last executing test programs: 5m1.131525751s ago: executing program 4 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x50}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 5m0.540580375s ago: executing program 4 (id=53): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000050}, 0x840) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xbfdf}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 5m0.028234338s ago: executing program 4 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) io_pgetevents(0x0, 0xcd, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x4e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) 4m59.731334801s ago: executing program 4 (id=61): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000880), 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 4m59.215086594s ago: executing program 4 (id=67): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}, @NFQA_VERDICT_HDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x4081) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000240)='./file2\x00', 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES8], 0x2, 0x1b4, &(0x7f0000000300)="$eJzsVU+L00AU/71k2jQexKsieFC0PbRN45+rnqQfwA9gaWMtpqhNQVs8xFO/hwj9Gh7Er+BB2Uv3sCzsYfe6LFkm8yZN2sKyLGzLMj9If7/3ezOZN5ny5n30OXIAnFno4hVS2LiNf0QQAB6Q8l47ig/LihscHwjFNfZ/MP9njibTD50wDEYbRVIFio6NVedioVUdl5p2wwRtSMW41jL+OFg7ghjATnyf7QswiilYWy3M3fpnyQkSBce56guX4cvvFo7SXvb3+FtXircAkiRJpNdTD+XHyE70W41xpXdPpA/ZSLIxsvnJ4AmA05/DT81oMq0Php1+0A/I95++8J553nO/+W4QBp76pdwSFv8hJNcAyJ7q5vIlAHvcYG9hHbp8zpO7Ur5G9eFSE6+n5yYsCL+yudzbId/xBo9RAfAlpqWrC0e6pTYINkQatERuHbW3SppodD+GvRkIxCO9OQQsPW2BUhb4WSAK250Bd2VpjzhuM8+ZF8z6ztJ3kZA9CPscVWOgjK+d8XjUkpZSqadrVp5/J0bugOSqJ+Xi5u47G07FwMDAwMDAwGCncR4AAP//mMZQbw==") bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() bind$alg(r0, 0x0, 0x0) r5 = accept$alg(r0, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r7, 0x4) llistxattr(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) 4m58.531128219s ago: executing program 4 (id=72): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xd4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xa0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x88, 0x1, [@m_mpls={0x54, 0x17, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xc90c6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x5, 0x225, 0x551}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x8000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7016d4e124c4ccc88db54e49592f869659da96436053c995cae45e63b766d73a2f72cee0393ddc9d", 0x28}], 0x1}}], 0x1, 0x20000048) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m58.484182829s ago: executing program 32 (id=72): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xd4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xa0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x88, 0x1, [@m_mpls={0x54, 0x17, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xc90c6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x5, 0x225, 0x551}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x8000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7016d4e124c4ccc88db54e49592f869659da96436053c995cae45e63b766d73a2f72cee0393ddc9d", 0x28}], 0x1}}], 0x1, 0x20000048) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m53.919806359s ago: executing program 0 (id=968): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001cc0)={0x2020}, 0x2020) pread64(r6, &(0x7f0000000300)=""/94, 0x5e, 0x227) syz_clone3(&(0x7f0000000a80)={0x440a0000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340), {0x38}, &(0x7f0000000400)=""/65, 0x41, 0x0, &(0x7f0000000480)=[r2], 0x1, {r6}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@bsdgroups}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bdad, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2m39.968225606s ago: executing program 0 (id=979): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c481abccf61b80bc8ffa10a4a800"/32], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324", 0x12}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="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", 0x864}], 0x2}}], 0x1, 0x11) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 2m39.585900498s ago: executing program 0 (id=982): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x4, 0x80800000, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8800) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m37.152830325s ago: executing program 0 (id=988): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) keyctl$revoke(0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') r8 = epoll_create1(0x0) epoll_pwait2(r8, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f00000000c0)={0x40000039}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r8, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000280)={[{@noblock_validity}, {@noinit_itable}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") 2m31.99283343s ago: executing program 0 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}}, 0x0) 2m28.786028972s ago: executing program 0 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$eJzslr1u01AUx//XtpwEBSExsjAQCRhwbAcQC4gsTAxIQCIGhoiYKGCIlGQgkVDgCViYkBgY2HkBJFj7EFXaqUu6deni6vpe27eRnaT56tDzk3r6t318fD6s44AgiAvL/t7ROEA+1EWUkJPnD/TER1P8d/OHn/8/fVL/9vr3Tm5sFdJiBsHizzcA/Kvq6Mf3nr67JP+/gBbrl9BwW+o6GCypeTI1qT0wvJL6naI73N+y3rZ9z3rT8Ztc2Nw43LjcVKbzm3xlaCr5MeV6bzB83/B9r7tBMa9/k6qGh0p+6rwsiGxtpX8ONDhSV8DwXOoHyEW9ES1R6r9mJPH1mfWbWGP9tWLKJZ7KGeJcvZw5KhPAcokBLA74EytVii/yld3kO5QhdIQimuh6In/Xt1QFf9Hn+MDYelfZas1cZhZ/H4t7ojPBSByHPlcyAgajBR9hYpluJPsp+MVwU9lPYpX8CD81fITl3mB4p/2h0fJa3kfXrdy379r2PbccLiJhZ+y/QrifLiXxU79JHJOZ+NTo97uOsPGxK2zaxtXC/afh1g1xzIdrTsXNK5rJPwNGPMg/qvOjzFIIgiC2ynWw40BiREJ+TaD81n12jjkSBEEQBEEQBEEQBLEaJwEAAP//63FC3Q==") syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) kcmp(0x0, 0xffffffffffffffff, 0x4, r0, r3) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x80}}}, @common=@inet=@hashlimit3={{0x158}, {'gretap0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e24, 0xf4, @remote, 0x1}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) readahead(r6, 0x6, 0x1000009) userfaultfd(0x801) 2m13.153748881s ago: executing program 33 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$eJzslr1u01AUx//XtpwEBSExsjAQCRhwbAcQC4gsTAxIQCIGhoiYKGCIlGQgkVDgCViYkBgY2HkBJFj7EFXaqUu6deni6vpe27eRnaT56tDzk3r6t318fD6s44AgiAvL/t7ROEA+1EWUkJPnD/TER1P8d/OHn/8/fVL/9vr3Tm5sFdJiBsHizzcA/Kvq6Mf3nr67JP+/gBbrl9BwW+o6GCypeTI1qT0wvJL6naI73N+y3rZ9z3rT8Ztc2Nw43LjcVKbzm3xlaCr5MeV6bzB83/B9r7tBMa9/k6qGh0p+6rwsiGxtpX8ONDhSV8DwXOoHyEW9ES1R6r9mJPH1mfWbWGP9tWLKJZ7KGeJcvZw5KhPAcokBLA74EytVii/yld3kO5QhdIQimuh6In/Xt1QFf9Hn+MDYelfZas1cZhZ/H4t7ojPBSByHPlcyAgajBR9hYpluJPsp+MVwU9lPYpX8CD81fITl3mB4p/2h0fJa3kfXrdy379r2PbccLiJhZ+y/QrifLiXxU79JHJOZ+NTo97uOsPGxK2zaxtXC/afh1g1xzIdrTsXNK5rJPwNGPMg/qvOjzFIIgiC2ynWw40BiREJ+TaD81n12jjkSBEEQBEEQBEEQBLEaJwEAAP//63FC3Q==") syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) kcmp(0x0, 0xffffffffffffffff, 0x4, r0, r3) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x80}}}, @common=@inet=@hashlimit3={{0x158}, {'gretap0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e24, 0xf4, @remote, 0x1}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) readahead(r6, 0x6, 0x1000009) userfaultfd(0x801) 11.47444669s ago: executing program 2 (id=1556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) dup(r3) 9.970824521s ago: executing program 1 (id=1563): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x2, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) close(r5) socket$nl_route(0x10, 0x3, 0x0) lseek(r0, 0x10, 0x3) 8.866409908s ago: executing program 2 (id=1569): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@init_itable}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x200000, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) sendto$inet6(r1, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) clock_getres(0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) 8.66290126s ago: executing program 1 (id=1571): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000002000000020000000400000000000000", @ANYRES32, @ANYRES8=r0, @ANYRES32, @ANYBLOB="00000000000000000000040000000000000000000000000000000000bdf01b8ea6678e0089ad5094fc6d15aace8029cef5320eac74428d50384569d42fbebfc56bd96df368b0ca8c8565a0aa46272222c806d367b16a8880959d9e1f88b93c61acda70519d50ea2ebaddf9e9f6ed53b1dc94dd50f081feed2336c6d63bc298629b97dfa3ed7519e38464a8e35eeb679ba22c2ea6a77a13b998ef3e905285c8b132292bad538fb63ebb4b985797afc37b88be1b1f1fbf19fb41b91bf1d764e30dda709b768cd6630872b9306c0e0737303114bf9de496932336f3d99499d6db77134d2ad027ae3e5b622e9506c70d55692470512c164868c4"], 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4d30356, r8}) 7.745689366s ago: executing program 1 (id=1576): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) kcmp(r2, 0xffffffffffffffff, 0x4, r0, 0xffffffffffffffff) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) munlockall() 6.695849853s ago: executing program 2 (id=1578): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 6.218912166s ago: executing program 2 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 6.092565438s ago: executing program 1 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306050000000000200000000000000005000100"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 4.927403505s ago: executing program 2 (id=1587): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000780)={[{@barrier}, {@autodefrag}, {@fatal_errors_bug}, {@discard_sync}, {@clear_cache}, {@commit}, {@max_inline={'max_inline', 0x3d, [0x30, 0x38, 0x31, 0x39]}}, {@barrier}, {@nospace_cache}]}, 0x2, 0x55ae, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 4.496197628s ago: executing program 1 (id=1590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.386764069s ago: executing program 1 (id=1592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c2", 0xf}], 0x2) 4.148890461s ago: executing program 6 (id=1596): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="d8", 0x1}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 3.302163737s ago: executing program 6 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) dup(r3) 3.180480087s ago: executing program 2 (id=1599): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x28, 0x2f, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x28}}, 0xc000) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.942820869s ago: executing program 3 (id=1602): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.921761229s ago: executing program 3 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 2.80977116s ago: executing program 3 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002640)={'veth1_to_hsr\x00', @random="76f8c06b1100"}) 2.410514003s ago: executing program 6 (id=1607): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b52, &(0x7f00000001c0)='g') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0xdfd2, 0x9, 0x19, 0xa}, {0x3, 0x4, 0x80, 0x3}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x2, r5, 0x0, 0x8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) 2.275302454s ago: executing program 5 (id=1610): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b52, &(0x7f00000001c0)='g') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0xdfd2, 0x9, 0x19, 0xa}, {0x3, 0x4, 0x80, 0x3}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x2, r5, 0x0, 0x8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) 1.886203047s ago: executing program 3 (id=1611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 1.885117696s ago: executing program 3 (id=1612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306050000000000200000000000000005000100"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 1.867445076s ago: executing program 3 (id=1613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000000000000000000018010000202075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbb"], 0x72) 1.456030039s ago: executing program 6 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 1.32658311s ago: executing program 6 (id=1615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x9, 0x10}}}}, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 1.048341252s ago: executing program 5 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='(\x14\x06\x00\x00\']\xda\xe8\xbb\xc6?k \xfe\xa9\xc5\x96\xf3\xad\xfe\xd4-\t[&\\^\'$\xa9\x86\x825\t=\xc2\x1aWJ\xc4\xc9\xfa\tC\x9d:\x1b\xf1\xf2K\x91\xd6\xfc\x12\xe3\xdd$F\x03<\xb1\xcb\x9c\x19\x02H;\\\x8b+\x1a\x03\"e\xdcC \xf3\x10\xf4\x8c\x0e\xb0\x84\xcc!|:;tQ\xc5\xf0\fj\xa9\x0eY\xa5\xcb\x8f-w\\\xe9\x99\x9e+S/\r,\xe2q\xee\\+\xf9\\u\xe36\xe2%\xc8i\x81,<\x87\x0fV\xa5!\x7f\xfc\xb8\xd83\x14\xd4Zw\bm]^\xd4\x88\xe1N\xda\xd6k\a1R\xf3)\xe2\x01=\x15\xf5\x7fe\xf44\xa8\t\xc6)\xb0\x91\'\x86\x88\xe2\'\xb6\xb2\xfe\xce\x17\xc2\x02\xe6\x97j(\xee\x99\xf9\x04ME\xba\xd9*\xe8y\x8e\xf7R@\xf8{}g\xf4\x91\x1131\'r\n{<-\xc5\xb8\xd1\xf3-F^\t\x8b\x85\xa4\xbd\x93\x90\xb2\f\xf47{\x1c\xba\x04@\xe4\xb1\xba\xce\xf8\xecjSr\xb1\xf2UYO\xd3\x91c\x12\x7fH\xb5&\xa6#\xbd\x96\xbc\xda\x00\xd8B\x02\xdb\x15\xce\x95C\x9co\x1a\r\\\xc0\xdb\xd2\xfa\x8eFc\xe2\xaa\xbe(\x19\r)\xea\xa7Ul\xbe8\xcb\xc7\xdf\x92\xed\xa4W\xf5\x01/T^\xba>\x91~\xab\xdd5\x9a\xe4s\xce\x9f\xe0\x93\xc4j\xb1]\xc7\xb4\x81\xc4\xe4n\xe4\x03Z\x80\xf9\x16p\x9d\xf1g~\xea\x96\x8e<\xdd*\x9b^\xecp\x05\x94\xe3\x84\xe7\xb3\"D\x8e\xdc\xe0\xe1\xde{2_m`\xc0\xdf\x8b\x86\xb1\x0eD\xa8\x9b\x8c\xa8\xe7i0\x99X\x1a\x16=v\vU\x14\xf4\xfb\x97\xa4\x06^0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) 18.149909ms ago: executing program 5 (id=1620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x0) 0s ago: executing program 5 (id=1621): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b52, &(0x7f00000001c0)='g') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0xdfd2, 0x9, 0x19, 0xa}, {0x3, 0x4, 0x80, 0x3}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 36 [ 101.395557][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 101.396994][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 101.398292][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 101.399655][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 101.401791][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 101.403228][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 101.404630][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 101.406014][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 101.407280][ T6149] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 101.408676][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 101.410166][ T6149] syz.1.403: attempt to access beyond end of device [ 101.410166][ T6149] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 101.412138][ T6149] syz.1.403: attempt to access beyond end of device [ 101.412138][ T6149] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 101.414023][ T6149] syz.1.403: attempt to access beyond end of device [ 101.414023][ T6149] loop1: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 101.415963][ T6149] syz.1.403: attempt to access beyond end of device [ 101.415963][ T6149] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 101.417899][ T6149] syz.1.403: attempt to access beyond end of device [ 101.417899][ T6149] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 101.419913][ T6149] syz.1.403: attempt to access beyond end of device [ 101.419913][ T6149] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 101.422150][ T6149] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[4055] [ 101.424945][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 101.426252][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 101.427669][ T6149] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.428952][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 101.430177][ T6149] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.431528][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 101.432999][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 101.434372][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 101.435619][ T6149] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.436911][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 101.438145][ T6149] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.439503][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 101.440886][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 101.442214][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 101.443583][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 101.444829][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 101.446185][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 101.447445][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 101.448713][ T6149] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.450081][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 101.451327][ T6149] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.452650][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 101.454014][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 101.455251][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 101.456600][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 101.457837][ T6149] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.459148][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 101.460554][ T6149] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.461800][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 101.463031][ T6149] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 101.464316][ T6149] syz.1.403: attempt to access beyond end of device [ 101.464316][ T6149] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 101.466215][ T6149] syz.1.403: attempt to access beyond end of device [ 101.466215][ T6149] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 101.468091][ T6149] syz.1.403: attempt to access beyond end of device [ 101.468091][ T6149] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 101.471023][ T6149] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[5297] [ 101.791713][ T6166] loop2: detected capacity change from 0 to 512 [ 101.798156][ T6166] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 101.801977][ T6166] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 101.810301][ T6166] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.398: Invalid inode table block 1 in block_group 0 [ 101.813286][ T6166] EXT4-fs (loop2): get root inode failed [ 101.814614][ T6166] EXT4-fs (loop2): mount failed [ 101.989797][ T6175] ubi0: attaching mtd0 [ 101.991701][ T6175] ubi0: scanning is finished [ 102.182351][ T6175] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 102.183484][ T6175] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 102.184534][ T6175] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 102.185485][ T6175] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 102.186517][ T6175] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 102.187543][ T6175] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 102.188720][ T6175] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3362677033 [ 102.190089][ T6175] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 102.204629][ T6176] ubi0: background thread "ubi_bgt0d" started, PID 6176 [ 102.280434][ T6172] loop0: detected capacity change from 0 to 32768 [ 102.281976][ T6172] XFS: noikeep mount option is deprecated. [ 102.316518][ T6172] XFS (loop0): Mounting V5 Filesystem [ 102.351896][ T6172] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 102.367628][ T6172] XFS (loop0): Starting recovery (logdev: internal) [ 102.386216][ T6172] XFS (loop0): Ending recovery (logdev: internal) [ 102.402622][ T6172] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 102.407211][ T6172] XFS (loop0): Unmount and run xfs_repair [ 102.515705][ T6189] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 102.517210][ T6189] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 102.791944][ T4326] XFS (loop0): Unmounting Filesystem [ 103.251824][ T6203] loop3: detected capacity change from 0 to 256 [ 103.732807][ T6210] loop5: detected capacity change from 0 to 512 [ 103.736018][ T6209] netlink: 'syz.1.419': attribute type 10 has an invalid length. [ 103.738404][ T6210] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 103.787079][ T6210] EXT4-fs (loop5): 1 truncate cleaned up [ 103.788071][ T6210] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 103.792561][ T6210] netlink: 'syz.5.417': attribute type 7 has an invalid length. [ 104.129846][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 104.225825][ T6209] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.269208][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 104.315683][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.421'. [ 104.849605][ T6234] sp0: Synchronizing with TNC [ 105.126416][ T6237] loop0: detected capacity change from 0 to 512 [ 105.136715][ T6237] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 105.138507][ T6237] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 105.150757][ T6237] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.425: Invalid inode table block 1 in block_group 0 [ 105.153178][ T6237] EXT4-fs (loop0): get root inode failed [ 105.155116][ T6237] EXT4-fs (loop0): mount failed [ 105.526534][ T6246] ubi: mtd0 is already attached to ubi0 [ 105.653249][ T6250] loop3: detected capacity change from 0 to 512 [ 105.658114][ T6250] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.711032][ T6250] EXT4-fs (loop3): 1 truncate cleaned up [ 105.711922][ T6250] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.721230][ T6250] netlink: 'syz.3.431': attribute type 7 has an invalid length. [ 105.961217][ T6256] loop1: detected capacity change from 0 to 256 [ 106.618359][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 107.308407][ T6268] loop1: detected capacity change from 0 to 128 [ 107.759266][ T6284] loop0: detected capacity change from 0 to 512 [ 107.767352][ T6284] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 107.768856][ T6284] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 107.854877][ T6289] sp0: Synchronizing with TNC [ 107.948136][ T6284] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.443: Invalid inode table block 1 in block_group 0 [ 107.953893][ T6284] EXT4-fs (loop0): get root inode failed [ 107.954884][ T6284] EXT4-fs (loop0): mount failed [ 108.295970][ T6294] loop2: detected capacity change from 0 to 128 [ 108.309131][ T6294] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.445'. [ 108.416709][ T6299] ubi: mtd0 is already attached to ubi0 [ 108.965864][ T6327] loop5: detected capacity change from 0 to 512 [ 108.990391][ T6327] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 108.991905][ T6327] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 108.994497][ T6327] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.458: Invalid inode table block 1 in block_group 0 [ 108.997033][ T6327] EXT4-fs (loop5): get root inode failed [ 108.998007][ T6327] EXT4-fs (loop5): mount failed [ 109.297073][ T6332] loop2: detected capacity change from 0 to 512 [ 109.298486][ T6332] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.299477][ T6332] EXT4-fs: inline encryption not supported [ 109.300410][ T6332] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.309402][ T6332] EXT4-fs (loop2): Test dummy encryption mode enabled [ 109.349411][ T6332] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.395337][ T6339] loop3: detected capacity change from 0 to 128 [ 109.401028][ T6332] EXT4-fs (loop2): 1 truncate cleaned up [ 109.402035][ T6332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.482908][ T6341] ubi: mtd0 is already attached to ubi0 [ 109.706433][ T6339] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.460'. [ 109.971571][ T6364] loop3: detected capacity change from 0 to 128 [ 110.062854][ T6364] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.472'. [ 110.439887][ T6376] loop1: detected capacity change from 0 to 512 [ 110.441670][ T6376] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 110.443103][ T6376] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 110.445960][ T6376] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.476: Invalid inode table block 1 in block_group 0 [ 110.448229][ T6376] EXT4-fs (loop1): get root inode failed [ 110.449139][ T6376] EXT4-fs (loop1): mount failed [ 110.624380][ T6381] ubi: mtd0 is already attached to ubi0 [ 110.989685][ T6397] loop5: detected capacity change from 0 to 128 [ 111.007882][ T6397] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.484'. [ 111.327440][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 111.569247][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 111.965744][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 112.334555][ T6435] sp0: Synchronizing with TNC [ 112.754058][ T6443] loop5: detected capacity change from 0 to 128 [ 112.772171][ T6443] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.501'. [ 112.875469][ T6453] loop0: detected capacity change from 0 to 512 [ 112.876812][ T6453] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.881068][ T6453] EXT4-fs: inline encryption not supported [ 112.887058][ T6453] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.908864][ T6453] EXT4-fs (loop0): Test dummy encryption mode enabled [ 112.914315][ T6453] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.958313][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.507'. [ 112.964497][ T6453] EXT4-fs (loop0): 1 truncate cleaned up [ 112.965357][ T6453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.508494][ T6481] loop2: detected capacity change from 0 to 128 [ 113.511700][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 113.528211][ T6481] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.513'. [ 113.820125][ T6492] sp0: Synchronizing with TNC [ 114.149812][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 114.677032][ T6509] overlayfs: missing 'lowerdir' [ 114.699291][ T6513] loop2: detected capacity change from 0 to 128 [ 114.902373][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 115.865740][ T6541] loop2: detected capacity change from 0 to 128 [ 116.002211][ T6544] sp0: Synchronizing with TNC [ 116.259495][ T6549] overlayfs: missing 'lowerdir' [ 118.725600][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 119.040478][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.564820][ T6597] loop3: detected capacity change from 0 to 128 [ 119.706698][ T6607] loop3: detected capacity change from 0 to 512 [ 119.709163][ T6607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.716272][ T6607] EXT4-fs (loop3): 1 truncate cleaned up [ 119.717288][ T6607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.721673][ T6607] netlink: 'syz.3.556': attribute type 7 has an invalid length. [ 120.109000][ T6605] netlink: 'syz.5.555': attribute type 10 has an invalid length. [ 120.168594][ T6605] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.230790][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 120.708200][ T6627] loop2: detected capacity change from 0 to 512 [ 120.712614][ T6627] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 120.716343][ T6627] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 120.728541][ T6627] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.562: Invalid inode table block 1 in block_group 0 [ 120.732064][ T6627] EXT4-fs (loop2): get root inode failed [ 120.735991][ T6627] EXT4-fs (loop2): mount failed [ 120.998674][ T6632] ubi: mtd0 is already attached to ubi0 [ 120.999982][ T6632] ubi0: detaching mtd0 [ 121.001546][ T6632] ubi0: mtd0 is detached [ 122.001908][ T6658] loop0: detected capacity change from 0 to 512 [ 122.013782][ T6658] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.036393][ T6658] EXT4-fs (loop0): 1 truncate cleaned up [ 122.050454][ T6658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.064162][ T6658] netlink: 'syz.0.571': attribute type 7 has an invalid length. [ 122.126080][ T6662] loop5: detected capacity change from 0 to 128 [ 122.165784][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 123.301127][ T6680] loop0: detected capacity change from 0 to 512 [ 123.309793][ T6680] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 123.314722][ T6680] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 123.326117][ T6680] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.579: Invalid inode table block 1 in block_group 0 [ 123.328677][ T6680] EXT4-fs (loop0): get root inode failed [ 123.329787][ T6680] EXT4-fs (loop0): mount failed [ 123.540620][ T6689] ubi0: attaching mtd0 [ 123.543383][ T6689] ubi0: scanning is finished [ 123.736950][ T6689] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 123.738194][ T6689] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 123.739429][ T6689] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 123.740610][ T6689] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 123.741842][ T6689] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 123.742988][ T6689] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 123.744362][ T6689] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3362677033 [ 123.745945][ T6689] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 123.748953][ T6690] ubi0: detaching mtd0 [ 123.751286][ T6690] ubi0: mtd0 is detached [ 123.968014][ T6699] loop1: detected capacity change from 0 to 512 [ 123.969803][ T6699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.976508][ T6699] EXT4-fs (loop1): 1 truncate cleaned up [ 123.977590][ T6699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 123.986000][ T6699] netlink: 'syz.1.583': attribute type 7 has an invalid length. [ 124.171343][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 124.781494][ T6717] loop3: detected capacity change from 0 to 128 [ 124.791568][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 125.472397][ T6729] loop3: detected capacity change from 0 to 512 [ 125.474299][ T6729] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 125.475928][ T6729] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 125.477789][ T6729] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.594: Invalid inode table block 1 in block_group 0 [ 125.480208][ T6729] EXT4-fs (loop3): get root inode failed [ 125.481097][ T6729] EXT4-fs (loop3): mount failed [ 125.576590][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 125.839324][ T6735] ubi0: attaching mtd0 [ 125.843923][ T6735] ubi0: scanning is finished [ 125.896085][ T6735] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 125.897380][ T6735] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 125.898541][ T6735] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 125.899604][ T6735] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 125.900760][ T6735] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 125.901839][ T6735] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 125.903005][ T6735] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3362677033 [ 125.904617][ T6735] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 125.906069][ T6741] ubi0: background thread "ubi_bgt0d" started, PID 6741 [ 125.906102][ T6746] ubi0: detaching mtd0 [ 125.908653][ T6746] ubi0: mtd0 is detached [ 125.915130][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.916225][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.048719][ T6752] netlink: 'syz.1.600': attribute type 10 has an invalid length. [ 126.176669][ T6755] sp0: Synchronizing with TNC [ 126.881560][ T6769] loop1: detected capacity change from 0 to 512 [ 126.894441][ T6769] EXT4-fs: Ignoring removed oldalloc option [ 127.268089][ T6769] EXT4-fs (loop1): 1 truncate cleaned up [ 127.271257][ T6769] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.539588][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.242019][ T6795] loop0: detected capacity change from 0 to 512 [ 128.249638][ T6795] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 128.255576][ T6795] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 128.265788][ T6795] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.612: Invalid inode table block 1 in block_group 0 [ 128.268105][ T6795] EXT4-fs (loop0): get root inode failed [ 128.269073][ T6795] EXT4-fs (loop0): mount failed [ 128.338977][ T6798] loop3: detected capacity change from 0 to 64 [ 128.349070][ T4904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.525797][ T6800] ubi0: attaching mtd0 [ 128.528339][ T6800] ubi0: scanning is finished [ 128.756035][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.760549][ T6800] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 128.761795][ T6800] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 128.763032][ T6800] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 128.764256][ T6800] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 128.765546][ T6800] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 128.766563][ T6800] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 128.767985][ T6800] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3362677033 [ 128.769628][ T6800] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.771299][ T6804] ubi0: background thread "ubi_bgt0d" started, PID 6804 [ 128.808956][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.232469][ T6809] 9pnet_fd: Insufficient options for proto=fd [ 129.613584][ T6769] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.618024][ T6769] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.619661][ T6769] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.621154][ T6769] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.175596][ T6793] netlink: 'syz.5.613': attribute type 10 has an invalid length. [ 130.212927][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 130.240819][ T6815] sp0: Synchronizing with TNC [ 130.631065][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.626'. [ 130.646274][ T6841] loop3: detected capacity change from 0 to 512 [ 130.650334][ T6841] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 130.670096][ T6841] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 130.707065][ T6841] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.625: Invalid inode table block 1 in block_group 0 [ 130.709572][ T6841] EXT4-fs (loop3): get root inode failed [ 130.710548][ T6841] EXT4-fs (loop3): mount failed [ 130.732264][ T6844] 9pnet_fd: Insufficient options for proto=fd [ 130.895050][ T6850] ubi: mtd0 is already attached to ubi0 [ 131.591099][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 131.899289][ T6874] sp0: Synchronizing with TNC [ 131.921693][ T6878] loop2: detected capacity change from 0 to 512 [ 131.930522][ T6878] EXT4-fs: Ignoring removed oldalloc option [ 131.988815][ T6878] EXT4-fs (loop2): 1 truncate cleaned up [ 131.989784][ T6878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.945140][ T6902] loop5: detected capacity change from 0 to 512 [ 132.959043][ T6902] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 132.969175][ T6902] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 132.992007][ T6902] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.646: Invalid inode table block 1 in block_group 0 [ 132.994665][ T6902] EXT4-fs (loop5): get root inode failed [ 132.995706][ T6902] EXT4-fs (loop5): mount failed [ 133.102037][ T6878] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.103493][ T6878] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.105237][ T6878] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.106678][ T6878] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.228135][ T6909] ubi: mtd0 is already attached to ubi0 [ 133.654412][ T6912] loop1: detected capacity change from 0 to 64 [ 133.819394][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 134.611519][ T6949] sp0: Synchronizing with TNC [ 134.841784][ T6950] overlayfs: overlapping lowerdir path [ 134.869379][ T6952] loop1: detected capacity change from 0 to 64 [ 134.882890][ T6947] overlayfs: overlapping lowerdir path [ 136.455298][ T6996] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 136.548011][ T6996] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.797288][ T7008] sp0: Synchronizing with TNC [ 137.433586][ T7016] mkiss: ax0: crc mode is auto. [ 137.914591][ T7036] loop0: detected capacity change from 0 to 512 [ 137.964292][ T7036] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.996634][ T7036] EXT4-fs (loop0): 1 truncate cleaned up [ 137.997516][ T7036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.002029][ T7036] netlink: 'syz.0.688': attribute type 7 has an invalid length. [ 138.267697][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 138.838496][ T7065] sp0: Synchronizing with TNC [ 139.050113][ T7062] loop0: detected capacity change from 0 to 32768 [ 139.051914][ T7062] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.697 (7062) [ 139.055614][ T7062] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.057345][ T7062] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 139.058714][ T7062] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 139.060051][ T7062] BTRFS info (device loop0): force zstd compression, level 3 [ 139.061116][ T7062] BTRFS info (device loop0): enabling auto defrag [ 139.062103][ T7062] BTRFS info (device loop0): max_inline at 0 [ 139.063240][ T7062] BTRFS info (device loop0): using free space tree [ 139.072779][ T7070] loop3: detected capacity change from 0 to 64 [ 139.088917][ T7073] loop1: detected capacity change from 0 to 64 [ 139.749778][ T7062] BTRFS info (device loop0): enabling ssd optimizations [ 139.793489][ T7062] BTRFS info (device loop0): scrub: started on devid 1 [ 139.813482][ T7062] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 139.818181][ T5494] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 139.863842][ T4326] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.991696][ T4904] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop0 scanned by udevd (4904) [ 140.002526][ T7103] netlink: 'syz.3.704': attribute type 7 has an invalid length. [ 140.098800][ T7113] 9pnet: Could not find request transport: fd0x0000000000000003 [ 141.779861][ T7149] loop1: detected capacity change from 0 to 64 [ 141.893382][ T7141] loop0: detected capacity change from 0 to 32768 [ 142.205264][ T7141] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.213850][ T7141] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 142.215563][ T7141] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 142.217216][ T7141] BTRFS info (device loop0): force zstd compression, level 3 [ 142.218594][ T7141] BTRFS info (device loop0): enabling auto defrag [ 142.219517][ T7141] BTRFS info (device loop0): max_inline at 0 [ 142.220596][ T7141] BTRFS info (device loop0): using free space tree [ 143.072351][ T7141] BTRFS info (device loop0): enabling ssd optimizations [ 143.226207][ T11] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 143.269121][ T4326] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.690918][ T7246] loop5: detected capacity change from 0 to 64 [ 145.393962][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 146.936613][ T7313] loop2: detected capacity change from 0 to 64 [ 148.106657][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 148.171164][ T7360] mkiss: ax0: crc mode is auto. [ 148.873867][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 148.985243][ T7397] mkiss: ax0: crc mode is auto. [ 149.587710][ T7409] 9pnet_fd: Insufficient options for proto=fd [ 149.702610][ T7412] loop5: detected capacity change from 0 to 512 [ 149.740941][ T7412] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 149.743237][ T7412] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 149.743508][ T7415] loop3: detected capacity change from 0 to 16 [ 149.747488][ T7415] erofs: (device loop3): mounted with root inode @ nid 36. [ 149.760152][ T7412] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.786: Invalid inode table block 1 in block_group 0 [ 149.784410][ T7412] EXT4-fs (loop5): get root inode failed [ 149.785568][ T7412] EXT4-fs (loop5): mount failed [ 149.802478][ T7422] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 149.804096][ T7422] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 149.808917][ T4337] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 150.067683][ T7436] ubi: mtd0 is already attached to ubi0 [ 151.231129][ T7461] 9pnet_fd: Insufficient options for proto=fd [ 151.263801][ T7463] loop0: detected capacity change from 0 to 16 [ 151.265486][ T7463] erofs: (device loop0): mounted with root inode @ nid 36. [ 151.321768][ T7468] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 151.323338][ T7468] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 151.326452][ T4337] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 151.442309][ T7477] loop0: detected capacity change from 0 to 64 [ 151.751277][ T7484] loop2: detected capacity change from 0 to 512 [ 151.798368][ T7484] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 151.800232][ T7484] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.850232][ T7484] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.803: corrupted inode contents [ 151.888393][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.889518][ T7484] EXT4-fs error (device loop2): ext4_dirty_inode:6133: inode #16: comm syz.2.803: mark_inode_dirty error [ 151.891481][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.892891][ T7484] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.803: corrupted inode contents [ 151.902901][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.907667][ T7484] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.803: mark_inode_dirty error [ 151.931793][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.932920][ T7484] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.803: corrupted inode contents [ 151.955679][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.956816][ T7484] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 151.964408][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.965575][ T7484] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.803: corrupted inode contents [ 151.973054][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.980268][ T7484] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm syz.2.803: mark_inode_dirty error [ 151.983323][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.985972][ T7484] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 151.988366][ T7484] EXT4-fs (loop2): Remounting filesystem read-only [ 151.989833][ T7484] EXT4-fs (loop2): 1 truncate cleaned up [ 152.000067][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 152.002130][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:1: Failed to release dquot type 1 [ 152.006403][ T11] EXT4-fs (loop2): Remounting filesystem read-only [ 152.012426][ T7484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.068741][ T7502] 9pnet_fd: Insufficient options for proto=fd [ 152.075753][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 152.105956][ T7505] loop2: detected capacity change from 0 to 64 [ 153.479682][ T7541] loop0: detected capacity change from 0 to 64 [ 153.485053][ T7539] 9pnet_fd: Insufficient options for proto=fd [ 153.627214][ T7559] loop0: detected capacity change from 0 to 512 [ 153.632229][ T7559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.640766][ T7559] EXT4-fs (loop0): 1 truncate cleaned up [ 153.891336][ T7559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.895955][ T7559] netlink: 'syz.0.826': attribute type 7 has an invalid length. [ 153.998070][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 154.164369][ T7573] mkiss: ax0: crc mode is auto. [ 155.725099][ T7603] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.750202][ T27] audit: type=1326 audit(155.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 155.757470][ T27] audit: type=1326 audit(155.750:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 155.765322][ T27] audit: type=1326 audit(155.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 155.768459][ T27] audit: type=1326 audit(155.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 155.772084][ T7606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.779285][ T27] audit: type=1326 audit(155.770:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 155.906226][ T27] audit: type=1326 audit(155.770:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 155.980084][ T27] audit: type=1326 audit(155.770:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 156.050544][ T27] audit: type=1326 audit(155.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 156.058846][ T27] audit: type=1326 audit(155.770:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95b9e8 code=0x7ffc0000 [ 156.063971][ T7608] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.202547][ T7617] loop3: detected capacity change from 0 to 512 [ 156.204486][ T7617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.246197][ T7617] EXT4-fs (loop3): 1 truncate cleaned up [ 156.255974][ T7617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.263002][ T7617] netlink: 'syz.3.841': attribute type 7 has an invalid length. [ 156.617808][ T7624] loop0: detected capacity change from 0 to 128 [ 156.675302][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 156.703544][ T7631] 9pnet_fd: Insufficient options for proto=fd [ 157.457568][ T7651] loop1: detected capacity change from 0 to 128 [ 158.651020][ T7668] loop5: detected capacity change from 0 to 512 [ 158.684926][ T7668] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.698564][ T7668] EXT4-fs (loop5): 1 truncate cleaned up [ 158.699564][ T7668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 158.701066][ T7670] loop2: detected capacity change from 0 to 128 [ 158.713675][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 158.714729][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 158.723002][ T7679] loop1: detected capacity change from 0 to 64 [ 158.744246][ T7668] netlink: 'syz.5.857': attribute type 7 has an invalid length. [ 158.812489][ T7683] loop2: detected capacity change from 0 to 128 [ 159.196765][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 160.075096][ T7704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 160.126316][ T7708] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 160.189812][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 160.189822][ T27] audit: type=1326 audit(160.180:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.199393][ T27] audit: type=1326 audit(160.180:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.212234][ T27] audit: type=1326 audit(160.190:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.223543][ T27] audit: type=1326 audit(160.190:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.232216][ T27] audit: type=1326 audit(160.190:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.259264][ T27] audit: type=1326 audit(160.190:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.263047][ T27] audit: type=1326 audit(160.190:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b5b9e8 code=0x7ffc0000 [ 160.266689][ T27] audit: type=1326 audit(160.190:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.274998][ T27] audit: type=1326 audit(160.190:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.283179][ T27] audit: type=1326 audit(160.190:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa955b9e8 code=0x7ffc0000 [ 160.339182][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 160.340717][ T7709] netlink: 312 bytes leftover after parsing attributes in process `syz.1.866'. [ 160.719540][ T7728] loop3: detected capacity change from 0 to 128 [ 160.720976][ T7730] loop0: detected capacity change from 0 to 128 [ 160.737781][ T7730] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.871'. [ 160.794514][ T7734] loop3: detected capacity change from 0 to 512 [ 160.797923][ T7734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.806683][ T7734] EXT4-fs (loop3): 1 truncate cleaned up [ 160.807761][ T7734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.821939][ T7734] netlink: 'syz.3.874': attribute type 7 has an invalid length. [ 161.049179][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 161.878720][ T7755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.358784][ T7765] loop3: detected capacity change from 0 to 128 [ 162.363275][ T7765] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.883'. [ 162.465776][ T7769] loop3: detected capacity change from 0 to 128 [ 162.536877][ T7774] loop3: detected capacity change from 0 to 512 [ 162.544354][ T7774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.549003][ T7774] EXT4-fs (loop3): 1 truncate cleaned up [ 162.550036][ T7774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.554957][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 162.558103][ T7774] netlink: 'syz.3.887': attribute type 7 has an invalid length. [ 162.699960][ T7780] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.706446][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 166.173015][ T7843] device bpq0 entered promiscuous mode [ 166.564996][ T7856] loop0: detected capacity change from 0 to 128 [ 166.635101][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.906'. [ 167.043880][ T4337] Bluetooth: Wrong link type (-22) [ 167.151140][ T7873] loop2: detected capacity change from 0 to 64 [ 168.708189][ T7896] loop2: detected capacity change from 0 to 128 [ 168.896440][ T7906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.424025][ T4330] Bluetooth: Wrong link type (-22) [ 170.372005][ T7942] loop1: detected capacity change from 0 to 1024 [ 170.401096][ T7942] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 170.402550][ T7942] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 170.407338][ T7942] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.928: unexpected bad inode w/o EXT4_IGET_BAD [ 170.411765][ T7942] EXT4-fs (loop1): no journal found [ 171.086559][ T7961] netlink: 'syz.2.933': attribute type 7 has an invalid length. [ 172.420184][ T8004] loop2: detected capacity change from 0 to 64 [ 172.541573][ T8008] mkiss: ax0: crc mode is auto. [ 172.721079][ T8012] loop2: detected capacity change from 0 to 512 [ 172.722772][ T8012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.745347][ T8012] EXT4-fs (loop2): 1 truncate cleaned up [ 172.746325][ T8012] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.750374][ T8012] netlink: 'syz.2.948': attribute type 7 has an invalid length. [ 172.839037][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 173.077359][ T8029] loop2: detected capacity change from 0 to 16 [ 173.090600][ T8029] erofs: (device loop2): mounted with root inode @ nid 36. [ 173.164566][ T8032] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 173.165977][ T8032] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 173.170674][ T4337] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 174.405390][ T8046] loop2: detected capacity change from 0 to 512 [ 174.408483][ T8046] EXT4-fs: Ignoring removed oldalloc option [ 174.812135][ T8046] EXT4-fs (loop2): 1 truncate cleaned up [ 174.813076][ T8046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.239738][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 175.515996][ T8056] loop2: detected capacity change from 0 to 64 [ 175.577175][ T8058] loop3: detected capacity change from 0 to 512 [ 175.606171][ T8058] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.652338][ T8058] EXT4-fs (loop3): 1 truncate cleaned up [ 175.653368][ T8058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.681282][ T8058] netlink: 'syz.3.959': attribute type 7 has an invalid length. [ 175.819641][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 176.131258][ T8090] loop0: detected capacity change from 0 to 64 [ 176.249374][ T8093] loop2: detected capacity change from 0 to 16 [ 176.254846][ T8092] mkiss: ax0: crc mode is auto. [ 176.266826][ T8093] erofs: (device loop2): mounted with root inode @ nid 36. [ 176.333489][ T8095] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 176.334982][ T8095] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 176.346897][ T4337] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 177.439977][ T8115] 9pnet_fd: Insufficient options for proto=fd [ 177.701198][ T8125] loop0: detected capacity change from 0 to 512 [ 177.704374][ T8125] EXT4-fs: Ignoring removed oldalloc option [ 178.064589][ T8125] EXT4-fs (loop0): 1 truncate cleaned up [ 178.065491][ T8125] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.433726][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 187.354289][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.355258][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.410178][ T8125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.423939][ T8125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.689969][ T8125] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.691434][ T8125] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.692674][ T8125] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.694055][ T8125] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.942861][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 191.370707][ T8172] tipc: Started in network mode [ 191.371683][ T8172] tipc: Node identity de5bab79a497, cluster identity 4711 [ 191.374553][ T8172] tipc: Enabled bearer , priority 0 [ 191.380349][ T8172] tipc: Resetting bearer [ 191.488180][ T8171] tipc: Disabling bearer [ 191.516723][ T8177] loop3: detected capacity change from 0 to 16 [ 191.530967][ T8177] erofs: (device loop3): mounted with root inode @ nid 36. [ 191.600136][ T8180] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 191.601550][ T8180] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 191.610284][ T4330] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 192.609856][ T8187] loop5: detected capacity change from 0 to 1024 [ 192.620107][ T8187] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 192.621486][ T8187] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 192.627716][ T8187] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.985: unexpected bad inode w/o EXT4_IGET_BAD [ 192.632830][ T8187] EXT4-fs (loop5): no journal found [ 193.667977][ T8189] loop1: detected capacity change from 0 to 128 [ 193.704700][ T8189] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.986'. [ 193.827402][ T8198] tipc: Started in network mode [ 193.828311][ T8198] tipc: Node identity 1608af851d46, cluster identity 4711 [ 193.829693][ T8198] tipc: Enabled bearer , priority 0 [ 193.832562][ T8198] device syzkaller0 entered promiscuous mode [ 195.833778][ T8201] loop0: detected capacity change from 0 to 1024 [ 196.853753][ T8200] loop2: detected capacity change from 0 to 1024 [ 196.878256][ T4950] tipc: Node number set to 189706117 [ 196.978550][ T8201] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 196.980172][ T8201] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 196.984426][ T8200] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 196.985814][ T8200] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 196.995600][ T8201] EXT4-fs error (device loop0): ext4_get_journal_inode:5730: inode #5: comm syz.0.988: unexpected bad inode w/o EXT4_IGET_BAD [ 196.997890][ T8200] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.989: unexpected bad inode w/o EXT4_IGET_BAD [ 197.001896][ T8201] EXT4-fs (loop0): no journal found [ 197.003466][ T8200] EXT4-fs (loop2): no journal found [ 197.284319][ T8163] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.341763][ T8198] tipc: Resetting bearer [ 198.877669][ T8215] loop3: detected capacity change from 0 to 1024 [ 198.906502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.907939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.921679][ T8215] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 198.923255][ T8215] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 198.925424][ T8215] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.992: unexpected bad inode w/o EXT4_IGET_BAD [ 198.927516][ T8215] EXT4-fs (loop3): no journal found [ 198.973117][ T8210] tipc: Resetting bearer [ 202.068996][ T8228] loop2: detected capacity change from 0 to 1024 [ 202.069025][ T8231] loop5: detected capacity change from 0 to 1024 [ 202.071968][ T8231] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 202.073551][ T8231] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 202.076167][ T8231] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.993: unexpected bad inode w/o EXT4_IGET_BAD [ 202.080921][ T8231] EXT4-fs (loop5): no journal found [ 202.082749][ T8228] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 202.084121][ T8228] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 202.086346][ T8228] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.994: unexpected bad inode w/o EXT4_IGET_BAD [ 202.088824][ T8228] EXT4-fs (loop2): no journal found [ 202.107836][ T8214] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.136377][ T8210] tipc: Disabling bearer [ 202.449452][ T8249] loop2: detected capacity change from 0 to 1024 [ 202.452932][ T8249] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 202.454465][ T8249] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 202.459638][ T8249] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.998: unexpected bad inode w/o EXT4_IGET_BAD [ 202.467940][ T8249] EXT4-fs (loop2): no journal found [ 203.805624][ T8260] loop3: detected capacity change from 0 to 1024 [ 203.810310][ T8260] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 203.811851][ T8260] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 203.824406][ T8260] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.999: unexpected bad inode w/o EXT4_IGET_BAD [ 203.830599][ T8260] EXT4-fs (loop3): no journal found [ 204.858848][ T8253] loop0: detected capacity change from 0 to 16 [ 204.870562][ T8253] erofs: (device loop0): mounted with root inode @ nid 36. [ 207.849846][ T8268] loop2: detected capacity change from 0 to 1024 [ 208.827389][ T8268] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 208.828886][ T8268] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 208.840052][ T8268] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1003: unexpected bad inode w/o EXT4_IGET_BAD [ 208.845203][ T8268] EXT4-fs (loop2): no journal found [ 212.456506][ T8282] loop3: detected capacity change from 0 to 1024 [ 212.457319][ T8285] loop1: detected capacity change from 0 to 1024 [ 215.057584][ T8282] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 215.059143][ T8282] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 215.124703][ T8285] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 215.126340][ T8285] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 215.135837][ T8282] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1004: unexpected bad inode w/o EXT4_IGET_BAD [ 215.139964][ T8285] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1005: unexpected bad inode w/o EXT4_IGET_BAD [ 215.149938][ T8285] EXT4-fs (loop1): no journal found [ 215.153024][ T8282] EXT4-fs (loop3): no journal found [ 215.229361][ T8291] loop2: detected capacity change from 0 to 1024 [ 215.232045][ T8291] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 215.233658][ T8291] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 215.240831][ T8291] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1008: unexpected bad inode w/o EXT4_IGET_BAD [ 215.244556][ T8291] EXT4-fs (loop2): no journal found [ 218.002578][ T8308] loop2: detected capacity change from 0 to 1024 [ 218.008209][ T8308] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 218.009689][ T8308] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 218.015234][ T8308] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1013: unexpected bad inode w/o EXT4_IGET_BAD [ 218.019896][ T8308] EXT4-fs (loop2): no journal found [ 219.234257][ T8314] loop1: detected capacity change from 0 to 1024 [ 219.239108][ T8314] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 219.240636][ T8314] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 219.246570][ T8314] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1014: unexpected bad inode w/o EXT4_IGET_BAD [ 219.252898][ T8314] EXT4-fs (loop1): no journal found [ 219.613827][ T8312] mkiss: ax0: crc mode is auto. [ 220.166791][ T4337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.173581][ T4337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.176129][ T4337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.184377][ T4337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.194045][ T4337] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.195332][ T4337] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.444869][ T8348] loop3: detected capacity change from 0 to 1024 [ 221.530318][ T8348] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 221.531780][ T8348] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 221.536105][ T8348] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1021: unexpected bad inode w/o EXT4_IGET_BAD [ 221.539179][ T8348] EXT4-fs (loop3): no journal found [ 223.617108][ T8352] loop5: detected capacity change from 0 to 1024 [ 223.621226][ T4330] Bluetooth: hci5: command 0x0409 tx timeout [ 223.630351][ T8352] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 223.632005][ T8352] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 223.634625][ T8352] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1025: unexpected bad inode w/o EXT4_IGET_BAD [ 223.636827][ T8352] EXT4-fs (loop5): no journal found [ 224.031571][ T8359] loop1: detected capacity change from 0 to 1024 [ 224.056836][ T8359] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 224.058443][ T8359] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 224.063038][ T8359] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1026: unexpected bad inode w/o EXT4_IGET_BAD [ 224.077115][ T8359] EXT4-fs (loop1): no journal found [ 224.914028][ T8163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.201515][ T8150] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.224528][ T8319] chnl_net:caif_netlink_parms(): no params data found [ 229.505075][ T4337] Bluetooth: hci5: command 0x041b tx timeout [ 229.897904][ T8372] loop3: detected capacity change from 0 to 1024 [ 229.899490][ T8374] loop5: detected capacity change from 0 to 1024 [ 229.901785][ T8375] loop1: detected capacity change from 0 to 1024 [ 229.917401][ T8372] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.917646][ T8374] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.918967][ T8372] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.920408][ T8374] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.925806][ T8374] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1028: unexpected bad inode w/o EXT4_IGET_BAD [ 229.932308][ T8374] EXT4-fs (loop5): no journal found [ 229.938880][ T8375] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.940299][ T8375] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.942301][ T8375] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1029: unexpected bad inode w/o EXT4_IGET_BAD [ 229.945075][ T8375] EXT4-fs (loop1): no journal found [ 229.955117][ T8372] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1027: unexpected bad inode w/o EXT4_IGET_BAD [ 229.963259][ T8372] EXT4-fs (loop3): no journal found [ 230.026030][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.027283][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.028884][ T8319] device bridge_slave_0 entered promiscuous mode [ 230.038583][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.040826][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.918009][ T8319] device bridge_slave_1 entered promiscuous mode [ 233.420337][ T8391] loop2: detected capacity change from 0 to 1024 [ 233.570101][ T8392] loop3: detected capacity change from 0 to 1024 [ 234.454469][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 234.534717][ T8392] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 234.536316][ T8392] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 234.540636][ T8391] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 234.542114][ T8391] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 234.559886][ T8391] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1032: unexpected bad inode w/o EXT4_IGET_BAD [ 234.562609][ T8392] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1033: unexpected bad inode w/o EXT4_IGET_BAD [ 234.571907][ T8392] EXT4-fs (loop3): no journal found [ 234.573408][ T8391] EXT4-fs (loop2): no journal found [ 234.895072][ T8319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.905044][ T8335] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.927061][ T8319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.814970][ T8397] loop5: detected capacity change from 0 to 1024 [ 237.889591][ T8402] loop1: detected capacity change from 0 to 1024 [ 238.059543][ T8397] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 238.061203][ T8397] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 238.072009][ T8397] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1035: unexpected bad inode w/o EXT4_IGET_BAD [ 238.081565][ T8397] EXT4-fs (loop5): no journal found [ 238.139856][ T4337] Bluetooth: hci5: command 0x0419 tx timeout [ 238.151963][ T8402] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 238.153553][ T8402] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 238.158304][ T8402] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1034: unexpected bad inode w/o EXT4_IGET_BAD [ 238.160661][ T8402] EXT4-fs (loop1): no journal found [ 238.210679][ T8319] team0: Port device team_slave_0 added [ 238.212874][ T8319] team0: Port device team_slave_1 added [ 238.239724][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.241096][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.270171][ T8411] loop2: detected capacity change from 0 to 1024 [ 241.647202][ T8412] loop3: detected capacity change from 0 to 1024 [ 241.712186][ T8412] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 241.713646][ T8412] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 241.717953][ T8411] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 241.719488][ T8411] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 241.732074][ T8411] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1036: unexpected bad inode w/o EXT4_IGET_BAD [ 241.734765][ T8412] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1037: unexpected bad inode w/o EXT4_IGET_BAD [ 241.739305][ T8412] EXT4-fs (loop3): no journal found [ 241.740771][ T8411] EXT4-fs (loop2): no journal found [ 241.969551][ T8150] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.288199][ T8319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.325470][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.326723][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.330644][ T8319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.395569][ T8319] device hsr_slave_0 entered promiscuous mode [ 242.454029][ T8319] device hsr_slave_1 entered promiscuous mode [ 242.464897][ T8319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.466142][ T8319] Cannot create hsr debugfs directory [ 242.521167][ T8425] loop5: detected capacity change from 0 to 64 [ 242.720101][ T8319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 242.776731][ T8319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 242.798205][ T8418] loop2: detected capacity change from 0 to 32768 [ 242.810676][ T8418] XFS: noikeep mount option is deprecated. [ 242.831959][ T8430] tipc: Enabled bearer , priority 0 [ 242.833255][ T8319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 242.848198][ T8418] XFS (loop2): Mounting V5 Filesystem [ 242.862622][ T8418] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 242.872514][ T8418] XFS (loop2): Starting recovery (logdev: internal) [ 242.875524][ T8319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 242.878685][ T8418] XFS (loop2): Ending recovery (logdev: internal) [ 242.890153][ T8418] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 242.892110][ T8418] XFS (loop2): Unmount and run xfs_repair [ 242.906290][ T8429] tipc: Disabling bearer [ 243.270425][ T8456] loop3: detected capacity change from 0 to 1024 [ 243.273139][ T8456] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 243.274616][ T8456] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 243.281048][ T8456] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1048: unexpected bad inode w/o EXT4_IGET_BAD [ 243.289776][ T8456] EXT4-fs (loop3): no journal found [ 244.364366][ T8319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.525648][ T8463] loop5: detected capacity change from 0 to 1024 [ 244.528092][ T8463] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 244.529687][ T8463] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 244.534659][ T8463] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1049: unexpected bad inode w/o EXT4_IGET_BAD [ 244.540715][ T8463] EXT4-fs (loop5): no journal found [ 245.548410][ T8467] loop3: detected capacity change from 0 to 1024 [ 245.556472][ T8467] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 245.558013][ T8467] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 245.563249][ T8467] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1051: unexpected bad inode w/o EXT4_IGET_BAD [ 245.580164][ T8467] EXT4-fs (loop3): no journal found [ 245.988694][ T8336] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.818092][ T8473] loop5: detected capacity change from 0 to 1024 [ 249.260151][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.261241][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.266717][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.268383][ T8473] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 249.269265][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.269906][ T8473] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 249.273105][ T8473] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1052: unexpected bad inode w/o EXT4_IGET_BAD [ 249.276155][ T8473] EXT4-fs (loop5): no journal found [ 249.278748][ T8319] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.281341][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.282929][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.284574][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.285710][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.287156][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.289991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.294592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.303790][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.304941][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.314737][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.316582][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.318427][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.321553][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.323218][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.328329][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.329951][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.331428][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.332741][ T8335] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.334679][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.350319][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.351975][ T6099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.355937][ T8319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.636697][ T8482] loop1: detected capacity change from 0 to 1024 [ 249.644618][ T8482] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 249.646055][ T8482] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 249.651037][ T8482] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1054: unexpected bad inode w/o EXT4_IGET_BAD [ 249.661305][ T8482] EXT4-fs (loop1): no journal found [ 250.724817][ T8487] loop3: detected capacity change from 0 to 1024 [ 251.264607][ T8487] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 251.266177][ T8487] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 251.273425][ T8487] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1055: unexpected bad inode w/o EXT4_IGET_BAD [ 251.281148][ T8487] EXT4-fs (loop3): no journal found [ 251.356326][ T4708] tipc: Left network mode [ 252.127722][ T8500] loop1: detected capacity change from 0 to 1024 [ 253.804039][ T8501] loop5: detected capacity change from 0 to 1024 [ 253.943638][ T8500] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 253.945223][ T8500] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 254.993666][ T8500] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1057: unexpected bad inode w/o EXT4_IGET_BAD [ 254.995892][ T8501] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 254.997337][ T8501] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 255.051217][ T8500] EXT4-fs (loop1): no journal found [ 255.053369][ T8501] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1058: unexpected bad inode w/o EXT4_IGET_BAD [ 255.055794][ T8501] EXT4-fs (loop5): no journal found [ 255.153074][ T8319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.414596][ T8506] loop3: detected capacity change from 0 to 1024 [ 255.527979][ T8506] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 255.529536][ T8506] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 255.533695][ T8506] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1059: unexpected bad inode w/o EXT4_IGET_BAD [ 255.537277][ T8506] EXT4-fs (loop3): no journal found [ 255.891748][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.893063][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.909641][ T4329] XFS (loop2): Unmounting Filesystem [ 256.507548][ T8150] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.664863][ T8528] loop1: detected capacity change from 0 to 128 [ 257.125751][ T8541] mkiss: ax0: crc mode is auto. [ 257.201911][ T8538] tipc: Enabled bearer , priority 0 [ 257.204643][ T8538] device syzkaller0 entered promiscuous mode [ 257.333770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.335223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.338646][ T8538] tipc: Resetting bearer [ 257.363088][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.367982][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.429852][ T8537] tipc: Resetting bearer [ 257.535811][ T8537] tipc: Disabling bearer [ 257.587008][ T8319] device veth0_vlan entered promiscuous mode [ 257.588847][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.590431][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.725830][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.781246][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.879033][ T8319] device veth1_vlan entered promiscuous mode [ 257.891278][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.893264][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.897265][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.898900][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.062779][ T8577] loop1: detected capacity change from 0 to 1024 [ 258.066754][ T8577] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 258.068293][ T8577] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 258.072736][ T8577] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1070: unexpected bad inode w/o EXT4_IGET_BAD [ 258.081856][ T8577] EXT4-fs (loop1): no journal found [ 258.313124][ T8319] device veth0_macvtap entered promiscuous mode [ 258.935727][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.938492][ T8319] device veth1_macvtap entered promiscuous mode [ 258.943319][ T8319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.278968][ T8591] loop5: detected capacity change from 0 to 1024 [ 263.922320][ T8319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.520122][ T8593] loop2: detected capacity change from 0 to 1024 [ 265.102766][ T8319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.104526][ T8319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.106778][ T8319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.137854][ T8593] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 265.137857][ T8591] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 265.137882][ T8593] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 265.139319][ T8591] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 265.141569][ T8593] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1073: unexpected bad inode w/o EXT4_IGET_BAD [ 265.147934][ T8593] EXT4-fs (loop2): no journal found [ 265.165328][ T8319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.167001][ T8319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.168548][ T8319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.170099][ T8319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.172196][ T8319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.178876][ T8591] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1072: unexpected bad inode w/o EXT4_IGET_BAD [ 265.183848][ T8591] EXT4-fs (loop5): no journal found [ 265.214767][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.216506][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.218153][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.219604][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.286820][ T8319] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.288258][ T8319] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.289587][ T8319] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.293779][ T8319] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.295604][ T8336] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.312147][ T8603] device bpq0 left promiscuous mode [ 265.313232][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 265.324582][ T8599] loop1: detected capacity change from 0 to 512 [ 265.325853][ T8599] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.326847][ T8599] EXT4-fs: inline encryption not supported [ 265.327847][ T8599] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.330411][ T8599] EXT4-fs (loop1): Test dummy encryption mode enabled [ 265.331502][ T8599] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 265.463455][ T8599] EXT4-fs (loop1): 1 truncate cleaned up [ 265.464568][ T8599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 265.560081][ T8607] loop5: detected capacity change from 0 to 32768 [ 265.577191][ T8607] XFS: noikeep mount option is deprecated. [ 265.607217][ T4708] bond0: (slave wlan1): Releasing backup interface [ 265.615489][ T8607] XFS (loop5): Mounting V5 Filesystem [ 265.657127][ T8607] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 265.659268][ T4788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.660946][ T4788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.677413][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.689025][ T4595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.691021][ T4595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.698265][ T8607] XFS (loop5): Starting recovery (logdev: internal) [ 265.721319][ T8607] XFS (loop5): Ending recovery (logdev: internal) [ 265.741702][ T260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.769740][ T8607] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 265.779799][ T8607] XFS (loop5): Unmount and run xfs_repair [ 266.009879][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 266.358780][ T4708] device hsr_slave_0 left promiscuous mode [ 266.662360][ T4708] device hsr_slave_1 left promiscuous mode [ 266.744288][ T4708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.770988][ T4708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.881987][ T4732] XFS (loop5): Unmounting Filesystem [ 267.497247][ T8702] loop5: detected capacity change from 0 to 512 [ 267.498585][ T8702] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.499564][ T8702] EXT4-fs: inline encryption not supported [ 267.500448][ T8702] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.501831][ T8702] EXT4-fs (loop5): Test dummy encryption mode enabled [ 267.502845][ T8702] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 267.506728][ T8702] EXT4-fs (loop5): 1 truncate cleaned up [ 267.507606][ T8702] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 268.085264][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 268.727515][ T4708] team0 (unregistering): Port device team_slave_1 removed [ 268.895391][ T4708] team0 (unregistering): Port device team_slave_0 removed [ 269.067336][ T4708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.368892][ T4708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.746582][ T4708] bond0 (unregistering): Released all slaves [ 271.914240][ T8677] tipc: Enabling of bearer rejected, failed to enable media [ 272.203302][ T8733] loop3: detected capacity change from 0 to 1024 [ 272.268122][ T8733] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 272.269565][ T8733] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 272.274453][ T8733] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1095: unexpected bad inode w/o EXT4_IGET_BAD [ 272.283092][ T8733] EXT4-fs (loop3): no journal found [ 273.304616][ T8742] loop5: detected capacity change from 0 to 1024 [ 273.306418][ T8742] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 273.307717][ T8742] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 273.310256][ T8742] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1099: unexpected bad inode w/o EXT4_IGET_BAD [ 273.312343][ T8742] EXT4-fs (loop5): no journal found [ 273.420247][ T8336] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.530015][ T8726] loop6: detected capacity change from 0 to 32768 [ 273.531652][ T8726] XFS: noikeep mount option is deprecated. [ 273.536401][ T8753] loop3: detected capacity change from 0 to 512 [ 273.537739][ T8753] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.538728][ T8753] EXT4-fs: inline encryption not supported [ 273.539614][ T8753] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.542608][ T8753] EXT4-fs (loop3): Test dummy encryption mode enabled [ 273.543733][ T8753] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 273.552760][ T8753] EXT4-fs (loop3): 1 truncate cleaned up [ 273.553693][ T8753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 273.669253][ T8726] XFS (loop6): Mounting V5 Filesystem [ 273.982854][ T8726] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 274.002098][ T8726] XFS (loop6): Starting recovery (logdev: internal) [ 274.008157][ T8726] XFS (loop6): Ending recovery (logdev: internal) [ 274.039778][ T8726] XFS (loop6): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 274.041734][ T8726] XFS (loop6): Unmount and run xfs_repair [ 274.285878][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 274.591466][ T8812] tipc: Enabled bearer , priority 0 [ 274.606023][ T8812] tipc: Resetting bearer [ 274.621610][ T8811] tipc: Disabling bearer [ 274.958260][ T8830] loop1: detected capacity change from 0 to 1024 [ 274.996210][ T8830] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 274.997829][ T8830] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 275.002447][ T8830] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1112: unexpected bad inode w/o EXT4_IGET_BAD [ 275.015692][ T8830] EXT4-fs (loop1): no journal found [ 276.032539][ T8336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.220089][ T8319] XFS (loop6): Unmounting Filesystem [ 276.241563][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'. [ 276.416709][ T8851] loop3: detected capacity change from 0 to 512 [ 276.418112][ T8851] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.419090][ T8851] EXT4-fs: inline encryption not supported [ 276.420086][ T8851] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.421258][ T8851] EXT4-fs (loop3): Test dummy encryption mode enabled [ 276.422284][ T8851] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 276.440986][ T8851] EXT4-fs (loop3): 1 truncate cleaned up [ 276.441995][ T8851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 277.161700][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 277.396265][ T8910] 9pnet_fd: Insufficient options for proto=fd [ 277.398323][ T8907] tipc: Started in network mode [ 277.399143][ T8907] tipc: Node identity bef3cba24cc1, cluster identity 4711 [ 277.400313][ T8907] tipc: Enabled bearer , priority 0 [ 277.410304][ T8907] tipc: Resetting bearer [ 277.420918][ T8906] tipc: Disabling bearer [ 277.478401][ T8917] loop5: detected capacity change from 0 to 512 [ 277.491389][ T8917] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 277.513155][ T8917] EXT4-fs (loop5): 1 truncate cleaned up [ 277.517050][ T8917] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 277.524534][ T8917] netlink: 'syz.5.1126': attribute type 7 has an invalid length. [ 277.704878][ T8931] loop1: detected capacity change from 0 to 1024 [ 277.717055][ T8931] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 277.718616][ T8931] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 277.725097][ T8931] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1127: unexpected bad inode w/o EXT4_IGET_BAD [ 277.736559][ T8931] EXT4-fs (loop1): no journal found [ 279.005131][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 279.302357][ T8950] loop2: detected capacity change from 0 to 512 [ 279.304217][ T8950] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.305209][ T8950] EXT4-fs: inline encryption not supported [ 279.306163][ T8950] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.363144][ T8950] EXT4-fs (loop2): Test dummy encryption mode enabled [ 279.364353][ T8950] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.085894][ T8950] EXT4-fs (loop2): 1 truncate cleaned up [ 280.086962][ T8950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.389938][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 280.704779][ T4337] Bluetooth: Wrong link type (-22) [ 281.261552][ T8987] 9pnet_fd: Insufficient options for proto=fd [ 281.704587][ T9006] loop5: detected capacity change from 0 to 1024 [ 281.773261][ T9006] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 281.774969][ T9006] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 281.780057][ T9006] EXT4-fs error (device loop5): ext4_get_journal_inode:5730: inode #5: comm syz.5.1142: unexpected bad inode w/o EXT4_IGET_BAD [ 281.796742][ T9006] EXT4-fs (loop5): no journal found [ 282.864650][ T9014] loop1: detected capacity change from 0 to 1024 [ 283.232172][ T9014] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 283.233763][ T9014] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 283.238529][ T9014] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1143: unexpected bad inode w/o EXT4_IGET_BAD [ 283.251050][ T9014] EXT4-fs (loop1): no journal found [ 284.489332][ T9037] loop6: detected capacity change from 0 to 512 [ 284.492300][ T9037] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.493318][ T9037] EXT4-fs: inline encryption not supported [ 284.494524][ T9037] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.504196][ T9037] EXT4-fs (loop6): Test dummy encryption mode enabled [ 284.505330][ T9037] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 284.849157][ T9037] EXT4-fs (loop6): 1 truncate cleaned up [ 284.850155][ T9037] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 285.415126][ T8319] EXT4-fs (loop6): unmounting filesystem. [ 285.607256][ T9053] loop2: detected capacity change from 0 to 1024 [ 285.631852][ T9053] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 285.633324][ T9053] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 285.637921][ T9053] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1150: unexpected bad inode w/o EXT4_IGET_BAD [ 285.644876][ T9053] EXT4-fs (loop2): no journal found [ 286.825929][ T9061] mkiss: ax0: crc mode is auto. [ 286.850720][ T9063] tipc: Enabled bearer , priority 0 [ 286.859050][ T9063] tipc: Resetting bearer [ 286.867092][ T9062] tipc: Disabling bearer [ 287.139950][ T9071] loop2: detected capacity change from 0 to 1024 [ 287.146762][ T9071] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 287.148304][ T9071] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 287.153429][ T9071] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1156: unexpected bad inode w/o EXT4_IGET_BAD [ 287.163087][ T9071] EXT4-fs (loop2): no journal found [ 288.115962][ T4330] Bluetooth: Wrong link type (-22) [ 288.144075][ T8336] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.510233][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.638666][ T9132] mkiss: ax0: crc mode is auto. [ 290.294393][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1175'. [ 290.452572][ T4337] Bluetooth: Wrong link type (-22) [ 290.818410][ T9152] loop2: detected capacity change from 0 to 32768 [ 290.835782][ T9152] XFS: noikeep mount option is deprecated. [ 290.917811][ T9152] XFS (loop2): Mounting V5 Filesystem [ 291.002644][ T9152] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 291.023123][ T9152] XFS (loop2): Starting recovery (logdev: internal) [ 291.046747][ T9152] XFS (loop2): Ending recovery (logdev: internal) [ 291.071205][ T9152] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 291.073099][ T9152] XFS (loop2): Unmount and run xfs_repair [ 291.947250][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1185'. [ 292.248430][ T4329] XFS (loop2): Unmounting Filesystem [ 292.343796][ T9248] loop3: detected capacity change from 0 to 512 [ 292.346619][ T9248] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.347660][ T9248] EXT4-fs: inline encryption not supported [ 292.348716][ T9248] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.404484][ T9248] EXT4-fs (loop3): Test dummy encryption mode enabled [ 292.405601][ T9248] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.658883][ T9248] EXT4-fs (loop3): 1 truncate cleaned up [ 292.659908][ T9248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 293.635118][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 294.289544][ T9291] loop2: detected capacity change from 0 to 32768 [ 294.318284][ T9291] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1188 (9291) [ 294.344100][ T9291] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.345649][ T9291] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 294.346867][ T9291] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 294.371575][ T9291] BTRFS info (device loop2): force zstd compression, level 3 [ 294.372747][ T9291] BTRFS info (device loop2): enabling auto defrag [ 294.378843][ T9291] BTRFS info (device loop2): max_inline at 0 [ 294.383121][ T9291] BTRFS info (device loop2): using free space tree [ 294.443411][ T9302] loop5: detected capacity change from 0 to 32768 [ 294.454234][ T9302] XFS: noikeep mount option is deprecated. [ 294.501828][ T9302] XFS (loop5): Mounting V5 Filesystem [ 294.539234][ T9302] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 294.546878][ T9302] XFS (loop5): Starting recovery (logdev: internal) [ 294.562762][ T9302] XFS (loop5): Ending recovery (logdev: internal) [ 294.591581][ T9302] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 294.593508][ T9302] XFS (loop5): Unmount and run xfs_repair [ 294.620640][ T9291] BTRFS info (device loop2): enabling ssd optimizations [ 294.653515][ T9348] loop6: detected capacity change from 0 to 64 [ 294.780201][ T4591] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 294.786472][ T9350] BTRFS info (device loop2): scrub: started on devid 1 [ 294.802127][ T9350] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 295.308806][ T4329] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.891472][ T4732] XFS (loop5): Unmounting Filesystem [ 296.069032][ T9387] loop1: detected capacity change from 0 to 512 [ 296.073054][ T9387] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.074188][ T9387] EXT4-fs: inline encryption not supported [ 296.075219][ T9387] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.083825][ T9387] EXT4-fs (loop1): Test dummy encryption mode enabled [ 296.084940][ T9387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 297.163214][ T9387] EXT4-fs (loop1): 1 truncate cleaned up [ 297.164384][ T9387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 297.306006][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 297.520351][ T9414] loop1: detected capacity change from 0 to 1024 [ 297.537388][ T9414] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 297.538894][ T9414] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 297.543547][ T9414] EXT4-fs error (device loop1): ext4_get_journal_inode:5730: inode #5: comm syz.1.1210: unexpected bad inode w/o EXT4_IGET_BAD [ 297.550366][ T9414] EXT4-fs (loop1): no journal found [ 298.510758][ T9419] loop3: detected capacity change from 0 to 128 [ 298.624095][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 298.874203][ T9438] loop3: detected capacity change from 0 to 256 [ 299.038880][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 299.077319][ T9425] loop5: detected capacity change from 0 to 32768 [ 299.086636][ T9425] XFS: noikeep mount option is deprecated. [ 299.128353][ T9458] loop2: detected capacity change from 0 to 128 [ 299.133243][ T9425] XFS (loop5): Mounting V5 Filesystem [ 299.180086][ T9425] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 299.193255][ T9425] XFS (loop5): Starting recovery (logdev: internal) [ 299.205441][ T9458] syz.2.1223: attempt to access beyond end of device [ 299.205441][ T9458] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 299.211562][ T9425] XFS (loop5): Ending recovery (logdev: internal) [ 299.216436][ T9458] syz.2.1223: attempt to access beyond end of device [ 299.216436][ T9458] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 299.218677][ T9458] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 299.220082][ T9458] syz.2.1223: attempt to access beyond end of device [ 299.220082][ T9458] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 299.222089][ T9458] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 299.248943][ T9425] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 299.250692][ T9425] XFS (loop5): Unmount and run xfs_repair [ 299.265096][ T9458] syz.2.1223: attempt to access beyond end of device [ 299.265096][ T9458] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 299.267083][ T9458] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 299.352809][ T9458] syz.2.1223: attempt to access beyond end of device [ 299.352809][ T9458] loop2: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 299.364838][ T9458] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 299.366373][ T9458] syz.2.1223: attempt to access beyond end of device [ 299.366373][ T9458] loop2: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 299.370719][ T9458] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 300.475555][ T9458] syz.2.1223: attempt to access beyond end of device [ 300.475555][ T9458] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 300.477749][ T9458] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 300.494650][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1229'. [ 300.928499][ T4732] XFS (loop5): Unmounting Filesystem [ 301.302116][ T9498] loop3: detected capacity change from 0 to 256 [ 302.142533][ T9527] loop2: detected capacity change from 0 to 1024 [ 302.155640][ T9527] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 302.157220][ T9527] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 302.160919][ T9527] EXT4-fs error (device loop2): ext4_get_journal_inode:5730: inode #5: comm syz.2.1240: unexpected bad inode w/o EXT4_IGET_BAD [ 302.163789][ T9527] EXT4-fs (loop2): no journal found [ 303.408761][ T9531] loop3: detected capacity change from 0 to 1024 [ 303.411183][ T9531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.418678][ T8335] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 303.461473][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1241'. [ 303.481797][ T9531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 303.598955][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 304.197630][ T9544] loop6: detected capacity change from 0 to 32768 [ 304.218982][ T9544] XFS: noikeep mount option is deprecated. [ 304.288599][ T9544] XFS (loop6): Mounting V5 Filesystem [ 304.329380][ T9544] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 304.358323][ T9544] XFS (loop6): Starting recovery (logdev: internal) [ 304.390665][ T9544] XFS (loop6): Ending recovery (logdev: internal) [ 304.459433][ T9544] XFS (loop6): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 304.461469][ T9544] XFS (loop6): Unmount and run xfs_repair [ 304.768877][ T9583] loop3: detected capacity change from 0 to 256 [ 304.986240][ T9478] Set syz1 is full, maxelem 65536 reached [ 304.992646][ T8319] XFS (loop6): Unmounting Filesystem [ 307.150688][ T9624] loop6: detected capacity change from 0 to 32768 [ 307.153317][ T9624] XFS: noikeep mount option is deprecated. [ 307.163028][ T9624] XFS (loop6): Mounting V5 Filesystem [ 307.181062][ T9624] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 307.194236][ T9624] XFS (loop6): Starting recovery (logdev: internal) [ 307.202542][ T9624] XFS (loop6): Ending recovery (logdev: internal) [ 307.226937][ T9624] XFS (loop6): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_bnobt block 0x8 [ 307.228812][ T9624] XFS (loop6): Unmount and run xfs_repair [ 307.305632][ T9643] loop1: detected capacity change from 0 to 256 [ 308.241532][ T8319] XFS (loop6): Unmounting Filesystem [ 308.456049][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 308.620712][ T9575] Set syz1 is full, maxelem 65536 reached [ 308.724899][ T9673] tipc: Enabled bearer , priority 0 [ 308.729160][ T9673] tipc: Resetting bearer [ 308.731658][ T9672] tipc: Disabling bearer [ 308.837266][ T9677] loop1: detected capacity change from 0 to 128 [ 308.871038][ T9677] syz.1.1277: attempt to access beyond end of device [ 308.871038][ T9677] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 308.873556][ T9677] syz.1.1277: attempt to access beyond end of device [ 308.873556][ T9677] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 308.877118][ T9677] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 308.878823][ T9677] syz.1.1277: attempt to access beyond end of device [ 308.878823][ T9677] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 308.881010][ T9677] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 308.882490][ T9677] syz.1.1277: attempt to access beyond end of device [ 308.882490][ T9677] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 308.888601][ T9677] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 308.890114][ T9677] syz.1.1277: attempt to access beyond end of device [ 308.890114][ T9677] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 308.892269][ T9677] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 308.901465][ T9677] syz.1.1277: attempt to access beyond end of device [ 308.901465][ T9677] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 308.909795][ T9677] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 308.977459][ T9675] syz.1.1277: attempt to access beyond end of device [ 308.977459][ T9675] loop1: rw=524288, sector=154, nr_sectors = 6 limit=128 [ 308.979957][ T9675] syz.1.1277: attempt to access beyond end of device [ 308.979957][ T9675] loop1: rw=0, sector=154, nr_sectors = 6 limit=128 [ 308.982295][ T9675] syz.1.1277: attempt to access beyond end of device [ 308.982295][ T9675] loop1: rw=0, sector=154, nr_sectors = 6 limit=128 [ 308.985318][ T9675] syz.1.1277: attempt to access beyond end of device [ 308.985318][ T9675] loop1: rw=0, sector=154, nr_sectors = 6 limit=128 [ 309.278154][ T9688] loop5: detected capacity change from 0 to 64 [ 309.665996][ T9621] Set syz1 is full, maxelem 65536 reached [ 309.793188][ T9696] tipc: Started in network mode [ 309.794405][ T9696] tipc: Node identity 9a83542566da, cluster identity 4711 [ 309.795671][ T9696] tipc: Enabled bearer , priority 0 [ 309.799801][ T9696] tipc: Resetting bearer [ 309.815931][ T9695] tipc: Disabling bearer [ 309.904190][ T9709] tipc: Enabled bearer , priority 0 [ 309.908658][ T9709] tipc: Resetting bearer [ 309.911230][ T9708] tipc: Disabling bearer [ 310.216998][ T9720] mkiss: ax0: crc mode is auto. [ 310.386404][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.387755][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.957973][ T9743] tipc: Enabled bearer , priority 0 [ 310.961071][ T9743] tipc: Resetting bearer [ 310.965742][ T9742] tipc: Disabling bearer [ 311.042651][ T9750] tipc: Enabled bearer , priority 0 [ 311.048774][ T9750] tipc: Resetting bearer [ 311.051228][ T9749] tipc: Disabling bearer [ 311.131167][ T9759] loop2: detected capacity change from 0 to 64 [ 312.181601][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 312.754768][ T9813] mkiss: ax0: crc mode is auto. [ 313.826598][ T9837] loop3: detected capacity change from 0 to 32768 [ 313.834770][ T9837] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1326 (9837) [ 313.847491][ T9837] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.849191][ T9837] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 313.850523][ T9837] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 313.851990][ T9837] BTRFS info (device loop3): force zstd compression, level 3 [ 313.853141][ T9837] BTRFS info (device loop3): enabling auto defrag [ 313.870296][ T9837] BTRFS info (device loop3): max_inline at 0 [ 313.871262][ T9837] BTRFS info (device loop3): using free space tree [ 313.975730][ T9837] BTRFS info (device loop3): enabling ssd optimizations [ 314.058806][ T9837] BTRFS info (device loop3): scrub: started on devid 1 [ 314.062903][ T9837] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 314.067250][ T9876] loop6: detected capacity change from 0 to 512 [ 314.074152][ T9876] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 314.075568][ T4708] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 314.105159][ T9876] EXT4-fs (loop6): 1 truncate cleaned up [ 314.106251][ T9876] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 314.206478][ T4320] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.212367][ T9883] mkiss: ax0: crc mode is auto. [ 314.291747][ T8319] EXT4-fs (loop6): unmounting filesystem. [ 314.511920][ T9894] loop3: detected capacity change from 0 to 1024 [ 314.530295][ T9894] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 314.531822][ T9894] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 314.535326][ T9894] EXT4-fs error (device loop3): ext4_get_journal_inode:5730: inode #5: comm syz.3.1335: unexpected bad inode w/o EXT4_IGET_BAD [ 314.541465][ T9894] EXT4-fs (loop3): no journal found [ 315.892692][ T9917] loop5: detected capacity change from 0 to 128 [ 315.921602][ T9917] bio_check_eod: 41 callbacks suppressed [ 315.921613][ T9917] syz.5.1343: attempt to access beyond end of device [ 315.921613][ T9917] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 315.929253][ T9917] syz.5.1343: attempt to access beyond end of device [ 315.929253][ T9917] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 315.931472][ T9917] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 315.936491][ T9917] syz.5.1343: attempt to access beyond end of device [ 315.936491][ T9917] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 315.940816][ T9917] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 315.948669][ T9917] syz.5.1343: attempt to access beyond end of device [ 315.948669][ T9917] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 315.953080][ T9917] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 315.956101][ T9917] syz.5.1343: attempt to access beyond end of device [ 315.956101][ T9917] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 315.961612][ T9917] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 315.964178][ T9917] syz.5.1343: attempt to access beyond end of device [ 315.964178][ T9917] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 315.968410][ T9917] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 317.098766][ T9954] loop6: detected capacity change from 0 to 512 [ 317.100188][ T9954] EXT4-fs: Ignoring removed oldalloc option [ 317.141769][ T9957] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1355'. [ 317.185463][ T9954] EXT4-fs (loop6): 1 truncate cleaned up [ 317.186496][ T9954] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 317.581467][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.146743][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.169493][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.376599][ T9976] loop5: detected capacity change from 0 to 128 [ 318.650669][ T9954] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.652186][ T9954] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.653486][ T9954] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.656725][ T9954] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.895658][ T9972] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1358'. [ 318.905624][ T9983] tipc: Enabled bearer , priority 0 [ 318.912594][ T8319] EXT4-fs (loop6): unmounting filesystem. [ 318.949654][ T9979] tipc: Disabling bearer [ 319.914299][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 320.034593][T10024] lo speed is unknown, defaulting to 1000 [ 320.038315][T10024] lo speed is unknown, defaulting to 1000 [ 320.041865][T10024] lo speed is unknown, defaulting to 1000 [ 320.051085][T10024] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 320.065773][T10024] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 320.076502][T10024] lo speed is unknown, defaulting to 1000 [ 320.077973][T10024] lo speed is unknown, defaulting to 1000 [ 320.079238][T10024] lo speed is unknown, defaulting to 1000 [ 320.081093][T10024] lo speed is unknown, defaulting to 1000 [ 320.083442][T10024] lo speed is unknown, defaulting to 1000 [ 320.225827][T10028] loop1: detected capacity change from 0 to 128 [ 320.300299][T10031] lo speed is unknown, defaulting to 1000 [ 320.301350][T10031] lo speed is unknown, defaulting to 1000 [ 320.302994][T10031] lo speed is unknown, defaulting to 1000 [ 320.305609][T10031] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 320.314616][T10031] lo speed is unknown, defaulting to 1000 [ 320.315893][T10031] lo speed is unknown, defaulting to 1000 [ 320.316994][T10031] lo speed is unknown, defaulting to 1000 [ 320.318175][T10031] lo speed is unknown, defaulting to 1000 [ 320.319283][T10031] lo speed is unknown, defaulting to 1000 [ 320.371615][T10034] siw: device registration error -23 [ 321.780075][T10020] Set syz1 is full, maxelem 65536 reached [ 321.866025][T10066] Set syz1 is full, maxelem 65536 reached [ 323.162525][T10112] siw: device registration error -23 [ 324.205011][T10124] loop5: detected capacity change from 0 to 32768 [ 324.211560][T10124] XFS: noikeep mount option is deprecated. [ 324.245439][T10139] netlink: 'syz.2.1407': attribute type 39 has an invalid length. [ 324.549796][T10124] XFS (loop5): Mounting V5 Filesystem [ 324.601910][T10124] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 324.624263][T10124] XFS (loop5): Starting recovery (logdev: internal) [ 324.645197][T10124] XFS (loop5): Ending recovery (logdev: internal) [ 324.671577][ T14] XFS (loop5): Metadata corruption detected at xfs_inobt_verify+0xb0/0x204, xfs_finobt block 0x8 [ 324.673451][ T14] XFS (loop5): Unmount and run xfs_repair [ 324.677629][ T14] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 324.678778][ T14] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 324.680058][ T14] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 324.681447][ T14] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 324.682855][ T14] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 324.689520][T10157] loop1: detected capacity change from 0 to 64 [ 324.693187][ T14] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 324.702526][ T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 324.723049][ T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 324.727452][ T14] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 324.774188][T10124] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x8 len 8 error 117 [ 325.413717][ T4732] XFS (loop5): Unmounting Filesystem [ 325.615309][T10176] lo speed is unknown, defaulting to 1000 [ 326.284153][T10187] loop6: detected capacity change from 0 to 32768 [ 326.298917][T10187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1423 (10187) [ 326.311117][T10187] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.312730][T10187] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 326.318085][T10187] BTRFS info (device loop6): using free space tree [ 326.408518][T10187] BTRFS info (device loop6): enabling ssd optimizations [ 326.491625][ T8319] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.701997][T10230] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1431'. [ 327.239087][T10249] siw: device registration error -23 [ 327.426204][T10255] loop2: detected capacity change from 0 to 32768 [ 327.432448][T10255] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1440 (10255) [ 327.435919][T10262] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1443'. [ 327.451614][T10255] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 327.456635][T10255] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 327.458913][T10255] BTRFS info (device loop2): enabling auto defrag [ 327.462099][T10255] BTRFS info (device loop2): use no compression [ 327.463073][T10255] BTRFS info (device loop2): force clearing of disk cache [ 327.784269][T10255] BTRFS info (device loop2): max_inline at 4096 [ 327.785370][T10255] BTRFS info (device loop2): disabling free space tree [ 327.801800][T10269] loop1: detected capacity change from 0 to 64 [ 327.906845][T10255] BTRFS info (device loop2): enabling ssd optimizations [ 327.908431][T10255] BTRFS info (device loop2): rebuilding free space tree [ 327.934331][T10255] BTRFS info (device loop2): disabling free space tree [ 327.935662][T10255] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.937290][T10255] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 328.050130][ T4329] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 328.225508][T10311] loop5: detected capacity change from 0 to 1024 [ 328.227102][T10311] EXT4-fs: inline encryption not supported [ 328.228415][T10311] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.255509][T10311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 328.365637][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 328.560636][T10321] mkiss: ax0: crc mode is auto. [ 329.328294][T10344] siw: device registration error -23 [ 329.382656][T10350] loop6: detected capacity change from 0 to 2048 [ 329.465194][T10354] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.485782][T10357] loop1: detected capacity change from 0 to 64 [ 329.820996][T10360] loop3: detected capacity change from 0 to 2048 [ 329.925593][T10363] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.151600][T10372] tipc: Enabled bearer , priority 0 [ 330.156035][T10372] tipc: Resetting bearer [ 330.216335][T10371] tipc: Disabling bearer [ 330.393309][T10387] siw: device registration error -23 [ 330.431818][T10389] siw: device registration error -23 [ 330.485708][T10395] siw: device registration error -23 [ 330.520728][T10398] loop6: detected capacity change from 0 to 128 [ 330.589094][T10398] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 330.596196][T10398] hpfs: filesystem error: improperly stopped [ 330.597983][T10398] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 330.599480][T10398] hpfs: You really don't want any checks? You are crazy... [ 330.602262][T10398] hpfs: hpfs_map_sector(): read error [ 330.603161][T10398] hpfs: code page support is disabled [ 330.608816][T10398] hpfs: hpfs_map_4sectors(): unaligned read [ 330.611019][T10398] hpfs: hpfs_map_4sectors(): unaligned read [ 330.612685][T10398] hpfs: filesystem error: unable to find root dir [ 331.157735][T10420] loop5: detected capacity change from 0 to 64 [ 331.254661][T10426] lo speed is unknown, defaulting to 1000 [ 331.279426][T10426] loop6: detected capacity change from 0 to 512 [ 331.280966][T10426] EXT4-fs: Ignoring removed oldalloc option [ 331.398718][T10426] EXT4-fs (loop6): 1 truncate cleaned up [ 331.399761][T10426] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 331.917304][ T8319] EXT4-fs (loop6): unmounting filesystem. [ 332.002486][T10446] tipc: Enabled bearer , priority 0 [ 332.095935][T10445] tipc: Disabling bearer [ 332.169998][T10463] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1501'. [ 332.557882][T10467] siw: device registration error -23 [ 332.735372][T10480] lo speed is unknown, defaulting to 1000 [ 332.779092][T10484] loop3: detected capacity change from 0 to 512 [ 332.780405][T10484] EXT4-fs: Ignoring removed oldalloc option [ 332.790135][T10484] EXT4-fs (loop3): 1 truncate cleaned up [ 332.791258][T10484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 332.849081][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.268650][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.282625][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.530002][T10484] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.531524][T10484] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.532960][T10484] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.534414][T10484] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.796499][T10495] tipc: Enabled bearer , priority 0 [ 333.798555][T10498] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1513'. [ 333.814597][T10490] tipc: Disabling bearer [ 334.903392][T10543] loop2: detected capacity change from 0 to 256 [ 335.476598][T10550] tipc: Started in network mode [ 335.477418][T10550] tipc: Node identity 8ec2bc75ba9f, cluster identity 4711 [ 335.482699][T10550] tipc: Enabled bearer , priority 0 [ 335.684678][T10549] tipc: Disabling bearer [ 335.929992][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 335.988463][T10570] loop2: detected capacity change from 0 to 128 [ 335.999176][T10570] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 336.089998][T10572] mkiss: ax0: crc mode is auto. [ 336.215424][T10570] hpfs: filesystem error: improperly stopped [ 336.268876][T10570] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 336.311375][T10570] hpfs: You really don't want any checks? You are crazy... [ 336.398354][T10570] hpfs: hpfs_map_sector(): read error [ 336.402484][T10570] hpfs: code page support is disabled [ 336.409167][T10570] hpfs: hpfs_map_4sectors(): unaligned read [ 336.410274][T10570] hpfs: hpfs_map_4sectors(): unaligned read [ 336.411350][T10570] hpfs: filesystem error: unable to find root dir [ 337.068180][T10586] loop2: detected capacity change from 0 to 256 [ 337.433547][T10594] loop1: detected capacity change from 0 to 512 [ 337.450101][T10594] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.451178][T10594] EXT4-fs: inline encryption not supported [ 337.452115][T10594] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.477176][T10594] EXT4-fs (loop1): Test dummy encryption mode enabled [ 337.478316][T10594] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 337.612435][T10594] EXT4-fs (loop1): 1 truncate cleaned up [ 337.613483][T10594] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 338.141152][T10606] loop5: detected capacity change from 0 to 512 [ 338.142677][T10606] EXT4-fs: Ignoring removed oldalloc option [ 338.146817][T10605] lo speed is unknown, defaulting to 1000 [ 338.178437][T10606] EXT4-fs (loop5): 1 truncate cleaned up [ 338.179500][T10606] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 338.386087][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.952309][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 339.209043][T10605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.434590][T10605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.880220][T10605] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.881641][T10605] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.882970][T10605] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.884436][T10605] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.998137][T10605] device bridge1 left promiscuous mode [ 340.026450][ T14] lo speed is unknown, defaulting to 1000 [ 340.040378][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 340.047735][T10641] mkiss: ax0: crc mode is auto. [ 340.248371][T10658] loop5: detected capacity change from 0 to 256 [ 340.971794][T10660] loop1: detected capacity change from 0 to 512 [ 340.973156][T10660] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.984705][T10660] EXT4-fs: inline encryption not supported [ 340.985644][T10660] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.989165][T10660] EXT4-fs (loop1): Test dummy encryption mode enabled [ 340.992119][T10660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 341.028303][T10660] EXT4-fs (loop1): 1 truncate cleaned up [ 341.029265][T10660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 341.524620][T10671] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1566'. [ 342.247682][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 342.304503][T10683] loop2: detected capacity change from 0 to 4096 [ 342.369713][T10683] EXT4-fs (loop2): Test dummy encryption mode enabled [ 342.389912][T10683] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 342.391462][T10683] System zones: 0-5 [ 342.398680][T10683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 343.137453][ T4337] Bluetooth: hci5: command 0x0406 tx timeout [ 343.975455][T10711] loop1: detected capacity change from 0 to 256 [ 344.221517][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 344.299381][T10718] loop6: detected capacity change from 0 to 512 [ 344.300731][T10718] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.469669][T10721] mkiss: ax0: crc mode is auto. [ 344.602984][T10718] EXT4-fs: inline encryption not supported [ 344.609071][T10718] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.613499][T10718] EXT4-fs (loop6): Test dummy encryption mode enabled [ 344.617362][T10718] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 344.639623][T10718] EXT4-fs (loop6): 1 truncate cleaned up [ 344.641700][T10718] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 345.993294][ T8319] EXT4-fs (loop6): unmounting filesystem. [ 346.492863][T10740] loop2: detected capacity change from 0 to 32768 [ 346.500479][T10740] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1587 (10740) [ 346.509156][T10740] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 346.517585][T10740] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 346.518933][T10740] BTRFS info (device loop2): enabling auto defrag [ 346.519952][T10740] BTRFS info (device loop2): turning on sync discard [ 346.520930][T10740] BTRFS info (device loop2): force clearing of disk cache [ 346.521989][T10740] BTRFS info (device loop2): using default commit interval 30s [ 346.524668][T10740] BTRFS info (device loop2): max_inline at 0 [ 346.526032][T10740] BTRFS info (device loop2): disabling free space tree [ 346.681467][T10740] BTRFS info (device loop2): enabling ssd optimizations [ 346.704340][T10740] BTRFS info (device loop2): rebuilding free space tree [ 346.716202][T10740] BTRFS info (device loop2): disabling free space tree [ 346.722581][T10740] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 346.774057][T10740] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 346.794748][T10784] loop3: detected capacity change from 0 to 256 [ 347.643688][ T4330] Bluetooth: Wrong link type (-22) [ 347.646213][ T4330] Bluetooth: hci4: link tx timeout [ 347.648271][ T4330] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 347.649975][ T4330] Bluetooth: hci4: link tx timeout [ 347.650762][ T4330] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 347.783461][ T4329] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 347.992619][T10803] netlink: 'syz.2.1599': attribute type 7 has an invalid length. [ 349.673749][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 349.708964][ T4337] Bluetooth: Wrong link type (-22) [ 351.193615][ C0] ------------[ cut here ]------------ [ 351.194702][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 351.196368][ C0] WARNING: CPU: 0 PID: 10860 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x38c/0x46c [ 351.197783][ C0] Modules linked in: [ 351.198343][ C0] CPU: 0 PID: 10860 Comm: syz.5.1621 Not tainted syzkaller #0 [ 351.199368][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 351.200788][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 351.201991][ C0] pc : debug_check_no_obj_freed+0x38c/0x46c [ 351.202863][ C0] lr : debug_check_no_obj_freed+0x38c/0x46c [ 351.203680][ C0] sp : ffff800008007a00 [ 351.204290][ C0] x29: ffff800008007a40 x28: ffff0000f7759600 x27: 0000000000000000 [ 351.205467][ C0] x26: ffff800011adace0 x25: ffff0000f7759490 x24: ffff800010adbc0c [ 351.206744][ C0] x23: ffff0000c9aa1a80 x22: ffff0000f7759000 x21: dfff800000000000 [ 351.207902][ C0] x20: 0000000000000000 x19: ffff0000f7759400 x18: ffff800011abbcc0 [ 351.209018][ C0] x17: 6e6968207473696c x16: ffff8000082d25ac x15: 0000000000000000 [ 351.210222][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 351.211471][ C0] x11: ff00800008191ca8 x10: 0000000000000000 x9 : 4e5af4ee35fdb300 [ 351.212677][ C0] x8 : 4e5af4ee35fdb300 x7 : 0000000000000001 x6 : 0000000000000001 [ 351.213864][ C0] x5 : ffff800008007498 x4 : ffff8000151a4920 x3 : ffff80000852e538 [ 351.215056][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000000 [ 351.216339][ C0] Call trace: [ 351.216818][ C0] debug_check_no_obj_freed+0x38c/0x46c [ 351.217678][ C0] slab_free_freelist_hook+0x104/0x1ec [ 351.218508][ C0] __kmem_cache_free+0xc0/0x224 [ 351.219227][ C0] kfree+0xd0/0x1ac [ 351.219809][ C0] rose_timer_expiry+0x43c/0x5ac [ 351.220487][ C0] call_timer_fn+0x1b8/0x964 [ 351.221126][ C0] __run_timers+0x468/0x6d8 [ 351.221796][ C0] run_timer_softirq+0x7c/0x114 [ 351.222489][ C0] handle_softirqs+0x318/0xc6c [ 351.223208][ C0] __do_softirq+0x14/0x20 [ 351.223854][ C0] ____do_softirq+0x14/0x20 [ 351.224492][ C0] call_on_irq_stack+0x30/0x48 [ 351.225217][ C0] do_softirq_own_stack+0x20/0x2c [ 351.226002][ C0] __irq_exit_rcu+0x23c/0x43c [ 351.226654][ C0] irq_exit_rcu+0x14/0x84 [ 351.227313][ C0] el1_interrupt+0x38/0x54 [ 351.227932][ C0] el1h_64_irq_handler+0x18/0x24 [ 351.228699][ C0] el1h_64_irq+0x64/0x68 [ 351.229335][ C0] memset+0x10/0x70 [ 351.229885][ C0] __unix_dgram_recvmsg+0x378/0xae8 [ 351.230665][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 351.231406][ C0] ____sys_recvmsg+0x62c/0x71c [ 351.232099][ C0] do_recvmmsg+0x364/0x96c [ 351.232784][ C0] __arm64_sys_recvmmsg+0x17c/0x238 [ 351.233541][ C0] invoke_syscall+0x98/0x2bc [ 351.234275][ C0] el0_svc_common+0x138/0x258 [ 351.234952][ C0] do_el0_svc+0x58/0x13c [ 351.235621][ C0] el0_svc+0x58/0x138 [ 351.236154][ C0] el0t_64_sync_handler+0x84/0xf0 [ 351.236885][ C0] el0t_64_sync+0x18c/0x190 [ 351.237482][ C0] irq event stamp: 86343 [ 351.238119][ C0] hardirqs last enabled at (86342): [] __up_console_sem+0xb4/0x100 [ 351.239535][ C0] hardirqs last disabled at (86343): [] el1_dbg+0x24/0x80 [ 351.240787][ C0] softirqs last enabled at (81186): [] handle_softirqs+0xaf8/0xc6c [ 351.242216][ C0] softirqs last disabled at (86315): [] __do_softirq+0x14/0x20 [ 351.243784][ C0] ---[ end trace 0000000000000000 ]---