last executing test programs: 13m6.960492005s ago: executing program 1 (id=571): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x208440, 0x106) fstatfs(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 13m3.887130282s ago: executing program 1 (id=576): mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x3, {0x1, 0xf0, 0x4}, {0x2, 0x0, 0x1}, 0x1, 0xfe}, {0x0, 0x0, {0x1, 0xf, 0x3}, {0x2, 0x0, 0x3}, 0xfd, 0xfd}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x2}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 13m2.619538221s ago: executing program 1 (id=590): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 12m59.49954398s ago: executing program 1 (id=593): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000a40)={[{@init_itable_val={'init_itable', 0x3d, 0xc0}}, {}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0xb044}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nomblk_io_submit}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x1, 0x591, &(0x7f0000000f80)="$eJzs3V1rFFcfAPD/bBKNL89jBJHaiyJ4UYt1Y5LWFyjUXpZWKrT3dknWINm4kt2ISYXqRb3pTZFCKRVKP0Dveyn9Av0UQitIkdBSpJAyu7PJmuzmzdVd3d8PRs+Zmew5Z8/8Z8+ZmWUD6FtH039yEUci4psk4kDTtsHINh6t77f0+OZkuiSxvPzpn0kk2brG/kn2/74s81pE/PpVxIlcff1Q02tXFhZnCqVScS7Lj1Znr41WFhZPXpktTBeni1fHJybOvjs8fu7M6Y619a2Lf3//yf0Ph78+tvTdzw8P3k3ifOzPtjW34xncas4cLfybpYbi/JodxzpQWC9Jul0BdmQgi/M0No/EgRjIoh549X0ZEctAn0rEP/SpxjigMbfv0Dz4pfHog/oEaH37B+vXRmK4Njfau5Q8NTNK57sjHSg/LeOXP+7dTZfY+DrEnk3yANty63ZEnBocXH/+S7Lz386dql083tjaMvrt8we66X46/nm71fgntzL+iRbjn30tYncnNo//3MOnsh2+0ZCO/95rOf5dOXWNDGS5/9XGfEPJ5Sul4qmI+H9EHI+h3Wl+o/s5Z5ceLLfb1jz+S5e0/MZYMKvHw8Hdtcv0K6YK1cKztXrVo9sRr7cc/yYr/Z+06P/0/bi44SuvdtTh4r032u21efufr+WfIt5s2f+r9U/a3p+cGD935vRo7XgYbRwV6/115/Bv7crvdvvT/t+7cftHkub7tZXtl/Hj8JNiu21bPP6fkh7/u5LPauld2bobhWp1bixiV/Lx+vXjq3/byDf2T9t//NjG579Wx386+fp8i+2/c+hO2117of+nttX/2088+OiLH9qVv7X+f6eWOp6tWXP+e7LmUkbNVivYobcRAAAAAAAAekIuIvZHksuvpHO5fL7+fMeh2JsrlSvVE5fL81enovZd2ZEYyjXudB+o3YKtPw8xlj0P23g+YnxNfiIiDkbEtwN7avn8ZLk01e3GAwAAAAAAAAAAAAAAAAAAQI/Y1+b7/6nfB7pdO+C5q/2wwe5u1wLohk1/8r8Tv/QE9KRN4x94ZYl/6F/iH/qX+If+Jf6hf4l/6F+t49/TP9APfP4DAAAAAAAAAAAAAAAAAAAAAAAAAABAR128cCFdlpce35xM81PXF+ZnytdPThUrM/nZ+cn8ZHnuWn66XJ4uFfOT5dnNXq9ULl8bG4/5G6PVYqU6WllYvDRbnr9avXRltjBdvFQceiGtAgAAAAAAAAAAAAAAAAAAgJdLZWFxplAqFedecGIwulDoDhPvR09U43k2sG5Hfz64ftM/EdEL7ZJ4hkSXT0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OS/AAAA//8Umzy+") chdir(&(0x7f0000000380)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0xfe, 0x19c, &(0x7f0000000440)="$eJzs0bFrFEEUx/Hvm5nb2whRT8UiggkYXDdEcrtBC6vDKsItWNgIHnpcVhNclcteYULEayQg0fwLWoiWKmglomAdLAQLjU06SYpgIRZysncTwb/B+TS/fW/ZnZk3c3k7LwO/d5Zb1OjT7OUjggFGZdBTapCvbf3d5togOGvrVZvPbI7ki0vXm1mWLoydKVH5pwH8GCtX4G8rf8FhxZBQQz7vLLeaciWhV+OGmk2o1Jl4gG7QDh8yYoY5dBlNL1jlnKItQR32TXV8pvLFpZPzgnAtvRnH06fvUq2eKvafpdVXSHhfFI+4QwjlhCEfaHBv3exhUpBwTm1oMeA1WFvXJ45NbqPCLXoI74Jtyl+Nh7rAcfxLxYFmOCg8RieM19mvMFydz9LqDHJevZTIfDI/Swq/q7XfupXNrlxU8st7WpMtX6JNSkFEPBExXYyGA7xnZYOuHSqb3xiVN8Uqu3M1/XfPbXWEozzxuN3sdBYiDz5IkBB3Ia7AcP93KmG8uGDe2m9s8GX3wXEcx3Ecx3Ecx/kP/AkAAP//1ItaLQ==") r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x22, &(0x7f0000000400)=""/120, &(0x7f0000000480)=0x78) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x1, 0xffffffef, 0x9}) 12m57.317063144s ago: executing program 1 (id=600): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB=',msize=0x000000007fff']) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) unshare(0x6020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), 0x0}, 0x20) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)="c2bd5fd7d608834f33dea7a6403decbcfad84a19eea0e5c6bdeeebb4bc3c4ca15d130cd17e79b6b71c6f672461419308dfedbb4abc715f1738e1887b64071a2c2fa37c4706284a736f4e1c61ea59a3efb8986d4d4154f8ff9d8425cd36276faefdae9c9c913c2d4964872c0fa69e80f4664b5928b3578b973e5cc4c147441b68588e5eb3bca2a3afd27098", 0x8b) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 12m56.347449219s ago: executing program 1 (id=607): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) pipe(0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x14) 12m55.937106665s ago: executing program 32 (id=607): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) pipe(0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x14) 12m29.560460882s ago: executing program 3 (id=672): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0xffffffff86201120, 0x1, 0x7ffc, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xfffffffffffffffd, {0x410000003, 0x401, 0x0, {0x0, 0x1ffe000000000000, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x7, 0x0, 0x8001, 0x0, r3, r4, 0x10000, 0x40000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000e440)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d1902203007a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56500261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd2050000000000000068853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021b64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e668391bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf7f5de901454acc8cc95c63fd2ee771bffaf19200900119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d00000000000000003c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445478a3b71a5f06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64dee09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ea1b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd63099464d7a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fde037a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b6bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c20ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d10000000000000000736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b14746400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x0, 0x46c, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x11d, 0x0, 0x3}) close_range(r6, 0xffffffffffffffff, 0x0) 12m29.108610839s ago: executing program 3 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) 12m27.970929947s ago: executing program 3 (id=676): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xc8, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x98, 0x2, {{0x2, 0x2, 0x1, 0x3, 0x3, 0x8}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORR={0x10, 0x1, {0xa, 0x2, 0x2}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0xf}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1000000, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0x895a, 0x7, 0x8, 0x9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xb7, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0x7fffffff, 0x2, 0x0, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x0, 0x16dd, 0x2}}]}}}]}, 0xc8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4023}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@broadcast, 0x0, 0x0, 0x30, 0x0, [{@dev}, {@multicast2}, {@loopback}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) close(0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 12m27.170928649s ago: executing program 3 (id=678): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) landlock_create_ruleset(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@nogrpid}]}, 0x1, 0x792, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbJKmSfu+yQsvaD0FBA2UbkyNrYKHigcRLBT0bLtstqFmky3ZTWlCwBYRvAgqHgS99OyPevPqj6v+Fx6kpWparHiQyGx2222zm27a/RHJ5wOTfZ6Z2TzPd5+ZZ57ZGXYC2LMm0j+ZiEMR8UESMVabn0TEUDU1GHFic73b62v5dEpiY+P135LqOrfW1/LR8J7UgVrm8Yj4/t2Iw5mt5ZZXVudzxWJhqZafqiycnyqvrB45t5CbK8wVFo9Nz8wcPf7c8WOdi/WPn1YPXv/wlae/OvHXO49dff+HJE7Ewdqyxjg6ZSImap/JUPoR3uPlThfWZ0m/K8BDSXfNgc29PA7FWAxUUy2M9LJmAEC3vB0RGwDAHpM4/gPAHlP/HuDW+lq+PvX3G4neuvFSROzfjL9+fXNzyWDtmt3+6nXQ0VvJPVdGkogY70D5ExHx2TdvfpFO0aXrkADNXLocEWfGJ7b2/8mWexZ26pntFm4MV18m7put/4Pe+TYd/zzfbPyXuTP+iSbjn+Em++7DePD+n7nWgWJaSsd/Lzbc23a7If6a8YFa7j/VMd9QcvZcsZD2bf+NiMkYGk7z09VVm98FNXnz75utym8c//3+0Vufp+Wnr3fXyFwbHL73PbO5Su5R4667cTniicFm8Sd32j9pMf491WYZr77w3qetlqXxp/HWp63xd9fGlYinmrb/3bZMtr0/caq6OUzVN4omvv75k9FW5Te2fzql5dfPBXohbf/R7eMfTxrv1yzvvIwfr4x912rZg+Nvvv3vS96opvfV5l3MVSpL0xH7kte2zj969731fH39NP7JJ5vv/9tt/+k54Zk24x+8/uuXDx9/d6Xxz+6o/XeeuHp7fqBV+e21/0w1NVmb007/124FH+WzAwAAAAAAAAAAAAAAAAAAAAAAAIB2ZSLiYCSZ7J10JpPNbj7D+/8xmimWypXDZ0vLi7NRfVb2eAxl6j91Odbwe6jTtd/Dr+eP3pd/NiL+FxEfD49U89l8qTjb7+ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOZAi+f/p34Z7nftAICu2d/vCgAAPef4DwB7z86O/yNdqwcA0DvO/wFg72n7+H+mu/UAAHrH+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABddurkyXTa+HN9LZ/mZy+sLM+XLhyZLZTnswvL+Wy+tHQ+O1cqzRUL2XxpoeU/urT5UiyVzs/E4vLFqUqhXJkqr6yeXigtL1ZOn1vIzRVOF4Z6FhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtK+8sjqfKxYLS51LDEZER//hbkiM7I5q7JrEYOyKanQkkXRjL/jXJxp7iZH+dVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9w/AQAA//8PEihV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x103c42, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x10, 0x3, 0x7c27) pwrite64(r1, &(0x7f0000000100)="2380", 0x2, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711282000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) write$UHID_INPUT2(r0, &(0x7f0000001740), 0x6) 12m26.295359853s ago: executing program 3 (id=681): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 12m25.519792865s ago: executing program 3 (id=687): socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10880, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket(0x8000000010, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 12m22.799536207s ago: executing program 33 (id=687): socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10880, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket(0x8000000010, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 9m5.247462558s ago: executing program 4 (id=1153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000001c0)={0x1fc, 0xffffffffffffffff, 0xfd2f, 0x2, 0x7ffb}) 9m2.367567853s ago: executing program 4 (id=1157): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0700081400c9"], 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$hwrng(0xffffffffffffff9c, 0x0, 0x101800, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 8m55.804758484s ago: executing program 4 (id=1163): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a7a096", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x400141042, 0x80) unshare(0x10000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b8e4e"], 0x0) sync() 8m52.303230428s ago: executing program 4 (id=1176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x9c, 0x0, 0x0, 0xff7ff038}, {0x6, 0x0, 0xfe}]}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6de, &(0x7f0000000180)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m49.652459779s ago: executing program 4 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 8m48.231388421s ago: executing program 4 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffffffffffffc5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 8m46.96496783s ago: executing program 34 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffffffffffffc5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 47.85920466s ago: executing program 6 (id=2272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syslog(0x4, 0x0, 0x0) 37.508958471s ago: executing program 6 (id=2288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 35.552870311s ago: executing program 6 (id=2290): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x2221c0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, {0x0}, 0x0, 0x4}, 0xa0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0, 0x500}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x200}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 32.302550961s ago: executing program 6 (id=2299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) 30.261801932s ago: executing program 6 (id=2302): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) epoll_create1(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 29.485122545s ago: executing program 6 (id=2305): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0xe4}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 23.164247012s ago: executing program 0 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 23.004138665s ago: executing program 5 (id=2318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000340)=0x9, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x240) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000380)={0x1f, 0x7}, 0xe) listen(r4, 0x9) fchown(0xffffffffffffffff, 0xee01, 0x0) 21.082572704s ago: executing program 0 (id=2320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd19000, 0x115) socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 20.363378465s ago: executing program 5 (id=2322): mmap(&(0x7f0000d59000/0x3000)=nil, 0x3000, 0xfffffffffffffff4, 0x20031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f9502547f70e06d038e7ff7fc6e5539b3471078b089b3b083848090890e0878f0e1ac6e7049b3372959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8a92fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18834dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b8dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00fd104d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff752613d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443eab40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738dd7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a23dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c848a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333aed0418c0b44412d041259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b45030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475af3d3060eac38dcaea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x240, &(0x7f0000000140)) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 18.226288588s ago: executing program 0 (id=2324): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000002c0)='cifs.idmap\x00', 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) 15.49596553s ago: executing program 0 (id=2326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syslog(0x4, 0x0, 0x0) 14.114598772s ago: executing program 35 (id=2305): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0xe4}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 14.096028202s ago: executing program 5 (id=2328): syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 10.410518709s ago: executing program 2 (id=2332): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = inotify_init() mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, 0x0, r5) creat(0x0, 0xd931d3864d39dcca) 9.390067365s ago: executing program 5 (id=2334): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0xc, 0x4) execveat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff963}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 8.695092125s ago: executing program 7 (id=2335): socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) getpid() r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) mlockall(0x5) 8.672791036s ago: executing program 2 (id=2336): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet(0x2, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200020000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fc0200000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 6.815711555s ago: executing program 5 (id=2337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000100)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 6.662425477s ago: executing program 7 (id=2338): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 6.402139671s ago: executing program 7 (id=2339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd2b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x0, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x2000200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x3}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x78}}, 0x24040084) 6.368683051s ago: executing program 2 (id=2348): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r2, &(0x7f0000000200), 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x100000006, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) 5.559504244s ago: executing program 2 (id=2340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet(0x2, 0x3, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x1c4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) 4.360642213s ago: executing program 5 (id=2341): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket$inet(0x2, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffd8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) 4.211294725s ago: executing program 2 (id=2342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd19000, 0x115) socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 4.067541697s ago: executing program 0 (id=2343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r3, 0x6}}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) dup2(r4, r4) r5 = open(0x0, 0x1298c2, 0x0) ftruncate(r5, 0x200004) sendfile(0xffffffffffffffff, r5, 0x0, 0x80001d00c0d1) 3.963485218s ago: executing program 7 (id=2344): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x5dc, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)={@local}) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001f80)="$eJzs209sm+d9B/Dfw1dyaKdrFbdzkzbLWLQIMqUN5P9KvAH2rApt5iZGZWXzZTBlyQ4RiVIluXC6ofWwAUWAHowC62EDhlx2GLCDd9hlp2CHYcCwwdhhKFa009I1S28sNiCnTcP78qFEyXKsxbElO5+PYX/Jl7+XfP7Q5Es+fAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPjNL58aOZh2uhUAwP300sTXRw57/weAj5RzPv8DAAAAAAAAAAAAAMBul6KIP40Ur/64ky5U17vqZ1rtK1cnx8a33m1vihS1KKr68m/94KHDR44eOz7ay/ff/8P2RLw8ce5U4/T83MLizNLSzHRjst26OD89s+17uNv9NxuuBqAx99qV6UuXlhqHnju84earQ+888uiBoRPHXzy/v1c7OTY+PtFXMzD4gR/9Frc7w2NPFPHTSFH/7rupGRG1uPuxuMNz517bW3ViuOrE5Nh41ZHZVrO9XN6YarmqFjHUt9PJ3hjdh7m4K42Ia2XzywYPl92bWGguNqdmZxpnm4vLreXWfDvVuq0t+zMUtRhNEQsR0SluvbvBKOLfIsX33uukqYgoeuPwbHVi8J3bU7sHfdyGgbJvRcTNeADmbBd7JIp4I1J8//xIXMzjWg3b0xFfK/OpiG+UuRJxPV9P5RPkyYhfbPF84sEyEEX8Y6SYT5003Zv76nXlzCuNr7YvzffV9l5XHvj3h/tpl7821aOIqeoVv5M++MEOAAAAAAC7TxF/EyluzD2TFqJ/TbHVvtw415ya7X4r3Pvuv5H3Wl1dXR1K3WzkHMl5MufZnBdyLuS8lvN6zjdz3sj5Vs6bOVdydnJGLT9+zkbOkZwnc57NeSHnQs5rOa/nfDPnjZxv5byZcyVnJ2dY9wIAAAAAAABgl9kbRfwoUnz+r79ZnVcc1Xnpnzgx+sxXvtB/zvin73A/Ze1zEXEjtndO7mA+dTjVyj8ffr/YnnoU8e18/t8f7HRjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHVWLIj4dKX7wRidFiohGxIXo5kqx060DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPoh6KuJ0pPj5l+vV9ZsR8ZmI+N/V8k9ErKxustMtBgAAAAAAAABukYoYiRSPPdFJQxFxdeidRx49MHTi+Ivn9xdRRCpL+utfnjh3qnF6fm5hcWZpaWa6MdluXZyfntnuw9XPtNpXrk6Ojd+TztzR3nvc/r310/MLry+2Lr+6vOXt++qnppaWF5sXt7459kYtYqR/y3DV4Mmx8arRs61mu9o11W7TwFpEY7udAQAAAAAAAOChsS8VcTRSvNo6knrrxgPdNf9f6l4r1mr//PfXfwswuyl7+n8/sJ3LabsNHa4W3huTY+PjE32bBwZvLS3blFIRfxUpPvs7j1fr4Sn2bbk2XtbtiRTHvnkk1w19tqw7uaGqPjw5Nt54ab79pVOzs/MXm8vNqdmZxsRC8+K2fzgAAAAAAAAAAPfQvlTEn0WK3x25mXrnnef1/4Hutb71/1+vltAr9bQx11Rr+x+v1va7lz9xYrQx/qu3234v1v/LNqVUxL9Gisd+7/HqfPre+v/Iptqy7r8ixb/8w5O5rranrDvY6073Hi+1ZmdGUh6rzz3bq42q9niu/eR67cGy9nOR4i+e3lg7mms/tV57qKz9o0jxP0e3rv3l9drDZe0fRorfervRq91X1p7JtQfWa5+7OD87fadhLef/byPF2Z9/JfX6fNv57/v9x7VNueaWOX//yx/W/A/1bbuW5/VHef4P3mH+/y5S/PFPnsx13bE/lG9/rPp3ff5/O1L8569srD2Wa/ev1x7cbrd2Wjn/X4wUJ374w7U+5/nPI7s+Q/3z/5mBjbn2LNmh+X+sb9tQbtfh/+dYfBQtvf6t15qzszOLLrjgggtrF3b6lYn7oXz//6dI8cKZWuodx+T3/491r60f/7337fX3/xc25Zodev/f37fthXzUMjgQUV+eWxg8EFFfev1bX2rNNS/PXJ5pjx47euT50WPHnh/c0zu2W7+07aF7KJTzfyZSvPKTf177HLPx+G/r4/99m3LNDs3/J/v7tOG4ZttD8ZFUzv/1SPGdt99d+7z5fsf/vc//z3x+Y679/9uh+f9U37bqN/4fj3i+b9ueiDi13ccCAACAh8y+vE7+J7/292vnvG/8/B9f6NX2f/9zO7vh/H8AAAAAAPio25eK+MtI8d8jX0y9c8i28/vP6U25Zod+/3egb9v0fTqvZduDDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwC6Uo4qlI8eqPO2mlKK931c+02leuTo6Nb73b3hQpalFU9eXf+sFDh48cPXZ8tJfvv/+H7Yl4eeLcqcbp+bmFxZmlpZnpxmS7dXF+embb93C3+282XA1AY+61K9OXLi01Dj13eMPNV4feeeTRA0Mnjr94fn+vdnJsfHyir2Zg8AM/+i3SbbbviSIuRYr6d99N/15E1OLux+IOz517bW/VieGqE5Nj41VHZlvN9nJ5Y6rlqlrEUN9OJ3tjdB/m4q40Iq6VzS8bPFx2b2Khudicmp1pnG0uLreWW/PtVOu2tuzPUNRiNEUsRESnuPXuBqOIqUjxvfc66e0iouiNw7MvTXx95PCd21O7B33st/qdLTcPlH0rIm7GAzBnu9gjUcTHIsX3z4/ET4vuuFbD9nTE18p8KuIbZa5EXM/XU/kEeTLiF1s8n3iwDEQRZyPFfOqk/yjy3FevK2deaXy1fWm+r7b3uvLAvz/cT7v8takeRfysesXvpJ/5/wwAAAAA8BAp4jcixY25Z1K1Pri2pthqX26ca07Ndr/W733338h7ra6urg6lbjZyjuQ8mfNszgs5F3Jey3k955s5b+R8K+fNnCs5Ozmjlh8/ZyPnSM6TOc/mvJBzIee1nNdzvpnzRs63ct7MuZKzkzN8Tw4AAAAAAADsQrUo4vFI8YM3Omm16C7wXohurljnfOj9XwAAAP//dBg+9w==") utimes(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000040)) 1.683620394s ago: executing program 0 (id=2345): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0xa000) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000001540)=""/196) 1.650084024s ago: executing program 7 (id=2346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 1.481563357s ago: executing program 2 (id=2347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x1, 0xefff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 0s ago: executing program 7 (id=2349): syz_open_dev$vim2m(0x0, 0x7, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x801408, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000280)=ANY=[], 0xfa, 0x2f4, &(0x7f0000000900)="$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") r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="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", 0x1000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') kernel console output (not intermixed with test programs): slave_1) entered blocking state [ 347.152096][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.169256][ T6978] device bridge_slave_1 entered promiscuous mode [ 347.211408][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.230449][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.341085][ T7087] loop5: detected capacity change from 0 to 512 [ 347.471030][ T7065] bridge1: port 1(ip6gretap1) entered blocking state [ 347.525637][ T7065] bridge1: port 1(ip6gretap1) entered disabled state [ 347.550216][ T7087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 347.569790][ T7065] device ip6gretap1 entered promiscuous mode [ 347.581830][ T7087] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.610497][ T7072] device veth3 entered promiscuous mode [ 347.616402][ T7072] bridge1: port 2(veth3) entered blocking state [ 347.624345][ T7072] bridge1: port 2(veth3) entered disabled state [ 348.460200][ T6978] team0: Port device team_slave_0 added [ 348.517799][ T6978] team0: Port device team_slave_1 added [ 348.689704][ T7108] bridge0: port 3(netdevsim0) entered blocking state [ 348.715909][ T7108] bridge0: port 3(netdevsim0) entered disabled state [ 348.742666][ T7108] device netdevsim0 entered promiscuous mode [ 348.745890][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 348.769699][ T5279] device batadv_slave_0 left promiscuous mode [ 348.798749][ T5279] bridge1: port 2(veth3) entered disabled state [ 348.860748][ T5279] device hsr_slave_0 left promiscuous mode [ 348.887089][ T5279] device hsr_slave_1 left promiscuous mode [ 348.895085][ T5279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.911095][ T5279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.936442][ T5279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.951795][ T5279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.976559][ T5279] device bridge_slave_1 left promiscuous mode [ 348.992420][ T5279] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.033318][ T5279] device bridge_slave_0 left promiscuous mode [ 349.047409][ T5279] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.146258][ T5279] device bridge0 left promiscuous mode [ 349.164874][ T5279] device veth1_macvtap left promiscuous mode [ 349.177312][ T7117] loop5: detected capacity change from 0 to 2048 [ 349.188274][ T5279] device veth0_macvtap left promiscuous mode [ 349.208258][ T5279] device veth1_vlan left promiscuous mode [ 349.231934][ T5279] device veth0_vlan left promiscuous mode [ 349.267760][ T7117] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 349.456801][ T7117] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 349.563286][ T7117] EXT4-fs (loop5): Remounting filesystem read-only [ 349.642818][ T7131] netlink: 'syz.2.726': attribute type 11 has an invalid length. [ 349.788926][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 351.220253][ T5279] team0 (unregistering): Port device team_slave_1 removed [ 351.273804][ T5279] team0 (unregistering): Port device team_slave_0 removed [ 351.326025][ T5279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.378669][ T5279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.948555][ T5279] bond0 (unregistering): Released all slaves [ 352.050155][ T5279] smc: removing net device lo with user defined pnetid SYZ0 [ 352.060191][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.067481][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.093632][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.106398][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.113376][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.139893][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.262055][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.292698][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.328883][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.340139][ T7143] device bridge_slave_0 left promiscuous mode [ 352.348438][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.362142][ T7143] device bridge_slave_1 left promiscuous mode [ 352.370359][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.394073][ T7143] bond0: (slave bond_slave_0): Releasing backup interface [ 352.479989][ T7143] bond0: (slave bond_slave_1): Releasing backup interface [ 352.590927][ T7143] team0: Port device team_slave_0 removed [ 352.620958][ T7143] team0: Port device team_slave_1 removed [ 352.643596][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.654519][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.663707][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.672321][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.706660][ T7144] netlink: 'syz.5.727': attribute type 10 has an invalid length. [ 352.753510][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.780827][ T7144] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 352.879509][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 352.996325][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 353.073857][ T7154] bridge1: port 1(ip6gretap1) entered blocking state [ 353.130495][ T7154] bridge1: port 1(ip6gretap1) entered disabled state [ 353.151459][ T7154] device ip6gretap1 entered promiscuous mode [ 354.004531][ T7155] device veth3 entered promiscuous mode [ 354.024567][ T7155] bridge1: port 2(veth3) entered blocking state [ 354.030988][ T7155] bridge1: port 2(veth3) entered disabled state [ 354.287939][ T7161] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 354.295851][ T7161] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.732'. [ 354.546208][ T6978] device hsr_slave_0 entered promiscuous mode [ 354.605574][ T6978] device hsr_slave_1 entered promiscuous mode [ 354.616585][ T6978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.635833][ T6978] Cannot create hsr debugfs directory [ 354.664668][ T7162] vcan0 speed is unknown, defaulting to 1000 [ 357.348770][ T6978] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.385372][ T6978] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.437935][ T6978] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.467991][ T6978] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.765915][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.740'. [ 358.206172][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.670100][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.699999][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.763027][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.398586][ T6978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.491590][ T6978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.522031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.541980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.552258][ T7221] loop4: detected capacity change from 0 to 512 [ 359.555539][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.565757][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.581840][ T7221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 359.605345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.618995][ T7221] EXT4-fs (loop4): 1 truncate cleaned up [ 359.619454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.625101][ T7221] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 359.633429][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.648865][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.005658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 360.192434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 360.294611][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 360.536628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.559973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.569869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.583405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.628108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.639431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.651852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.672751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.723167][ T7222] tipc: Enabled bearer , priority 10 [ 360.736123][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.747947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.764764][ T22] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 360.772157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.781227][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.794359][ T22] usb 5-1: config 0 descriptor?? [ 360.799803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.848488][ T7228] tipc: Enabled bearer , priority 0 [ 362.243554][ T22] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 362.252305][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.271207][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.309191][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.522765][ T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input5 [ 362.784621][ T22] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 362.918848][ T22] usb 5-1: USB disconnect, device number 4 [ 363.787450][ T7260] loop5: detected capacity change from 0 to 512 [ 363.908454][ T7260] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 363.919640][ T7260] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.208429][ T6538] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 365.280225][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 365.354872][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 365.786883][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.811794][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.875037][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 365.895976][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.915586][ T6978] device veth0_vlan entered promiscuous mode [ 365.964456][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.007403][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.036193][ T6978] device veth1_vlan entered promiscuous mode [ 366.214784][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.223904][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.315468][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.427588][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.164403][ T6978] device veth0_macvtap entered promiscuous mode [ 367.179861][ T6978] device veth1_macvtap entered promiscuous mode [ 367.601206][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.714302][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.784230][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.821317][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.869002][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.954262][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.963204][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 368.024025][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.061126][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.091108][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.132435][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.209785][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.253557][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.283678][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.789082][ T7328] device vlan3 entered promiscuous mode [ 369.103198][ T6978] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.129618][ T6978] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.146429][ T6978] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.174447][ T6978] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.203791][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 369.497943][ T126] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 369.967874][ T7329] device hsr_slave_1 left promiscuous mode [ 370.086403][ T126] usb 6-1: config 0 has no interfaces? [ 370.094655][ T126] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 370.110892][ T7339] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 370.144617][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.180151][ T126] usb 6-1: config 0 descriptor?? [ 370.192886][ T5279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.240913][ T5279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.260296][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 370.448487][ T126] usb 6-1: USB disconnect, device number 2 [ 370.489669][ T5279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.500082][ T5279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.348999][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.181524][ T7357] syz.0.776 sent an empty control message without MSG_MORE. [ 373.716160][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 374.852454][ T7382] netlink: 'syz.4.782': attribute type 4 has an invalid length. [ 374.882852][ T7382] netlink: 'syz.4.782': attribute type 4 has an invalid length. [ 376.564463][ T5015] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 376.644847][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.6.788'. [ 376.770964][ T5015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.824262][ T5015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.872817][ T5015] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 376.976026][ T5015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.018634][ T5015] usb 3-1: SerialNumber: syz [ 377.226722][ T7422] loop4: detected capacity change from 0 to 1024 [ 377.662247][ T7422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 378.180373][ T5015] usb 3-1: 0:2 : does not exist [ 378.185665][ T5015] usb 3-1: unit 5: unexpected type 0x0c [ 378.206866][ T5015] usb 3-1: USB disconnect, device number 4 [ 378.275132][ T7082] udevd[7082]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 378.487455][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.518728][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.536667][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.122394][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 382.067083][ T7470] device bridge_slave_0 left promiscuous mode [ 382.093382][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.113535][ T7470] device bridge_slave_1 left promiscuous mode [ 382.141383][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.287897][ T7470] bond0: (slave bond_slave_0): Releasing backup interface [ 382.314931][ T7470] bond0: (slave bond_slave_1): Releasing backup interface [ 382.471474][ T7480] loop5: detected capacity change from 0 to 256 [ 382.819852][ T7480] FAT-fs (loop5): Directory bread(block 64) failed [ 382.826853][ T7480] FAT-fs (loop5): Directory bread(block 65) failed [ 382.834224][ T7480] FAT-fs (loop5): Directory bread(block 66) failed [ 382.841170][ T7480] FAT-fs (loop5): Directory bread(block 67) failed [ 382.849000][ T7480] FAT-fs (loop5): Directory bread(block 68) failed [ 382.855929][ T7480] FAT-fs (loop5): Directory bread(block 69) failed [ 382.863283][ T7480] FAT-fs (loop5): Directory bread(block 70) failed [ 382.870191][ T7480] FAT-fs (loop5): Directory bread(block 71) failed [ 382.877534][ T7480] FAT-fs (loop5): Directory bread(block 72) failed [ 382.884434][ T7480] FAT-fs (loop5): Directory bread(block 73) failed [ 383.695842][ T7470] team0: Port device team_slave_0 removed [ 383.738296][ T7487] loop2: detected capacity change from 0 to 256 [ 383.875488][ T7470] team0: Port device team_slave_1 removed [ 383.888215][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.056580][ T7487] exFAT-fs (loop2): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 384.150635][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.546057][ T7470] device netdevsim0 left promiscuous mode [ 384.552076][ T7470] bridge0: port 3(netdevsim0) entered disabled state [ 384.598542][ T7491] loop5: detected capacity change from 0 to 8 [ 384.612042][ T7470] bond1: (slave ip6erspan0): Releasing active interface [ 384.613785][ T27] audit: type=1800 audit(2000000191.089:112): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.805" name="file2" dev="loop2" ino=1048613 res=0 errno=0 [ 384.705991][ T7488] netlink: 'syz.0.804': attribute type 2 has an invalid length. [ 384.713699][ T7488] netlink: 'syz.0.804': attribute type 8 has an invalid length. [ 384.721852][ T7488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.804'. [ 384.835262][ T7491] SQUASHFS error: Failed to read block 0x4de: -5 [ 384.901617][ T7491] SQUASHFS error: Failed to read block 0x4de: -5 [ 384.939765][ T27] audit: type=1800 audit(2000000191.419:113): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.806" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 385.018614][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'. [ 385.113547][ T27] audit: type=1800 audit(2000000191.589:114): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.805" name="file2" dev="loop2" ino=1048613 res=0 errno=0 [ 386.341111][ T7511] loop4: detected capacity change from 0 to 256 [ 386.379573][ T27] audit: type=1326 audit(2000000192.859:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7fc00000 [ 386.921590][ T27] audit: type=1326 audit(2000000192.889:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f861338d169 code=0x7fc00000 [ 386.947585][ T5015] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 387.198350][ T27] audit: type=1326 audit(2000000192.899:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7fc00000 [ 387.551430][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 387.740780][ T5015] usb 7-1: Using ep0 maxpacket: 16 [ 387.899635][ T5015] usb 7-1: config 0 has an invalid interface number: 243 but max is 0 [ 388.569094][ T5015] usb 7-1: config 0 has no interface number 0 [ 388.582743][ T5015] usb 7-1: config 0 interface 243 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 388.604588][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 388.703307][ T5015] usb 7-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d0.ce [ 388.719199][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 388.895107][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 388.903698][ T5015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.922339][ T5015] usb 7-1: Product: syz [ 388.948344][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 388.957311][ T5015] usb 7-1: Manufacturer: syz [ 388.965682][ T5015] usb 7-1: SerialNumber: syz [ 389.279083][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 389.305023][ T5015] usb 7-1: config 0 descriptor?? [ 389.323686][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 389.457494][ T5015] usb 7-1: can't set config #0, error -71 [ 389.485642][ T5015] usb 7-1: USB disconnect, device number 2 [ 390.827852][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.883583][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.954516][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.051384][ T7558] device bridge_slave_0 left promiscuous mode [ 391.083680][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.097026][ T7581] "syz.2.826" (7581) uses obsolete ecb(arc4) skcipher [ 391.144563][ T7558] device bridge_slave_1 left promiscuous mode [ 391.190397][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.239369][ T7558] bond0: (slave bond_slave_0): Releasing backup interface [ 391.289338][ T7587] loop4: detected capacity change from 0 to 512 [ 391.300447][ T7558] bond0: (slave bond_slave_1): Releasing backup interface [ 391.355643][ T7587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 391.379872][ T7587] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.388911][ T7558] team0: Port device team_slave_0 removed [ 391.443194][ T7558] team0: Port device team_slave_1 removed [ 391.451147][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.458989][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.467756][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.476245][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.486521][ T27] audit: type=1326 audit(2000000197.969:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe558d169 code=0x7ffc0000 [ 391.514294][ T7563] netlink: 'syz.6.820': attribute type 10 has an invalid length. [ 391.546294][ T27] audit: type=1326 audit(2000000197.969:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe558d169 code=0x7ffc0000 [ 391.581951][ T7563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.616175][ T7563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 391.620874][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 391.653619][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 408.484563][ T5014] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 408.621468][ T7652] loop5: detected capacity change from 0 to 512 [ 408.694068][ T7652] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 408.724413][ T5014] usb 7-1: Using ep0 maxpacket: 16 [ 408.731686][ T5014] usb 7-1: config 0 has an invalid interface number: 154 but max is 0 [ 408.737444][ T7652] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 408.804015][ T5014] usb 7-1: config 0 has no interface number 0 [ 408.937831][ T5014] usb 7-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 409.083486][ T5014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.369716][ T5014] usb 7-1: SerialNumber: syz [ 409.679784][ T5014] usb 7-1: config 0 descriptor?? [ 410.508433][ T5014] usb 7-1: can't set config #0, error -71 [ 410.510996][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 410.533514][ T5014] usb 7-1: USB disconnect, device number 3 [ 410.609110][ T7670] loop6: detected capacity change from 0 to 512 [ 410.643127][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 411.171052][ T7670] EXT4-fs: Ignoring removed mblk_io_submit option [ 411.204063][ T7670] EXT4-fs: Ignoring removed bh option [ 411.309914][ T7670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 411.387890][ T7670] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 411.418628][ T7665] syz.0.845 (7665) used greatest stack depth: 19704 bytes left [ 411.506007][ T7670] EXT4-fs (loop6): 1 truncate cleaned up [ 411.515359][ T7670] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 411.531691][ T7681] loop5: detected capacity change from 0 to 128 [ 411.617462][ T7681] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 411.686638][ T7681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.853802][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 415.264653][ T7720] loop4: detected capacity change from 0 to 256 [ 415.680297][ T7720] FAT-fs (loop4): Directory bread(block 64) failed [ 416.179118][ T7720] FAT-fs (loop4): Directory bread(block 65) failed [ 416.218268][ T7720] FAT-fs (loop4): Directory bread(block 66) failed [ 416.262159][ T7720] FAT-fs (loop4): Directory bread(block 67) failed [ 416.285748][ T7720] FAT-fs (loop4): Directory bread(block 68) failed [ 416.292389][ T7720] FAT-fs (loop4): Directory bread(block 69) failed [ 416.321199][ T7730] loop6: detected capacity change from 0 to 512 [ 416.345785][ T7720] FAT-fs (loop4): Directory bread(block 70) failed [ 416.352396][ T7720] FAT-fs (loop4): Directory bread(block 71) failed [ 416.369731][ T7720] FAT-fs (loop4): Directory bread(block 72) failed [ 416.387757][ T7730] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 416.396493][ T7720] FAT-fs (loop4): Directory bread(block 73) failed [ 416.408628][ T7730] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 417.056836][ T7738] FAT-fs (loop4): Filesystem has been set read-only [ 417.576370][ T7742] loop2: detected capacity change from 0 to 256 [ 417.671627][ T7082] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 417.689216][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.863'. [ 417.757816][ T7750] loop6: detected capacity change from 0 to 2048 [ 417.848210][ T7750] loop6: p1 < > p3 [ 417.870800][ T7750] loop6: p3 size 134217728 extends beyond EOD, truncated [ 417.944927][ T3623] loop6: p1 < > p3 [ 417.960161][ T3623] loop6: p3 size 134217728 extends beyond EOD, truncated [ 420.740905][ T7777] loop5: detected capacity change from 0 to 256 [ 422.143806][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 423.474515][ T7777] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 423.890849][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.880'. [ 424.384997][ T7816] loop5: detected capacity change from 0 to 256 [ 424.395981][ T7818] : renamed from vlan0 [ 424.412676][ T7816] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 425.252375][ T7833] loop2: detected capacity change from 0 to 256 [ 425.316405][ T7082] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 425.353978][ T7833] loop2: detected capacity change from 0 to 512 [ 427.800405][ T7867] loop6: detected capacity change from 0 to 16 [ 427.847910][ T7867] erofs: (device loop6): mounted with root inode @ nid 36. [ 428.206231][ T7873] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 428.216496][ T7873] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 428.226675][ T7873] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 428.236042][ T7873] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 428.245833][ T7873] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 428.255339][ T7873] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 428.265016][ T7873] syz.6.896: attempt to access beyond end of device [ 428.265016][ T7873] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 428.279029][ T7873] syz.6.896: attempt to access beyond end of device [ 428.279029][ T7873] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 428.293364][ T7873] syz.6.896: attempt to access beyond end of device [ 428.293364][ T7873] loop6: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 428.307648][ T7873] syz.6.896: attempt to access beyond end of device [ 428.307648][ T7873] loop6: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 428.322284][ T7873] syz.6.896: attempt to access beyond end of device [ 428.322284][ T7873] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 428.336116][ T7873] syz.6.896: attempt to access beyond end of device [ 428.336116][ T7873] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 428.352035][ T7873] syz.6.896: attempt to access beyond end of device [ 428.352035][ T7873] loop6: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 429.038008][ T7880] loop2: detected capacity change from 0 to 512 [ 429.078662][ T7880] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 429.133151][ T7880] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 430.401816][ T7896] loop6: detected capacity change from 0 to 4096 [ 430.504301][ T7082] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 430.922843][ T7912] loop6: detected capacity change from 0 to 128 [ 430.931344][ T7912] ADFS-fs (loop6): unrecognised mount option "gid=0x0000000000000000184467440737095516150x0000000000000000" or missing value [ 433.553737][ T7933] loop2: detected capacity change from 0 to 256 [ 433.571335][ T7933] exfat: Bad value for 'uid' [ 433.613645][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 434.738612][ T7958] loop2: detected capacity change from 0 to 128 [ 440.015028][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.021431][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.503354][ T8018] loop6: detected capacity change from 0 to 256 [ 440.519627][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 440.588967][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 440.613885][ T7082] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 440.622517][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 440.661196][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 440.730490][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 440.740391][ T8015] loop6: detected capacity change from 0 to 512 [ 440.776644][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 440.784909][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 440.797291][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 440.804947][ T8014] infiniband syz1: set active [ 440.813365][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.822242][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.840652][ T8014] device bridge_slave_0 left promiscuous mode [ 440.849948][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.872333][ T8014] device bridge_slave_1 left promiscuous mode [ 440.896198][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.900703][ T7082] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 440.928834][ T8014] bond0: (slave bond_slave_0): Releasing backup interface [ 441.309283][ T8014] bond0: (slave bond_slave_1): Releasing backup interface [ 441.952401][ T8014] team0: Port device team_slave_0 removed [ 442.010700][ T8014] team0: Port device team_slave_1 removed [ 442.023252][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.036176][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.052211][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.062522][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.187702][ T8014] device ip6gretap1 left promiscuous mode [ 442.405355][ T8014] bridge1: port 1(ip6gretap1) entered disabled state [ 442.507288][ T8014] bridge1: port 2(veth3) entered disabled state [ 442.657517][ T8016] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 443.206884][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.459719][ T22] vcan0 speed is unknown, defaulting to 1000 [ 444.902415][ T8060] loop5: detected capacity change from 0 to 512 [ 444.917156][ T8060] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 444.979442][ T8060] EXT4-fs (loop5): orphan cleanup on readonly fs [ 445.691059][ T8060] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 445.834774][ T8060] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 445.915276][ T8060] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 445.936064][ T8060] EXT4-fs (loop5): 1 truncate cleaned up [ 445.954290][ T8060] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 446.050889][ T8060] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 446.075465][ T8077] tipc: Started in network mode [ 446.080414][ T8077] tipc: Node identity 7f000001, cluster identity 4711 [ 446.091471][ T8060] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 446.117111][ T8077] tipc: Enabled bearer , priority 10 [ 446.130075][ T8081] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 446.199079][ T8077] tipc: Enabled bearer , priority 0 [ 446.245808][ T8081] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 446.292233][ T8087] xt_hashlimit: max too large, truncated to 1048576 [ 446.333188][ T8081] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 446.561765][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 446.914298][ T5833] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 446.925046][ T8099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.951'. [ 447.114341][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 447.134934][ T5833] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 447.204184][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.212243][ T5833] usb 7-1: Product: syz [ 447.253876][ T5833] usb 7-1: Manufacturer: syz [ 447.269277][ T5833] usb 7-1: SerialNumber: syz [ 447.460556][ T5834] tipc: Node number set to 2130706433 [ 447.478504][ T5833] usb 7-1: config 0 descriptor?? [ 448.290785][ T5833] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 448.538532][ T8124] loop4: detected capacity change from 0 to 32768 [ 448.582727][ T8124] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 448.604449][ T5281] (kworker/u4:52,5281,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 448.661109][ T8128] overlayfs: failed to clone upperpath [ 449.588808][ T4259] ocfs2: Unmounting device (7,4) on (node local) [ 449.859507][ T5833] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 450.107625][ T5833] usb 7-1: USB disconnect, device number 4 [ 461.696311][ T8238] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 461.771434][ T27] audit: type=1326 audit(2000000268.249:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 461.855446][ T27] audit: type=1326 audit(2000000268.289:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 461.878604][ T27] audit: type=1326 audit(2000000268.309:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 461.912211][ T27] audit: type=1326 audit(2000000268.319:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 461.954927][ T27] audit: type=1326 audit(2000000268.319:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 462.935682][ T8257] netlink: 104 bytes leftover after parsing attributes in process `syz.5.990'. [ 463.311952][ T27] audit: type=1326 audit(2000000268.319:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 464.615231][ T27] audit: type=1326 audit(2000000268.319:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 464.643689][ T27] audit: type=1326 audit(2000000268.319:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc9cc38bc1f code=0x7ffc0000 [ 464.666277][ T27] audit: type=1326 audit(2000000268.329:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 464.689212][ T27] audit: type=1326 audit(2000000268.339:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 466.257810][ T8311] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1002'. [ 467.072715][ T8304] loop6: detected capacity change from 0 to 4096 [ 467.148643][ T8304] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 467.496427][ T8330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.138033][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 471.851382][ T8376] loop4: detected capacity change from 0 to 1024 [ 471.898953][ T8376] EXT4-fs: Ignoring removed orlov option [ 471.930350][ T8376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 472.848790][ T8372] vcan0 speed is unknown, defaulting to 1000 [ 472.895286][ T8376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 473.095256][ T8376] EXT4-fs (loop4): pa ffff888073b18700: logic 0, phys. 112, len 25 [ 473.103845][ T8376] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 24, pa_free 13 [ 473.191088][ T8394] EXT4-fs (loop4): pa ffff888073b18000: logic 0, phys. 144, len 23 [ 473.199963][ T8394] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 21, pa_free 11 [ 473.365028][ T8394] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 19: block 112:freeing already freed block (bit 7); block bitmap corrupt. [ 474.457857][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 483.378093][ T8494] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 490.288312][ T8533] loop6: detected capacity change from 0 to 2048 [ 490.421687][ T8533] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 491.657596][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.664773][ T8567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.774593][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 495.291870][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 497.503137][ T8640] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 497.784212][ T5833] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 498.871615][ T5833] usb 6-1: config 0 has no interfaces? [ 498.880129][ T5833] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 498.957832][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.006053][ T5833] usb 6-1: Product: syz [ 499.044240][ T5833] usb 6-1: Manufacturer: syz [ 499.069878][ T5833] usb 6-1: SerialNumber: syz [ 499.102777][ T5833] usb 6-1: config 0 descriptor?? [ 501.584988][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.591336][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.761094][ T8695] loop4: detected capacity change from 0 to 2048 [ 502.703784][ T8695] loop4: p1 < > p3 [ 502.747708][ T8695] loop4: p3 size 134217728 extends beyond EOD, truncated [ 502.936743][ T8706] loop6: detected capacity change from 0 to 1024 [ 503.439459][ T7277] udevd[7277]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 504.161827][ T7277] udevd[7277]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 504.194853][ T5833] usb 6-1: can't set config #0, error -110 [ 505.651876][ T8724] loop4: detected capacity change from 0 to 512 [ 505.662273][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 505.662290][ T27] audit: type=1800 audit(2000000312.139:131): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1084" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 505.780109][ T8724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 505.805122][ T8724] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.859579][ T8731] vcan0 speed is unknown, defaulting to 1000 [ 506.113698][ T5015] usb 6-1: USB disconnect, device number 3 [ 506.186216][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 506.192279][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1091'. [ 506.310144][ T8740] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 507.583831][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1094'. [ 507.699231][ T8754] device syz_tun entered promiscuous mode [ 507.716102][ T8754] device macvtap1 entered promiscuous mode [ 507.828088][ T8757] device syz_tun left promiscuous mode [ 513.649639][ T8827] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 513.657536][ T8827] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1119'. [ 514.551735][ T8838] loop5: detected capacity change from 0 to 1024 [ 514.668572][ T8838] hfsplus: xattr searching failed [ 514.690919][ T8838] hfsplus: xattr searching failed [ 514.726400][ T27] audit: type=1800 audit(2000000321.159:132): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1114" name="bus" dev="loop5" ino=2 res=0 errno=0 [ 516.587812][ T8831] loop4: detected capacity change from 0 to 128 [ 516.655604][ T8831] FAT-fs (loop4): Unrecognized mount option "A" or missing value [ 518.918469][ T27] audit: type=1804 audit(2000000325.399:133): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1120" name="/newroot/64/bus/file1" dev="overlay" ino=365 res=1 errno=0 [ 519.787578][ T8877] ip6t_srh: unknown srh invflags 7863 [ 521.064441][ T8899] xt_hashlimit: max too large, truncated to 1048576 [ 522.999412][ T8914] rdma_op ffff88807b99d1f0 conn xmit_rdma 0000000000000000 [ 523.010553][ T5016] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 523.415671][ T5016] usb 6-1: not running at top speed; connect to a high speed hub [ 523.431101][ T5016] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 523.480796][ T5016] usb 6-1: config 1 has no interface number 1 [ 523.500749][ T8917] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.510629][ T8917] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.519453][ T8917] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.528259][ T8917] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.553242][ T5016] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.584174][ T5016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.608695][ T5016] usb 6-1: Product: syz [ 523.623209][ T5016] usb 6-1: Manufacturer: syz [ 523.633358][ T5016] usb 6-1: SerialNumber: syz [ 523.674557][ T8917] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 523.693479][ T8921] tipc: Started in network mode [ 523.708413][ T8921] tipc: Node identity 6, cluster identity 4711 [ 523.719278][ T8921] tipc: Node number set to 6 [ 524.458092][ T5016] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 524.634914][ T5016] usb 6-1: USB disconnect, device number 4 [ 524.722207][ T8940] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 525.760133][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.808170][ T8941] bond1: (slave gretap1): making interface the new active one [ 525.913380][ T8941] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 526.092422][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 526.512738][ T8959] loop4: detected capacity change from 0 to 2048 [ 526.643729][ T8959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 526.761239][ T8937] loop5: detected capacity change from 0 to 128 [ 526.795135][ T8937] FAT-fs (loop5): Unrecognized mount option "A" or missing value [ 527.152155][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'. [ 527.390021][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 536.944996][ T9049] loop5: detected capacity change from 0 to 1024 [ 537.050494][ T9051] loop4: detected capacity change from 0 to 512 [ 537.085079][ T9051] EXT4-fs: Ignoring removed nobh option [ 537.108862][ T9051] EXT4-fs: Ignoring removed mblk_io_submit option [ 537.726725][ T9061] tipc: Bearer : already 2 bearers with priority 10 [ 537.734436][ T9061] tipc: Bearer : trying with adjusted priority [ 537.741499][ T9061] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 537.774246][ T9051] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 538.998704][ T27] audit: type=1326 audit(2000000345.479:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 539.044694][ T9081] loop5: detected capacity change from 0 to 2048 [ 539.094200][ T5016] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 539.137391][ T27] audit: type=1326 audit(2000000345.539:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 539.184476][ T9081] loop5: p2 < > p3 < p5 > p4 [ 539.189229][ T9081] loop5: partition table partially beyond EOD, truncated [ 539.211489][ T9095] xt_bpf: check failed: parse error [ 539.234579][ T27] audit: type=1326 audit(2000000345.539:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 539.369821][ T27] audit: type=1326 audit(2000000345.539:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 539.399093][ T9081] loop5: p2 start 4278190080 is beyond EOD, truncated [ 539.407994][ T9081] loop5: p4 size 8192 extends beyond EOD, truncated [ 539.416091][ T9081] loop5: p5 size 8192 extends beyond EOD, truncated [ 539.430491][ T5016] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 539.443235][ T5016] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 539.454670][ T5016] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 78, setting to 64 [ 540.107014][ T27] audit: type=1326 audit(2000000345.539:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 540.214527][ T5016] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 540.223624][ T5016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.234866][ T27] audit: type=1326 audit(2000000345.539:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 540.277030][ T5016] usb 5-1: can't set config #27, error -71 [ 540.283923][ T27] audit: type=1326 audit(2000000345.539:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 540.319507][ T9105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.334385][ T5016] usb 5-1: USB disconnect, device number 5 [ 540.369005][ T27] audit: type=1326 audit(2000000345.539:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 540.382576][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 540.452781][ T27] audit: type=1326 audit(2000000345.539:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 540.525944][ T27] audit: type=1326 audit(2000000345.539:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.6.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 541.095702][ T9119] loop4: detected capacity change from 0 to 1024 [ 544.029115][ T9125] kvm [9124]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x85a [ 544.054633][ T9137] loop5: detected capacity change from 0 to 512 [ 544.082002][ T9137] EXT4-fs: Ignoring removed nobh option [ 544.151425][ T9137] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 544.182176][ T4395] device syz_tun left promiscuous mode [ 544.208937][ T9137] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1180: invalid indirect mapped block 256 (level 2) [ 544.304644][ T9137] EXT4-fs (loop5): 2 truncates cleaned up [ 544.310453][ T9137] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 545.291354][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 545.291375][ T27] audit: type=1800 audit(2000000351.649:172): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1180" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 545.342768][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 545.860242][ T9168] loop6: detected capacity change from 0 to 512 [ 546.043496][ T9168] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 546.070142][ T9168] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.865992][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 549.458814][ T4262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.468866][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.477817][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.487246][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.494945][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 549.502391][ T4262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 550.210400][ T9214] xt_connbytes: Forcing CT accounting to be enabled [ 550.219291][ T9214] Cannot find add_set index 1 as target [ 550.637568][ T9204] vcan0 speed is unknown, defaulting to 1000 [ 550.818996][ T9221] netlink: 'syz.2.1202': attribute type 6 has an invalid length. [ 551.757402][ T4258] Bluetooth: hci3: command 0x0409 tx timeout [ 553.092484][ T9253] overlayfs: failed to clone upperpath [ 553.659200][ T9259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.566357][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 554.897551][ T4258] Bluetooth: hci4: command 0x0406 tx timeout [ 555.913017][ T9204] chnl_net:caif_netlink_parms(): no params data found [ 556.268325][ T9277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.964612][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 557.838202][ T9311] syz.2.1219[9311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.838359][ T9311] syz.2.1219[9311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 559.204474][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 559.753087][ T9204] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.796618][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.818804][ T9204] device bridge_slave_0 entered promiscuous mode [ 559.901180][ T9204] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.483882][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.626438][ T9204] device bridge_slave_1 entered promiscuous mode [ 561.199618][ T5284] device batadv_slave_0 left promiscuous mode [ 561.240412][ T5284] device hsr_slave_0 left promiscuous mode [ 561.261607][ T5284] device hsr_slave_1 left promiscuous mode [ 563.200398][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.206841][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.117529][ T9348] orangefs_mount: mount request failed with -4 [ 565.591998][ T5284] bond1 (unregistering): Released all slaves [ 568.386247][ T9375] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 569.312575][ T5284] bond0 (unregistering): Released all slaves [ 569.401405][ T5284] smc: removing net device lo with user defined pnetid SYZ0 [ 569.410700][ T9319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1223'. [ 569.420168][ T9319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1223'. [ 569.494395][ T9379] netlink: 'syz.6.1240': attribute type 10 has an invalid length. [ 569.502481][ T9379] tipc: Resetting bearer [ 569.565805][ T9204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.603265][ T9204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.772200][ T9204] team0: Port device team_slave_0 added [ 569.823149][ T9204] team0: Port device team_slave_1 added [ 569.967187][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.993605][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.192875][ T9204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.270319][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.281750][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.606992][ T9204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.820867][ T9393] vcan0 speed is unknown, defaulting to 1000 [ 571.798365][ T9204] device hsr_slave_0 entered promiscuous mode [ 571.812390][ T9204] device hsr_slave_1 entered promiscuous mode [ 571.882747][ T9204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.920933][ T9204] Cannot create hsr debugfs directory [ 572.925866][ T9428] netlink: 'syz.5.1254': attribute type 1 has an invalid length. [ 573.071923][ T9431] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.131100][ T9431] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.224196][ T9431] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.234825][ T9431] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.428461][ T9431] bond1: (slave geneve2): making interface the new active one [ 573.598473][ T9431] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 573.740635][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1254'. [ 573.961063][ T9431] syz.5.1254 (9431) used greatest stack depth: 17912 bytes left [ 574.005101][ T9428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.401880][ T9451] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 575.720166][ T9449] loop6: detected capacity change from 0 to 64 [ 576.814849][ T9204] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 576.851427][ T9449] hfs: node 4:3 still has 1 user(s)! [ 577.003373][ T9204] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 579.208566][ T9204] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 579.267925][ T9204] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 579.819356][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.870570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 579.885204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 579.917827][ T9204] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.963496][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 579.994156][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.030166][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.037375][ T5296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.058674][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 580.073345][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 580.082938][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.090150][ T5296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.105117][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 580.135570][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 580.179156][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 580.198502][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 580.233838][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 580.262027][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 580.285237][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 580.302319][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 580.335570][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 580.501087][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 580.548980][ T9204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.573373][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 580.583179][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 580.600161][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 582.919696][ T5284] tipc: Subscription rejected, illegal request [ 583.231744][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 583.249708][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 583.562964][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.184560][ T9575] loop5: detected capacity change from 0 to 1024 [ 586.240872][ T9575] EXT4-fs: Ignoring removed nobh option [ 586.374404][ T9575] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.1281: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 586.441743][ T9575] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1281: couldn't read orphan inode 11 (err -117) [ 586.542648][ T9575] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 586.876819][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.898085][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 587.537409][ T9575] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1281: Invalid block bitmap block 0 in block_group 0 [ 587.605469][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 587.615568][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 587.618601][ T9575] Quota error (device loop5): write_blk: dquota write failed [ 587.631381][ T9575] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 587.656036][ T9204] device veth0_vlan entered promiscuous mode [ 587.662649][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 587.675877][ T9575] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.1281: Failed to acquire dquot type 0 [ 587.689141][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 587.708147][ T9204] device veth1_vlan entered promiscuous mode [ 587.832604][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 587.861334][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 587.892083][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 587.897063][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 587.915268][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 587.947635][ T9204] device veth0_macvtap entered promiscuous mode [ 587.975823][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 587.992731][ T9204] device veth1_macvtap entered promiscuous mode [ 588.036848][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.052919][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.077171][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.087514][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 588.097479][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 588.110359][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.122072][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.214653][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.261854][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 588.283139][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 588.295211][ T9204] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.303993][ T9204] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.378063][ T9204] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.611423][ T9204] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.160418][ T9614] netlink: 'syz.2.1290': attribute type 10 has an invalid length. [ 589.341800][ T9614] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 589.660238][ T5281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.711178][ T5281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.768741][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 589.777222][ T5281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.806732][ T5281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.831565][ T9631] 9pnet: Could not find request transport: f [ 589.860229][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 592.117695][ T9662] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.553901][ T9662] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.470402][ T9662] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.430707][ T9725] loop5: detected capacity change from 0 to 1024 [ 599.126306][ T9725] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 599.309279][ T9662] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.385360][ T9741] fuse: Bad value for 'fd' [ 599.516481][ T9743] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1318'. [ 599.611186][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1318'. [ 602.017988][ T9662] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.065706][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 602.141913][ T9662] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.165835][ T9662] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.244144][ T9662] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.558456][ T9780] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 603.584783][ T9780] CIFS mount error: No usable UNC path provided in device string! [ 603.584783][ T9780] [ 603.595385][ T9780] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 604.380177][ T9787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 606.270973][ T9809] loop7: detected capacity change from 0 to 128 [ 606.352142][ T9810] ALSA: mixer_oss: invalid OSS volume '' [ 606.362673][ T9810] loop5: detected capacity change from 0 to 256 [ 606.595977][ T9809] FAT-fs (loop7): bogus number of reserved sectors [ 606.602669][ T9809] FAT-fs (loop7): Can't find a valid FAT filesystem [ 612.525278][ T9853] loop5: detected capacity change from 0 to 1024 [ 612.532594][ T9853] EXT4-fs: Ignoring removed nobh option [ 612.564313][ T9853] EXT4-fs: Ignoring removed bh option [ 612.580686][ T9853] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 614.319176][ T9853] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 614.795996][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1337'. [ 615.119857][ T9883] loop7: detected capacity change from 0 to 128 [ 618.615307][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 618.847289][ T9911] loop7: detected capacity change from 0 to 512 [ 618.961561][ T9911] EXT4-fs (loop7): orphan cleanup on readonly fs [ 618.973634][ T9911] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 619.013651][ T9911] EXT4-fs warning (device loop7): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 619.092551][ T9911] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 619.117893][ T9911] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1356: bg 0: block 64: padding at end of block bitmap is not set [ 619.181780][ T9911] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 619.249195][ T9911] EXT4-fs (loop7): 1 orphan inode deleted [ 619.278814][ T9911] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 620.195780][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1362'. [ 620.735373][ T9940] netlink: 'syz.6.1363': attribute type 4 has an invalid length. [ 620.743526][ T9940] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1363'. [ 622.560628][ T9204] EXT4-fs (loop7): unmounting filesystem. [ 624.506196][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.512564][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.640962][ T9958] tipc: Started in network mode [ 624.659025][ T9958] tipc: Node identity 6, cluster identity 4711 [ 624.684148][ T9958] tipc: Node number set to 6 [ 625.100015][ T9981] loop5: detected capacity change from 0 to 1024 [ 625.131916][ T9981] EXT4-fs: Ignoring removed orlov option [ 625.471335][ T9981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 626.092152][ T9981] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 626.528639][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1375'. [ 626.632688][ T9994] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 626.675118][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 627.664656][T10008] xt_bpf: check failed: parse error [ 627.720551][T10007] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 627.934284][T10015] tmpfs: Bad value for 'mpol' [ 630.990312][T10025] rdma_op ffff88807a24f9f0 conn xmit_rdma 0000000000000000 [ 632.588546][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'. [ 632.817076][T10060] loop7: detected capacity change from 0 to 1024 [ 632.900492][T10060] hfsplus: xattr searching failed [ 632.910278][T10060] hfsplus: xattr searching failed [ 632.941878][ T27] audit: type=1800 audit(2000000439.389:173): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1393" name="bus" dev="loop7" ino=2 res=0 errno=0 [ 633.430146][T10064] tmpfs: Bad value for 'mpol' [ 637.094263][T10099] xt_hashlimit: max too large, truncated to 1048576 [ 641.116874][T10139] tmpfs: Bad value for 'mpol' [ 642.836114][ T27] audit: type=1326 audit(2000000449.319:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 642.909824][ T27] audit: type=1326 audit(2000000449.339:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 642.948850][ T27] audit: type=1326 audit(2000000449.339:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 646.271086][ T27] audit: type=1326 audit(2000000449.339:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 646.429715][ T27] audit: type=1326 audit(2000000449.339:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 646.482353][T10177] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1420'. [ 647.207746][ T27] audit: type=1326 audit(2000000449.339:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 647.246360][ T27] audit: type=1326 audit(2000000449.339:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 647.304095][ T27] audit: type=1326 audit(2000000449.339:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 647.686847][ T27] audit: type=1326 audit(2000000449.339:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 648.367293][ T27] audit: type=1326 audit(2000000449.379:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 648.400197][ T27] audit: type=1326 audit(2000000449.389:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 648.648354][ T27] audit: type=1326 audit(2000000449.389:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 649.643528][ T27] audit: type=1326 audit(2000000449.389:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 649.689957][ T27] audit: type=1326 audit(2000000449.389:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 649.772876][ T27] audit: type=1326 audit(2000000449.389:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 649.808291][ T27] audit: type=1326 audit(2000000449.389:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 649.944200][ T27] audit: type=1326 audit(2000000449.389:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 650.075031][ T27] audit: type=1326 audit(2000000449.389:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 650.239344][ T27] audit: type=1326 audit(2000000449.389:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.5.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 650.343525][T10206] sock: sock_set_timeout: `syz.7.1426' (pid 10206) tries to set negative timeout [ 652.981802][T10228] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 653.899077][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 653.899095][ T27] audit: type=1326 audit(2000000460.379:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 653.992800][T10239] netlink: 'syz.5.1434': attribute type 6 has an invalid length. [ 654.023472][ T27] audit: type=1326 audit(2000000460.379:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 654.072290][ T27] audit: type=1326 audit(2000000460.419:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 654.597363][ T27] audit: type=1326 audit(2000000460.419:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 654.674274][ T27] audit: type=1326 audit(2000000460.419:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 654.767535][ T27] audit: type=1326 audit(2000000460.429:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 655.547957][ T27] audit: type=1326 audit(2000000460.429:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 655.570473][ T27] audit: type=1326 audit(2000000460.429:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 655.624100][ T27] audit: type=1326 audit(2000000460.429:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 655.729909][ T27] audit: type=1326 audit(2000000460.429:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 657.792296][T10284] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 662.655580][T10340] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1457'. [ 663.518398][T10346] tipc: Started in network mode [ 663.523382][T10346] tipc: Node identity 4, cluster identity 4711 [ 663.582031][T10346] tipc: Node number set to 4 [ 669.105477][T10415] loop5: detected capacity change from 0 to 512 [ 669.516393][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1478'. [ 669.522202][T10415] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1476: inode #1: comm syz.5.1476: iget: illegal inode # [ 669.640594][T10415] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1476: error while reading EA inode 1 err=-117 [ 669.689734][T10415] EXT4-fs (loop5): 1 orphan inode deleted [ 669.709536][T10415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 670.041589][T10432] loop7: detected capacity change from 0 to 764 [ 672.154805][T10415] vcan0 speed is unknown, defaulting to 1000 [ 673.101765][ T4258] Bluetooth: hci3: command 0x0406 tx timeout [ 673.206354][T10457] loop7: detected capacity change from 0 to 512 [ 673.401701][T10457] EXT4-fs warning (device loop7): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 673.482255][T10457] EXT4-fs (loop7): mount failed [ 675.351721][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 678.267028][T10502] loop7: detected capacity change from 0 to 1024 [ 678.319335][T10502] ext4: Bad value for 'min_batch_time' [ 678.356844][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 678.356863][ T27] audit: type=1326 audit(2000000484.829:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 678.513503][ T27] audit: type=1326 audit(2000000484.829:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 678.662955][ T27] audit: type=1326 audit(2000000484.869:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 679.283216][ T27] audit: type=1326 audit(2000000484.869:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 679.372734][ T27] audit: type=1326 audit(2000000484.869:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 679.458079][T10527] loop5: detected capacity change from 0 to 256 [ 680.170793][T10503] device wg1 entered promiscuous mode [ 680.190649][ T27] audit: type=1326 audit(2000000484.889:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 680.239650][ T27] audit: type=1326 audit(2000000484.889:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 680.265274][ T27] audit: type=1326 audit(2000000484.889:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 680.345527][ T27] audit: type=1326 audit(2000000484.899:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 680.369563][ T27] audit: type=1326 audit(2000000484.899:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861338d169 code=0x7ffc0000 [ 680.464277][T10545] loop7: detected capacity change from 0 to 512 [ 680.511550][T10545] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 680.729938][T10545] EXT4-fs (loop7): 1 truncate cleaned up [ 680.777715][T10545] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 682.995754][ T9204] EXT4-fs (loop7): unmounting filesystem. [ 684.050415][T10576] netlink: 'syz.6.1510': attribute type 1 has an invalid length. [ 685.914573][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.920917][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.689498][T10623] loop5: detected capacity change from 0 to 512 [ 689.584721][T10623] ext4: Bad value for 'max_batch_time' [ 695.861628][T10679] netlink: 'syz.2.1531': attribute type 4 has an invalid length. [ 695.869510][T10679] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1531'. [ 699.226824][T10681] bond0: (slave wlan1): Releasing backup interface [ 700.068726][T10681] bond0: Destroying bond [ 702.882733][T10681] bond0 (unregistering): Released all slaves [ 703.787133][ T4258] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 703.843730][ T4258] CPU: 0 PID: 4258 Comm: kworker/u5:4 Not tainted 6.1.133-syzkaller #0 [ 703.852048][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 703.862186][ T4258] Workqueue: hci4 hci_rx_work [ 703.866931][ T4258] Call Trace: [ 703.870241][ T4258] [ 703.873200][ T4258] dump_stack_lvl+0x1e3/0x2cb [ 703.877927][ T4258] ? nf_tcp_handle_invalid+0x647/0x647 [ 703.883440][ T4258] ? panic+0x764/0x764 [ 703.887584][ T4258] sysfs_create_dir_ns+0x2c6/0x390 [ 703.892768][ T4258] ? sysfs_warn_dup+0xa0/0xa0 [ 703.897509][ T4258] kobject_add_internal+0x6df/0xd10 [ 703.902780][ T4258] kobject_add+0x14e/0x210 [ 703.907260][ T4258] ? device_add+0x3c2/0xfd0 [ 703.911859][ T4258] ? kobject_init+0x1d0/0x1d0 [ 703.916596][ T4258] ? __raw_spin_lock_init+0x41/0x100 [ 703.921930][ T4258] ? get_device_parent+0x128/0x400 [ 703.927100][ T4258] device_add+0x476/0xfd0 [ 703.931499][ T4258] hci_conn_add_sysfs+0xe4/0x1f0 [ 703.936460][ T4258] le_conn_complete_evt+0xcfe/0x1350 [ 703.941778][ T4258] ? trace_contention_end+0x61/0x170 [ 703.947089][ T4258] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 703.953356][ T4258] ? __mutex_unlock_slowpath+0x218/0x750 [ 703.959015][ T4258] ? mutex_unlock+0x10/0x10 [ 703.963558][ T4258] ? skb_pull_data+0x10e/0x220 [ 703.968357][ T4258] hci_le_conn_complete_evt+0x188/0x410 [ 703.973963][ T4258] hci_event_packet+0xa40/0x1510 [ 703.978942][ T4258] ? hci_remote_host_features_evt+0x270/0x270 [ 703.985133][ T4258] ? bis_list+0x290/0x290 [ 703.989475][ T4258] ? do_raw_spin_unlock+0x137/0x8a0 [ 703.994693][ T4258] ? kcov_remote_start+0x4ae/0x7c0 [ 703.999856][ T4258] ? lockdep_hardirqs_on+0x80/0x130 [ 704.005075][ T4258] ? hci_send_to_monitor+0x99/0x4d0 [ 704.010294][ T4258] hci_rx_work+0x3a6/0xd10 [ 704.014737][ T4258] ? process_one_work+0x806/0x1260 [ 704.020300][ T4258] process_one_work+0x917/0x1260 [ 704.025264][ T4258] ? worker_detach_from_pool+0x260/0x260 [ 704.030948][ T4258] ? _raw_spin_lock_irqsave+0x120/0x120 [ 704.036530][ T4258] ? kthread_data+0x4e/0xc0 [ 704.041071][ T4258] ? wq_worker_running+0x97/0x190 [ 704.046107][ T4258] worker_thread+0xa47/0x1200 [ 704.050826][ T4258] ? release_firmware_map_entry+0x18b/0x18b [ 704.056765][ T4258] kthread+0x28d/0x320 [ 704.060845][ T4258] ? worker_clr_flags+0x190/0x190 [ 704.065883][ T4258] ? kthread_blkcg+0xd0/0xd0 [ 704.070484][ T4258] ret_from_fork+0x1f/0x30 [ 704.074932][ T4258] [ 704.083262][ T4258] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 704.097277][ T4258] Bluetooth: hci4: failed to register connection device [ 705.545814][T10758] ieee802154 phy0 wpan0: encryption failed: -22 [ 707.078081][T10765] vcan0 speed is unknown, defaulting to 1000 [ 711.496497][T10828] loop7: detected capacity change from 0 to 256 [ 711.791052][T10834] syz.5.1571[10834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.793108][T10834] syz.5.1571[10834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.417264][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 714.417282][ T27] audit: type=1326 audit(2000000520.899:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 715.394396][ T27] audit: type=1326 audit(2000000521.199:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 715.508315][ T27] audit: type=1326 audit(2000000521.219:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 715.541631][ T27] audit: type=1326 audit(2000000521.619:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 715.568526][ T27] audit: type=1326 audit(2000000521.619:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 715.612786][ T27] audit: type=1326 audit(2000000521.619:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 715.666925][ T27] audit: type=1326 audit(2000000521.619:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 716.293917][ T27] audit: type=1326 audit(2000000521.619:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 716.318526][ T27] audit: type=1326 audit(2000000521.619:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 716.374848][ T27] audit: type=1326 audit(2000000521.649:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.7.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f83d238d169 code=0x7ffc0000 [ 719.332118][T10891] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.1583'. [ 720.085678][T10891] openvswitch: netlink: Flow actions attr not present in new flow. [ 726.727628][T10957] loop7: detected capacity change from 0 to 512 [ 726.822194][T10957] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1599: casefold flag without casefold feature [ 726.941151][T10957] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1599: couldn't read orphan inode 15 (err -117) [ 726.963801][T10957] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 727.246259][T10974] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 727.967417][ T9204] EXT4-fs (loop7): unmounting filesystem. [ 729.132369][T10995] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1603'. [ 730.245364][T11004] loop7: detected capacity change from 0 to 512 [ 730.291533][T11004] EXT4-fs: Ignoring removed oldalloc option [ 731.084648][T11013] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1624'. [ 731.237459][T11004] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 731.344597][T11004] EXT4-fs (loop7): 1 truncate cleaned up [ 731.350340][T11004] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 731.460645][T11030] device syzkaller1 entered promiscuous mode [ 733.137222][ T9204] EXT4-fs (loop7): unmounting filesystem. [ 735.905784][T11069] loop5: detected capacity change from 0 to 256 [ 736.262019][ T4258] Bluetooth: hci1: unexpected event 0x05 length: 6 > 4 [ 736.476146][T11078] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1630'. [ 744.866045][T11138] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1644'. [ 745.485391][T11117] loop7: detected capacity change from 0 to 1024 [ 745.532377][T11117] hfsplus: failed to load root directory [ 745.573442][T11128] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 747.446227][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.481319][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.730556][T11152] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.739943][T11152] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.748863][T11152] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.757656][T11152] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.803838][T11152] team0: Port device vxlan0 added [ 749.764479][T11184] loop7: detected capacity change from 0 to 2048 [ 750.948480][T11184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.470421][T11193] bridge0: port 3(syz_tun) entered blocking state [ 751.477358][T11193] bridge0: port 3(syz_tun) entered disabled state [ 751.485601][T11193] device syz_tun entered promiscuous mode [ 751.492169][T11193] bridge0: port 3(syz_tun) entered blocking state [ 751.499670][T11193] bridge0: port 3(syz_tun) entered forwarding state [ 752.565708][T11193] syz.7.1661 (11193) used greatest stack depth: 17216 bytes left [ 753.125732][T11211] loop5: detected capacity change from 0 to 2048 [ 757.692065][T11242] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 758.825031][T11244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1672'. [ 758.935140][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 760.455163][T11265] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1678'. [ 763.343593][T11283] loop5: detected capacity change from 0 to 1024 [ 763.555475][T11283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 763.573903][T11283] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.795329][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 765.261634][T11307] loop5: detected capacity change from 0 to 256 [ 766.184633][T11316] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1692'. [ 766.649047][T11307] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 766.906839][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 766.906855][ T27] audit: type=1800 audit(2000000573.389:302): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1690" name="file2" dev="loop5" ino=1048640 res=0 errno=0 [ 771.905403][T11350] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 772.160401][T11350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.754455][T11361] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 773.220318][T11356] netlink: 'syz.6.1704': attribute type 10 has an invalid length. [ 773.578498][T11364] loop7: detected capacity change from 0 to 1024 [ 773.720333][T11371] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1705'. [ 775.224756][T11373] 8021q: VLANs not supported on bond0 [ 775.325462][T11364] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 776.153924][T11388] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2739: inode #2: comm syz.7.1707: corrupted in-inode xattr [ 776.181629][T11388] EXT4-fs (loop7): Remounting filesystem read-only [ 777.638044][ T9204] EXT4-fs (loop7): unmounting filesystem. [ 781.465046][T11427] netlink: 'syz.7.1720': attribute type 10 has an invalid length. [ 782.092132][T11427] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 782.104441][T11438] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1723'. [ 782.118491][T11440] device gtp0 entered promiscuous mode [ 782.377778][T11447] ip6gretap0 speed is unknown, defaulting to 1000 [ 782.397587][T11447] ip6gretap0 speed is unknown, defaulting to 1000 [ 782.411020][T11447] ip6gretap0 speed is unknown, defaulting to 1000 [ 782.463483][T11447] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 782.476216][T11455] device ip6gretap0 entered promiscuous mode [ 782.493632][T11447] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 782.682276][T11460] loop7: detected capacity change from 0 to 2048 [ 783.869161][T11447] ip6gretap0 speed is unknown, defaulting to 1000 [ 783.888192][T11447] ip6gretap0 speed is unknown, defaulting to 1000 [ 783.908437][T11447] ip6gretap0 speed is unknown, defaulting to 1000 [ 783.960841][T11447] ip6gretap0 speed is unknown, defaulting to 1000 [ 783.977781][T11249] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 784.009978][T11447] ip6gretap0 speed is unknown, defaulting to 1000 [ 789.226150][ T4258] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 794.651719][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1754'. [ 795.347665][ T27] audit: type=1326 audit(2000000601.820:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.6.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 795.534575][ T27] audit: type=1326 audit(2000000601.820:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.6.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9a98d169 code=0x7ffc0000 [ 802.217598][T11643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1767'. [ 802.244198][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 802.270803][T11643] bridge0: port 1(syz_tun) entered blocking state [ 802.303599][T11643] bridge0: port 1(syz_tun) entered disabled state [ 802.346505][T11643] device syz_tun entered promiscuous mode [ 802.618957][T11644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.384937][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.391298][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.017587][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1791'. [ 816.489689][T11742] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.085883][T11742] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.673035][T11742] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.728591][T11742] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.847843][T11742] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.872896][T11742] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.028357][T11742] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.072128][T11742] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.477187][T11795] trusted_key: encrypted_key: insufficient parameters specified [ 822.617045][T11815] device ipvlan0 entered promiscuous mode [ 822.623485][T11815] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 822.632870][T11815] team0: Device ipvlan0 is already an upper device of the team interface [ 823.701146][T11820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 823.710878][T11820] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 824.930688][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1815'. [ 824.943182][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1815'. [ 829.213922][T11861] netlink: 'syz.5.1823': attribute type 1 has an invalid length. [ 829.477266][T11861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.046694][T11863] bond0: (slave gretap1): making interface the new active one [ 830.060771][T11863] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 830.076527][T11867] bond0: (slave bridge1): Enslaving as an active interface with a down link [ 830.504414][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 835.150457][T11923] netlink: 'syz.0.1838': attribute type 12 has an invalid length. [ 836.691925][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1854'. [ 836.744521][T11944] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1854'. [ 836.800096][T11944] device dummy0 entered promiscuous mode [ 837.009853][T11949] loop5: detected capacity change from 0 to 128 [ 837.039093][T11949] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 839.191240][T11577] Bluetooth: hci5: Frame reassembly failed (-84) [ 839.435655][T11981] netlink: 87 bytes leftover after parsing attributes in process `syz.6.1852'. [ 840.365491][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1857'. [ 841.200670][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 841.234458][ T4264] Bluetooth: hci5: command 0x1003 tx timeout [ 841.236081][ T4258] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 841.611887][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1860'. [ 842.022905][T12006] device bond0 entered promiscuous mode [ 842.382065][T12006] device bond_slave_0 entered promiscuous mode [ 842.390815][T12006] device bond_slave_1 entered promiscuous mode [ 842.402453][T12006] device vxlan0 entered promiscuous mode [ 842.430095][T12015] loop5: detected capacity change from 0 to 64 [ 842.489892][T12015] hfs: bad catalog folder thread [ 842.521156][T12006] device wlan1 entered promiscuous mode [ 842.608512][T12006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 846.764163][T12037] vcan0 speed is unknown, defaulting to 1000 [ 847.691858][T12052] loop5: detected capacity change from 0 to 8 [ 847.721146][T12052] squashfs: Unknown parameter 'net/arp' [ 848.077434][T12037] ip6gretap0 speed is unknown, defaulting to 1000 [ 849.602591][T11577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.619094][T11577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.353237][T12088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.816578][T12111] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 852.826244][T12111] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 855.388986][T12129] loop7: detected capacity change from 0 to 8 [ 855.600164][ T27] audit: type=1800 audit(2000000662.080:305): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1895" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 857.388618][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1898'. [ 858.104761][T12153] ptrace attach of "./syz-executor exec"[6538] was attempted by "./syz-executor exec"[12153] [ 859.550642][T12165] bridge0: port 4(vlan3) entered blocking state [ 859.578038][T12165] bridge0: port 4(vlan3) entered disabled state [ 859.663642][T12165] device vlan3 entered promiscuous mode [ 859.978755][T12165] bridge0: port 4(vlan3) entered blocking state [ 859.985208][T12165] bridge0: port 4(vlan3) entered forwarding state [ 860.352586][T12172] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 863.670947][T12202] netlink: 'syz.7.1916': attribute type 12 has an invalid length. [ 867.050985][T12260] libceph: resolve '. [ 867.050985][T12260] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 867.050985][T12260] ' (ret=-3): failed [ 867.442750][T12268] loop7: detected capacity change from 0 to 8 [ 867.449772][T12269] loop5: detected capacity change from 0 to 64 [ 867.519756][T12268] squashfs: Unknown parameter 'net/arp' [ 868.840271][T12269] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 869.833116][T12279] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 869.962086][T12279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 870.000116][T12282] bond1: (slave gretap1): making interface the new active one [ 870.010946][T12282] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 870.037939][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 870.059375][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.065944][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.224469][T12014] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 870.313393][T12279] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 872.368080][T12297] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 873.356608][T12315] overlayfs: failed to clone upperpath [ 875.755997][T12329] vcan0 speed is unknown, defaulting to 1000 [ 877.711704][T12329] ip6gretap0 speed is unknown, defaulting to 1000 [ 878.464238][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1945'. [ 891.596511][ T4258] Bluetooth: hci3: command 0x0405 tx timeout [ 893.938869][T12515] vcan0 speed is unknown, defaulting to 1000 [ 897.618853][T12515] ip6gretap0 speed is unknown, defaulting to 1000 [ 898.995655][T12566] libceph: resolve '. [ 898.995655][T12566] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 898.995655][T12566] ' (ret=-3): failed [ 903.230886][T12584] loop5: detected capacity change from 0 to 512 [ 904.260523][T12584] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 904.269773][T12584] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.136673][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 905.205325][ T27] audit: type=1326 audit(2000000711.690:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.0.1997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x0 [ 907.862362][T12620] loop5: detected capacity change from 0 to 1024 [ 907.875985][T12626] overlayfs: failed to clone upperpath [ 907.899460][T12620] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 907.911585][T12620] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 907.921135][T12620] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.1999: Failed to acquire dquot type 0 [ 907.939234][T12621] siw: device registration error -23 [ 907.953067][T12620] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 907.969774][T12620] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #13: comm syz.5.1999: corrupted inode contents [ 908.000022][T12620] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #13: comm syz.5.1999: mark_inode_dirty error [ 908.014753][T12620] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #13: comm syz.5.1999: corrupted inode contents [ 908.028044][T12620] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.1999: mark_inode_dirty error [ 908.040774][T12620] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #13: comm syz.5.1999: corrupted inode contents [ 908.066302][T12620] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 908.080723][T12620] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #13: comm syz.5.1999: corrupted inode contents [ 908.108976][T12620] EXT4-fs error (device loop5): ext4_truncate:4311: inode #13: comm syz.5.1999: mark_inode_dirty error [ 908.170220][T12620] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 908.196037][T12620] EXT4-fs (loop5): 1 truncate cleaned up [ 908.201919][T12620] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 909.074832][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 911.689015][T12660] netlink: 'syz.6.2011': attribute type 1 has an invalid length. [ 911.710437][T12653] loop7: detected capacity change from 0 to 1024 [ 911.726157][T12660] device bond1 entered promiscuous mode [ 911.732804][T12660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 911.758129][T12660] device ip6gretap1 entered promiscuous mode [ 911.765146][T12660] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 911.857023][ T4974] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 911.857400][T12653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 911.869595][T10978] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 912.143587][ T4974] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 912.160063][T12653] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 912.197311][T12653] EXT4-fs (loop7): orphan cleanup on readonly fs [ 912.217193][T12653] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.2013: Invalid block bitmap block 0 in block_group 0 [ 913.034307][T12653] Quota error (device loop7): write_blk: dquota write failed [ 913.069462][T12653] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 913.142263][T12653] EXT4-fs error (device loop7): ext4_acquire_dquot:6795: comm syz.7.2013: Failed to acquire dquot type 0 [ 913.254693][T12653] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.2013: Freeing blocks not in datazone - block = 0, count = 4096 [ 913.432676][T12653] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.2013: Invalid inode bitmap blk 0 in block_group 0 [ 913.457070][ T5291] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 913.482663][ T5291] EXT4-fs error (device loop7): ext4_release_dquot:6818: comm kworker/u4:62: Failed to release dquot type 0 [ 913.507552][T12653] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 913.519004][T12685] loop5: detected capacity change from 0 to 64 [ 913.542584][T12653] EXT4-fs (loop7): 1 orphan inode deleted [ 913.549131][T12653] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 913.766064][T12683] siw: device registration error -23 [ 913.936265][T12691] vcan0 speed is unknown, defaulting to 1000 [ 914.045276][T12691] ip6gretap0 speed is unknown, defaulting to 1000 [ 914.945604][ T9204] EXT4-fs (loop7): unmounting filesystem. [ 915.047976][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2022'. [ 917.096578][T12716] netlink: 'syz.0.2025': attribute type 1 has an invalid length. [ 918.922519][T12740] loop7: detected capacity change from 0 to 8 [ 919.020190][T12160] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 920.135513][T12755] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 926.851461][T12807] loop7: detected capacity change from 0 to 64 [ 927.465853][T12812] vcan0 speed is unknown, defaulting to 1000 [ 927.949129][T12812] ip6gretap0 speed is unknown, defaulting to 1000 [ 928.456947][T10901] hfs: request for non-existent node 1573 in B*Tree [ 928.493953][T10901] hfs: request for non-existent node 1573 in B*Tree [ 928.872995][T12826] ptrace attach of "./syz-executor exec"[6538] was attempted by "./syz-executor exec"[12826] [ 929.116818][T12826] syz.5.2052 (12826): /proc/12826/oom_adj is deprecated, please use /proc/12826/oom_score_adj instead. [ 929.735176][ T5014] libceph: connect (1)[c::]:6789 error -101 [ 929.741972][ T5014] libceph: mon0 (1)[c::]:6789 connect error [ 929.756481][T12832] ceph: No mds server is up or the cluster is laggy [ 929.764681][T12567] libceph: connect (1)[c::]:6789 error -101 [ 929.770680][T12567] libceph: mon0 (1)[c::]:6789 connect error [ 930.035543][T12567] libceph: connect (1)[c::]:6789 error -101 [ 930.319751][T12567] libceph: mon0 (1)[c::]:6789 connect error [ 930.552623][ T27] audit: type=1326 audit(2000000737.030:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 930.615661][ T27] audit: type=1326 audit(2000000737.030:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 930.763095][ T27] audit: type=1326 audit(2000000737.060:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 930.877605][ T27] audit: type=1326 audit(2000000737.060:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 930.966141][ T27] audit: type=1326 audit(2000000737.060:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 931.020239][ T27] audit: type=1326 audit(2000000737.070:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 931.048413][ T27] audit: type=1326 audit(2000000737.160:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9cc384127 code=0x7ffc0000 [ 931.072845][ T27] audit: type=1326 audit(2000000737.160:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9cc329359 code=0x7ffc0000 [ 931.126816][ T27] audit: type=1326 audit(2000000737.160:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc9cc38d169 code=0x7ffc0000 [ 931.162239][ T27] audit: type=1326 audit(2000000737.170:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9cc384127 code=0x7ffc0000 [ 931.303830][T12857] overlayfs: failed to clone upperpath [ 931.477216][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.489468][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.633393][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2063'. [ 943.228950][ T4258] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 943.229721][T12956] binder: 12954:12956 ioctl c0306201 0 returned -14 [ 943.286860][T12957] loop7: detected capacity change from 0 to 128 [ 946.708907][T12977] loop5: detected capacity change from 0 to 512 [ 947.022972][T12977] EXT4-fs: Ignoring removed mblk_io_submit option [ 947.073345][T12977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 947.255555][T12977] System zones: 1-12 [ 947.310379][T12977] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.2093: corrupted in-inode xattr [ 947.354064][T12977] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2093: couldn't read orphan inode 15 (err -117) [ 947.852086][T12990] overlayfs: failed to clone upperpath [ 947.858564][T12977] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 948.159578][ T27] kauditd_printk_skb: 135 callbacks suppressed [ 948.159596][ T27] audit: type=1326 audit(2000000754.640:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.2.2097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe848b8d169 code=0x0 [ 948.988245][T13005] xt_policy: neither incoming nor outgoing policy selected [ 949.350646][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 952.754098][ T4258] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 952.763333][ T4258] Bluetooth: hci4: Injecting HCI hardware error event [ 952.774752][ T4258] Bluetooth: hci4: hardware error 0x00 [ 954.301261][T13040] fuse: Bad value for 'fd' [ 954.834213][ T4258] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 960.483284][T13097] netlink: zone id is out of range [ 960.994861][T13099] loop5: detected capacity change from 0 to 4096 [ 961.028899][T13099] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 961.357200][T13109] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 961.944987][T13099] ntfs3: loop5: no free space to extend mft [ 962.186635][T13099] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 962.194126][T13099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 962.212258][T13099] vhci_hcd vhci_hcd.0: Device attached [ 962.312506][T13115] vhci_hcd: connection closed [ 962.320362][ T4410] vhci_hcd: stop threads [ 962.430881][ T4410] vhci_hcd: release socket [ 962.493990][ T5834] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 962.580705][ T4410] vhci_hcd: disconnect device [ 966.737077][T13139] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 966.745081][T13139] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2134'. [ 967.045445][T13139] team0: Port device geneve0 added [ 967.774029][ T5834] vhci_hcd: vhci_device speed not set [ 967.880787][T13166] bridge0: port 3(syz_tun) entered disabled state [ 967.949684][T13166] device syz_tun left promiscuous mode [ 967.961219][T13166] bridge0: port 3(syz_tun) entered disabled state [ 970.790574][T13189] overlayfs: failed to clone lowerpath [ 970.837156][T13187] befs: (nullb0): No write support. Marking filesystem read-only [ 970.851519][T13187] befs: (nullb0): invalid magic header [ 973.417820][T13253] loop5: detected capacity change from 0 to 256 [ 973.709201][T13253] exfat: Deprecated parameter 'utf8' [ 974.146445][T13253] exfat: Deprecated parameter 'namecase' [ 974.262635][T13253] exfat: Deprecated parameter 'utf8' [ 974.413577][T13253] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 978.133157][T13285] xt_policy: neither incoming nor outgoing policy selected [ 979.958972][T13314] overlayfs: failed to clone upperpath [ 980.776830][T13325] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 980.783597][T13325] PKCS7: Only support pkcs7_signedData type [ 986.639071][T13383] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2190'. [ 988.152685][T13407] 9pnet_fd: Insufficient options for proto=fd [ 992.035668][T13442] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 992.990121][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.997512][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.653828][T13475] CIFS mount error: No usable UNC path provided in device string! [ 994.653828][T13475] [ 994.664040][T13475] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1002.808807][T13534] loop5: detected capacity change from 0 to 32768 [ 1002.871351][T13534] [ 1002.871351][T13534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1002.871351][T13534] [ 1002.928131][T13534] ERROR: (device loop5): diWrite: ixpxd invalid [ 1002.928131][T13534] [ 1002.942841][T13534] ERROR: (device loop5): txCommit: [ 1002.942841][T13534] [ 1003.009111][T13534] netlink: 'syz.5.2238': attribute type 10 has an invalid length. [ 1003.017228][T13534] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2238'. [ 1003.056206][T13534] team0: Port device geneve0 added [ 1004.625103][T13552] loop7: detected capacity change from 0 to 256 [ 1005.167796][ T6538] [ 1005.167796][ T6538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1005.167796][ T6538] [ 1005.268046][ T6538] [ 1005.268046][ T6538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1005.268046][ T6538] [ 1007.905772][T13584] loop5: detected capacity change from 0 to 2048 [ 1007.958175][T13584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1012.436456][T13608] loop7: detected capacity change from 0 to 32768 [ 1012.467558][T13608] [ 1012.467558][T13608] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1012.467558][T13608] [ 1012.496760][T13608] ERROR: (device loop7): diWrite: ixpxd invalid [ 1012.496760][T13608] [ 1012.508583][T13608] ERROR: (device loop7): txCommit: [ 1012.508583][T13608] [ 1012.533746][T13608] netlink: 'syz.7.2248': attribute type 10 has an invalid length. [ 1012.541937][T13608] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2248'. [ 1012.604095][T13608] team0: Port device geneve0 added [ 1014.605180][ T9204] [ 1014.605180][ T9204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1014.605180][ T9204] [ 1014.658419][ T9204] [ 1014.658419][ T9204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1014.658419][ T9204] [ 1017.058952][T13633] device bond0 entered promiscuous mode [ 1017.270968][T13644] __vm_enough_memory: pid: 13644, comm: syz.2.2257, no enough memory for the allocation [ 1019.435143][T13654] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2261'. [ 1022.911810][T13674] loop5: detected capacity change from 0 to 1024 [ 1023.071440][T13674] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1024.357676][T13689] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1027.781191][ T6538] EXT4-fs (loop5): unmounting filesystem. [ 1029.196507][T13716] xt_connbytes: Forcing CT accounting to be enabled [ 1029.203615][T13716] xt_bpf: check failed: parse error [ 1033.025625][T13744] Malformed UNC in devname [ 1033.025625][T13744] [ 1033.032653][T13744] CIFS: VFS: Malformed UNC in devname [ 1036.206362][T13763] overlayfs: failed to clone lowerpath [ 1040.866426][T13804] wireguard: wg1: Could not create IPv4 socket [ 1042.855845][T13809] ceph: No mds server is up or the cluster is laggy [ 1042.866881][ T5015] libceph: connect (1)[c::]:6789 error -101 [ 1042.872931][ T5015] libceph: mon0 (1)[c::]:6789 connect error [ 1046.314072][T13845] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2310'. [ 1048.194072][T13863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2315'. [ 1049.890229][T13875] overlayfs: failed to clone upperpath [ 1053.336990][T13886] block device autoloading is deprecated and will be removed. [ 1053.593000][T13886] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1054.356763][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.363155][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.737921][T13896] sd 0:0:1:0: device reset [ 1056.615216][T13905] tmpfs: Unknown parameter 'grpquota' [ 1060.954555][T11590] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.299492][T11590] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.980701][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1061.997292][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1062.017436][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1062.027639][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1062.035829][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1062.043133][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1062.312759][T11590] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.533658][T11590] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.961774][T13935] vcan0 speed is unknown, defaulting to 1000 [ 1064.043435][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2336'. [ 1064.299134][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 1066.309465][T11590] tipc: Disabling bearer [ 1066.334550][T11590] tipc: Disabling bearer [ 1066.413589][T13975] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2337'. [ 1066.444013][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 1067.769308][T11590] tipc: Left network mode [ 1068.397790][T13935] ip6gretap0 speed is unknown, defaulting to 1000 [ 1068.514125][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 1070.124611][T14007] loop7: detected capacity change from 0 to 1024 [ 1070.257159][T13995] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1070.315690][T14007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1070.915464][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 1072.628608][T11590] bond1: (slave ip6gretap1): Removing an active aggregator [ 1072.674469][T11590] bond1: (slave ip6gretap1): Releasing backup interface [ 1072.700218][T11590] device ip6gretap1 left promiscuous mode [ 1072.734357][T14021] loop7: detected capacity change from 0 to 512 [ 1072.794293][ T5016] ip6gretap0 speed is unknown, defaulting to 1000 [ 1072.813037][T14021] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1072.836843][ T5016] ================================================================== [ 1072.844954][ T5016] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430 [ 1072.852180][ T5016] Read of size 4 at addr ffff8880788b20e0 by task kworker/0:14/5016 [ 1072.860173][ T5016] [ 1072.862508][ T5016] CPU: 0 PID: 5016 Comm: kworker/0:14 Not tainted 6.1.133-syzkaller #0 [ 1072.870805][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1072.880885][ T5016] Workqueue: infiniband ib_cache_event_task [ 1072.886821][ T5016] Call Trace: [ 1072.890114][ T5016] [ 1072.893059][ T5016] dump_stack_lvl+0x1e3/0x2cb [ 1072.897781][ T5016] ? nf_tcp_handle_invalid+0x647/0x647 [ 1072.903259][ T5016] ? panic+0x764/0x764 [ 1072.907372][ T5016] ? _printk+0xd1/0x111 [ 1072.911548][ T5016] ? __virt_addr_valid+0x17f/0x530 [ 1072.916691][ T5016] ? __virt_addr_valid+0x17f/0x530 [ 1072.921834][ T5016] print_report+0x15f/0x4f0 [ 1072.926363][ T5016] ? __virt_addr_valid+0x17f/0x530 [ 1072.931510][ T5016] ? __virt_addr_valid+0x17f/0x530 [ 1072.936660][ T5016] ? __virt_addr_valid+0x45b/0x530 [ 1072.941801][ T5016] ? __phys_addr+0xb6/0x170 [ 1072.946315][ T5016] ? siw_query_port+0x342/0x430 [ 1072.951168][ T5016] kasan_report+0x136/0x160 [ 1072.955676][ T5016] ? siw_query_port+0x342/0x430 [ 1072.960531][ T5016] siw_query_port+0x342/0x430 [ 1072.965209][ T5016] ? ib_query_port+0x344/0x7c0 [ 1072.969982][ T5016] ib_cache_update+0x1a8/0xaf0 [ 1072.974763][ T5016] ? ib_cache_setup_one+0x5b0/0x5b0 [ 1072.979984][ T5016] ? read_lock_is_recursive+0x10/0x10 [ 1072.985370][ T5016] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1072.991362][ T5016] ? print_irqtrace_events+0x210/0x210 [ 1072.996828][ T5016] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1073.002726][ T5016] ib_cache_event_task+0xef/0x1e0 [ 1073.007770][ T5016] ? process_one_work+0x806/0x1260 [ 1073.012890][ T5016] process_one_work+0x917/0x1260 [ 1073.017842][ T5016] ? worker_detach_from_pool+0x260/0x260 [ 1073.023479][ T5016] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1073.029028][ T5016] ? kthread_data+0x4e/0xc0 [ 1073.033547][ T5016] ? wq_worker_running+0x97/0x190 [ 1073.038575][ T5016] worker_thread+0xa47/0x1200 [ 1073.043261][ T5016] ? _raw_spin_unlock+0x40/0x40 [ 1073.048119][ T5016] kthread+0x28d/0x320 [ 1073.052190][ T5016] ? worker_clr_flags+0x190/0x190 [ 1073.057219][ T5016] ? kthread_blkcg+0xd0/0xd0 [ 1073.061810][ T5016] ret_from_fork+0x1f/0x30 [ 1073.066239][ T5016] [ 1073.069254][ T5016] [ 1073.071572][ T5016] Allocated by task 6978: [ 1073.075895][ T5016] kasan_set_track+0x4b/0x70 [ 1073.080572][ T5016] __kasan_kmalloc+0x97/0xb0 [ 1073.085163][ T5016] __kmalloc_node+0xb3/0x230 [ 1073.089760][ T5016] kvmalloc_node+0x6e/0x180 [ 1073.094270][ T5016] alloc_netdev_mqs+0x85/0xef0 [ 1073.099035][ T5016] rtnl_create_link+0x2e9/0xaa0 [ 1073.103886][ T5016] rtnl_newlink+0x140d/0x2060 [ 1073.108595][ T5016] rtnetlink_rcv_msg+0x822/0x1000 [ 1073.113620][ T5016] netlink_rcv_skb+0x1cd/0x410 [ 1073.118385][ T5016] netlink_unicast+0x7e2/0x970 [ 1073.123156][ T5016] netlink_sendmsg+0xa26/0xd60 [ 1073.127921][ T5016] __sys_sendto+0x480/0x600 [ 1073.132421][ T5016] __x64_sys_sendto+0xda/0xf0 [ 1073.137102][ T5016] do_syscall_64+0x3b/0xb0 [ 1073.141516][ T5016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1073.147412][ T5016] [ 1073.149735][ T5016] Freed by task 11590: [ 1073.153797][ T5016] kasan_set_track+0x4b/0x70 [ 1073.158389][ T5016] kasan_save_free_info+0x27/0x40 [ 1073.163415][ T5016] ____kasan_slab_free+0xd6/0x120 [ 1073.168440][ T5016] __kmem_cache_free+0x25c/0x3c0 [ 1073.173383][ T5016] device_release+0x91/0x1c0 [ 1073.177979][ T5016] kobject_put+0x224/0x460 [ 1073.182397][ T5016] netdev_run_todo+0xe19/0xf20 [ 1073.187159][ T5016] ip6gre_exit_batch_net+0x44b/0x490 [ 1073.192462][ T5016] cleanup_net+0x886/0xd20 [ 1073.196875][ T5016] process_one_work+0x917/0x1260 [ 1073.201815][ T5016] worker_thread+0xa47/0x1200 [ 1073.206510][ T5016] kthread+0x28d/0x320 [ 1073.210576][ T5016] ret_from_fork+0x1f/0x30 [ 1073.215008][ T5016] [ 1073.217329][ T5016] The buggy address belongs to the object at ffff8880788b2000 [ 1073.217329][ T5016] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1073.231655][ T5016] The buggy address is located 224 bytes inside of [ 1073.231655][ T5016] 4096-byte region [ffff8880788b2000, ffff8880788b3000) [ 1073.245035][ T5016] [ 1073.247364][ T5016] The buggy address belongs to the physical page: [ 1073.253793][ T5016] page:ffffea0001e22c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x788b0 [ 1073.263947][ T5016] head:ffffea0001e22c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1073.272301][ T5016] memcg:ffff88805652a001 [ 1073.276548][ T5016] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1073.284547][ T5016] raw: 00fff00000010200 ffffea0001f84200 dead000000000002 ffff888017c4c280 [ 1073.293149][ T5016] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88805652a001 [ 1073.301731][ T5016] page dumped because: kasan: bad access detected [ 1073.308148][ T5016] page_owner tracks the page as allocated [ 1073.313879][ T5016] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4252, tgid 4252 (syz-executor), ts 78283641308, free_ts 78269404892 [ 1073.335240][ T5016] post_alloc_hook+0x18d/0x1b0 [ 1073.340009][ T5016] get_page_from_freelist+0x3731/0x38d0 [ 1073.345559][ T5016] __alloc_pages+0x28d/0x770 [ 1073.350166][ T5016] alloc_slab_page+0x6a/0x150 [ 1073.354849][ T5016] new_slab+0x84/0x2d0 [ 1073.358923][ T5016] ___slab_alloc+0xc20/0x1270 [ 1073.363638][ T5016] __kmem_cache_alloc_node+0x19f/0x260 [ 1073.369103][ T5016] kmalloc_trace+0x26/0xe0 [ 1073.373522][ T5016] ipv6_add_dev+0x5ac/0x1180 [ 1073.378116][ T5016] addrconf_notify+0x7c5/0xf70 [ 1073.382887][ T5016] raw_notifier_call_chain+0xd0/0x170 [ 1073.388267][ T5016] register_netdevice+0x1630/0x1ab0 [ 1073.393462][ T5016] nsim_create+0x34b/0x3f0 [ 1073.397877][ T5016] __nsim_dev_port_add+0x732/0xc20 [ 1073.403008][ T5016] nsim_dev_port_add_all+0x33/0xe0 [ 1073.408137][ T5016] nsim_drv_probe+0x80e/0xb20 [ 1073.412840][ T5016] page last free stack trace: [ 1073.417520][ T5016] free_unref_page_prepare+0x12a6/0x15b0 [ 1073.423185][ T5016] free_unref_page+0x33/0x3e0 [ 1073.427880][ T5016] __unfreeze_partials+0x1b7/0x210 [ 1073.433005][ T5016] put_cpu_partial+0x17b/0x250 [ 1073.437776][ T5016] qlist_free_all+0x76/0xe0 [ 1073.442287][ T5016] kasan_quarantine_reduce+0x156/0x170 [ 1073.447752][ T5016] __kasan_slab_alloc+0x1f/0x70 [ 1073.452601][ T5016] slab_post_alloc_hook+0x52/0x3a0 [ 1073.457737][ T5016] __kmem_cache_alloc_node+0x137/0x260 [ 1073.463201][ T5016] kmalloc_trace+0x26/0xe0 [ 1073.467640][ T5016] nsim_fib_event_work+0x18e4/0x41f0 [ 1073.472933][ T5016] process_one_work+0x917/0x1260 [ 1073.477878][ T5016] worker_thread+0xa47/0x1200 [ 1073.482555][ T5016] kthread+0x28d/0x320 [ 1073.486623][ T5016] ret_from_fork+0x1f/0x30 [ 1073.491050][ T5016] [ 1073.493366][ T5016] Memory state around the buggy address: [ 1073.498994][ T5016] ffff8880788b1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1073.507053][ T5016] ffff8880788b2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1073.515111][ T5016] >ffff8880788b2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1073.523163][ T5016] ^ [ 1073.530371][ T5016] ffff8880788b2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1073.538426][ T5016] ffff8880788b2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1073.546494][ T5016] ================================================================== [ 1073.604503][T14021] EXT4-fs (loop7): 1 truncate cleaned up [ 1073.630746][T14021] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1073.689287][ T5016] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1073.696534][ T5016] CPU: 0 PID: 5016 Comm: kworker/0:14 Not tainted 6.1.133-syzkaller #0 [ 1073.704796][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1073.714874][ T5016] Workqueue: infiniband ib_cache_event_task [ 1073.720800][ T5016] Call Trace: [ 1073.724086][ T5016] [ 1073.727030][ T5016] dump_stack_lvl+0x1e3/0x2cb [ 1073.731731][ T5016] ? nf_tcp_handle_invalid+0x647/0x647 [ 1073.737210][ T5016] ? panic+0x764/0x764 [ 1073.741298][ T5016] ? preempt_schedule_common+0xa6/0xd0 [ 1073.746794][ T5016] ? vscnprintf+0x59/0x80 [ 1073.751157][ T5016] panic+0x318/0x764 [ 1073.755083][ T5016] ? check_panic_on_warn+0x1d/0xa0 [ 1073.760227][ T5016] ? memcpy_page_flushcache+0xfc/0xfc [ 1073.765634][ T5016] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1073.771647][ T5016] ? _raw_spin_unlock+0x40/0x40 [ 1073.776620][ T5016] ? print_report+0x4a3/0x4f0 [ 1073.781337][ T5016] check_panic_on_warn+0x7e/0xa0 [ 1073.786306][ T5016] ? siw_query_port+0x342/0x430 [ 1073.791192][ T5016] end_report+0x66/0x110 [ 1073.795462][ T5016] kasan_report+0x143/0x160 [ 1073.799990][ T5016] ? siw_query_port+0x342/0x430 [ 1073.804875][ T5016] siw_query_port+0x342/0x430 [ 1073.809576][ T5016] ? ib_query_port+0x344/0x7c0 [ 1073.814367][ T5016] ib_cache_update+0x1a8/0xaf0 [ 1073.819175][ T5016] ? ib_cache_setup_one+0x5b0/0x5b0 [ 1073.824402][ T5016] ? read_lock_is_recursive+0x10/0x10 [ 1073.829826][ T5016] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1073.835839][ T5016] ? print_irqtrace_events+0x210/0x210 [ 1073.841324][ T5016] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1073.847248][ T5016] ib_cache_event_task+0xef/0x1e0 [ 1073.852310][ T5016] ? process_one_work+0x806/0x1260 [ 1073.857454][ T5016] process_one_work+0x917/0x1260 [ 1073.862432][ T5016] ? worker_detach_from_pool+0x260/0x260 [ 1073.868094][ T5016] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1073.873665][ T5016] ? kthread_data+0x4e/0xc0 [ 1073.878200][ T5016] ? wq_worker_running+0x97/0x190 [ 1073.883244][ T5016] worker_thread+0xa47/0x1200 [ 1073.887949][ T5016] ? _raw_spin_unlock+0x40/0x40 [ 1073.892826][ T5016] kthread+0x28d/0x320 [ 1073.897001][ T5016] ? worker_clr_flags+0x190/0x190 [ 1073.902054][ T5016] ? kthread_blkcg+0xd0/0xd0 [ 1073.906674][ T5016] ret_from_fork+0x1f/0x30 [ 1073.911124][ T5016] [ 1073.914444][ T5016] Kernel Offset: disabled [ 1073.918766][ T5016] Rebooting in 86400 seconds..