365][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.148416][ T4715] bridge_slave_1: entered allmulticast mode [ 30.148864][ T4715] bridge_slave_1: entered promiscuous mode [ 30.152561][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.152585][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.152632][ T4721] bridge_slave_0: entered allmulticast mode [ 30.153423][ T4721] bridge_slave_0: entered promiscuous mode [ 30.166466][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.166539][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.166595][ T4721] bridge_slave_1: entered allmulticast mode [ 30.166999][ T4721] bridge_slave_1: entered promiscuous mode [ 30.177249][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.178541][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.179811][ T4714] bridge_slave_0: entered allmulticast mode [ 30.181285][ T4714] bridge_slave_0: entered promiscuous mode [ 30.190214][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.195333][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.195379][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.195446][ T4714] bridge_slave_1: entered allmulticast mode [ 30.195844][ T4714] bridge_slave_1: entered promiscuous mode [ 30.200946][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.202109][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.203513][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.229178][ T4721] team0: Port device team_slave_0 added [ 30.230303][ T4715] team0: Port device team_slave_0 added [ 30.231078][ T4715] team0: Port device team_slave_1 added [ 30.234822][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.236213][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.242286][ T4721] team0: Port device team_slave_1 added [ 30.251338][ T4714] team0: Port device team_slave_0 added [ 30.252930][ T4714] team0: Port device team_slave_1 added [ 30.257020][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.257088][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.257144][ T4713] bridge_slave_0: entered allmulticast mode [ 30.257575][ T4713] bridge_slave_0: entered promiscuous mode [ 30.263476][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.264679][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.269447][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.275074][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.276220][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.280980][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.282960][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.283040][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.283104][ T4713] bridge_slave_1: entered allmulticast mode [ 30.283582][ T4713] bridge_slave_1: entered promiscuous mode [ 30.290423][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.291622][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.292897][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.299062][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.300291][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.302977][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.303417][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.303425][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.303442][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.318771][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.326217][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.326239][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.326251][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.330417][ T4721] hsr_slave_0: entered promiscuous mode [ 30.330835][ T4721] hsr_slave_1: entered promiscuous mode [ 30.332627][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.343497][ T4715] hsr_slave_0: entered promiscuous mode [ 30.343786][ T4715] hsr_slave_1: entered promiscuous mode [ 30.343981][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.344022][ T4715] Cannot create hsr debugfs directory [ 30.367821][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.367912][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.367970][ T4724] bridge_slave_0: entered allmulticast mode [ 30.368382][ T4724] bridge_slave_0: entered promiscuous mode [ 30.369206][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.369227][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.369274][ T4724] bridge_slave_1: entered allmulticast mode [ 30.369740][ T4724] bridge_slave_1: entered promiscuous mode [ 30.372036][ T4714] hsr_slave_0: entered promiscuous mode [ 30.372378][ T4714] hsr_slave_1: entered promiscuous mode [ 30.372590][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.372600][ T4714] Cannot create hsr debugfs directory [ 30.379673][ T4713] team0: Port device team_slave_0 added [ 30.380813][ T4713] team0: Port device team_slave_1 added [ 30.406822][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.413638][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.413663][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.413675][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.414260][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.414266][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.414279][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.430742][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.439629][ T4724] team0: Port device team_slave_0 added [ 30.452916][ T4724] team0: Port device team_slave_1 added [ 30.473457][ T4713] hsr_slave_0: entered promiscuous mode [ 30.475043][ T4713] hsr_slave_1: entered promiscuous mode [ 30.476448][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.477549][ T4713] Cannot create hsr debugfs directory [ 30.487935][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.487963][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.487989][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.497106][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.498360][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.502765][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.546024][ T4724] hsr_slave_0: entered promiscuous mode [ 30.546344][ T4724] hsr_slave_1: entered promiscuous mode [ 30.546551][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 30.546561][ T4724] Cannot create hsr debugfs directory [ 30.567575][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.570688][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.586994][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.588060][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.588426][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.590353][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.598321][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.600348][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.614159][ T4715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.616506][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.623534][ T4715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.625486][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.625889][ T4715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.627487][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.633591][ T4715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.635631][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.646079][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.646135][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.646324][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.646359][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.663902][ T4714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.667241][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.668762][ T4714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.670763][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.672438][ T4714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.675003][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.679479][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.679528][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.679608][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.679641][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.680958][ T4714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.683495][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.698555][ T4713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.700896][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.701518][ T4713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.704339][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.712083][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.712138][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.712213][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.712244][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.716416][ T4713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.718190][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.718451][ T4713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.720514][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.745825][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.749449][ T4724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.751821][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.753866][ T4724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.756299][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.758134][ T4724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.760724][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.762236][ T4724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.764508][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.774347][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.774484][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.774554][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.774581][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.782329][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.783906][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.784343][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.785603][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.786844][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.789420][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.792312][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.794412][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.801971][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.804549][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.808901][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.814046][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.814093][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.814463][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.814481][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.828467][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.828508][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.828874][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.828894][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.842324][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.848568][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.858765][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.869127][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.869174][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.870455][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.870479][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.877362][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.904207][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.908937][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.913980][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.917913][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.931419][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.931469][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.931779][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.931797][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.932245][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.932266][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.934674][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.934698][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.946236][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.969188][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.079477][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.104828][ T4721] veth0_vlan: entered promiscuous mode [ 31.114951][ T4721] veth1_vlan: entered promiscuous mode [ 31.139404][ T4721] veth0_macvtap: entered promiscuous mode [ 31.141760][ T4721] veth1_macvtap: entered promiscuous mode [ 31.151293][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.158561][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.168098][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.170603][ T3397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.171017][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.171084][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.171137][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.180674][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.206365][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.226849][ T4715] veth0_vlan: entered promiscuous mode [ 31.229434][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.246075][ T4714] veth0_vlan: entered promiscuous mode [ 31.247719][ T4715] veth1_vlan: entered promiscuous mode [ 31.251461][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.251489][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.257319][ T4714] veth1_vlan: entered promiscuous mode [ 31.282638][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.282886][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.289151][ T4715] veth0_macvtap: entered promiscuous mode [ 31.291314][ T4715] veth1_macvtap: entered promiscuous mode [ 31.300282][ T4713] veth0_vlan: entered promiscuous mode [ 31.313103][ T4714] veth0_macvtap: entered promiscuous mode [ 31.315431][ T4714] veth1_macvtap: entered promiscuous mode [ 31.319305][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.320283][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.325067][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.325111][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.325141][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.325162][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.328531][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.329884][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.334781][ T4721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.336649][ T4713] veth1_vlan: entered promiscuous mode [ 31.339825][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.339878][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.339899][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.339916][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.371913][ T4893] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 31.383227][ T3869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.383255][ T3869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.408498][ T4724] veth0_vlan: entered promiscuous mode [ 31.435785][ T3397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.435810][ T3397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.442140][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.443980][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.447989][ T4713] veth0_macvtap: entered promiscuous mode [ 31.449162][ T4713] veth1_macvtap: entered promiscuous mode [ 31.456937][ T4724] veth1_vlan: entered promiscuous mode [ 31.461002][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.461027][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.469190][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.481512][ T4724] veth0_macvtap: entered promiscuous mode [ 31.485288][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.488537][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.488675][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.488740][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.488790][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.491436][ T4724] veth1_macvtap: entered promiscuous mode [ 31.500366][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.505539][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.512356][ T3397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512548][ T3397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512614][ T3397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.513398][ T3397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.548177][ T4898] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 31.551037][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 31.612252][ T4904] loop0: detected capacity change from 0 to 256 [ 31.618147][ T4904] ======================================================= [ 31.618147][ T4904] WARNING: The mand mount option has been deprecated and [ 31.618147][ T4904] and is ignored by this kernel. Remove the mand [ 31.618147][ T4904] option from the mount to silence this warning. [ 31.618147][ T4904] ======================================================= [ 31.618258][ T4904] vfat: Unknown parameter 'uni_xlate1' [ 31.852602][ T4908] loop1: detected capacity change from 0 to 2048 [ 31.853331][ T50] Bluetooth: hci4: command tx timeout [ 31.853552][ T50] Bluetooth: hci1: command tx timeout [ 31.853749][ T50] Bluetooth: hci0: command tx timeout [ 31.853938][ T50] Bluetooth: hci3: command tx timeout [ 31.854129][ T50] Bluetooth: hci2: command tx timeout [ 31.909247][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.909274][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.921387][ T4908] Alternate GPT is invalid, using primary GPT. [ 31.921489][ T4908] loop1: p2 p3 p7 [ 31.926094][ T4912] loop0: detected capacity change from 0 to 256 [ 31.943084][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.944463][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.959228][ T4912] FAT-fs (loop0): Directory bread(block 64) failed [ 31.960916][ T4912] FAT-fs (loop0): Directory bread(block 65) failed [ 31.965023][ T4912] FAT-fs (loop0): Directory bread(block 66) failed [ 31.965065][ T4912] FAT-fs (loop0): Directory bread(block 67) failed [ 31.965099][ T4912] FAT-fs (loop0): Directory bread(block 68) failed [ 31.965119][ T4912] FAT-fs (loop0): Directory bread(block 69) failed [ 31.965149][ T4912] FAT-fs (loop0): Directory bread(block 70) failed [ 31.965163][ T4912] FAT-fs (loop0): Directory bread(block 71) failed [ 31.965189][ T4912] FAT-fs (loop0): Directory bread(block 72) failed [ 31.965203][ T4912] FAT-fs (loop0): Directory bread(block 73) failed [ 31.985096][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.985122][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.003363][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.004829][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.116133][ T4918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.139147][ T4922] loop3: detected capacity change from 0 to 512 [ 32.141853][ T4922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.141905][ T4922] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.150826][ T4922] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 32.150859][ T4922] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 32.163560][ T4922] EXT4-fs (loop3): 1 truncate cleaned up [ 32.164062][ T4922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.346773][ T4930] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.4: lblock 0 mapped to illegal pblock 4 (length 1) [ 32.504433][ T4930] EXT4-fs (loop3): Remounting filesystem read-only [ 32.563833][ T4930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.446482][ T4938] loop4: detected capacity change from 0 to 1024 [ 33.687126][ T4948] loop2: detected capacity change from 0 to 512 [ 33.772915][ T4948] EXT4-fs (loop2): #blocks per group too big: 8724480 [ 33.817727][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.913232][ T4729] Bluetooth: hci2: command tx timeout [ 33.913272][ T4729] Bluetooth: hci3: command tx timeout [ 33.913290][ T4729] Bluetooth: hci0: command tx timeout [ 33.913311][ T4729] Bluetooth: hci1: command tx timeout [ 33.913328][ T4729] Bluetooth: hci4: command tx timeout [ 33.923204][ T4953] loop4: detected capacity change from 0 to 512 [ 33.931311][ T4953] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 33.937198][ T4953] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.937337][ T4953] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 8: comm syz.4.16: invalid block [ 33.937400][ T4953] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.940290][ T4953] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.16: couldn't read orphan inode 11 (err -117) [ 33.940377][ T4953] loop4: lost filesystem error report for type 5 error -117 [ 33.944581][ T4953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.948631][ T4953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.059342][ T4960] warning: `syz.3.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 34.117891][ T4964] tmpfs: Unknown parameter './file0' [ 34.122531][ T4965] tmpfs: Unknown parameter './file0' [ 34.221870][ T4968] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 34.221900][ T4968] netlink: 'syz.3.21': attribute type 3 has an invalid length. [ 34.221924][ T4968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.21'. [ 34.273435][ T4973] loop3: detected capacity change from 0 to 512 [ 34.310902][ T4975] syzkaller1: entered promiscuous mode [ 34.310930][ T4975] syzkaller1: entered allmulticast mode [ 34.330070][ T4975] overlay: Bad value for 'uuid' [ 34.331797][ T4973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.354333][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 34.420582][ T4915] Zero length message leads to an empty skb [ 35.070334][ T4997] loop4: detected capacity change from 0 to 512 [ 35.072140][ T4997] EXT4-fs: Ignoring removed bh option [ 35.090390][ T4997] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #11: comm syz.4.28: corrupted in-inode xattr: bad e_name length [ 35.090426][ T4997] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.090768][ T4997] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.28: couldn't read orphan inode 11 (err -117) [ 35.090784][ T4997] loop4: lost filesystem error report for type 5 error -117 [ 35.090889][ T4997] EXT4-fs (loop4): 1 truncate cleaned up [ 35.091345][ T4997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.106186][ T4997] xt_hashlimit: size too large, truncated to 1048576 [ 35.212468][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.258880][ T4916] mmap: syz.0.9 (4916) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.324927][ T5007] loop4: detected capacity change from 0 to 512 [ 35.344591][ T5007] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 35.346505][ T5007] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 35.348958][ T5007] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.31: iget: bad i_size value: 12154757448730 [ 35.351425][ T5007] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.351772][ T5007] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.31: couldn't read orphan inode 13 (err -117) [ 35.353889][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 35.353901][ C1] EXT4-fs (loop4): initial error at time 35: ext4_orphan_get:1397: inode 13 [ 35.353922][ C1] EXT4-fs (loop4): last error at time 35: ext4_orphan_get:1397: inode 13 [ 35.364645][ T5005] 9pnet: p9_errstr2errno: server reported unknown error [ 35.367547][ T5007] loop4: lost filesystem error report for type 5 error -117 [ 35.368279][ T5007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.391817][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.992717][ T50] Bluetooth: hci4: command tx timeout [ 35.993945][ T50] Bluetooth: hci1: command tx timeout [ 35.993988][ T50] Bluetooth: hci0: command tx timeout [ 35.994017][ T50] Bluetooth: hci3: command tx timeout [ 35.994037][ T50] Bluetooth: hci2: command tx timeout [ 37.078485][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.236581][ T5037] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 37.248245][ T5037] loop1: detected capacity change from 0 to 512 [ 37.268466][ T5037] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 37.270116][ T5037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 37.270417][ T5037] System zones: 1-12 [ 37.270547][ T5037] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.271983][ T5037] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.40: invalid indirect mapped block 12 (level 1) [ 37.272016][ T5037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.273021][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 37.273042][ C1] EXT4-fs (loop1): initial error at time 37: ext4_free_branches:1023: inode 11 [ 37.273076][ C1] EXT4-fs (loop1): last error at time 37: ext4_free_branches:1023: inode 11 [ 37.275923][ T5037] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.40: invalid indirect mapped block 2 (level 2) [ 37.275954][ T5037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.278333][ T5037] EXT4-fs (loop1): 1 truncate cleaned up [ 37.279949][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 37.291388][ T5037] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 37.342745][ T5037] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 37.480405][ T5043] loop3: detected capacity change from 0 to 512 [ 37.484524][ T5043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.485661][ T5043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 37.485708][ T5043] System zones: 1-2, 4-12, 8-8 [ 37.485951][ T5043] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.38: iget: bad i_size value: 38620345925642 [ 37.485969][ T5043] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.486125][ T5043] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.38: couldn't read orphan inode 15 (err -117) [ 37.486144][ T5043] loop3: lost filesystem error report for type 5 error -117 [ 37.487106][ T5043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.494320][ T5043] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.38: bg 0: block 5: invalid block bitmap [ 37.497190][ T5043] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 37.497215][ T5043] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.497215][ T5043] [ 37.497229][ T5043] EXT4-fs (loop3): Total free blocks count 0 [ 37.497243][ T5043] EXT4-fs (loop3): Free/Dirty block details [ 37.497259][ T5043] EXT4-fs (loop3): free_blocks=0 [ 37.497274][ T5043] EXT4-fs (loop3): dirty_blocks=2 [ 37.497285][ T5043] EXT4-fs (loop3): Block reservation details [ 37.497299][ T5043] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 38.161716][ T5056] loop0: detected capacity change from 0 to 8192 [ 38.166233][ T4729] Bluetooth: hci2: command tx timeout [ 38.166307][ T4729] Bluetooth: hci3: command tx timeout [ 38.166372][ T4729] Bluetooth: hci0: command tx timeout [ 38.166461][ T4729] Bluetooth: hci1: command tx timeout [ 38.166478][ T4729] Bluetooth: hci4: command tx timeout [ 38.318395][ T5056] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 38.597746][ T5061] loop2: detected capacity change from 0 to 256 [ 38.822114][ T5063] loop4: detected capacity change from 0 to 1024 [ 38.837172][ T5063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.864844][ T5067] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 38.964703][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 38.968012][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.038633][ T5063] process 'syz.4.46' launched './file2' with NULL argv: empty string added [ 39.054676][ T5074] loop3: detected capacity change from 0 to 512 [ 39.060048][ T5074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.077871][ T5074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803e01c, mo2=0002] [ 39.077917][ T5074] System zones: 1-12 [ 39.078206][ T5074] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.45: invalid indirect mapped block 8 (level 2) [ 39.078224][ T5074] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.078487][ T5074] EXT4-fs (loop3): 1 truncate cleaned up [ 39.078939][ T5074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.109201][ T5074] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 5: comm syz.3.45: lblock 0 mapped to illegal pblock 5 (length 1) [ 39.121993][ T5074] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #2: lblock 0: comm syz.3.45: error -117 reading directory block [ 39.212769][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.216299][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.260470][ T30] audit: type=1326 audit(39.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5086 comm="syz.2.54" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f77aa8 code=0x7ffc0000 [ 39.264581][ T30] audit: type=1326 audit(39.250:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5086 comm="syz.2.54" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f77aa8 code=0x7ffc0000 [ 39.281777][ T5090] loop0: detected capacity change from 0 to 512 [ 39.284891][ T5095] loop3: detected capacity change from 0 to 512 [ 39.289026][ T5095] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.289056][ T5095] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 39.318055][ T5090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.357583][ T5108] netlink: 140 bytes leftover after parsing attributes in process `syz.1.57'. [ 39.359629][ T5108] netlink: 58 bytes leftover after parsing attributes in process `syz.1.57'. [ 39.460273][ T5116] xt_hashlimit: max too large, truncated to 1048576 [ 39.460341][ T5116] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 39.554733][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.802324][ T5152] 9p: Bad value for 'rfdno' [ 39.811689][ T5150] loop2: detected capacity change from 0 to 1024 [ 39.811998][ T5150] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.816858][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 40.074615][ T5150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 40.084557][ T5150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.100803][ T5150] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.69: bg 0: block 112: padding at end of block bitmap is not set [ 40.116893][ T5150] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 40.116943][ T5150] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.116943][ T5150] [ 40.116952][ T5150] EXT4-fs (loop2): Total free blocks count 0 [ 40.116962][ T5150] EXT4-fs (loop2): Free/Dirty block details [ 40.116974][ T5150] EXT4-fs (loop2): free_blocks=0 [ 40.116984][ T5150] EXT4-fs (loop2): dirty_blocks=32 [ 40.116991][ T5150] EXT4-fs (loop2): Block reservation details [ 40.116997][ T5150] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 40.356703][ T4721] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.360478][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.709168][ T5181] loop4: detected capacity change from 0 to 1024 [ 40.710192][ T5181] EXT4-fs: Ignoring removed nobh option [ 40.715813][ T5181] EXT4-fs: Ignoring removed orlov option [ 40.718783][ T5181] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 40.753466][ T5181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.768815][ T5181] overlayfs: failed to resolve './bus': -2 [ 40.879568][ T5191] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 41.253134][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.330215][ T5201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 41.330243][ T5201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.339148][ T5201] vhci_hcd vhci_hcd.0: Device attached [ 41.357139][ T5201] fuse: fd is not a fuse device [ 41.357913][ T5202] vhci_hcd: connection closed [ 41.358910][ T40] vhci_hcd vhci_hcd.3: stop threads [ 41.359041][ T40] vhci_hcd vhci_hcd.3: release socket [ 41.359061][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 41.431929][ T5206] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 41.805224][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 42.002043][ T5226] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 42.120528][ T5229] vfat: Deprecated parameter 'posix' [ 42.122272][ T5229] FAT-fs: "posix" option is obsolete, not supported now [ 42.316567][ T5241] set_capacity_and_notify: 3 callbacks suppressed [ 42.316608][ T5241] loop3: detected capacity change from 0 to 2048 [ 42.336221][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.101078][ T5261] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 43.101102][ T5261] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 43.101118][ T5261] overlayfs: missing 'lowerdir' [ 43.101853][ T5262] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 43.101860][ T5262] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 43.101865][ T5262] overlayfs: missing 'lowerdir' [ 43.105594][ T5259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 43.177426][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.181565][ T5276] loop4: detected capacity change from 0 to 256 [ 43.391737][ T5285] 9pnet_fd: Insufficient options for proto=fd [ 43.739149][ T5301] loop3: detected capacity change from 0 to 2048 [ 43.740862][ T5301] EXT4-fs: quotafile must be on filesystem root [ 43.745656][ T5306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 43.794366][ T5309] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 43.794403][ T5309] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 43.894642][ T5319] nfs4: Bad value for 'source' [ 44.003033][ T4724] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 44.003896][ T4724] CPU: 1 UID: 0 PID: 4724 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 44.003915][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 44.003921][ T4724] Call trace: [ 44.003924][ T4724] show_stack+0x2c/0x3c (C) [ 44.003948][ T4724] __dump_stack+0x30/0x40 [ 44.003961][ T4724] dump_stack_lvl+0xd8/0x12c [ 44.003970][ T4724] dump_stack+0x1c/0x28 [ 44.003980][ T4724] dump_header+0xbc/0x3f0 [ 44.003987][ T4724] oom_kill_process+0x248/0x8a0 [ 44.003998][ T4724] out_of_memory+0xd24/0x1064 [ 44.004007][ T4724] mem_cgroup_out_of_memory+0xe8/0x170 [ 44.004016][ T4724] try_charge_memcg+0x8ec/0xc64 [ 44.004023][ T4724] charge_memcg+0x17c/0x280 [ 44.004030][ T4724] mem_cgroup_swapin_charge_folio+0x2b8/0x400 [ 44.004038][ T4724] __swap_cache_prepare_and_add+0xb0/0x6fc [ 44.004046][ T4724] swap_cache_alloc_folio+0x100/0x280 [ 44.004054][ T4724] swapin_readahead+0x6b4/0xc10 [ 44.004062][ T4724] do_swap_page+0x338/0x4334 [ 44.004069][ T4724] handle_mm_fault+0x115c/0x253c [ 44.004076][ T4724] do_page_fault+0x77c/0xb88 [ 44.004086][ T4724] do_translation_fault+0xc4/0x114 [ 44.004094][ T4724] do_mem_abort+0x70/0x194 [ 44.004103][ T4724] el0_da+0x78/0x254 [ 44.004111][ T4724] el0t_64_sync_handler+0x10c/0x148 [ 44.004118][ T4724] el0t_64_sync+0x198/0x19c [ 44.004128][ T4724] memory: usage 307200kB, limit 307200kB, failcnt 516 [ 44.004134][ T4724] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0 [ 44.004140][ T4724] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 44.004145][ T4724] Memory cgroup stats for /syz4: [ 44.004229][ T4724] cache 4096 [ 44.004233][ T4724] rss 0 [ 44.004236][ T4724] rss_huge 0 [ 44.004239][ T4724] shmem 0 [ 44.004242][ T4724] mapped_file 0 [ 44.004245][ T4724] dirty 4096 [ 44.004248][ T4724] writeback 0 [ 44.004251][ T4724] workingset_refault_anon 2086 [ 44.004254][ T4724] workingset_refault_file 79 [ 44.004257][ T4724] swap 315392 [ 44.004260][ T4724] swapcached 12247040 [ 44.004263][ T4724] pgpgin 27082 [ 44.004266][ T4724] pgpgout 27076 [ 44.004269][ T4724] pgfault 27468 [ 44.004272][ T4724] pgmajfault 285 [ 44.004275][ T4724] inactive_anon 20480 [ 44.004278][ T4724] active_anon 0 [ 44.004281][ T4724] inactive_file 0 [ 44.004284][ T4724] active_file 4096 [ 44.004286][ T4724] unevictable 0 [ 44.004289][ T4724] hierarchical_memory_limit 314572800 [ 44.004293][ T4724] hierarchical_memsw_limit 9223372036854771712 [ 44.004296][ T4724] total_cache 4096 [ 44.004299][ T4724] total_rss 0 [ 44.004302][ T4724] total_rss_huge 0 [ 44.004305][ T4724] total_shmem 0 [ 44.004316][ T4724] total_mapped_file 0 [ 44.004319][ T4724] total_dirty 4096 [ 44.004322][ T4724] total_writeback 0 [ 44.004325][ T4724] total_workingset_refault_anon 2086 [ 44.004328][ T4724] total_workingset_refault_file 79 [ 44.004332][ T4724] total_swap 315392 [ 44.004335][ T4724] total_swapcached 12247040 [ 44.004338][ T4724] total_pgpgin 27082 [ 44.004341][ T4724] total_pgpgout 27076 [ 44.004344][ T4724] total_pgfault 27468 [ 44.004347][ T4724] total_pgmajfault 285 [ 44.004350][ T4724] total_inactive_anon 20480 [ 44.004353][ T4724] total_active_anon 0 [ 44.004356][ T4724] total_inactive_file 0 [ 44.004359][ T4724] total_active_file 4096 [ 44.004362][ T4724] total_unevictable 0 [ 44.004365][ T4724] anon_cost 1 [ 44.004368][ T4724] file_cost 0 [ 44.004371][ T4724] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.101,pid=5263,uid=0 [ 44.004707][ T4724] Memory cgroup out of memory: Killed process 5263 (syz.4.101) total-vm:102364kB, anon-rss:1208kB, file-rss:23044kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 44.109355][ T5328] loop0: detected capacity change from 0 to 1024 [ 44.123414][ T5328] EXT4-fs: Ignoring removed nobh option [ 44.123456][ T5328] EXT4-fs: Ignoring removed orlov option [ 44.123898][ T5328] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 44.153670][ T5328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.154275][ T5328] overlayfs: failed to resolve './bus': -2 [ 44.244706][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.353770][ T5343] 9p: Unknown Cache mode or invalid value f [ 44.410979][ T50] Bluetooth: hci2: unexpected cc 0x0c56 length: 0 < 1 [ 44.416303][ T5343] loop2: detected capacity change from 0 to 128 [ 44.418997][ T5343] vfat: Unknown parameter 'Wptǐ' [ 44.528066][ T5354] loop9: detected capacity change from 0 to 7 [ 44.530121][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.530181][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.533645][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.533678][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.536861][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.536891][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.539968][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.539998][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.543110][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.543130][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.544792][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.544806][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.546436][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.546454][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.553176][ T5354] ldm_validate_partition_table(): Disk read failed. [ 44.554438][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.554469][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.572827][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.572863][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.574894][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 44.574908][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.575016][ T5354] Dev loop9: unable to read RDB block 0 [ 44.575279][ T5354] loop9: unable to read partition table [ 44.575347][ T5354] loop9: partition table beyond EOD, truncated [ 44.575365][ T5354] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 44.613480][ T5354] loop9: detected capacity change from 7 to 8 [ 45.276126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 45.746581][ T5369] loop2: detected capacity change from 0 to 1024 [ 45.773365][ T5369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.816113][ T5376] loop4: detected capacity change from 0 to 1024 [ 45.839637][ T5376] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 45.878725][ T5381] hub 1-0:1.0: USB hub found [ 45.880808][ T5381] hub 1-0:1.0: 1 port detected [ 46.063257][ T5383] evm: overlay not supported [ 46.100424][ T5384] loop0: detected capacity change from 0 to 512 [ 46.105422][ T5384] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.186738][ T5384] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 46.202046][ T5384] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.202169][ T5384] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.204233][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 46.205523][ T5384] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.133: Invalid block bitmap block 0 in block_group 0 [ 46.205544][ T5384] loop0: lost filesystem error report for type 5 error -117 [ 46.211490][ T5384] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.133: Invalid block bitmap block 0 in block_group 0 [ 46.211530][ T5384] loop0: lost filesystem error report for type 5 error -117 [ 46.213254][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 46.213270][ C0] EXT4-fs (loop0): last error at time 46: ext4_read_block_bitmap_nowait:483 [ 46.219881][ T5384] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.133: Invalid block bitmap block 0 in block_group 0 [ 46.219918][ T5384] loop0: lost filesystem error report for type 5 error -117 [ 46.222481][ T5384] Quota error (device loop0): write_blk: dquota write failed [ 46.222513][ T5384] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 46.222527][ T5384] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.133: Failed to acquire dquot type 1 [ 46.222537][ T5384] loop0: lost filesystem error report for type 5 error -28 [ 46.223039][ T5384] EXT4-fs (loop0): 1 orphan inode deleted [ 46.231618][ T39] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 46.231658][ T39] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 46.231681][ T39] loop0: lost filesystem error report for type 5 error -117 [ 46.236828][ T5384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.281361][ T5395] macvtap1: entered promiscuous mode [ 46.281489][ T5395] macvtap1: entered allmulticast mode [ 46.281497][ T5395] veth1_vlan: entered allmulticast mode [ 46.405220][ T5404] ext4: Unknown parameter 'dont_appraise' [ 46.876457][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.900886][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.939939][ T5412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.942284][ T5412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 46.942337][ T5412] System zones: 1-2, 4-12, 8-8 [ 46.944754][ T5412] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.141: iget: bad i_size value: 38620345925642 [ 46.944778][ T5412] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.945593][ T5412] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.141: couldn't read orphan inode 15 (err -117) [ 46.945614][ T5412] loop2: lost filesystem error report for type 5 error -117 [ 46.947405][ T5412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.960980][ T5412] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.141: bg 0: block 5: invalid block bitmap [ 46.963781][ T5412] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 46.963815][ T5412] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.963815][ T5412] [ 46.963836][ T5412] EXT4-fs (loop2): Total free blocks count 0 [ 46.963852][ T5412] EXT4-fs (loop2): Free/Dirty block details [ 46.963868][ T5412] EXT4-fs (loop2): free_blocks=0 [ 46.963883][ T5412] EXT4-fs (loop2): dirty_blocks=2 [ 46.963895][ T5412] EXT4-fs (loop2): Block reservation details [ 46.963905][ T5412] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 47.027981][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'. [ 47.330714][ T5410] set_capacity_and_notify: 3 callbacks suppressed [ 47.330751][ T5410] loop0: detected capacity change from 0 to 1024 [ 47.372272][ T5425] loop4: detected capacity change from 0 to 2048 [ 47.387683][ T5425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.480843][ T5430] netlink: 'syz.3.147': attribute type 11 has an invalid length. [ 47.488077][ T5430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.514927][ T5430] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 47.515668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 47.516977][ T5430] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 47.519946][ T5430] team0: Port device wlan0 added [ 47.599228][ T5435] netlink: 68 bytes leftover after parsing attributes in process `syz.3.148'. [ 47.863398][ T5440] ubi0: attaching mtd0 [ 47.870172][ T5440] ubi0: scanning is finished [ 47.870224][ T5440] ubi0: empty MTD device detected [ 48.040184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 48.046303][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.118242][ T5443] loop2: detected capacity change from 0 to 256 [ 48.189829][ T5440] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 48.189919][ T5440] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 48.189949][ T5440] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 48.189964][ T5440] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 48.189980][ T5440] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 48.189995][ T5440] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 48.190008][ T5440] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1155898994 [ 48.190021][ T5440] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 48.190706][ T5448] ubi0: background thread "ubi_bgt0d" started, PID 5448 [ 48.578608][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.620971][ T5464] netlink: 32 bytes leftover after parsing attributes in process `syz.2.155'. [ 48.633710][ T5470] ip6tnl1: entered promiscuous mode [ 48.638304][ T5469] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 48.679924][ T5462] netlink: 'syz.1.153': attribute type 1 has an invalid length. [ 48.685024][ T5465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 48.685047][ T5480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 48.690859][ T5465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 48.727887][ T5482] loop4: detected capacity change from 0 to 512 [ 48.730435][ T5482] ext4: Bad value for 'commit' [ 48.741266][ T5482] netlink: 'syz.4.158': attribute type 13 has an invalid length. [ 48.744270][ T5482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.158'. [ 48.748972][ T5486] tipc: Started in network mode [ 48.749000][ T5486] tipc: Node identity 2007ff, cluster identity 4711 [ 48.749186][ T5486] tipc: Node number set to 2099199 [ 48.770722][ T5482] loop4: detected capacity change from 0 to 512 [ 48.772988][ T5490] loop2: detected capacity change from 0 to 512 [ 48.786321][ T5482] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.158: inode has both inline data and extents flags [ 48.786360][ T5482] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.786508][ T5482] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.158: couldn't read orphan inode 15 (err -117) [ 48.786528][ T5482] loop4: lost filesystem error report for type 5 error -117 [ 48.787214][ T5482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.812205][ T5490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.867752][ T5498] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.867788][ T5498] overlayfs: failed to set xattr on upper [ 48.867793][ T5498] overlayfs: ...falling back to redirect_dir=nofollow. [ 48.867798][ T5498] overlayfs: ...falling back to uuid=null. [ 48.892356][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.897991][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.148910][ T5506] loop3: detected capacity change from 0 to 1024 [ 49.154495][ T5506] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.157149][ T5506] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.170209][ T5506] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.169: Invalid block bitmap block 0 in block_group 0 [ 49.170247][ T5506] loop3: lost filesystem error report for type 5 error -117 [ 49.171363][ T5506] Quota error (device loop3): write_blk: dquota write failed [ 49.171386][ T5506] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 49.171410][ T5506] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.169: Failed to acquire dquot type 0 [ 49.171421][ T5506] loop3: lost filesystem error report for type 5 error -117 [ 49.171607][ T5506] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.169: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.171620][ T5506] loop3: lost filesystem error report for type 5 error -117 [ 49.172151][ T5506] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.169: Invalid inode bitmap blk 0 in block_group 0 [ 49.172717][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 49.172728][ C1] EXT4-fs (loop3): initial error at time 49: ext4_read_block_bitmap_nowait:483 [ 49.172741][ C1] EXT4-fs (loop3): last error at time 49: ext4_read_inode_bitmap:139 [ 49.173232][ T5506] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 49.173378][ T5506] EXT4-fs (loop3): 1 orphan inode deleted [ 49.173908][ T5506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.203009][ T15] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 49.203040][ T15] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 49.229700][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.268074][ T5540] x_tables: duplicate underflow at hook 3 [ 49.413282][ T5552] capability: warning: `syz.0.176' uses deprecated v2 capabilities in a way that may be insecure [ 49.433240][ T5557] loop4: detected capacity change from 0 to 128 [ 50.013881][ T5570] netlink: 'syz.2.184': attribute type 1 has an invalid length. [ 50.036022][ T5570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.085428][ T5570] bond1: (slave veth3): Enslaving as an active interface with a down link [ 50.109206][ T5570] macvtap1: entered allmulticast mode [ 50.151735][ T5575] loop1: detected capacity change from 0 to 512 [ 50.197954][ T5575] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 50.271867][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 50.276818][ T5583] loop3: detected capacity change from 0 to 512 [ 50.287056][ T5587] netlink: 200 bytes leftover after parsing attributes in process `syz.4.189'. [ 50.772169][ T5598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.028207][ T5614] EXT4-fs: Ignoring removed oldalloc option [ 51.028482][ T5614] EXT4-fs: Ignoring removed orlov option [ 51.211905][ T5614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.216530][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.233926][ T5624] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 51.252206][ T5624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.397637][ T5630] loop4: p1 p2 p3 [ 51.397637][ T5630] p1: [ 51.401358][ T5630] loop4: p3 start 65280 is beyond EOD, truncated [ 51.528126][ T5643] __nla_validate_parse: 1 callbacks suppressed [ 51.528164][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 51.557467][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 51.562145][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 51.563080][ T5644] FAT-fs (loop1): Directory bread(block 64) failed [ 51.563099][ T5644] FAT-fs (loop1): Directory bread(block 65) failed [ 51.563122][ T5644] FAT-fs (loop1): Directory bread(block 66) failed [ 51.563133][ T5644] FAT-fs (loop1): Directory bread(block 67) failed [ 51.563155][ T5644] FAT-fs (loop1): Directory bread(block 68) failed [ 51.563166][ T5644] FAT-fs (loop1): Directory bread(block 69) failed [ 51.563187][ T5644] FAT-fs (loop1): Directory bread(block 70) failed [ 51.563197][ T5644] FAT-fs (loop1): Directory bread(block 71) failed [ 51.563218][ T5644] FAT-fs (loop1): Directory bread(block 72) failed [ 51.563228][ T5644] FAT-fs (loop1): Directory bread(block 73) failed [ 51.582330][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 51.597076][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 51.604802][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 51.610937][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 51.643344][ T5651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 51.727043][ T30] audit: type=1326 audit(51.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5655 comm="syz.2.211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f77aa8 code=0x0 [ 52.190173][ T5674] dvmrp1: entered allmulticast mode [ 52.195969][ T5674] syz_tun: entered allmulticast mode [ 52.199419][ T5674] syz_tun: left allmulticast mode [ 52.576982][ T5682] set_capacity_and_notify: 4 callbacks suppressed [ 52.578153][ T5682] loop2: detected capacity change from 0 to 512 [ 52.579790][ T5682] ext4: Unknown parameter 'euid<00000000000000000000' [ 52.958028][ T5697] loop1: detected capacity change from 0 to 512 [ 52.959320][ T5697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.961651][ T5697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 52.961957][ T5697] System zones: 1-2, 4-12, 8-8 [ 52.963281][ T5697] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.221: iget: bad i_size value: 38620345925642 [ 52.963310][ T5697] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.964759][ T5697] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.221: couldn't read orphan inode 15 (err -117) [ 52.964782][ T5697] fserror_report: 2 callbacks suppressed [ 52.964789][ T5697] loop1: lost filesystem error report for type 5 error -117 [ 52.965422][ T5697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.968802][ T5697] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.221: bg 0: block 5: invalid block bitmap [ 52.969278][ T5697] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 52.969291][ T5697] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.969291][ T5697] [ 52.969305][ T5697] EXT4-fs (loop1): Total free blocks count 0 [ 52.969313][ T5697] EXT4-fs (loop1): Free/Dirty block details [ 52.969322][ T5697] EXT4-fs (loop1): free_blocks=0 [ 52.969330][ T5697] EXT4-fs (loop1): dirty_blocks=2 [ 52.969337][ T5697] EXT4-fs (loop1): Block reservation details [ 52.969344][ T5697] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 52.995075][ T5698] loop3: detected capacity change from 0 to 512 [ 53.002988][ T5698] EXT4-fs (loop3): Test dummy encryption mode enabled [ 53.005659][ T5698] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.222: inode has both inline data and extents flags [ 53.005688][ T5698] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.008349][ T5698] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.222: couldn't read orphan inode 15 (err -117) [ 53.008377][ T5698] loop3: lost filesystem error report for type 5 error -117 [ 53.013097][ T5698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.038675][ T5698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 53.386556][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.450056][ T5724] sctp: [Deprecated]: syz.3.226 (pid 5724) Use of int in max_burst socket option deprecated. [ 53.450056][ T5724] Use struct sctp_assoc_value instead [ 53.535466][ T5738] loop2: detected capacity change from 0 to 512 [ 53.542539][ T5738] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.230: corrupted in-inode xattr: invalid ea_ino [ 53.546415][ T5738] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.548725][ T5738] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.230: couldn't read orphan inode 15 (err -117) [ 53.548763][ T5738] loop2: lost filesystem error report for type 5 error -117 [ 53.552297][ T5738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.683821][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.819471][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.844569][ T5757] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 53.858743][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 53.938002][ T5769] loop1: detected capacity change from 0 to 512 [ 53.941836][ T5768] netlink: 92 bytes leftover after parsing attributes in process `syz.0.236'. [ 53.942113][ T5768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.957138][ T5769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.471335][ T5793] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 54.636112][ T5797] loop3: detected capacity change from 0 to 512 [ 54.636739][ T5797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.637764][ T5797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 54.637791][ T5797] System zones: 1-2, 4-12, 8-8 [ 54.637967][ T5797] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.243: iget: bad i_size value: 38620345925642 [ 54.637981][ T5797] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.638193][ T5797] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.243: couldn't read orphan inode 15 (err -117) [ 54.638211][ T5797] loop3: lost filesystem error report for type 5 error -117 [ 54.638764][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.654770][ T5797] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.243: bg 0: block 5: invalid block bitmap [ 54.655425][ T5797] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 54.655444][ T5797] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.655444][ T5797] [ 54.655452][ T5797] EXT4-fs (loop3): Total free blocks count 0 [ 54.655460][ T5797] EXT4-fs (loop3): Free/Dirty block details [ 54.655468][ T5797] EXT4-fs (loop3): free_blocks=0 [ 54.655476][ T5797] EXT4-fs (loop3): dirty_blocks=2 [ 54.655482][ T5797] EXT4-fs (loop3): Block reservation details [ 54.655488][ T5797] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 54.733006][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.756920][ T5801] loop1: detected capacity change from 0 to 8 [ 54.761882][ T5801] SQUASHFS error: Unable to read inode 0xa7 [ 54.779166][ T5801] SQUASHFS error: Unable to read inode 0xa7 [ 55.089815][ T5816] loop4: detected capacity change from 0 to 256 [ 55.165640][ T5824] Invalid ELF header magic: != ELF [ 55.221878][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 55.282076][ T5826] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 55.282274][ T5826] overlayfs: failed to set xattr on upper [ 55.282316][ T5826] overlayfs: ...falling back to redirect_dir=nofollow. [ 55.282349][ T5826] overlayfs: ...falling back to index=off. [ 55.282467][ T5826] overlayfs: conflicting lowerdir path [ 55.968587][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.009373][ T5829] loop3: detected capacity change from 0 to 512 [ 56.010995][ T5829] EXT4-fs: Ignoring removed bh option [ 56.015201][ T5829] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.018321][ T5829] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.018358][ T5829] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 56.054470][ T5829] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 56.056531][ T5829] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 56.057279][ T5829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.065491][ T5831] overlayfs: failed to resolve './file1': -2 [ 56.137045][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.224974][ T4724] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 56.228648][ T4724] FAT-fs (loop4): Filesystem has been set read-only [ 56.230166][ T4724] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 56.259128][ T5835] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 56.259143][ T5835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.259189][ T5835] vhci_hcd vhci_hcd.0: Device attached [ 56.337801][ T5838] loop3: detected capacity change from 0 to 8192 [ 56.340273][ T5838] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.512947][ T11] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 57.045476][ T5836] vhci_hcd: connection reset by peer [ 57.047461][ T1099] vhci_hcd vhci_hcd.3: stop threads [ 57.049355][ T1099] vhci_hcd vhci_hcd.3: release socket [ 57.049729][ T1099] vhci_hcd vhci_hcd.3: disconnect device [ 57.159125][ T5849] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 57.175869][ T5849] pim6reg: entered allmulticast mode [ 57.233793][ T5857] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 57.238980][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.239452][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.314624][ T4729] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.315437][ T4729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.315717][ T4729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.316028][ T4729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.316249][ T4729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.454048][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.456848][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.583263][ T5873] set_capacity_and_notify: 1 callbacks suppressed [ 57.583299][ T5873] loop3: detected capacity change from 0 to 256 [ 58.657853][ T1099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.682302][ T39] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.682378][ T39] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.682404][ T39] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.682422][ T39] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.780042][ T1099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.813064][ T5903] tipc: Enabling of bearer rejected, failed to enable media [ 58.834563][ T5912] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 58.840288][ T5912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.851403][ T1099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.929821][ T1099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.932093][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 58.941557][ T5912] bond1: (slave bridge1): making interface the new active one [ 58.943149][ T5912] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 58.995320][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.995415][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.995492][ T5863] bridge_slave_0: entered allmulticast mode [ 58.995941][ T5863] bridge_slave_0: entered promiscuous mode [ 58.997492][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.997540][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.997592][ T5863] bridge_slave_1: entered allmulticast mode [ 58.997998][ T5863] bridge_slave_1: entered promiscuous mode [ 59.005361][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.006573][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.025339][ T5863] team0: Port device team_slave_0 added [ 59.025655][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 59.035876][ T5863] team0: Port device team_slave_1 added [ 59.071849][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.079904][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.079956][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.088609][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.088630][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.088658][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.100654][ T5951] loop1: detected capacity change from 0 to 512 [ 59.101960][ T5951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.105394][ T5951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 59.105464][ T5951] System zones: 1-12 [ 59.108378][ T5951] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.111883][ T5951] EXT4-fs (loop1): 1 truncate cleaned up [ 59.112377][ T5951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.231400][ T5957] overlayfs: failed to resolve './bus': -2 [ 59.333406][ T1099] bridge_slave_1: left allmulticast mode [ 59.337436][ T1099] bridge_slave_1: left promiscuous mode [ 59.339457][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.350533][ T1099] bridge_slave_0: left allmulticast mode [ 59.350564][ T1099] bridge_slave_0: left promiscuous mode [ 59.350639][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.357537][ T1099] dvmrp1: left allmulticast mode [ 59.365830][ T50] Bluetooth: hci4: command tx timeout [ 59.381117][ T5970] loop3: detected capacity change from 0 to 2048 [ 59.512338][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.544039][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.565016][ T1099] bond0 (unregistering): Released all slaves [ 59.593725][ T5863] hsr_slave_0: entered promiscuous mode [ 59.595289][ T5863] hsr_slave_1: entered promiscuous mode [ 59.596644][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 59.597809][ T5863] Cannot create hsr debugfs directory [ 59.764151][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 60.105495][ T5863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.125965][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.129177][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.131921][ T5863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.134620][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.175968][ T6010] netlink: 68 bytes leftover after parsing attributes in process `syz.3.293'. [ 60.177944][ T5863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.180364][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.180686][ T5863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.185558][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.554194][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.589371][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.595295][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.612885][ T1099] hsr_slave_0: left promiscuous mode [ 60.614209][ T1099] hsr_slave_1: left promiscuous mode [ 60.614497][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.614513][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.619179][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.619205][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.626073][ T1099] veth1_macvtap: left promiscuous mode [ 60.626121][ T1099] veth0_macvtap: left promiscuous mode [ 60.626158][ T1099] veth1_vlan: left promiscuous mode [ 60.626186][ T1099] veth0_vlan: left promiscuous mode [ 60.731381][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 60.749705][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 60.823882][ T6040] netlink: 76 bytes leftover after parsing attributes in process `syz.0.294'. [ 60.827081][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.827133][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.834944][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.834980][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.108008][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 61.108159][ T6064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.297'. [ 61.354924][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.382012][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 61.433407][ T50] Bluetooth: hci4: command tx timeout [ 61.511794][ T5863] veth0_vlan: entered promiscuous mode [ 61.518562][ T5863] veth1_vlan: entered promiscuous mode [ 61.541228][ T5863] veth0_macvtap: entered promiscuous mode [ 61.548802][ T5863] veth1_macvtap: entered promiscuous mode [ 61.553560][ T6091] loop3: detected capacity change from 0 to 1024 [ 61.566965][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.568679][ T6091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.579390][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.587459][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.587626][ T15] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.587661][ T15] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.587693][ T15] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.659394][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.659438][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.665219][ T11] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 61.685422][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.702453][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.702483][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.714254][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 61.796643][ T6108] loop3: detected capacity change from 0 to 8192 [ 61.855921][ T6112] overlayfs: missing 'lowerdir' [ 62.203801][ T6139] loop5: detected capacity change from 0 to 8 [ 62.221764][ T6139] SQUASHFS error: zlib decompression failed, data probably corrupt [ 62.223693][ T6139] SQUASHFS error: Failed to read block 0x4de: -5 [ 62.225625][ T6139] SQUASHFS error: zlib decompression failed, data probably corrupt [ 62.227215][ T6139] SQUASHFS error: Failed to read block 0x4df: -5 [ 62.228647][ T6139] SQUASHFS error: zlib decompression failed, data probably corrupt [ 62.230147][ T6139] SQUASHFS error: Failed to read block 0x4e0: -5 [ 62.233026][ T6139] SQUASHFS error: zlib decompression failed, data probably corrupt [ 62.233055][ T6139] SQUASHFS error: Failed to read block 0x4de: -5 [ 62.235996][ T6139] SQUASHFS error: Unable to read data cache entry [4de] [ 62.237450][ T6139] SQUASHFS error: Unable to read page, block 4de, size 1 [ 62.239457][ T6139] overlay: filesystem on ./file0 is read-only [ 62.504664][ T6149] loop3: detected capacity change from 0 to 2048 [ 62.507013][ T6149] EXT4-fs: Ignoring removed oldalloc option [ 62.552985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.753320][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.813283][ T6149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 62.816847][ T6154] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #12: comm syz.3.311: corrupted in-inode xattr: e_name out of bounds [ 62.817946][ T6154] EXT4-fs (loop3): Remounting filesystem read-only [ 62.885536][ T6161] loop2: detected capacity change from 0 to 2048 [ 62.902338][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.916006][ T6161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.927429][ T6161] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.314: bg 0: block 345: padding at end of block bitmap is not set [ 62.955955][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.007650][ T6178] loop3: detected capacity change from 0 to 2048 [ 63.024404][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.052346][ T6174] loop2: detected capacity change from 0 to 1024 [ 63.055234][ T6174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.071812][ T6174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2042c028, mo2=0102] [ 63.071879][ T6174] System zones: 0-1, 3-12 [ 63.079028][ T6184] loop5: detected capacity change from 0 to 8 [ 63.080577][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.101912][ T6184] block device autoloading is deprecated and will be removed. [ 63.103460][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 63.136842][ T6178] syzkaller0: entered promiscuous mode [ 63.140175][ T6178] syzkaller0: entered allmulticast mode [ 63.374127][ T6205] loop5: detected capacity change from 0 to 8 [ 63.383156][ T6205] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 63.383178][ T6205] unable to read xattr id index table [ 63.390753][ T6205] SQUASHFS error: zlib decompression failed, data probably corrupt [ 63.390786][ T6205] SQUASHFS error: Failed to read block 0x9b: -5 [ 63.390807][ T6205] SQUASHFS error: Unable to read metadata cache entry [99] [ 63.390821][ T6205] SQUASHFS error: Unable to read inode 0x127 [ 63.437254][ T6195] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 63.441559][ T6195] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 63.444352][ T6195] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.444352][ T6195] [ 63.446069][ T6195] EXT4-fs (loop3): Total free blocks count 0 [ 63.447236][ T6195] EXT4-fs (loop3): Free/Dirty block details [ 63.448234][ T6195] EXT4-fs (loop3): free_blocks=66060288 [ 63.449439][ T6195] EXT4-fs (loop3): dirty_blocks=8208 [ 63.450355][ T6195] EXT4-fs (loop3): Block reservation details [ 63.451395][ T6195] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 63.465003][ T6195] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 63.523115][ T50] Bluetooth: hci4: command tx timeout [ 63.702519][ T4801] IPVS: starting estimator thread 0... [ 63.702560][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.702589][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.702613][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.702633][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703357][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703396][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703430][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703463][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703493][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703520][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703546][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703570][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703592][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703614][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703638][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703671][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703700][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703769][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703791][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703813][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703833][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703852][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703871][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703890][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703907][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703924][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703941][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703958][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.703974][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704004][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704021][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704038][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704054][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704071][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704088][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704105][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704122][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704138][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704154][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704171][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704188][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704204][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704223][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704239][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704256][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704273][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704289][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704309][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704329][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704348][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704365][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704381][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704411][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704431][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704447][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704464][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704480][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704497][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704513][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704530][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704546][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704563][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704579][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.704595][ T6239] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 63.802740][ T6242] IPVS: using max 60 ests per chain, 144000 per kthread [ 63.934377][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.084135][ T6261] binder: 6260:6261 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 64.143450][ T4713] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 64.474363][ T1598] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.475611][ T1598] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.481239][ T26] cfg80211: failed to load regulatory.db [ 64.535314][ T6284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.343'. [ 64.584139][ T6290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.346'. [ 64.584182][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 64.693858][ T6292] tmpfs: Unknown parameter '' [ 64.712935][ T6292] macsec1: entered promiscuous mode [ 64.712972][ T6292] bridge0: entered promiscuous mode [ 64.889054][ T6311] loop3: detected capacity change from 0 to 1024 [ 65.007540][ T6311] EXT4-fs warning (device loop3): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount [ 65.007540][ T6311] [ 65.380014][ T6338] : renamed from bond_slave_0 (while UP) [ 65.486738][ T6341] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 65.486738][ T6341] Please contact the netfilter-devel mailing list or update your nftables rules. [ 65.580982][ T6350] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 65.582968][ T6350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.584466][ T6350] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 65.592856][ T50] Bluetooth: hci4: command tx timeout [ 66.049423][ T6363] loop1: detected capacity change from 0 to 1024 [ 66.067834][ T6363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.078769][ T6363] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.366: lblock 3 mapped to illegal pblock 3 (length 3) [ 66.081575][ T6363] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 66.081634][ T6363] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.081634][ T6363] [ 66.091967][ T6363] EXT4-fs (loop1): shut down requested (2) [ 66.110912][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.144792][ T6371] loop1: detected capacity change from 0 to 512 [ 66.160271][ T6371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.168618][ T6371] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 66.184822][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.285253][ T6387] IPv6: addrconf: prefix option has invalid lifetime [ 66.327879][ T4801] IPVS: starting estimator thread 0... [ 66.371393][ T6395] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 66.379489][ T6394] syz_tun: entered allmulticast mode [ 66.443115][ T6392] IPVS: using max 60 ests per chain, 144000 per kthread [ 66.525837][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 66.546441][ T6409] netlink: 'syz.0.379': attribute type 12 has an invalid length. [ 66.546464][ T6409] netlink: 'syz.0.379': attribute type 29 has an invalid length. [ 66.546546][ T6409] netlink: 148 bytes leftover after parsing attributes in process `syz.0.379'. [ 66.546560][ T6409] netlink: 59 bytes leftover after parsing attributes in process `syz.0.379'. [ 66.546791][ T6409] netlink: 'syz.0.379': attribute type 12 has an invalid length. [ 66.546800][ T6409] netlink: 'syz.0.379': attribute type 29 has an invalid length. [ 66.546808][ T6409] netlink: 148 bytes leftover after parsing attributes in process `syz.0.379'. [ 66.546818][ T6409] netlink: 59 bytes leftover after parsing attributes in process `syz.0.379'. [ 66.547775][ T6410] netlink: 92 bytes leftover after parsing attributes in process `syz.1.378'. [ 66.548115][ T6410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.583250][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 66.594145][ T6418] loop8: detected capacity change from 0 to 7 [ 66.596380][ T6418] Dev loop8: unable to read RDB block 7 [ 66.596419][ T6418] loop8: unable to read partition table [ 66.596478][ T6418] loop8: partition table beyond EOD, truncated [ 66.596487][ T6418] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 66.637855][ T6426] loop1: detected capacity change from 0 to 8 [ 66.650305][ T6428] macvlan2: entered allmulticast mode [ 66.650329][ T6428] hsr0: entered allmulticast mode [ 66.650351][ T6428] hsr_slave_0: entered allmulticast mode [ 66.650369][ T6428] hsr_slave_1: entered allmulticast mode [ 66.727119][ T6439] netem: change failed [ 66.758129][ T6441] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 66.774501][ T6441] Illegal XDP return value 6441 on prog (id 39) dev N/A, expect packet loss! [ 66.898169][ T6451] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 66.898169][ T6451] The task syz.1.386 (6451) triggered the difference, watch for misbehavior. [ 67.020479][ T6461] veth3: entered allmulticast mode [ 67.023925][ T6461] bond3: (slave veth3): Enslaving as an active interface with an up link [ 67.064278][ T6461] bond3 (unregistering): (slave veth3): Releasing backup interface [ 67.093963][ T6461] bond3 (unregistering): Released all slaves [ 67.100575][ T6390] syz_tun: left allmulticast mode [ 67.144978][ T6472] xt_hashlimit: size too large, truncated to 1048576 [ 67.285508][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.286999][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.311356][ T6472] x9: renamed from bridge_slave_0 (while UP) [ 67.311835][ T6477] netlink: 'syz.2.397': attribute type 16 has an invalid length. [ 67.311848][ T6477] netlink: 'syz.2.397': attribute type 17 has an invalid length. [ 67.331395][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.331459][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.335355][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.335389][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.454596][ T3273] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 67.457707][ T3273] bond1: (slave veth3): making interface the new active one [ 67.460404][ T3273] bond1: active interface up! [ 67.484890][ T6499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.486233][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.511354][ C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.518574][ T6512] squashfs: Unknown parameter '' [ 67.611277][ T6520] netlink: 'syz.1.407': attribute type 2 has an invalid length. [ 67.752269][ T6535] EXT4-fs: Ignoring removed bh option [ 67.757719][ T6535] EXT4-fs: inline encryption not supported [ 67.761570][ T6535] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.775006][ T6535] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.412: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.778040][ T6535] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.778963][ T6535] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 67.780753][ T6535] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.412: lblock 0 mapped to illegal pblock 48 (length 1) [ 67.780768][ T6535] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.785027][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 67.785037][ C1] EXT4-fs (loop2): initial error at time 67: ext4_map_blocks:791: inode 3: block 2 [ 67.785055][ C1] EXT4-fs (loop2): last error at time 67: ext4_map_blocks:791: inode 3: block 48 [ 67.785422][ T6535] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 67.785439][ T6535] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.412: Failed to acquire dquot type 0 [ 67.785451][ T6535] loop2: lost filesystem error report for type 5 error -117 [ 67.796260][ T6535] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 67.796295][ T6535] loop2: lost filesystem error report for type 5 error -117 [ 67.797040][ T6535] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.412: mark_inode_dirty error [ 67.797062][ T6535] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.797183][ T6535] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 67.797231][ T6535] EXT4-fs (loop2): 1 orphan inode deleted [ 67.797743][ T6535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.811249][ T6535] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 16: comm syz.2.412: lblock 0 mapped to illegal pblock 16 (length 1) [ 67.816967][ T3273] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:10: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.818020][ T3273] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 67.818045][ T3273] EXT4-fs error (device loop2): ext4_write_dquot:7014: comm kworker/u8:10: Failed to commit dquot type 0 [ 67.818789][ T3273] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 67.880090][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.880314][ T4721] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.880331][ T4721] loop2: lost filesystem error report for type 5 error -117 [ 67.881513][ T4721] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 67.881529][ T4721] loop2: lost filesystem error report for type 5 error -117 [ 67.881809][ T4721] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 67.881823][ T4721] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.915251][ T6541] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 68.110054][ T30] audit: type=1326 audit(68.100:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.5.415" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91177aa8 code=0x0 [ 68.136254][ T6550] set_capacity_and_notify: 3 callbacks suppressed [ 68.137681][ T6550] loop1: detected capacity change from 0 to 1024 [ 68.146146][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.160312][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.368908][ T6570] syzkaller0: entered promiscuous mode [ 68.370075][ T6570] syzkaller0: entered allmulticast mode [ 68.728078][ T6599] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.047203][ T6622] pim6reg9: entered allmulticast mode [ 69.087071][ T6630] netlink: 'syz.0.440': attribute type 11 has an invalid length. [ 69.167090][ T6639] lapbether: lapb_data_request error - 4 [ 69.269847][ T6645] binder: 6644:6645 ioctl c018620b 0 returned -14 [ 69.272250][ T6645] 9p: Bad value for 'rfdno' [ 69.605200][ T6689] netlink: 'syz.1.455': attribute type 46 has an invalid length. [ 69.608448][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 69.608474][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 69.608488][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 69.608494][ T50] Workqueue: hci3 hci_rx_work [ 69.608510][ T50] Call trace: [ 69.608513][ T50] show_stack+0x2c/0x3c (C) [ 69.608530][ T50] __dump_stack+0x30/0x40 [ 69.608542][ T50] dump_stack_lvl+0xd8/0x12c [ 69.608554][ T50] dump_stack+0x1c/0x28 [ 69.608565][ T50] sysfs_warn_dup+0x9c/0xb8 [ 69.608577][ T50] sysfs_create_dir_ns+0x190/0x1f4 [ 69.608587][ T50] kobject_add_internal+0x290/0x6f0 [ 69.608599][ T50] kobject_add_varg+0x9c/0xe8 [ 69.608609][ T50] kobject_add+0x110/0x1c8 [ 69.608618][ T50] device_add+0x394/0x9f0 [ 69.608628][ T50] hci_conn_add_sysfs+0xbc/0x1e8 [ 69.608641][ T50] le_conn_complete_evt+0xc68/0x10f8 [ 69.608653][ T50] hci_le_conn_complete_evt+0x114/0x3d8 [ 69.608675][ T50] hci_le_meta_evt+0x2b0/0x46c [ 69.608687][ T50] hci_event_packet+0x4c0/0x9c8 [ 69.608699][ T50] hci_rx_work+0x2f4/0xd78 [ 69.608708][ T50] process_scheduled_works+0x788/0x10b8 [ 69.608719][ T50] worker_thread+0x798/0xbd0 [ 69.608728][ T50] kthread+0x304/0x3d4 [ 69.608736][ T50] ret_from_fork+0x10/0x20 [ 69.610438][ T50] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.610470][ T50] Bluetooth: hci3: failed to register connection device [ 69.622964][ T6689] dvmrp8: entered allmulticast mode [ 69.987230][ T6694] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 69.987966][ T6694] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 70.318340][ T6710] syz.5.460 (6710) used obsolete PPPIOCDETACH ioctl [ 70.467275][ T6710] loop5: detected capacity change from 0 to 8192 [ 70.470815][ T6710] vfat: Unknown parameter '0xffffffffffffffffO3jO]D' [ 70.654455][ T6738] __nla_validate_parse: 7 callbacks suppressed [ 70.655734][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.467'. [ 70.657232][ T6738] nbd: must specify an index to disconnect [ 70.677000][ T6738] binder: 6737:6738 tried to acquire reference to desc 0, got 1 instead [ 70.677406][ T6738] binder: 6737:6738 got transaction with invalid data ptr [ 70.677561][ T6738] binder: 6737:6738 transaction async to 6737:0 failed 6/29201/-14, code 0 size 0-24 line 3496 [ 70.677759][ T6738] binder: 6737:6738 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 70.677769][ T6738] binder: 6738 RLIMIT_NICE not set [ 70.677779][ T6738] binder: 6738 RLIMIT_NICE not set [ 70.677822][ T6738] binder: send failed reply for transaction 5 to 6737:6738 [ 70.677857][ T6738] binder: 6737:6738 transaction 5 fd fixups failed 29201/-12, line 5083 [ 70.783311][ T6748] loop3: detected capacity change from 0 to 128 [ 70.841715][ T6754] loop3: detected capacity change from 0 to 512 [ 70.849100][ T6754] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.470: iget: bad i_size value: 38620345925642 [ 70.849117][ T6754] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.849252][ T6754] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.470: couldn't read orphan inode 15 (err -117) [ 70.849263][ T6754] loop3: lost filesystem error report for type 5 error -117 [ 70.850264][ T6754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.903064][ T4474] binder: undelivered TRANSACTION_COMPLETE [ 70.905010][ T4474] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.905043][ T4474] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.893574][ T6752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.470: bg 0: block 5: invalid block bitmap [ 71.906311][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'. [ 71.911682][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'. [ 71.923614][ T6759] coredump: 268(syz.2.472): Core dump to core aborted: cannot preserve file permissions [ 71.981653][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.192224][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 72.192268][ T6800] netlink: 'syz.0.482': attribute type 5 has an invalid length. [ 72.192289][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'. [ 72.229333][ T6800] geneve2: entered promiscuous mode [ 72.229378][ T6800] geneve2: entered allmulticast mode [ 72.552863][ C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.679307][ T6793] loop2: detected capacity change from 0 to 256 [ 72.681563][ T6793] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.985235][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 73.151697][ T6844] loop5: detected capacity change from 0 to 512 [ 73.165724][ T6844] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 73.593092][ C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 74.470200][ T4729] Bluetooth: hci3: Unknown advertising packet type: 0x76 [ 74.470240][ T4729] Bluetooth: hci3: Malformed LE Event: 0x0d [ 74.632830][ C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 74.959726][ T6877] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 74.959766][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.496'. [ 74.960083][ T6877] dummy0: entered promiscuous mode [ 74.960107][ T6877] dummy0: entered allmulticast mode [ 74.960903][ T6877] bridge0: port 3(dummy0) entered blocking state [ 74.960961][ T6877] bridge0: port 3(dummy0) entered disabled state [ 75.248004][ T6882] loop2: detected capacity change from 0 to 256 [ 75.637973][ T6902] loop2: detected capacity change from 0 to 1024 [ 75.647679][ T6902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.674253][ T6902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 75.674306][ T6902] System zones: 0-1, 3-36 [ 75.679876][ T6902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.725427][ T6902] ip6t_srh: unknown srh match flags 4000 [ 75.838561][ T30] audit: type=1326 audit(75.830:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.849716][ T30] audit: type=1326 audit(75.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.849761][ T30] audit: type=1326 audit(75.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.849796][ T30] audit: type=1326 audit(75.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.855487][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.856298][ T30] audit: type=1326 audit(75.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=242 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.856326][ T30] audit: type=1326 audit(75.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.856350][ T30] audit: type=1326 audit(75.840:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.856366][ T30] audit: type=1326 audit(75.850:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.856381][ T30] audit: type=1326 audit(75.850:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.508" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9ad77aa8 code=0x7ffc0000 [ 75.960864][ T6928] sch_fq: defrate 512 ignored. [ 75.975408][ T6929] loop2: detected capacity change from 0 to 2048 [ 76.025100][ T6929] loop2: p1 < > p4 [ 76.034822][ T6929] loop2: p4 size 8388608 extends beyond EOD, truncated [ 76.199658][ T6955] loop3: detected capacity change from 0 to 512 [ 76.234010][ T6955] EXT4-fs: Ignoring removed bh option [ 76.245811][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.248637][ T6955] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 76.265284][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.269525][ T6955] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.517: corrupted in-inode xattr: e_value size too large [ 76.269565][ T6955] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.272523][ T6955] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.517: couldn't read orphan inode 15 (err -117) [ 76.272876][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 76.272896][ C1] EXT4-fs (loop3): initial error at time 76: ext4_iget_extra_inode:5128: inode 15 [ 76.272934][ C1] EXT4-fs (loop3): last error at time 76: ext4_iget_extra_inode:5128: inode 15 [ 76.280429][ T6955] loop3: lost filesystem error report for type 5 error -117 [ 76.281682][ T6955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.358828][ T6959] block nbd0: shutting down sockets [ 76.361938][ T6977] binder: 6962:6977 got transaction to invalid handle, 1 [ 76.361978][ T6977] binder: 6962:6977 cannot find target node [ 76.362039][ T6977] binder: 6962:6977 transaction call to 0:0 failed 7/29201/-22, code 0 size 0-0 line 3236 [ 76.367964][ T6955] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.415357][ T6981] loop5: detected capacity change from 0 to 512 [ 76.415681][ T6981] ext4: Unknown parameter 'subj_role' [ 76.505471][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.989700][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.530'. [ 76.993413][ T7017] ------------[ cut here ]------------ [ 76.993422][ T7017] WARNING: fs/exec.c:119 at path_noexec+0x1a4/0x1d4, CPU#1: syz.5.530/7017 [ 76.995714][ T7017] Modules linked in: [ 76.996394][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.5.530 Tainted: G L syzkaller #0 PREEMPT [ 76.998208][ T7017] Tainted: [L]=SOFTLOCKUP [ 76.998934][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 77.000602][ T7017] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 77.001914][ T7017] pc : path_noexec+0x1a4/0x1d4 [ 77.002706][ T7017] lr : path_noexec+0x1a4/0x1d4 [ 77.003472][ T7017] sp : ffff800098ca7a50 [ 77.004146][ T7017] x29: ffff800098ca7a50 x28: dfff800000000000 x27: ffff00011be33900 [ 77.005553][ T7017] x26: 0000000000000011 x25: ffff0000d58ce3c0 x24: 000000002000e000 [ 77.006938][ T7017] x23: 1fffe0001ab19c79 x22: 1fffe0001ab19c80 x21: dfff800000000000 [ 77.008342][ T7017] x20: 0000000000000000 x19: ffff0000d58ce400 x18: 0000000000000000 [ 77.009703][ T7017] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 77.011075][ T7017] x14: 0000000000000004 x13: 0000000000000004 x12: 0000000000000000 [ 77.012410][ T7017] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000000fe [ 77.013807][ T7017] x8 : ffff80009a049000 x7 : 0000000000000000 x6 : 0000000000000000 [ 77.015152][ T7017] x5 : 0000000000000074 x4 : 0000000000000008 x3 : ffff800080c7ce88 [ 77.016502][ T7017] x2 : 0000000000000000 x1 : ffff0000ca550000 x0 : 0000000000000001 [ 77.017838][ T7017] Call trace: [ 77.018330][ T7017] path_noexec+0x1a4/0x1d4 (P) [ 77.019073][ T7017] do_mmap+0x874/0xf0c [ 77.019781][ T7017] vm_mmap_pgoff+0x298/0x46c [ 77.020559][ T7017] ksys_mmap_pgoff+0x364/0x5b4 [ 77.021354][ T7017] __arm64_sys_mmap+0x108/0x120 [ 77.022194][ T7017] invoke_syscall+0x98/0x244 [ 77.022974][ T7017] el0_svc_common+0x19c/0x23c [ 77.023744][ T7017] do_el0_svc+0x4c/0x5c [ 77.024454][ T7017] el0_svc+0x64/0x260 [ 77.025123][ T7017] el0t_64_sync_handler+0x48/0x148 [ 77.025982][ T7017] el0t_64_sync+0x198/0x19c [ 77.026732][ T7017] irq event stamp: 1686 [ 77.027457][ T7017] hardirqs last enabled at (1685): [] el0_svc+0x54/0x260 [ 77.029008][ T7017] hardirqs last disabled at (1686): [] el1_brk64+0x20/0x54 [ 77.030453][ T7017] softirqs last enabled at (1680): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 77.032212][ T7017] softirqs last disabled at (1678): [] fpsimd_restore_current_state+0x44/0x9c8 [ 77.033955][ T7017] ---[ end trace 0000000000000000 ]--- [ 77.114629][ T4474] binder: undelivered TRANSACTION_ERROR: 29201