last executing test programs: 10m31.494653503s ago: executing program 4 (id=108): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x496, &(0x7f0000000480)="$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") mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x815000, &(0x7f0000000140)={[{@uuid_off}, {@index_on}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@verity_on}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@volatile}, {@uuid_null}], [{@flag='silent'}]}) 10m30.836643711s ago: executing program 4 (id=110): syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0xc00d, &(0x7f0000000140), 0x0, 0x111d, &(0x7f0000001480)="$eJzs2LFqFEEcBvBv9k7NobBy6RcLCwsJkbNWUyhca6uNSipT5SpFMA9jY+eDaCr7kF6LPMHK3eayCOFUkrPQ3w+Wmf3PNzsz5U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbph8K8lmlYyXtSpJSZrmcHqcpFnWb34eVCl5ujudPd6fPJl1sVQpz5Iyn5Xy8UGXnYwn43vj+5s7t7/M3rx9/WJvb3d/MfDyekmTo5NLPcUop3sZrAjNN7hxlgYAAID/R3th9e8t9OnGmtYHAAAAfuVybxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lxb9/2ry06VpCRNczg9TtKcM+/KX9ofAAAAcHElVZ7X59W7a4De3Xyty1m97Tyssp0PdUaLyLBPV6sWXTkIAAAA/7z22qK5lXLQ/yaX933gToZ9fZEcZmurez9t8n0nGeRgY/vnb48eJTk6efdq/pR2sO6zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAADAXgEAAP//1gXd9g==") 10m29.099556512s ago: executing program 4 (id=114): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f000000c680)=ANY=[@ANYBLOB="002ecbc55fe6d6100837adda58fa7d10ab54aee93b992510be054d731ab7da7e75676e729a84f3b6a90100db5e477dbfee9ea3db9e2cdf0af3e9f7718732aaccc2158ad1dc498162eb5e87e3ec955164b6a97fb2a48d7a569258274a727cb0c7227e8f51529264e568b34e6f7ee018b3562d8fdd26e1b83ab2b09862ea8ac241fca01893c02becc286b2b17bd8c515b3dd02562333f6a7273bc91c9841bf3cb673bc8942336c5cebffbb08f82ba108af50c8dabb9628fc8e59c207395f370146898f1f3400f50f5e0566363558fe2c744cbebda08fe49b2155b62fcbb938b0d78d5e36b5e6b7d1c01f8b6423066333a94bb51f311c1d70dc272c6528d8057273e9bffbc8747d7c8a65b368828d39c69fc42125281702192328142ebb5b396e66db522ca6f2ae2ca64ab0d9d3f0eeb890d6b5a376ab004afb2ccc83293222ce378ef0e8d88e873ee168d615985aaabc293ce789dd163747e965405c11730f23faf8053fb37e93d5a54cdce54c1ce09598258ec5892938c5a16cf0c548695c973b45a0bc95feff28efd824744057c5da581fe9215d1a9e358a9da84b4ceb0f586c2ddbabbe2347dd728b8e05ecf90b4c7c9861ce1af7709c9babcdc2bd2175a8496a48942dc2755a5ed6296745ec0810e42050e657b2c0965d423077136da0140277053c8ce91d0000000000000000000000f81a60f8321a29d95e555edc5822e904e5b3821224bb704efb9aea0f736fa06f46b1023fc644c7879a6315e96f6695f65fef95d6dbf22d80c068a20fc98bad02dbeb3c9f478063d2f2f8fd5e8af7a5d5937e5626c71efa3369e99787e78597c01acfa3b273102993abd03263ae4115a65254d32c517eddeb58bbc458d025fdc566906ac145a9db74f46d10805e6c7560f6740cf29445f6aec713655cdd27032c6413f342d8e76782bdc2d96870cf7e84d15838c48aa6af77086acec169846791fbb50b0f648adbc6f4058870827efcf4da44b43c62f3", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd26c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5cafe08a3ba61a32a14a220779926a7df8a0de70a50b2baf658b32d6d108efa8d3b6181762c8308a5b3351fd14516c9c33e6c6bd15e956f8401002717d37c8e53568186d0a3935603bc325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e000000000000000000a0", @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x1, 0x1da, &(0x7f0000004680)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 10m28.675752229s ago: executing program 4 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000140)='./file0/file3\x00', 0x9400058c) 10m27.825819003s ago: executing program 4 (id=121): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x1015, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'wlc\x00', 0x28, 0x323b, 0x55}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d5c}}, 0x44) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5fd0cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb6d658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bebb749daef202e0412a73d545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177de97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b8f8451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9621d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5102003bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c40000005e538c77b2b14f63d253705363846bc4e9cd3284ff329330812d2211ae34106e0306376a2b1cfe60a09becae2b05ec9adcac47612af85f598a880fa97891a7a290b6e730800542aea761aeb463f5ff5bdf5099ae8ad4afe99db9e9c4e703cb900e9ae272742fe2ff81d1a4f15668392cdafd2e1757706f47f9f84e532f25e2737cb6f6e89378f8d79ab8507b109c7f1f3653a5bc9d54ccc633de6263526eac10519274"], 0x3, 0x60b3, &(0x7f000000f200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 10m23.450208713s ago: executing program 4 (id=134): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4041, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xff, 0x1a5, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 10m7.872330947s ago: executing program 32 (id=134): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4041, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xff, 0x1a5, &(0x7f0000000480)="$eJzsmD9PIkEYxp/ZBfa4XMK1d9UlRwJX3LK73BkpLKgtNNFo7CSyEnQRA1sAjfoprO3srIkN30MLtbIQY2NlsWZ2B3dE5U/iHxLfX/Hm2dlnZt95SZ4CEATxabk4vz07SiXjXH9DEppYv1RDjyL524m7PyflueN94/q03ZnN9R13yAB43ujfjwDo5FW44tnzHu9OBqs7i1CERlR+vwwGXehVKFgS2gbDitAbkq5yv66vlx1bX6s6RS4MXkxeLF6y/f119xiKUn9Mel9vtjYLjmPX3lAMm183r2BG6k/+vXqzMcL5wYQCU+gsGBaEnobWm00wEun+PyPh+eo733/ihTnI8yMxZHsUY3xLG8dM4gMEAxdXcWCMXV9GNmOXYUJuOliE+eQdMKSkfIpI+ZFxK9uZerP1t1wplOySvWVZ2Snjn2H8tzJ+EAV1QP7F/Xz6Kp0ffcEbYzE0Cq5bM4P68Gw1NLg167nEjfn5pyD9O+iaiTUZBniJ7+wX12k18BAEQRAEQRAEQRAEQRAEQbwyN+K/R6+P3JMVa9433gcAAP//L55w2Q==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 9m33.924086328s ago: executing program 1 (id=224): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000280)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1223, &(0x7f0000001dc0)="$eJzs3E1rXFUYB/AnY2peal7UWm0XesCNuLg0WbgSJEgKkgGlNkIrCLfmRodcZ0ruEBgRqyu3fg7X7gS/QTZ+BnfZdJmFeKV3mjStU4vizPjy+y3mPtxz/px7YBg4wzn36M1vP9vbrbLdvB+tmZlo3Y5IxylStOLEy1vD642bWxvt9ua1lK5uXF97I6W0/MqPH34xFxHnP/h++Ye5OFz96Oju+s+HFw8vHf16/dNOlTpV6vb6KU+3er1+fqtcTjudai9L6b2yyKsidbpVsX+mvUi7r0fEIOXdnaXF2/tFVaW8O0h7xSD1e6m/P0j5J3mnm7IsS0uLwWOde3KX7e+O67qOqOtz8XTUdV0vxGKcj2diKZbjq4h4Np6L5+NCvBAX48V4KS41vSbx+AAAAAAAAAAAAAAAAAAAAPD/8Ufn/1di1fl/AAAAAAAAAAAAAAAAAAAAmID3b9zc2mi3N6+lNB9RfnOwfbA9vA7bV+99lFHElViJX6I5/T80rK++0968khqr8XV5537+zsH2U01+4yS/1rxO4H5+tmk7ya8N8+nh/Fws3svvRqfJr8dKXBg9/vrI/Hy89uqZfBYr8dPH0YsydpqxH+S/XEvp7Xfbj+QvN/0AAADgvyBLp0au37Psce3D/On6+sn/Dzyyvp6Ny7PTnTsR1eDzvbxVFvtNUZ4U87+7M74iJjjW31tE3K2bYu7hptaYBm3F1Kd8ppgZ+xB1/c+Y6b+qOP6L8YU4vbMQrbyc9i8Tk/DgazDtJwEAAAAAAAAAAODPqM5s+hvDbsTZGLGz7K3pTBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+YweOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMFAAD//7JmxNE=") r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d2) r1 = fanotify_init(0xf00, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) sendmsg$can_raw(r2, 0x0, 0x44045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e}}], 0x1, 0x2002, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 9m29.923775336s ago: executing program 1 (id=231): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x1015, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'wlc\x00', 0x28, 0x323b, 0x55}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d5c}}, 0x44) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x3, 0x60b3, &(0x7f000000f200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 9m27.145167988s ago: executing program 1 (id=239): syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000580)='./cgroup\x00', 0x5, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="73325bb9629cd81d63ae646d452628", @ANYRES64, @ANYRES32, @ANYRES16, @ANYRESHEX], 0x9f, 0x1a2, &(0x7f0000000840)="$eJzskc9rE0EUxz9vZvJjC0ZTPdVDFwysK0o28cfBU/DUQha8igRdamxKE9EmB1sU40mQav8GT3oUwZuIBc/iQfCgEcGbmEPwIB7qyqSbv6LzYX6878y8N/Pmdfp3+gVgb3JvhQZTDCU+FgQDLApzdk2p/T0ReAj8lKks7QA+cGlfsy0U7fwi03PDzMC/6Bczcz3pdtsbPnry26f8nf7m1nrStWGnh8dCA/k80SuJXI8FoaduxJSbnHqCbnmET1kwhzh2DU0abLOs0lSCJhyuDnq3q/3NrTNrvaur7dX2rXr97IXoXBSdr1dvrnXb0WskfCzKTNOEQowX3ifXwsM2hLCjRlo8yLfY+aBPnjg9RoW/SBHeBWMKX02nlCVCGZY4KjxDx1SaeAqTPrAXLSGX1SupmU/mT05RHOrM5YrSf/OFWYBcUCNZBiJYYH5vl0cjKiOOaJ6PzI9vLMobPP6l2TeaoR1fZuq4rU2eu8lgsFHLU3wvQUzd9jIo5tlFxY1K077zbeYzq8eXmeFwOBwOh8PhcDgcjgPA/wAAAP//MmBWzA==") brk(0x7fffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 9m18.377833s ago: executing program 1 (id=252): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000002640)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 9m16.681817367s ago: executing program 1 (id=259): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 9m15.435692126s ago: executing program 1 (id=263): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20000400) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000"], 0x28}, 0xfc40) 9m13.985007302s ago: executing program 33 (id=263): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20000400) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000"], 0x28}, 0xfc40) 7m53.763067926s ago: executing program 5 (id=447): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000680)={0x24, @long}, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7e, 0xb, 0x7d, 0x4b, 0xd9, 0x40, 0x41, 0xfb, 0xb, 0xc, 0x0, 0x1, 0x40, 0x2, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x8000000400007d, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000580)=0x40, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m51.671548177s ago: executing program 5 (id=453): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2080c0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xb6ec0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m50.859589158s ago: executing program 5 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x10, 0x803, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0cc63a23840b824f920b21981285520a35f491e6934193661e8f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$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") writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7m41.913647896s ago: executing program 5 (id=476): socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x3, 0x60b3, &(0x7f000000f200)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIaLMIrIB4ASzOsIkEoVDPnjGtqetxj7OmanvP7Se2qr0/X9Cn/p6YvdTkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMR3vv3Ds72IuPrLdMfRiE/FIKIfsVjXJ6KeuZwfP4yIY7HRHM9FxGA+ol5+459nIi5ExEdHItbW7yzXd5/bYz8unrl985Pvfuvvv/nDvWM/fvNHH7Tbf/Dp8x/+9m7E0e+/9uEnd5/MugMAAEApqqqqeulj/vH0+b7fdacAgKnIr/9Vku9Xq9Vq9ROtf98/WP1RF1o3VePdbRYRsdpcpn7PYHc8AMyY1fi46y7QIfkXbRgRT3XdCeBA63XdAfbF2vqd5V7Kt9d8PTix2Z6/p9yW/2pv6/yO3aaTtI8xmdbv170YxLO79GdxSn04SHL+/Xb+VzfbR+lx+53/tOyW/2jz1Kfi5PwH7fxbtuX/x4iY2fz7Y/MvVc5/+Cj5rw5mePuXPwAAAAAAh1/+/v/o1vf/q53s/51//FXZk932/w0erDIAAAAAAAAAzJzHHf9vi/H/AAAA4MCqP6vX/nTkwX27XYutvv9KL+Lp1uOBwqSTZZa67gcAAAAAAAAAAAAAlGS4eQzvlV7EXEQ8vbRUVVV9a2rXj+pxl591pa8/lKzrP/IAALDpoyOtc/l7EQsRcSVd629uaWmpqhYWl6qlanE+v58dzS9Ui43PtXla3zc/2sMb4uGoqn/YQmO5pkmflye1t39e/VyjarCHjk1Hh4EDQERsvhqteUU6ZKrqmej6XQ6zwfZ/+Nj+2Yuuf08BAACA/VdVVdVLl/M+nvb597vuFAAwDQv59b+9X0CtVqvVavXhq5uq8e42i4hYbS5Tv2cwHD8AzJjV+LjrLtAh+RdtGBHHuu4EcKD1uu4A+2Jt/c5yL+Xba74epPHd87Eg2/Jf7W0sl5cfN52kfYzJtH6/7sUgnt2lP89NqQ8HSc6/387/6mb7KD1uv/Oflt3yr9fzaAf96VrOf9DOv+Xw5N8fm3+pcv7DR8p/IH8AAAAAADjA8vf/R+3/zasMAAAAAAAAADNnbf3Ocj7vNe///+yYx/Wac1v7/+cjwvl/syzn39tz/s7/PUxy/v12/q0DcgaN+ftvPMj/X+t3lj+4/c/P5OnY/P+6tuOio53lPzcY1c891+sPhumYn2rurbgeN2Ilzux4/HBb+9kd7XPb2s9NaD+/o31Uty/m9lOxHD+LG/HmVvv8hAOjFia0VxPac/4D23+Rcv7Dxq3Ofym191rT2v33+zu2++Z03PNc/st/Xty5dU3fvRhsrVtTvX4nO+jPxv/JU6P4xa2Vm6d+de327ZtnI0223Xsu0uQJy/nPpVvO/6UXNtvz3/3m9nr//dEj539Q3Ivhrvm/0Jiv1/flKfetCzn/Ubrl/PMr0Pjtf5bz3337f6WD/gAAAAAAAAAAAAAAAMDDVFW1cYro5Yi4lM7/6ercTABgqn73vTRTVdsv1aFWq9Vqtfrw1U3VeK83i1jYvsyliPj1uB8GABxk/42If3TdCToj/4Ll6/3V08913Rlgqm69+95Prt24sXLzVtc9AQAAAAAAAAD+X3n8zxON8Z83jgNqjRu9bfzXN+LEjnE/BzMy/md/NNgY6zyt0PPx8PG/T8bDx/8eTni+uQntownt8xPaFya0jz3RoyHn/3zKOOd/PK1YSeO/vtRBf7qW8z+ZxnrO+X+h9bhm/tWfZzn//rb8T99+5+enb7373qvX37n29srbKz89e+bShfMXL5y/ePH0W9dvrJzZ/LfDHu+vnH8e+9pxoGXJ+efM5V+WnP/nUy3/suT8X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9OtfzLkvP/YqrlX5ac/yupln9Zcv5fSrX8y5LzfzXV8i9Lzv9UquVflpz/6VTLvyw5/7yHS/5lyfnnIxvkX5ac/7lUy78sOf/zqZZ/WXL+F1It/7Lk/C+mWv5lyflfSrX8y5Lz/3Kq5V+WnP9XUi3/suT8X0u1/MuS8/9qquVflpz/11It/7Lk/L+eavmXJef/jVTLvyw5/2+mWv5lyfm/nmr5l+XB9f/NTHnm33+LOADdMGNm3EzXf5kAAAAAAAAAAAAAgLZpHE7c9ToCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4uRq6zPgP42S977YTEJSGEYMjacYIhG+/6MzHB4PDVNLQ0DYSWFuoYe+0Y/FWvDQlCzdKkbRCRGqm9SC9KCaIIqa0SIaRSKUWRitTeNb0B5aKolXJhqUllIqhElWSrM/O+787Mzs6s17vemfP+fpHz9+58vXvmzNl91nrmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKNNH5r604GiKMo/tf9tKIory7+vK/aXH87sWe0VAgAAAJfq9dr//+7q9In9i7hRw3X+5Z3/9v3Z2dnZ4nOvnn/jz2dn0wVjRTG0tihql0X/+stfzDZeJ3i0GB0YbPh4sMvDD3W5fLjL5SNdLl/T5fK1XS4f7XL5vA0wz7r672Nqd7al9tcN9U1aXFuM1C7b0uZWjw6sHRyMv8upGajdZnbkSHGsOF5MFZPzbjNQ+68onttUPtbdRXyswYbH2lgUxYWffeVQXMNA2MZbiqYHq2l87l65qxh79WdfOfSdsy+/rd3suhnmrbQotm4u1/lYUcz9uqoYKNambRLXOdiwzo1t1jnUtM6B2u3Kv7eu88Ii1xm/7tGwzhc6rHNj+NxDNxVFMVMseJ1WjxaDxfqWR03be7S+R5T3UT6Vby6GL2o/2bSI/aS8zUs3Ne8nrftk3P6bwjYZXmANjU/HK19dM2+7L3U/Kb/qXthXy/u+t3zQ0dHGX6027avldb5y88L7QNvnrs0+kPblhn1gc7d9YHDNUG0fGJxb8+amfWD7vNsMFgO1xzp/c+d9YOLsidMT0w9/+bZjJw4enTo6dXL75J5dO3fv2rl798SRY8enJieOjByfmr+PVcX6YjDtg5vDsSbug+9quW7jLjn79PK9DkZ75HVQfu2fvKVc0JWDxQL7eHmdx7Ze+usgfd9veB0MN7wO2h5TZ+e/DoYX8Toor3Nh6+K+Zw43/Gm3hpU6Fm5o2AdW8/th+ZifeffCx8KNYV2Pv+divx8OzdsH4pc1EF575WfSz3ujd4TtMn+/uKG84Io1xbnpqTPbHjp49uyZ7UUYl8U1Dc9V6/6yvuFrKubtL4MXvb/s/9vXbrmhzec3hG01emvn56q8zq7xzs9V7ejevD3XFPXt2fTZHUUYi9ftx/9V2Z7tvpuV2zNliQ7bs7zOY7dd+s+CKZc0HP9Guh3/hkaG68e/obQ1RpqOf/OfmqHayoriwm2LO/6NhD+X+/h3bY8c/8pt9ZltnfeB8jqPT1zsPjDc8fh3U5gDYT3vDolhtCH3v1G7fKa+mzY8l133m+HhkbDfDMdHbN5vds67TXlv5WNvnVzafrP1pubnqunnlgruN+W2+ovJzvtNeZ3nt1/6sWNd/GvDsWNNt31gZGhNud6RtBPUj3ez6+I+sK04VJwqjheH023KZ7l8rPEdi9sH1oQ/l/vYcX2P7APltnpqR+d9oLzOj3Yu789OW8Nn0nUafnZq/f3CQpn/huG5+2vdbMud+ct1fvjHH0+fa5chyuu8vOtic0bn7XRr+MwVbbZT6+tnoX36cHF5ttP1YZ3Hd3f+3VR5nWv3LHJ/2l8UxYuvvVj7fVf4/e73zv34+02/9233O+UXt794z8R9P7mY9QMAsHRv1P4/s6b+s2bDv1gv5t//AQAAgL4Qc/9gmIn8DwAAAJURc/9QmIn8DwAAAJURc/9wmEkm+f/BO/Y+8/ojRXo3wNkgXh43w73vr18vdrxnwsdjs3PKz3/w2yPPfO2RxT32YFEUr93z9rbXf/D9cV11p+M639v8+Xmuv3FRj//A/XPXa3z/hAt76/cfv57F7gaxq/zcxI7a/Y49vL02n7+nqM37Zh5/tH7/9Y/j9c/vrF//r8Kbluw/MtB0+61hPVvCHAvvKXPv/rntUM54u2c2vvOfr/nU3OPF2w1svqr2ZT71h/X7je8R9eQ19evHr3uh9f/T17/7THn9h25uv/5HBtuv/3y435fC/OW++vUbt/nXGtb/x2H98fHi7bZ964dt1//sW+vXfzbsF98Ms3X9d/3ZO15v93zFx9l/Z/128fEn/3dX7Xbx/uL9t65/9JHtTduj9f6ff3XXMwPDRbHviz8farx++flyxseJHrizef8eCM9vU4+8KIrv/knRtJ2L99Vv948t64/3d/rO9uu/tWGd5edPD9xYu/3c17Oh6ev6xt/saPv1xvXs//sNTV/Pkx8J2+/ViR+V93v+vrA/hsv/74X6/bW+mdGzH2k+3sTrf3ND/XUb72+iZf1Ptqx/5sZy23Vf/92v1tf/7AfWNq1//0fD/nR3fXZb/9G/vrrp9k9/p/58nPnS+MlT0+eOHW7Yqo2v47Wj69ZfceWbrro6HEvLj8vvRvHjA6fOPjh1ZmxybLIoxvrwLQNXev3fCvN/6mNm+R+h7ic/r+93T3ys/n3rXb+of/xk+PwD4fmM3x+/8ZcjTftr6/M+84H6vNT1vyesY7He+vX/unFRVzz/2efO/cMfvdz6c0H8ek6/ZbT29T216braZQPP1y9vPV51859vaX5d/3R4sjZ/ELbrbHhn5s3X1R+v9f7je5M88Yn66zf+JBdvX7S8n8iGoeav41LX/9Pwc8wPr28+/sX94wePtLyb84ZioFzCTDg+FDP1y+O14vZ+4sJ1bR8vvg9PMfO2i1nmgqYfnp44fuzkuYcmzk5Nn52YfvjLB06cOnfy7IHae5ce+Hy328+9vtfXXt+Hp/bsKmqv9lP1scJWe/2n7z90+PbJWw5PHTl47sjZ+09PnTl6aHr60NTh6VsOHjky9aVutz92eN/2HXt33r5j/Oixw/vu2Lt3597xYydPlcuoL6qLPZNfGD955kDtJtP7du3dvnv3rsnxE6cOT+27fXJy/Fy329e+N42Xt/7i+Jmp4wfPHjsxNT597MtT+7bv3bNnR9d3fzxx+sj02MSZcycnzk1PnZmofy1jZ2ufLr/3dbs9eZg+FY53LQbCT+efvnVPen/c0re/uuBd1a/S/ONp8Up4L6j4/a3bxzH3j4SZZJL/AQAAIAcx94c3/p+7QP4HAACAyoi5f22YifwPAAAAlRFzfz35j6bTv+eS/5er//9V/f8a/X/9/6Kl/19erv+/6v3/eGzvm/5/48f6/53p/+v/F/r/S7ba/fl+X7/+v/4/3fVa/z/k/vDDoX//BwAAgCqKuX99mMlC+f8/3jy55XIsDAAAAFg2MfdfEWbi3/8BAACgMmLuvzLMJJP87/z/+v/6/536//G6+v9Ff/f/O66/j/r/W/5b/38e/X/9/0L/f8lWuz/f7+vvwf7/Ov1/ek2v9f9j7n9TmEkm+R8AAAByEHP/VWEm8j8AAABURsz9V4eZyP8AAABQGTH3bwgzyST/6//r/+v/Z37+/7v0//uo/+/8/23o/+v/F/r/S7ba/fl+X38P9v+d/5+e02v9/5j7fyXMJJP8DwAAADmIuf/NYSbyPwAAAFRGzP3XhJnI/wAAAFAZMfdfG2aSSf7Ps///UlEUq9r/T30u/X/9/1Xv/zv/v/7/CtP/1//vRP9f/7+f16//r/9Pd73W/4+5/y1hJpnkfwAAAMhBzP3XhZnI/wAAAFAZMfe/NcxE/gcAAIDKiLn/+jCTTPJ/nv1/5//X/6/T/29ep/6//v9K0P/X/+9E/1//v5/Xr/+v/093vdb/j7n/bWEmmeR/AAAAyEHM/TeEmcj/AAAAUBkx9789zET+BwAAgMqIuX9jmEkm+V//X/9f/1//X/9f/385jbR83F/9/8EFL9H/r9P/b7Z8/f+ZuQX0QP+/XI7+v/5/t9vr/7MYl9b/H2g8ii9L/z/m/neEmWSS/wEAACAHMfe/M8xE/gcAAIDKiLn/xjAT+R8AAAAqI+b+sTCTTPK//r/+v/6//r/+v/7/Suqv/v/CMuj/z87ONuzA+v+L4vz/+v/6//r/dNZr5/+PuX9TmEkm+R8AAAByEHP/5jAT+R8AAAAqI+b+m8JM5H8AAACojJj7t4SZZJL/9f/1//u+/3/13H6h/6//r//fe/T/+6b/30z/f1H0//X/9f/1/+ms1/r/MfffHGaSSf4HAACAHMTcf0uYifwPAAAAvWntxd8k5v53hZnI/wAAAFAZMfdvDTPJJP/r/+v/933/P+fz/w/p/xf6/72ldePq/+v/d6H/r//fz+vv8/7/lWHq/7Oieq3/H3P/u8NMMsn/AAAAkIOY+98TZiL/AwAAQGXE3H9rmIn8DwAAAJURc/94mEkm+V//X/9f/7+P+//O/9+0fv3/3qT/n3X/f7Dbw+TX///3q+p/0f+vwvr7vP/v/P9cFr3W/4+5/7Ywk8UGv67f2QAAAIDVFnP/tjCTTP79HwAAAHIQc/9EmIn8DwAAAJURc/9kmEkm+V//X/9f/1//X/9/Uf3/Af3/pdH/z7r/31V+/X/n/19Oq73+Fer/lwcC/X8qo9f6/zH3bw8zyST/AwAAQA5i7t8RZiL/AwAAQGXE3L8zzET+BwAAgMqIuX9XmEkm+b9P+v/bUgFK/1//X/9f/9/5//uK/r/+fyf6//r//bx+5//X/6dZu1PjX7b+f+vHC/T/Y+7fHWaSSf4HAACAHMTcvyfMRP4HAACAyoi5//YwE/kfAAAAKiPm/jvCTDLJ/33S/3f+f/3/Xuj/pwOE/n8z/f86/f/29P/1/zvR/9f/7+f16//r/9Ndr53/P+b+vWEmmeR/AAAAyEHM/e8NM5H/AQAAoDJi7r8zzET+BwAAgL7S7jyEUcz97wszyST/L2P//+lwkf5/T/X/Z9fq/zv/v/5/5/Xr/68s/X/9/070//X/+3n9+v/6/3TXa/3/mPv3hZlkkv8BAAAgBzH3vz/MRP4HAACAyoi5/wNhJvI/AAAAVEbM/fvDTDLJ/87/X/X+v/P/6//r/3dbv/7/ytL/1//vpC/7/7NzR61c+//hxxb9/x7q/5f7kP4/vajX+v8x998VZpJJ/gcAAIAcxNz/wTAT+R8AAAAqI+b+D4WZyP8AAABQGTH3fzjMJJP8r/+v/6//r/+v/6//v5L0/1es/187FOr/1zn//9Ksdn++39ffS/1/5/+nV/Va/z/m/o+EmWSS/wEAACAHMfd/NMxE/gcAAIDKiLn/V8NM5H8AAACojJj77w4zyST/6//r/+v/6//r/+v/ryT9f+f/70T/X/+/n9ev/6//T3e91v+Puf/Xwkwyyf8AAACQg5j77wkzkf8BAACgMmLu/1iYifwPAAAAfWbNgpfE3P/rYSaZ5P/+6/+P9WX/fzDdv/6//r/+v/6//v9y0v/X/y/0/5dstfvz/b5+/X/9f7rrtf5/zP2/EWaSSf4HAACAHMTc//EwE/kfAAAAKiPm/t8MM5H/AQAAoDJi7r83zCST/L/c/f/W23fi/P/6/4X+v/6//r/+/yXS/9f/L/T/l2y1+/P9vn79f/1/uuu1/n/M/b8VZpJJ/gcAAIAcxNx/X5iJ/A8AAAA96sGLvkXM/Z8IM5H/AQAAoDJi7v9kmEkm+b//zv+v/6//r/+v/6//30/0//X/O9H/1//v5/Xr/+v/012v9f9j7r8/zCST/A8AAAA5iLn/U2Em8j8AAABURsz9vx1mIv8DAABAZcTc/zthJpnkf/1//X/9f/1//X/9/5Wk/z+//18ew/T/6/T/9f/7ef36//r/dNdr/f+Y+z8dZpJJ/gcAAIAcxNz/u2Em8j8AAABURsz9vxdmIv8DAABAZcTc/5kwk0zyv/6//r/+v/6//r/+/0rS/3f+/070//X/+3n9+v/6/3TXa/3/mPs/G2aSSf4HAACAHMTc//thJvI/AAAAVEbM/QfCTOR/AAAAqIyY+x8IM8kk/+v/6//r/+v/6//r/68k/X/9/04upv8/2ub+9f8vzWr35/t9/fr/+v9012v9/5j7D4aZ7G9+GAAAAKB/xdz/uTCTTP79HwAAAHIQc/+hMBP5HwAAACoj5v7DYSaZ5H/9f/1//X/9f/1//f+VpP+v/9+J8//r//fz+vX/9f/prtf6/zH3T4WZZJL/AQAAIAcx9x8JM5H/AQAAoDJi7j8aZiL/AwAAQGXE3P9gmEkm+V//X/9f/z/b/v8L32tZp/6//v9K0P/X/+9E/1//v5/Xr/+v/093vdb/j7n/WJhJJvkfAAAAchBz/+fDTOR/AAAAqIyY+78QZiL/AwAAQGXE3H88zCST/K//r/+v/59t/39x5/9fN/e4+v/6/0uh/6//34n+v/5/P69f/1//n+56rf8fc/+JMJNM8j8AAADkIOb+k2Em8j8AAABURsz9p8JM5H8AAACojJj7T4eZZJL/9f8vrv8/sEA3UP+//fr1/yvQ/2+g/6//vxT6//r/nej/6//38/r1//X/6a7X+v8x9/9BmEkm+R8AAAByEHP/mTCT/2fvvpY0K6s4Dm+HmWGmLO7AA27B8sQzL8FrsMoDz80ZzJgVA+aImBWzYs4555wTophRrMKie60F3XTv3cz09/W73/d5DljQTE3vdmaq/Ffzq23/AwAAQDdy9z84brH/AQAAoBu5+x8Stwyy//X/3v+v/9f/6//1/5uk/9f/z9H/99b/3/6V6P/1//p/7tBa/5+7/6FxyyD7HwAAAEaQu/9hcYv9DwAAAN3I3f/wuMX+BwAAgG7k7n9E3DLI/tf/6//1//p//b/+f5P0//r/OVvu/6/T/++1vX7+4K9nPc9/MP2//p9lrfX/ufsfGbccOvzOHOGrBAAAAFqSu/9Rccsg3/8HAACAEeTuf3TcYv8DAABAN3L3PyZuGWT/6//1//r/4+r/L7nLz6//1//r//X/Y/T/d/wpbq7/P7v38+n/9zrpfn7tz6//1/+zrLX+P3f/Y+OWQfY/AAAAjCB3/+PiFvsfAAAAupG7//Fxi/0PAAAA3cjdf0XcMsj+1//r//X/K3z//2n9v/5/PfT/I/T/q3n/v/5/n5Pu59f+/Pp//T/LWuv/c/dfGbcMsv8BAABgBLn7nxC32P8AAADQhdP1d+emJ8Yt9j8AAAB0I3f/k+KWQfa//l//r/9fYf/v/f/6/xXR/+v/5+j/9f9rfn79v/6fZa31/7n7nxy3DLL/AQAAYAS5+58St9j/AAAA0I3c/U+NW+x/AAAA6Ebu/qfFLXfZ/+e3+FTbo//X/+v/9f/6f/3/Jun/9f9z9P/6/zU/v/5f/8+yjff/979q5x61/8/df1Xc4vv/AAAA0I3c/U+PW+x/AAAA6Ebu/mfELfY/AAAAdCN3/zPjlkH2v/5/U/3/fa+JD62o/7/tHvp//b/+/46P6/+Ph/5f/z9H/6//X/Pzt9b/n7p0mvT/tGbj/f9C77//n3P3PytuGWT/AwAAwAhy9z87brH/AQAAoBu5+58Tt9j/AAAA0I3c/c+NWwbZ//p/7//3/v8t9v+3Tvp//b/+/5jp/y+4/9//R28v/f+R6P9b6P/Pxz+11f/f7wjP7/3/jKC1/j93//PilkH2PwAAAIwgd//z4xb7HwAAALqRu//quOVI+//shp4KAAAAOE65+18Qtwzy/f8W+/9L9f/6/177/1W8///UkP3/7R/T/2+G/r/Z/n+e/v9I9P8t9P/e/6//p2Wt9f+5+18Ytxx5/9/n3FF/JAAAAHAycve/KG4Z5Pv/AAAAMILc/S+OW+x/AAAA6Ebu/mvilkH2f4v9/6T/1//r/+vnaf79/5f00f97///m6P/1/3P0//r/NT+//l//z7LW+v/c/S+JWwbZ/wAAANC9U1Pt/pfGLfY/AAAAdCN3/8viFvsfAAAAupG7/+VxyyD7X/+v/9f/6/8vqv/v5P3/+v/N0f/r/+cctf+f9P/1tej/23l+/b/+n2Wt9f+5+18Rtwyy/wEAAGAEuftfGbfY/wAAANCN3P2vilvsfwAAAOhG7v5Xxy2D7H/9/4b6/3OT/l//r//X/+v/9f/6/wXe/6//X/Pz6//1/yxrrf/P3f+auGWQ/Q8AAAAjyN3/2rjF/gcAAIBu5O5/Xdxi/wMAAEA3cve/Pm7Zv/9PbfOptkf/7/3/+n/9v/5f/79J+n/9/xz9/8H9/7lDPp/+v63n1//r/1nWWv+fu//auMX3/wEAAKAbufvfELfY/wAAANCN3P3XxS32PwAAAHQjd/8b45ZB9v9h/f/N99z99/r/o9H/H/z8+n/9v/5f/7/V/v+W2/T/C/T/e7+OVvt/7/9fx/Pr//X/LGut/8/d/6a4ZZD9DwAAACPI3f/muMX+BwAAgG7k7n9L3GL/AwAAQDdy9781bhlk/x//+/8v1//r//X/cfX/+n/9v/f/6//n6f/1/2t+fv2//p9lrfX/ufvfFrcMsv8BAABgBLn73x632P8AAADQjdz974hb7H8AAADoRu7+d8Ytg+z/4+//vf9/O/3/lVM3/f8p/X/S/8evq/5f/3836P/1/5P+/4KddD+/9ufX/+v/WdZa/5+7//qdqTfe/gcAAIARXL/z13PTu+IW+x8AAAC6kbv/3XGL/Q8AAADdyN3/nrhlkP2v/19r/+/9/5P+X/+/7/n1/23S/+v/5+j/9f9rfn79v/6fZa31/7n73xu3DLL/AQAAYAS5+98Xt9j/AAAA0I3Y/bv/8bv9DwAAAF16/85fz00fiFsG2f8D9/+XX2z/f/5Of6//P/j59f/H0v9fv//3nv5f/78m+n/9/xz9v/5/zc9/kf1//l/JY+j/4wNX6P9pT2v9f+7+D8Ytg+x/AAAAGEHu/g/FLfY/AAAAdCN3/w1xi/0PAAAA3cjd/+G4ZZD9P3D/38n7/x9wUzyB/r/f/t/7/+Pq//X/B9H/6/8n/f8FO+l+fu3P7/3/+n+Wtdb/5+7/SNwyyP4HAACAEeTu/2jcYv8DAABAN3L3fyxusf8BAACgG7n7Px63DLL/9f9r7/8v8P3/8Qup/9f/T5vr/09PffT/l+n/L47+X/8/R/+v/1/z8+v/9f8sa63/z93/ibhlkP0PAAAAI8jd/8m4xf4HAACAbuTu/1TcYv8DAABAN3L3fzpuGWT/6/8H7f/j82+y/7/9k+j/B+n/r/T+/0n/fyj9v/5/jv5f/7/m59f/6/9Z1lr/n7v/M3HLIPsfAAAARpC7/7Nxi/0PAAAA3cjd/7m4xf4HAACAbuTu/3zccO/LTu6RjteZQz4evbn+X//v/f8d9v9np2k6+ff/6//1/zv0//r/Ofp//f+an1//r/9nWWv9f+7+L8Qtvv8PAAAA3cjd/8W4xf4HAACAbuTu/1LcYv8DAABAN3L3fzluGWT/6//1//r/1fb/55t5/7/+f4f+/2D6f/3/HP2//n/Nz6//1/+zrLX+P3f/V+KWQfY/AAAAjCB3/1fjFvsfAAAAupG7/2txi/0PAAAA3cjd//W4ZZD9r//X/+v/V9v/H/7+f/3/Dv1/G/T/+v85+n/9/5qfX/+v/2dZa/1/7v5vxC2D7H8AAAAYQe7+b8Yt9j8AAAB0I3f/t+IW+x8AAAC6kbv/23HLIPv/Qacm/f+dPq7/1//r//X/Sf9/PPT/+v85+n/9/5qfX/+v/2dZa/1/7v7vxC2D7H8AAAAYQe7+78Yt9j8AAAB0I3f/9+IW+x8AAAC6kbv/+3HLIPu/5/f/z/0w/f8u/b/+f9L/6/83TP+v/5+j/9f/r/n59f/6f5a11v/n7v9B3DLI/gcAAIAR5O7/Ydxi/wMAAEA3cvf/KG6x/wEAAKAbuft/HLcMsv977v/ntNT/33ivk+j/d4Mb/b/+f9L/6/83TP+/rf7/9JF+vP5/79eh/9f/6//1/2zWCfX/Z6ZD+v/c/T+JWwbZ/wAAADCC3P0/jVvsfwAAAOhG7v6fxS32PwAAAHQjd//P45Z+9v8Db5j5l/r/Y+//d34Tef+//n/S/+v/9f879P/e/z9H/6//X/Pz6//1/yxr7f3/uft/Ebf0s/8BAABgeLn7fxm32P8AAADQjdz9v4pb7H8AAADoRu7+X8ctg+x//f/Jv/9f/6//T1vo/y+Z9P/6/y3T/+v/5+j/V9z/n4+r/9f/6/+Z0Vr/n7v/N3HLIPsfAAAARpC7/7dxi/0PAAAA3cjd/7u4xf4HAACAbuTu/33cMsj+1//r//X/Q/X/3v+v/986/b/+f47+f8X9v/f/V/+fv+/0//p/7qq1/j93/x/ilkH2PwAAAIwgd/8f4xb7HwAAALqRu//GuMX+BwAAgG7k7v9T3DLI/j+u/j//l9P/6//1//r/pP/X/0/6f/3/Av2//n/Nz+/9//p/lrXW/+fuvyluGWT/AwAAwAhy9/85brH/AQAAoBu5+/8St9j/AAAA0I3c/TfHLYPsf+//1/932f9fqv/X/+v/W3GC/f/+X+qLov/fpf/fS/+v/9f/6/+Z11r/n7v/r3HLIPsfAAAARpC7/29xi/0PAAAA3cjd//e4xf4HAACAbuTu/0fcMsj+1//r/+9+/3+mvu5m+3/v/9f/6/+b0e/7/8/q//X/F93/X33t7of1/+t8/gvu/8/vHv0/I2it/8/d/8+4ZZD9DwAAACPI3f+vuMX+BwAAgG7k7v933GL/AwAAQDdy998Stwyy//X/+v8u3/+v/9f/6/+b0W//7/3/+n/v/9f/e///Uv9/ZuknoXut9f+5+/8Ttwyy/wEAAGAEufv/G7fY/wAAANCN3P23xi32PwAAAHQjd///4pZB9r/+X/+v/9f/6//1/5uk/9f/z9H/6//X/Pz6f+//Z1lr/X/u/v8HAAD//4SuIJA=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 7m35.291610811s ago: executing program 5 (id=488): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_continue}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) unshare(0x2000400) fdatasync(r0) ftruncate(r0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x591) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x110) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) 7m31.27646104s ago: executing program 5 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_vif\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x99, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={r4, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x28, 0xb, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0) 7m13.121747939s ago: executing program 34 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_vif\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x99, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={r4, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x28, 0xb, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0) 13.719761347s ago: executing program 7 (id=1662): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022c23031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r4}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r6, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r8, 0xbc7ae000) sendmsg$NFT_BATCH(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 13.46773765s ago: executing program 3 (id=1666): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) umount2(0x0, 0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x19) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) keyctl$set_reqkey_keyring(0xe, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 11.931711633s ago: executing program 3 (id=1669): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_tables_matches\x00') lseek(r3, 0x5b5f, 0x0) 11.814693783s ago: executing program 7 (id=1670): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x496, &(0x7f0000000480)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x400, 0x83) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x815000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044008}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000080)) 10.655283984s ago: executing program 7 (id=1673): r0 = syz_io_uring_setup(0x40f, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x0, @fd_index=0x3}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_enter(r0, 0x1469, 0x0, 0x0, 0x0, 0x0) 10.161444147s ago: executing program 3 (id=1676): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) 8.644746189s ago: executing program 3 (id=1681): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) close(r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) listen(r0, 0xfffffffa) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) 8.608889722s ago: executing program 6 (id=1682): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022c23031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r4}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r6, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r8, 0xbc7ae000) sendmsg$NFT_BATCH(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 7.463693312s ago: executing program 6 (id=1683): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000200)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35", 0x26, 0x840, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 6.758553423s ago: executing program 3 (id=1684): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x496, &(0x7f0000000480)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x400, 0x83) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x815000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044008}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000080)) 6.756129773s ago: executing program 6 (id=1685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.234101508s ago: executing program 2 (id=1687): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000003", @ANYRES32=r2, @ANYBLOB="0c00018008000100000003000c0001"], 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.207582648s ago: executing program 0 (id=1688): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000016c0)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="9db3ebb134f5f945f1a23fbc39e2bb5583fea49c7c6856a189e73e8fbb327fe78e17b036000a79e32cccf62ef840961250e0b1e5085bce42f06535ce2cdb61e60261cc9767728f2ba12c434c3e5c6b9317077ec4aaf9f639b297cd7d4a1fe498c580c225599ea7033273d764aebe208c4a6e55acd6da1bae1d6aafdc6dd15ef8a6d0052f881f6a8ea20431bfb22e787a0ab2fdaab9d4877c53c97e1f23522d146dc380e75ab484bfbbfaf01a18b298a9e17a0b8319ab4a47e5388bc89c58ee", 0xbf, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r2, r1}, &(0x7f0000000480)=""/236, 0xec, &(0x7f0000001680)={&(0x7f0000000100)={'sha512-generic\x00'}}) 5.015499524s ago: executing program 0 (id=1689): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000200000002"], 0x0) 4.908545264s ago: executing program 2 (id=1690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x4, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aa"], 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0) 4.865750517s ago: executing program 6 (id=1691): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.495646989s ago: executing program 0 (id=1692): syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000387000/0x4000)=nil) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000000000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x2, 0x16, 0x35315258, 0x3, 0x0, 0x7, 0x9, 0x7, 0x0, 0x1, 0x1, 0x7}}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents(r6, &(0x7f0000000100)=""/49, 0x31) getdents64(r6, 0x0, 0x43) write$P9_RREADLINK(r6, &(0x7f00000002c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@local, @multicast1}, 0x8) 3.579787689s ago: executing program 2 (id=1693): syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x6, 0x2001) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x80011020, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = syz_io_uring_setup(0x3b92, &(0x7f0000000080)={0x0, 0x660b, 0x0, 0xfffffffc, 0x296}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x6c, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) syz_io_uring_submit(r7, r8, &(0x7f0000001700)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1}) io_uring_enter(r6, 0x1808, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x5, 0x8001022, 0x401, 0x1, 0x6dc2, 0xfff, 0x5, 0x0, 0x3df, 0x200e, 0x3ff, 0x4, 0xfffff350, 0x9, 0x9, 0x4, 0x4, 0x2, 0x9, 0x80000089, 0xfffffffe, 0x8, 0xfffffff8, 0x8000, 0x0, 0x3a2, 0x0, 0x1e9f, 0x7, 0xdffffff9]}) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) socket(0x2, 0x80805, 0x0) 3.205632732s ago: executing program 3 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) close(r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) listen(r0, 0xfffffffa) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) 3.205203112s ago: executing program 7 (id=1695): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) 3.1185145s ago: executing program 0 (id=1696): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) fcntl$dupfd(r0, 0x406, r0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.983629711s ago: executing program 2 (id=1697): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000fc"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) sched_setparam(r5, &(0x7f00000000c0)=0xd2b9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 2.978699602s ago: executing program 6 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200cd4c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 2.728951493s ago: executing program 7 (id=1699): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000016c0)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="9db3ebb134f5f945f1a23fbc39e2bb5583fea49c7c6856a189e73e8fbb327fe78e17b036000a79e32cccf62ef840961250e0b1e5085bce42f06535ce2cdb61e60261cc9767728f2ba12c434c3e5c6b9317077ec4aaf9f639b297cd7d4a1fe498c580c225599ea7033273d764aebe208c4a6e55acd6da1bae1d6aafdc6dd15ef8a6d0052f881f6a8ea20431bfb22e787a0ab2fdaab9d4877c53c97e1f23522d146dc380e75ab484bfbbfaf01a18b298a9e17a0b8319ab4a47e5388bc89c58ee", 0xbf, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r2, r1}, &(0x7f0000000480)=""/236, 0xec, &(0x7f0000001680)={&(0x7f0000000100)={'sha512-generic\x00'}}) 1.903603215s ago: executing program 2 (id=1700): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000", 0x6c}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000003", @ANYRES32=r2, @ANYBLOB="0c00018008000100000003000c0001"], 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.608443061s ago: executing program 6 (id=1701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.564117504s ago: executing program 0 (id=1702): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, 0x0, 0x0) 298.118545ms ago: executing program 7 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = fanotify_init(0x8, 0x1000) syz_open_dev$usbmon(&(0x7f0000000180), 0x7, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) fanotify_mark(r4, 0x201, 0x20, r8, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 95.729302ms ago: executing program 2 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x4, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aa"], 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, 0x0, 0x0) 0s ago: executing program 0 (id=1705): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x496, &(0x7f0000000480)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x400, 0x83) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x815000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044008}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000080)) kernel console output (not intermixed with test programs): oduct=2255, bcdDevice=13.03 [ 228.738914][ T4334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.764055][ T4334] usb 1-1: Product: syz [ 228.768274][ T4334] usb 1-1: Manufacturer: syz [ 228.774500][ T4334] usb 1-1: SerialNumber: syz [ 228.819948][ T4334] usb 1-1: config 0 descriptor?? [ 228.833519][ T4334] s2255 1-1:0.72: Could not find bulk-in endpoint [ 228.848586][ T4334] Sensoray 2255 driver load failed: 0xfffffff4 [ 228.855340][ T4334] s2255: probe of 1-1:0.72 failed with error -12 [ 228.962090][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.984046][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.992353][ T5487] device bridge_slave_0 entered promiscuous mode [ 229.039506][ T4447] usb 1-1: USB disconnect, device number 3 [ 229.050066][ T9] device hsr_slave_0 left promiscuous mode [ 229.089843][ T9] device hsr_slave_1 left promiscuous mode [ 229.111566][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.129613][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.240496][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.252501][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.292343][ T9] device bridge_slave_1 left promiscuous mode [ 229.298733][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.308217][ T9] device bridge_slave_0 left promiscuous mode [ 229.314828][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.345470][ T9] device veth1_macvtap left promiscuous mode [ 229.351646][ T9] device veth0_macvtap left promiscuous mode [ 229.358030][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 229.393190][ T9] device veth1_vlan left promiscuous mode [ 229.399898][ T9] device veth0_vlan left promiscuous mode [ 229.602763][ T5571] netlink: 68 bytes leftover after parsing attributes in process `syz.5.289'. [ 229.924429][ T5575] delete_channel: no stack [ 230.162151][ T5582] loop0: detected capacity change from 0 to 128 [ 230.300189][ T5582] syz.0.291: attempt to access beyond end of device [ 230.300189][ T5582] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 230.387735][ T5582] syz.0.291: attempt to access beyond end of device [ 230.387735][ T5582] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 231.366261][ T9] team0 (unregistering): Port device team_slave_1 removed [ 231.414289][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 231.416095][ T9] team0 (unregistering): Port device team_slave_0 removed [ 231.487148][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.562460][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.021456][ T5594] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 232.028573][ T5594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.068848][ T5594] vhci_hcd vhci_hcd.0: Device attached [ 232.075015][ T5597] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 232.081673][ T5597] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.133975][ T5594] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 232.140559][ T5594] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 232.157274][ T5597] vhci_hcd vhci_hcd.0: Device attached [ 232.188788][ T5597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 232.189748][ T5594] vhci_hcd vhci_hcd.0: Device attached [ 232.267087][ T5594] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(10) [ 232.273762][ T5594] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.284205][ T5594] vhci_hcd vhci_hcd.0: Device attached [ 232.324111][ T4316] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 232.349088][ T5592] loop0: detected capacity change from 0 to 32768 [ 232.358380][ T5594] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 232.365043][ T5594] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 232.398626][ T5594] vhci_hcd vhci_hcd.0: Device attached [ 232.428525][ T5597] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(16) [ 232.435207][ T5597] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.488035][ T5597] vhci_hcd vhci_hcd.0: Device attached [ 232.509056][ T5602] vhci_hcd: connection closed [ 232.509562][ T5600] vhci_hcd: connection closed [ 232.514849][ T5598] vhci_hcd: connection closed [ 232.519648][ T5595] vhci_hcd: connection reset by peer [ 232.533097][ T5607] vhci_hcd: connection closed [ 232.544788][ T5592] XFS (loop0): Mounting V5 Filesystem [ 232.569149][ T5534] vhci_hcd: stop threads [ 232.579608][ T5534] vhci_hcd: release socket [ 232.590932][ T5604] vhci_hcd: connection closed [ 232.605646][ T5534] vhci_hcd: disconnect device [ 232.634448][ T5534] vhci_hcd: stop threads [ 232.644031][ T5534] vhci_hcd: release socket [ 232.669079][ T5534] vhci_hcd: disconnect device [ 232.674220][ T5534] vhci_hcd: stop threads [ 232.678590][ T5534] vhci_hcd: release socket [ 232.683155][ T5534] vhci_hcd: disconnect device [ 232.688984][ T5534] vhci_hcd: stop threads [ 232.693338][ T5534] vhci_hcd: release socket [ 232.699870][ T5534] vhci_hcd: disconnect device [ 232.705800][ T5534] vhci_hcd: stop threads [ 232.713477][ T5534] vhci_hcd: release socket [ 232.736868][ T5534] vhci_hcd: disconnect device [ 232.743683][ T5592] XFS (loop0): Ending clean mount [ 232.758784][ T5534] vhci_hcd: stop threads [ 232.767094][ T5534] vhci_hcd: release socket [ 232.787501][ T9] bond0 (unregistering): Released all slaves [ 232.790167][ T5534] vhci_hcd: disconnect device [ 233.016177][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.023344][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.036975][ T5487] device bridge_slave_1 entered promiscuous mode [ 233.071766][ T4270] XFS (loop0): Unmounting Filesystem [ 233.216175][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.236551][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.466469][ T5622] loop5: detected capacity change from 0 to 8 [ 233.569941][ T5622] SQUASHFS error: zlib decompression failed, data probably corrupt [ 233.689699][ T5622] SQUASHFS error: Failed to read block 0x9b: -5 [ 233.698418][ T5487] team0: Port device team_slave_0 added [ 233.789216][ T5622] SQUASHFS error: Unable to read metadata cache entry [99] [ 233.877562][ T5487] team0: Port device team_slave_1 added [ 233.925240][ T5622] SQUASHFS error: Unable to read inode 0x127 [ 233.978374][ T5622] loop5: detected capacity change from 0 to 8 [ 234.032685][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.074843][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.184054][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.264915][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.271950][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.364118][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.456784][ T5626] delete_channel: no stack [ 234.769202][ T5487] device hsr_slave_0 entered promiscuous mode [ 234.942584][ T5487] device hsr_slave_1 entered promiscuous mode [ 235.775832][ T5487] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.796458][ T5487] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.833367][ T5487] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.857196][ T5487] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.979160][ T5625] loop3: detected capacity change from 0 to 32768 [ 236.035622][ T5625] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.299 (5625) [ 236.101915][ T5625] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.159049][ T5625] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 236.187382][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.189939][ T5625] BTRFS info (device loop3): using free space tree [ 236.264542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.345333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.358612][ T5487] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.394710][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.404921][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.472152][ T5625] BTRFS info (device loop3): enabling ssd optimizations [ 236.473618][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.486389][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.591748][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.747626][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.768484][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.777970][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.785183][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.795341][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.811676][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.821153][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.839844][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.873474][ T5674] BTRFS error (device loop3): target device is invalid! [ 236.891547][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.919085][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.945976][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.065669][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.074660][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.089767][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.115974][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.115975][ T4268] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.138687][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.494184][ T4316] vhci_hcd: vhci_device speed not set [ 238.244719][ T5689] netlink: 68 bytes leftover after parsing attributes in process `syz.0.307'. [ 238.409986][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 238.770654][ T5705] loop5: detected capacity change from 0 to 16 [ 238.790463][ T5705] erofs: (device loop5): mounted with root inode @ nid 36. [ 239.536765][ T5702] delete_channel: no stack [ 240.336714][ T4447] usb usb40-port1: attempt power cycle [ 240.353585][ T4411] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (4411) [ 242.159235][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.212684][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.260756][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.277738][ T5725] loop0: detected capacity change from 0 to 8192 [ 242.325867][ T5735] netlink: 68 bytes leftover after parsing attributes in process `syz.3.319'. [ 242.344830][ T4447] usb usb40-port1: unable to enumerate USB device [ 242.360617][ T5725] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 242.444208][ T5725] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 242.479989][ T5725] REISERFS (device loop0): using ordered data mode [ 242.614260][ T5725] reiserfs: using flush barriers [ 242.695278][ T5725] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 242.701196][ T5735] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 242.744418][ T5725] REISERFS (device loop0): checking transaction log (loop0) [ 242.779220][ T5725] REISERFS (device loop0): Using r5 hash to sort names [ 242.833740][ T5725] REISERFS (device loop0): using 3.5.x disk format [ 242.914358][ T5725] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 246.473731][ T5764] loop3: detected capacity change from 0 to 16 [ 246.484109][ T5764] erofs: (device loop3): mounted with root inode @ nid 36. [ 247.607322][ T5766] delete_channel: no stack [ 249.285854][ T5790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.330'. [ 249.324504][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.355067][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.391804][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 249.537027][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.554598][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.612581][ T5487] device veth0_vlan entered promiscuous mode [ 249.625580][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.645273][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.688164][ T5487] device veth1_vlan entered promiscuous mode [ 249.812144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.837589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.878286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.004982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.067600][ T5487] device veth0_macvtap entered promiscuous mode [ 250.127657][ T5804] loop0: detected capacity change from 0 to 4096 [ 250.149694][ T5487] device veth1_macvtap entered promiscuous mode [ 250.235387][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.253675][ T5814] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.280324][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.300700][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.323280][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.343673][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.394297][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.476717][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.522432][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.534753][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.550902][ T5799] netlink: 'syz.0.331': attribute type 4 has an invalid length. [ 251.363641][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.372264][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.380964][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.389985][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.401464][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.442615][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.463074][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.490451][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.527169][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.549239][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.573965][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.599295][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.745563][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.756464][ T5487] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.766721][ T5487] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.775794][ T5487] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.785459][ T5487] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.799508][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.829029][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.888321][ T5823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.336'. [ 252.129069][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.174879][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.131313][ T5834] mmap: syz.5.339 (5834) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 253.233727][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.783603][ T5834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.906650][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.956953][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.448965][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.527235][ T5842] sctp: failed to load transform for md5: -2 [ 254.568885][ T5846] delete_channel: no stack [ 254.798363][ T5857] loop6: detected capacity change from 0 to 8 [ 254.932572][ T5857] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 254.993985][ T5861] netlink: 68 bytes leftover after parsing attributes in process `syz.5.342'. [ 255.043677][ T5857] unable to read xattr id index table [ 255.514141][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 255.913838][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.920575][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.797618][ T5879] loop6: detected capacity change from 0 to 2048 [ 256.874819][ T5881] loop3: detected capacity change from 0 to 16 [ 257.725628][ T5881] erofs: (device loop3): mounted with root inode @ nid 36. [ 258.098408][ T5882] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.240952][ T26] audit: type=1800 audit(1771742007.195:12): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.347" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 258.322724][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.349'. [ 258.589334][ T5894] binder: 5892:5894 ioctl c0306201 0 returned -14 [ 260.994519][ T5909] delete_channel: no stack [ 263.436432][ T5929] netlink: 68 bytes leftover after parsing attributes in process `syz.2.358'. [ 264.412226][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 264.918656][ T5934] loop5: detected capacity change from 0 to 8192 [ 265.203442][ T5936] loop3: detected capacity change from 0 to 4096 [ 265.231381][ T5934] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 266.015785][ T5949] loop0: detected capacity change from 0 to 16 [ 266.716859][ T5949] erofs: (device loop0): mounted with root inode @ nid 36. [ 266.810905][ T5936] NILFS (loop3): error -4 creating segctord thread [ 267.151700][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.363'. [ 267.270195][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.364'. [ 267.287524][ T5960] loop0: detected capacity change from 0 to 512 [ 267.307172][ T5960] EXT4-fs: Ignoring removed orlov option [ 267.361823][ T5960] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 267.545913][ T5960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 267.640365][ T5960] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #15: comm syz.0.365: corrupted in-inode xattr [ 267.802677][ T5960] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.365: couldn't read orphan inode 15 (err -117) [ 267.885911][ T5960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 268.336995][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 269.444134][ T4441] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 269.668996][ T4441] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 269.730861][ T4441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.830068][ T4441] usb 1-1: config 0 descriptor?? [ 269.931628][ T5992] netlink: 68 bytes leftover after parsing attributes in process `syz.3.372'. [ 269.999041][ T5992] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 270.277883][ T4441] elan 0003:04F3:0755.0001: unknown main item tag 0x1 [ 270.329955][ T4441] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 270.483716][ T4441] usb 1-1: USB disconnect, device number 4 [ 270.573329][ T4273] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 270.778471][ T6004] loop6: detected capacity change from 0 to 1024 [ 270.955929][ T4273] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 270.973929][ T4273] usb 4-1: config 0 has no interface number 0 [ 270.982282][ T4273] usb 4-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 270.998619][ T4273] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 271.007911][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.019514][ T4273] usb 4-1: Product: syz [ 271.024197][ T4273] usb 4-1: Manufacturer: syz [ 271.031882][ T4273] usb 4-1: SerialNumber: syz [ 271.045508][ T4273] usb 4-1: config 0 descriptor?? [ 271.051242][ T5996] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 271.275283][ T4273] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 271.293274][ T6000] fido_id[6000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 271.308774][ T4273] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.90/input/input5 [ 271.418671][ C1] powermate: config urb returned -71 [ 271.424640][ C1] powermate: config urb returned -71 [ 271.430603][ C1] powermate: config urb returned -71 [ 271.445810][ T63] hfsplus: b-tree write err: -5, ino 4 [ 271.452169][ C1] powermate: config urb returned -71 [ 271.500393][ T4273] usb 4-1: USB disconnect, device number 4 [ 271.500444][ C1] powermate 4-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 272.466942][ T6027] netlink: 'syz.2.382': attribute type 4 has an invalid length. [ 272.586514][ T6034] netlink: 68 bytes leftover after parsing attributes in process `syz.0.384'. [ 273.362117][ T6021] loop3: detected capacity change from 0 to 32768 [ 273.552704][ T6021] XFS (loop3): Mounting V5 Filesystem [ 273.651466][ T6021] XFS (loop3): Ending clean mount [ 274.119176][ T6053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.386'. [ 274.315493][ T4268] XFS (loop3): Unmounting Filesystem [ 274.352361][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 275.613409][ T6062] device syzkaller0 entered promiscuous mode [ 276.993110][ T6087] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 277.066114][ T6089] loop6: detected capacity change from 0 to 512 [ 285.354737][ T6124] netlink: 68 bytes leftover after parsing attributes in process `syz.3.399'. [ 286.409540][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 286.492317][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.400'. [ 287.624592][ T6137] delete_channel: no stack [ 288.989836][ T6160] loop0: detected capacity change from 0 to 512 [ 289.085730][ T6160] EXT4-fs: Ignoring removed i_version option [ 289.435551][ T6160] EXT4-fs (loop0): 1 truncate cleaned up [ 289.525678][ T6160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 290.075922][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 290.237446][ T6145] loop5: detected capacity change from 0 to 32768 [ 290.246343][ T6177] loop0: detected capacity change from 0 to 8 [ 290.660828][ T6177] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 290.827207][ T6177] unable to read xattr id index table [ 292.256924][ T6197] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 292.738217][ T6201] delete_channel: no stack [ 293.280992][ T6217] loop5: detected capacity change from 0 to 512 [ 293.329333][ T6217] EXT4-fs: Ignoring removed i_version option [ 293.372541][ T6218] loop0: detected capacity change from 0 to 512 [ 293.379880][ T6218] EXT4-fs: Ignoring removed i_version option [ 293.422134][ T6218] EXT4-fs (loop0): 1 truncate cleaned up [ 293.428238][ T6218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.447562][ T6217] EXT4-fs (loop5): 1 truncate cleaned up [ 293.544170][ T6217] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 293.670475][ T5014] EXT4-fs (loop5): unmounting filesystem. [ 294.011143][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 294.147341][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 295.137117][ T6243] loop3: detected capacity change from 0 to 8 [ 295.158385][ T6243] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 295.212975][ T6243] unable to read xattr id index table [ 295.555406][ T6246] loop5: detected capacity change from 0 to 512 [ 295.611161][ T6246] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.428: inode has both inline data and extents flags [ 295.700546][ T6251] delete_channel: no stack [ 295.710746][ T6246] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.428: couldn't read orphan inode 15 (err -117) [ 295.777129][ T6246] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 296.071014][ T6265] loop0: detected capacity change from 0 to 256 [ 296.117313][ T5014] EXT4-fs (loop5): unmounting filesystem. [ 296.251660][ T6267] loop6: detected capacity change from 0 to 1024 [ 297.251177][ T4923] hfsplus: b-tree write err: -5, ino 4 [ 297.291546][ T6279] loop0: detected capacity change from 0 to 512 [ 297.298585][ T6279] EXT4-fs: Ignoring removed i_version option [ 297.350570][ T6279] EXT4-fs (loop0): 1 truncate cleaned up [ 297.356431][ T6279] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 297.837074][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'. [ 298.010659][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 299.251692][ T6299] loop6: detected capacity change from 0 to 32768 [ 299.263062][ T6299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.441 (6299) [ 299.281704][ T6299] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.291934][ T6299] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 299.301624][ T6299] BTRFS info (device loop6): using free space tree [ 299.767940][ T6299] BTRFS info (device loop6): enabling ssd optimizations [ 299.793575][ T6301] delete_channel: no stack [ 300.487643][ T6335] loop0: detected capacity change from 0 to 1024 [ 300.919751][ T26] audit: type=1800 audit(1771742049.875:13): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.441" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 302.615446][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 302.618238][ T5487] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.665380][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 302.869676][ T6360] loop0: detected capacity change from 0 to 512 [ 302.876856][ T6360] EXT4-fs: Ignoring removed i_version option [ 302.958368][ T6360] EXT4-fs (loop0): 1 truncate cleaned up [ 302.964249][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 303.613783][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 303.966078][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.449'. [ 304.071360][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 305.011638][ T6386] delete_channel: no stack [ 305.150853][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'. [ 305.590219][ T6409] loop3: detected capacity change from 0 to 512 [ 305.655195][ T6409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 305.716711][ T6409] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.741882][ T6409] EXT4-fs (loop3): 1 truncate cleaned up [ 305.750621][ T6409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 306.686586][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 306.749440][ T6395] loop6: detected capacity change from 0 to 32768 [ 306.851736][ T6395] ialloc: diAlloc returned -17! [ 308.367864][ T6439] loop6: detected capacity change from 0 to 512 [ 308.374925][ T6439] EXT4-fs: Ignoring removed i_version option [ 308.408838][ T6439] EXT4-fs (loop6): 1 truncate cleaned up [ 308.414705][ T6439] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 309.145997][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.468'. [ 309.308426][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 309.622122][ T6449] delete_channel: no stack [ 310.583895][ T4317] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 312.393664][ T4317] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 312.413874][ T4317] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 312.534003][ T4317] usb 7-1: config 220 interface 0 has no altsetting 0 [ 312.623032][ T4317] usb 7-1: string descriptor 0 read error: -71 [ 312.631193][ T4317] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 312.848631][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.895166][ T4317] usb 7-1: can't set config #220, error -71 [ 313.008769][ T4317] usb 7-1: USB disconnect, device number 2 [ 315.851915][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.481'. [ 317.410634][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.417064][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.404145][ T6517] loop0: detected capacity change from 0 to 4096 [ 319.438695][ T6519] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.453371][ T6517] netlink: 'syz.0.486': attribute type 4 has an invalid length. [ 319.828964][ T6523] loop5: detected capacity change from 0 to 512 [ 319.856642][ T6527] loop3: detected capacity change from 0 to 8 [ 319.930456][ T6523] EXT4-fs: Ignoring removed orlov option [ 319.952730][ T6527] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 320.024115][ T6527] unable to read xattr id index table [ 320.024287][ T6523] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 320.311204][ T6523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 320.402229][ T6523] EXT4-fs error (device loop5): ext4_iget_extra_inode:4756: inode #15: comm syz.5.488: corrupted in-inode xattr [ 320.561688][ T6523] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.488: couldn't read orphan inode 15 (err -117) [ 320.594355][ T6536] loop6: detected capacity change from 0 to 512 [ 320.601517][ T6536] EXT4-fs: Ignoring removed i_version option [ 320.619935][ T6523] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 320.642113][ T6536] EXT4-fs (loop6): 1 truncate cleaned up [ 320.647952][ T6536] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 322.380654][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 323.672749][ T5014] EXT4-fs (loop5): unmounting filesystem. [ 325.821379][ T6571] delete_channel: no stack [ 326.076865][ T6583] loop3: detected capacity change from 0 to 4096 [ 326.129057][ T6585] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.177355][ T6583] netlink: 'syz.3.500': attribute type 4 has an invalid length. [ 326.543032][ T6567] loop6: detected capacity change from 0 to 32768 [ 328.263306][ T6606] loop0: detected capacity change from 0 to 512 [ 328.270650][ T6606] EXT4-fs: Ignoring removed i_version option [ 328.619409][ T6606] EXT4-fs (loop0): 1 truncate cleaned up [ 328.625197][ T6606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 329.185296][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 330.344998][ T6619] loop3: detected capacity change from 0 to 128 [ 330.369633][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.507'. [ 330.796884][ T6623] netlink: 68 bytes leftover after parsing attributes in process `syz.6.509'. [ 331.050242][ T6619] syz.3.508: attempt to access beyond end of device [ 331.050242][ T6619] loop3: rw=2049, sector=138, nr_sectors = 72 limit=128 [ 331.068348][ T6628] loop0: detected capacity change from 0 to 1024 [ 331.123581][ T6628] EXT4-fs: Ignoring removed orlov option [ 331.157769][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 331.303585][ T6628] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 331.362850][ T6619] syz.3.508: attempt to access beyond end of device [ 331.362850][ T6619] loop3: rw=2049, sector=210, nr_sectors = 40 limit=128 [ 341.551043][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 342.703465][ T6644] loop0: detected capacity change from 0 to 32768 [ 342.959646][ T6644] XFS (loop0): Mounting V5 Filesystem [ 343.076221][ T6639] delete_channel: no stack [ 343.081740][ T6644] XFS (loop0): Ending clean mount [ 343.105103][ T6644] XFS (loop0): Quotacheck needed: Please wait. [ 343.494071][ T6644] XFS (loop0): Quotacheck: Done. [ 344.543982][ T4270] XFS (loop0): Unmounting Filesystem [ 344.776819][ T6675] netlink: 68 bytes leftover after parsing attributes in process `syz.3.518'. [ 346.400322][ T6682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 346.741418][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.757033][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.774372][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.791666][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.799341][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 346.809239][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.517293][ T6702] netlink: 68 bytes leftover after parsing attributes in process `syz.6.525'. [ 347.528493][ T6704] loop0: detected capacity change from 0 to 8 [ 347.645080][ T6704] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 347.652690][ T6704] unable to read xattr id index table [ 347.667690][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.709001][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 348.089175][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.246287][ T6710] delete_channel: no stack [ 348.255340][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.344701][ T6688] chnl_net:caif_netlink_parms(): no params data found [ 348.464668][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.721290][ T6722] loop3: detected capacity change from 0 to 8192 [ 348.802486][ T6731] loop0: detected capacity change from 0 to 512 [ 348.843051][ T6731] EXT4-fs: Ignoring removed i_version option [ 348.866747][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 348.927972][ T6722] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 348.980842][ T6731] EXT4-fs (loop0): 1 truncate cleaned up [ 348.986821][ T6731] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 349.047968][ T6722] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 349.124042][ T6722] REISERFS (device loop3): using ordered data mode [ 349.130618][ T6722] reiserfs: using flush barriers [ 349.152161][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.163884][ T6722] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 349.193923][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.202394][ T6688] device bridge_slave_0 entered promiscuous mode [ 349.225935][ T6722] REISERFS (device loop3): checking transaction log (loop3) [ 349.291586][ T6722] REISERFS (device loop3): Using tea hash to sort names [ 349.300770][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.308103][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.334979][ T6722] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 349.421319][ T6688] device bridge_slave_1 entered promiscuous mode [ 349.555741][ T6688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.637622][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 349.744437][ T6688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.894115][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 349.987779][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.531'. [ 350.505725][ T6688] team0: Port device team_slave_0 added [ 350.652596][ T6756] netlink: 68 bytes leftover after parsing attributes in process `syz.2.536'. [ 350.706618][ T6688] team0: Port device team_slave_1 added [ 350.740443][ T6752] syz.6.535 (6752) used greatest stack depth: 20360 bytes left [ 350.838087][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.872542][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.910969][ T6688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.928007][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 350.935239][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 350.951064][ T6764] loop0: detected capacity change from 0 to 8 [ 350.975925][ T6764] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 351.036978][ T6764] unable to read xattr id index table [ 351.042765][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.060707][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.140260][ T6688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.222568][ T6763] delete_channel: no stack [ 351.374273][ T6770] capability: warning: `syz.2.540' uses 32-bit capabilities (legacy support in use) [ 351.478633][ T6688] device hsr_slave_0 entered promiscuous mode [ 351.494069][ T6688] device hsr_slave_1 entered promiscuous mode [ 351.511289][ T6688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.536805][ T6688] Cannot create hsr debugfs directory [ 351.701499][ T6778] loop6: detected capacity change from 0 to 512 [ 351.708777][ T6778] EXT4-fs: Ignoring removed i_version option [ 351.736354][ T6778] EXT4-fs (loop6): 1 truncate cleaned up [ 351.742126][ T6778] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 351.865280][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 353.472819][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 353.671513][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 353.726451][ T6688] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 353.792605][ T6688] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 353.939892][ T6688] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 354.252663][ T6809] delete_channel: no stack [ 355.786000][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 355.957635][ T6688] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 356.024011][ T6822] loop3: detected capacity change from 0 to 512 [ 356.031280][ T6822] EXT4-fs: Ignoring removed i_version option [ 356.129804][ T6822] EXT4-fs (loop3): 1 truncate cleaned up [ 356.135629][ T6822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 356.255223][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 356.581459][ T6828] netlink: 20 bytes leftover after parsing attributes in process `syz.6.555'. [ 356.636447][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 356.681928][ T6840] netlink: 91 bytes leftover after parsing attributes in process `syz.2.558'. [ 357.269921][ T9] device hsr_slave_0 left promiscuous mode [ 357.281744][ T9] device hsr_slave_1 left promiscuous mode [ 357.333143][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.402002][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.435654][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.443126][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.454345][ T9] device bridge_slave_1 left promiscuous mode [ 357.461937][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.471597][ T9] device bridge_slave_0 left promiscuous mode [ 357.478223][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.537716][ T9] device veth1_macvtap left promiscuous mode [ 357.554146][ T9] device veth0_macvtap left promiscuous mode [ 357.560888][ T9] device veth1_vlan left promiscuous mode [ 357.573649][ T9] device veth0_vlan left promiscuous mode [ 358.478290][ T6861] netlink: 'syz.2.562': attribute type 29 has an invalid length. [ 358.670813][ T6862] delete_channel: no stack [ 360.549235][ T9] team0 (unregistering): Port device team_slave_1 removed [ 360.869286][ T9] team0 (unregistering): Port device team_slave_0 removed [ 361.162368][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.470473][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.408260][ T9] bond0 (unregistering): Released all slaves [ 362.499053][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.569'. [ 362.608833][ T6861] netlink: 'syz.2.562': attribute type 29 has an invalid length. [ 362.726458][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.852447][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.888351][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.947227][ T6688] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.998345][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.037306][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.066041][ T4944] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.073202][ T4944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.132551][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.165933][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.207582][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.238679][ T4944] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.245918][ T4944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.274311][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.298807][ T6892] netlink: 'syz.6.570': attribute type 8 has an invalid length. [ 363.311381][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.328206][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.399263][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.446930][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.477101][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.510251][ T6891] loop0: detected capacity change from 0 to 4096 [ 363.534906][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.603341][ T6891] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 363.624208][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.647283][ T6891] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 363.658774][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.724362][ T6891] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 363.752899][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.815535][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.834931][ T6891] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 363.906164][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.961366][ T6891] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 364.036544][ T6895] delete_channel: no stack [ 364.080461][ T6891] ntfs: volume version 3.1. [ 364.137661][ T6891] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 364.239534][ T6891] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 364.342377][ T6891] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 364.362015][ T6891] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 364.403900][ T6891] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 364.608713][ T6913] netlink: 'syz.3.577': attribute type 29 has an invalid length. [ 364.729418][ T6913] netlink: 'syz.3.577': attribute type 29 has an invalid length. [ 364.963620][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz.6.576'. [ 365.970609][ T6931] autofs4:pid:6931:autofs_fill_super: called with bogus options [ 367.063561][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.075686][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.093315][ T6688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.556898][ T6929] loop6: detected capacity change from 0 to 32768 [ 367.727950][ T6921] loop0: detected capacity change from 0 to 32768 [ 367.774384][ T6929] XFS (loop6): Mounting V5 Filesystem [ 367.870965][ T6921] XFS (loop0): Mounting V5 Filesystem [ 367.874318][ T6929] XFS (loop6): Ending clean mount [ 367.887702][ T6929] XFS (loop6): Quotacheck needed: Please wait. [ 367.956963][ T6929] XFS (loop6): Quotacheck: Done. [ 368.030897][ T6921] XFS (loop0): Ending clean mount [ 368.038660][ T6921] XFS (loop0): Quotacheck needed: Please wait. [ 368.079817][ T5487] XFS (loop6): Unmounting Filesystem [ 368.088776][ T6921] XFS (loop0): Quotacheck: Done. [ 368.508962][ T4270] XFS (loop0): Unmounting Filesystem [ 368.824316][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 368.843044][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.939894][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.959127][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.995439][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.036362][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.065548][ T6688] device veth0_vlan entered promiscuous mode [ 369.099137][ T6688] device veth1_vlan entered promiscuous mode [ 369.107369][ T6966] loop3: detected capacity change from 0 to 32768 [ 369.133442][ T6984] delete_channel: no stack [ 369.168834][ T6966] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 369.215365][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 369.223030][ T6966] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 369.243698][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 369.251627][ T6966] BTRFS info (device loop3): using free space tree [ 369.283722][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.344477][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.415722][ T7001] loop0: detected capacity change from 0 to 512 [ 369.422998][ T7001] EXT4-fs: Ignoring removed i_version option [ 369.468498][ T6688] device veth0_macvtap entered promiscuous mode [ 369.495478][ T7001] EXT4-fs (loop0): 1 truncate cleaned up [ 369.501271][ T7001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 369.548374][ T6688] device veth1_macvtap entered promiscuous mode [ 369.614568][ T6966] BTRFS info (device loop3): enabling ssd optimizations [ 369.732182][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.914992][ T6966] BTRFS error (device loop3): target device is invalid! [ 369.943364][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.032206][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.073471][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.862916][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.047198][ T7004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 371.104454][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.145680][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.187970][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.246886][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.433583][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.442667][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.450977][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.460238][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 371.461428][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.477462][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.494473][ T4268] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 371.534664][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.563897][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.581808][ T7024] loop6: detected capacity change from 0 to 256 [ 371.600436][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.632198][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.654537][ T7024] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 371.772171][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.844292][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.917610][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.401363][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.526843][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 372.526858][ T26] audit: type=1800 audit(1771742121.485:16): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.600" name="file1" dev="loop6" ino=1048613 res=0 errno=0 [ 372.591355][ T6688] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.633836][ T6688] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.714289][ T6688] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.723033][ T6688] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.808082][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.591'. [ 372.817888][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.848794][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.208397][ T5765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.254045][ T5765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.276402][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 373.333933][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.590'. [ 373.362224][ T4944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.370886][ T4944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.433482][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.618097][ T7059] delete_channel: no stack [ 374.245231][ T7069] loop7: detected capacity change from 0 to 4096 [ 374.323017][ T7070] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.348850][ T7057] loop6: detected capacity change from 0 to 131072 [ 374.358527][ T7069] netlink: 'syz.7.514': attribute type 4 has an invalid length. [ 374.362543][ T7057] F2FS-fs (loop6): invalid crc value [ 374.443592][ T7057] F2FS-fs (loop6): Found nat_bits in checkpoint [ 374.507675][ T7057] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 374.542230][ T7057] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 374.822110][ T7076] loop0: detected capacity change from 0 to 2048 [ 374.998650][ T7076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.342787][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.607'. [ 378.570605][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.582758][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.655083][ T7124] loop7: detected capacity change from 0 to 8 [ 378.745070][ T7124] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 378.752554][ T7124] unable to read xattr id index table [ 380.407167][ T7142] loop6: detected capacity change from 0 to 4096 [ 380.462352][ T7142] ntfs: (device loop6): parse_options(): The show_sys_files option requires a boolean argument. [ 380.568413][ T7122] loop0: detected capacity change from 0 to 32768 [ 380.732954][ T7122] XFS (loop0): Mounting V5 Filesystem [ 381.000317][ T7122] XFS (loop0): Ending clean mount [ 381.860763][ T4270] XFS (loop0): Unmounting Filesystem [ 381.965076][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.6.619'. [ 382.975098][ T7173] loop3: detected capacity change from 0 to 256 [ 383.039273][ T7173] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 383.183312][ T26] audit: type=1800 audit(1771742132.135:17): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.620" name="file1" dev="loop3" ino=1048617 res=0 errno=0 [ 384.243893][ T7190] loop3: detected capacity change from 0 to 4096 [ 384.428660][ T7193] loop0: detected capacity change from 0 to 40427 [ 384.443595][ T7193] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 384.451808][ T7193] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 384.462174][ T7193] F2FS-fs (loop0): invalid crc value [ 384.470690][ T7193] F2FS-fs (loop0): Found nat_bits in checkpoint [ 384.853815][ T7202] loop7: detected capacity change from 0 to 4096 [ 384.878936][ T7201] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.904011][ T7193] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 384.911101][ T7193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 385.069751][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.623'. [ 385.132774][ T7207] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.561855][ T7202] netlink: 'syz.7.625': attribute type 4 has an invalid length. [ 388.478690][ T7229] loop6: detected capacity change from 0 to 1024 [ 388.581059][ T31] hfsplus: b-tree write err: -5, ino 4 [ 390.830540][ T7249] loop3: detected capacity change from 0 to 512 [ 391.206881][ T7249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 391.920567][ T26] audit: type=1800 audit(1771742140.875:18): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.636" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 392.135531][ T7259] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.636: bg 0: bad block bitmap checksum [ 392.329410][ T7273] loop0: detected capacity change from 0 to 4096 [ 392.407806][ T7275] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.499893][ T7270] netlink: 'syz.0.638': attribute type 4 has an invalid length. [ 392.794719][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 393.171400][ T7294] loop6: detected capacity change from 0 to 512 [ 393.197128][ T7282] loop7: detected capacity change from 0 to 4096 [ 393.290369][ T7294] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 393.298072][ T7282] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 393.777670][ T7294] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.645: invalid indirect mapped block 4294967295 (level 0) [ 393.951211][ T7294] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.645: invalid indirect mapped block 4294967295 (level 1) [ 394.039057][ T7294] EXT4-fs (loop6): 1 orphan inode deleted [ 394.044916][ T7294] EXT4-fs (loop6): 1 truncate cleaned up [ 394.050678][ T7294] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 394.104445][ T7282] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 394.128519][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 394.284129][ T26] audit: type=1800 audit(1771742143.185:19): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.642" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 394.486002][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.647'. [ 397.233716][ T7333] loop0: detected capacity change from 0 to 64 [ 397.265742][ T7330] loop3: detected capacity change from 0 to 1024 [ 397.682169][ T7339] loop7: detected capacity change from 0 to 4096 [ 398.662060][ T7339] netlink: 'syz.7.656': attribute type 4 has an invalid length. [ 398.672497][ T7342] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.443040][ T7365] loop6: detected capacity change from 0 to 8 [ 400.519609][ T7365] SQUASHFS error: lzo decompression failed, data probably corrupt [ 400.584164][ T7365] SQUASHFS error: Failed to read block 0x91: -5 [ 400.590497][ T7365] SQUASHFS error: Unable to read metadata cache entry [8f] [ 400.618178][ T7365] SQUASHFS error: Unable to read inode 0x11f [ 403.957184][ T7408] loop6: detected capacity change from 0 to 4096 [ 404.250583][ T7409] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.403983][ T4273] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 404.696623][ T7408] netlink: 'syz.6.670': attribute type 4 has an invalid length. [ 405.523830][ T4273] usb 8-1: Using ep0 maxpacket: 16 [ 405.545702][ T4273] usb 8-1: config 0 has no interfaces? [ 405.551290][ T4273] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 405.654273][ T4273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.699102][ T4273] usb 8-1: config 0 descriptor?? [ 405.934432][ T4653] usb 8-1: USB disconnect, device number 2 [ 406.547665][ T7445] device syzkaller0 entered promiscuous mode [ 408.251787][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.6.688'. [ 408.397039][ T7479] netlink: 'syz.2.687': attribute type 4 has an invalid length. [ 409.333388][ T7475] loop0: detected capacity change from 0 to 4096 [ 409.450954][ T7475] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 409.490612][ T7491] loop6: detected capacity change from 0 to 2048 [ 409.613848][ T7491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.653455][ T7475] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 409.666541][ T7495] loop3: detected capacity change from 0 to 128 [ 409.788270][ T26] audit: type=1800 audit(1771742158.745:20): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.686" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 409.875724][ T7495] syz.3.692: attempt to access beyond end of device [ 409.875724][ T7495] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 411.442632][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 411.554898][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.698'. [ 411.927514][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.701'. [ 412.624632][ T7532] netlink: 'syz.2.700': attribute type 4 has an invalid length. [ 412.947316][ T7501] loop6: detected capacity change from 0 to 32768 [ 413.325924][ T7544] netlink: 'syz.2.703': attribute type 29 has an invalid length. [ 413.334081][ T7544] netlink: 'syz.2.703': attribute type 29 has an invalid length. [ 414.761181][ T7559] loop0: detected capacity change from 0 to 128 [ 414.896944][ T7540] loop7: detected capacity change from 0 to 32768 [ 414.958922][ T7559] syz.0.707: attempt to access beyond end of device [ 414.958922][ T7559] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 415.003591][ T7540] JBD2: Ignoring recovery information on journal [ 415.131128][ T7540] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 415.316077][ T7540] (syz.7.702,7540,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 415.398232][ T7540] (syz.7.702,7540,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 415.515385][ T6688] ocfs2: Unmounting device (7,7) on (node local) [ 416.855086][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.714'. [ 417.091522][ T7595] loop3: detected capacity change from 0 to 4096 [ 418.203569][ T7597] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.217751][ T7589] netlink: 'syz.3.713': attribute type 4 has an invalid length. [ 418.920291][ T7607] netlink: 'syz.3.716': attribute type 29 has an invalid length. [ 418.930936][ T7607] netlink: 'syz.3.716': attribute type 29 has an invalid length. [ 424.987672][ T7633] loop0: detected capacity change from 0 to 8192 [ 425.031684][ T7633] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 425.045517][ T7633] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 425.055189][ T7633] REISERFS (device loop0): using ordered data mode [ 425.061973][ T7633] reiserfs: using flush barriers [ 425.070163][ T7633] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 425.103490][ T7633] REISERFS (device loop0): checking transaction log (loop0) [ 425.117670][ T7633] REISERFS (device loop0): Using rupasov hash to sort names [ 425.125668][ T7633] REISERFS (device loop0): using 3.5.x disk format [ 425.132509][ T7633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 425.154071][ T7633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 425.214386][ T7633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 425.254821][ T7633] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 426.580360][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'. [ 426.589480][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.731'. [ 426.842608][ T7659] loop3: detected capacity change from 0 to 2048 [ 426.891607][ T7659] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 426.948121][ T7659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.390940][ T7666] loop0: detected capacity change from 0 to 8192 [ 428.485498][ T7666] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 428.614045][ T7666] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 428.623314][ T7666] REISERFS (device loop0): using ordered data mode [ 428.654081][ T7666] reiserfs: using flush barriers [ 428.681596][ T7666] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 428.790282][ T7666] REISERFS (device loop0): checking transaction log (loop0) [ 429.667683][ T7666] REISERFS (device loop0): Using tea hash to sort names [ 429.715752][ T7666] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 429.952793][ T7673] loop3: detected capacity change from 0 to 32768 [ 430.072246][ T7673] JBD2: Ignoring recovery information on journal [ 430.216880][ T7673] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 430.423685][ T7673] (syz.3.736,7673,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 430.530112][ T7673] (syz.3.736,7673,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 430.611151][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 431.174361][ T7703] 9pnet_fd: Insufficient options for proto=fd [ 431.223408][ T7705] loop0: detected capacity change from 0 to 128 [ 432.276510][ T7689] loop6: detected capacity change from 0 to 32768 [ 432.506653][ T7715] netlink: 'syz.3.741': attribute type 29 has an invalid length. [ 432.514880][ T7715] netlink: 'syz.3.741': attribute type 29 has an invalid length. [ 432.573285][ T7718] loop7: detected capacity change from 0 to 2048 [ 432.713527][ T7722] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.899284][ T7732] loop0: detected capacity change from 0 to 512 [ 433.489576][ T7731] syz.7.745 (7731): drop_caches: 2 [ 433.529491][ T7732] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.746: inode has both inline data and extents flags [ 433.590537][ T7732] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.746: couldn't read orphan inode 15 (err -117) [ 433.605292][ T7732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 433.706892][ T7746] loop3: detected capacity change from 0 to 128 [ 433.847880][ T7730] EXT4-fs warning (device loop0): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 434.041793][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 437.341870][ T7763] loop0: detected capacity change from 0 to 32768 [ 437.474890][ T7763] JBD2: Ignoring recovery information on journal [ 437.764320][ T7763] JBD2: recovery failed [ 437.768560][ T7763] (syz.0.752,7763,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 437.843970][ T7763] (syz.0.752,7763,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 437.866404][ T7763] (syz.0.752,7763,1):ocfs2_check_volume:2489 ERROR: status = -5 [ 437.953927][ T7763] (syz.0.752,7763,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 438.189109][ T7763] (syz.0.752,7763,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 438.491651][ T7801] loop3: detected capacity change from 0 to 2048 [ 438.618613][ T7799] loop6: detected capacity change from 0 to 8192 [ 438.661266][ T7799] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 438.675089][ T7806] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.694027][ T7799] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 438.735650][ T7799] REISERFS (device loop6): using ordered data mode [ 438.742738][ T7799] reiserfs: using flush barriers [ 438.792802][ T7799] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 438.915291][ T7799] REISERFS (device loop6): checking transaction log (loop6) [ 439.044634][ T7799] REISERFS (device loop6): Using r5 hash to sort names [ 439.064464][ T7799] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 439.980626][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.987070][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.278256][ T7801] syz.3.762 (7801): drop_caches: 2 [ 444.527139][ T7862] loop0: detected capacity change from 0 to 32768 [ 444.567355][ T7862] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.777 (7862) [ 444.651548][ T7862] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 444.742133][ T7862] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 444.803903][ T7862] BTRFS info (device loop0): enabling auto defrag [ 444.810423][ T7862] BTRFS info (device loop0): turning on sync discard [ 444.904683][ T7862] BTRFS info (device loop0): force clearing of disk cache [ 444.938366][ T7862] BTRFS info (device loop0): using default commit interval 30s [ 444.951468][ T7862] BTRFS info (device loop0): max_inline at 0 [ 444.963546][ T7890] netlink: 'syz.7.787': attribute type 4 has an invalid length. [ 445.024072][ T7862] BTRFS info (device loop0): disabling free space tree [ 445.321331][ T7903] netlink: 'syz.6.789': attribute type 29 has an invalid length. [ 445.329968][ T7903] netlink: 'syz.6.789': attribute type 29 has an invalid length. [ 446.785818][ T7862] BTRFS error (device loop0): open_ctree failed: -12 [ 447.835242][ T7929] loop6: detected capacity change from 0 to 131072 [ 448.538964][ T7938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.793'. [ 449.126995][ T6959] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (6959) [ 450.021892][ T7929] fscrypt: Error allocating hmac(sha512): -4 [ 450.028590][ T7929] F2FS-fs (loop6): Error processing option "test_dummy_encryption" [-4] [ 450.330914][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 450.676308][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.7.795'. [ 451.607513][ T7977] netlink: 'syz.0.804': attribute type 29 has an invalid length. [ 451.615924][ T7977] netlink: 'syz.0.804': attribute type 29 has an invalid length. [ 453.214494][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'. [ 453.262277][ T7987] loop6: detected capacity change from 0 to 4096 [ 454.976598][ T7987] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 455.061435][ T7987] ntfs: volume version 3.1. [ 455.906333][ T8009] loop6: detected capacity change from 0 to 8192 [ 456.134581][ T8009] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 456.154125][ T8009] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 456.484469][ T8009] REISERFS (device loop6): using ordered data mode [ 456.652035][ T8009] reiserfs: using flush barriers [ 456.826989][ T8009] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 456.955812][ T8009] REISERFS (device loop6): checking transaction log (loop6) [ 457.073424][ T8009] REISERFS (device loop6): Using r5 hash to sort names [ 457.094750][ T8009] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 457.841507][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 458.892386][ T8036] loop0: detected capacity change from 0 to 32768 [ 458.970417][ T8036] JBD2: Ignoring recovery information on journal [ 459.204883][ T7035] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 459.268474][ T8036] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 459.834699][ T26] audit: type=1800 audit(1771742208.785:21): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.820" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 460.091062][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 460.099938][ T7035] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 460.123864][ T7035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.131916][ T7035] usb 7-1: Product: syz [ 460.175179][ T7035] usb 7-1: Manufacturer: syz [ 460.179848][ T7035] usb 7-1: SerialNumber: syz [ 460.370034][ T7035] usb 7-1: config 0 descriptor?? [ 460.397702][ T7035] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 460.413860][ T7035] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 460.422045][ T7035] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 461.164918][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.826'. [ 461.359491][ T8077] loop6: detected capacity change from 0 to 512 [ 462.829583][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.832'. [ 462.873186][ T4447] usb 7-1: USB disconnect, device number 3 [ 464.639164][ T26] audit: type=1326 audit(1771742213.595:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.7.839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62a6f9c629 code=0x0 [ 465.038556][ T8138] device syzkaller0 entered promiscuous mode [ 465.487847][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 465.497370][ T8146] netlink: 44 bytes leftover after parsing attributes in process `syz.3.842'. [ 465.994944][ T8147] loop0: detected capacity change from 0 to 4096 [ 466.613829][ T8148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.429009][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz.7.851'. [ 468.659411][ T8171] loop6: detected capacity change from 0 to 8192 [ 468.811056][ T8171] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 468.909912][ T8171] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 468.984003][ T8171] REISERFS (device loop6): using ordered data mode [ 469.000840][ T8171] reiserfs: using flush barriers [ 469.012867][ T8171] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 469.077200][ T8171] REISERFS (device loop6): checking transaction log (loop6) [ 469.108923][ T8171] REISERFS (device loop6): Using r5 hash to sort names [ 469.135433][ T8171] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 469.558555][ T8162] loop0: detected capacity change from 0 to 32768 [ 469.941431][ T8162] XFS (loop0): Mounting V5 Filesystem [ 470.332599][ T8162] XFS (loop0): Ending clean mount [ 471.425882][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.435871][ T4270] XFS (loop0): Unmounting Filesystem [ 471.492629][ T8212] device bridge_slave_1 left promiscuous mode [ 471.499889][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.531377][ T8212] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 478.733210][ T8254] loop0: detected capacity change from 0 to 4096 [ 480.350741][ T8255] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.611511][ T8264] loop6: detected capacity change from 0 to 1024 [ 480.765321][ T8268] netlink: 'syz.0.867': attribute type 5 has an invalid length. [ 480.812924][ T8264] hfsplus: catalog searching failed [ 480.909330][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.867'. [ 480.993110][ T31] hfsplus: b-tree write err: -5, ino 3 [ 481.039811][ T5487] hfsplus: node 4:3 still has 1 user(s)! [ 482.510530][ T8288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.871'. [ 482.774976][ T8290] loop0: detected capacity change from 0 to 4096 [ 482.840471][ T8290] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 482.928228][ T8290] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 483.014073][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 483.581777][ T8307] loop0: detected capacity change from 0 to 512 [ 483.591983][ T8307] EXT4-fs: Ignoring removed i_version option [ 483.862729][ T8307] EXT4-fs (loop0): 1 truncate cleaned up [ 483.868644][ T8307] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 484.269047][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 484.635922][ T8321] netlink: 'syz.7.876': attribute type 10 has an invalid length. [ 486.046015][ T8322] loop0: detected capacity change from 0 to 4096 [ 486.132786][ T8326] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.448230][ T8332] netlink: 'syz.2.883': attribute type 5 has an invalid length. [ 486.608194][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.883'. [ 486.638694][ T8332] netlink: 'syz.2.883': attribute type 10 has an invalid length. [ 486.791976][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.799342][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.103074][ T8343] cgroup: Unknown subsys name 'noxattr' [ 487.684550][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.691774][ T8332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.699538][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.706810][ T8332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.123689][ T8332] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 488.215027][ T8341] netlink: 2 bytes leftover after parsing attributes in process `syz.0.882'. [ 489.852128][ T8366] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 493.512052][ T8400] netlink: 'syz.7.898': attribute type 27 has an invalid length. [ 493.583248][ T8397] netlink: 'syz.0.896': attribute type 29 has an invalid length. [ 493.844121][ T8410] fuse: Bad value for 'fd' [ 496.404623][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.413430][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.129791][ T8400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.196097][ T8400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.712673][ T8400] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.721952][ T8400] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.731282][ T8400] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.740260][ T8400] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.871245][ T8397] netlink: 'syz.0.896': attribute type 29 has an invalid length. [ 498.989325][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.903'. [ 499.682748][ T8463] netlink: 'syz.6.910': attribute type 10 has an invalid length. [ 499.884135][ T4428] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 499.913465][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.921091][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.069567][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.076809][ T8463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.084331][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.091564][ T8463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.163549][ T8463] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 500.253858][ T4428] usb 1-1: Using ep0 maxpacket: 32 [ 500.267624][ T4428] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.591281][ T4428] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 500.763864][ T4428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 501.419425][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.434482][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.762887][ T4428] usb 1-1: Product: syz [ 501.767217][ T4428] usb 1-1: Manufacturer: syz [ 501.771865][ T4428] usb 1-1: SerialNumber: syz [ 501.778364][ T4428] usb 1-1: config 0 descriptor?? [ 501.821505][ T4428] usb 1-1: no audio or video endpoints found [ 502.167259][ T8492] netlink: 'syz.2.920': attribute type 29 has an invalid length. [ 502.175935][ T8492] netlink: 'syz.2.920': attribute type 29 has an invalid length. [ 502.506940][ T8502] loop6: detected capacity change from 0 to 4096 [ 502.611458][ T8503] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.225524][ T4428] usb 1-1: USB disconnect, device number 5 [ 505.938781][ T8542] netlink: 2 bytes leftover after parsing attributes in process `syz.3.929'. [ 506.183367][ T8543] cgroup: Unknown subsys name 'noxattr' [ 509.093121][ T8550] netlink: 'syz.7.932': attribute type 29 has an invalid length. [ 509.101381][ T8550] netlink: 'syz.7.932': attribute type 29 has an invalid length. [ 509.590319][ T8560] autofs4:pid:8560:autofs_fill_super: called with bogus options [ 511.023129][ T8568] loop6: detected capacity change from 0 to 4096 [ 511.112308][ T8568] ntfs3: Bad value for 'umask' [ 512.132088][ T8587] netlink: 'syz.6.941': attribute type 10 has an invalid length. [ 512.294461][ T8587] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 512.470418][ T8591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.608749][ T8603] netlink: 'syz.2.944': attribute type 10 has an invalid length. [ 513.672618][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.680046][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.144943][ T8615] netlink: 'syz.6.947': attribute type 29 has an invalid length. [ 514.153109][ T8615] netlink: 'syz.6.947': attribute type 29 has an invalid length. [ 514.908960][ T8621] loop6: detected capacity change from 0 to 4096 [ 514.972681][ T8621] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 515.053620][ T8621] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 515.771210][ T8634] loop6: detected capacity change from 0 to 4096 [ 515.781252][ T8640] all (unregistering): Released all slaves [ 515.812852][ T8634] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 515.933480][ T8634] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 516.948567][ T8655] netlink: 'syz.2.961': attribute type 29 has an invalid length. [ 517.467163][ T8655] netlink: 'syz.2.961': attribute type 29 has an invalid length. [ 519.294869][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.966'. [ 520.115842][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.920189][ T5684] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 522.204145][ T5684] usb 7-1: Using ep0 maxpacket: 32 [ 522.211199][ T5684] usb 7-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 522.246164][ T5684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.284490][ T5684] usb 7-1: config 0 descriptor?? [ 522.320401][ T8698] netlink: 'syz.0.971': attribute type 5 has an invalid length. [ 522.564422][ T8692] bond0: (slave syz_tun): Releasing backup interface [ 522.624508][ T8692] bond0: (slave bridge0): Releasing backup interface [ 522.665309][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.672722][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.727188][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 523.133868][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.203645][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.825971][ T8692] device bridge_slave_0 left promiscuous mode [ 523.832325][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.883408][ T8692] device bridge_slave_1 left promiscuous mode [ 525.065939][ T8727] netlink: 'syz.0.985': attribute type 29 has an invalid length. [ 525.120783][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.373088][ T8692] bond0: (slave bond_slave_0): Releasing backup interface [ 525.750133][ T8692] bond0: (slave bond_slave_1): Releasing backup interface [ 526.028025][ T8692] team0: Port device team_slave_0 removed [ 526.141376][ T8692] team0: Port device team_slave_1 removed [ 526.180344][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.782017][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.794545][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.831224][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.917180][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 526.951613][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 527.029134][ T8727] netlink: 'syz.0.985': attribute type 29 has an invalid length. [ 527.127007][ T8743] tipc: Enabling of bearer rejected, failed to enable media [ 527.239897][ T4441] usb 7-1: USB disconnect, device number 4 [ 530.644991][ T8807] netlink: 'syz.6.993': attribute type 29 has an invalid length. [ 530.653120][ T8807] netlink: 'syz.6.993': attribute type 29 has an invalid length. [ 531.985945][ T8823] tipc: Enabling of bearer rejected, failed to enable media [ 533.294255][ T8814] loop0: detected capacity change from 0 to 32768 [ 533.587066][ T8814] XFS (loop0): Mounting V5 Filesystem [ 534.808749][ T8814] XFS (loop0): Ending clean mount [ 535.075551][ T4270] XFS (loop0): Unmounting Filesystem [ 535.852394][ T8881] netlink: 'syz.6.1011': attribute type 5 has an invalid length. [ 536.465119][ T8879] netlink: 'syz.6.1011': attribute type 10 has an invalid length. [ 536.539958][ T8879] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 545.306717][ T8986] loop6: detected capacity change from 0 to 64 [ 546.847360][ T8976] loop0: detected capacity change from 0 to 40427 [ 546.998457][ T8976] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 547.519123][ T8976] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 547.538075][ T8976] F2FS-fs (loop0): invalid crc value [ 547.547702][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1042'. [ 547.579211][ T8976] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 547.850136][ T8976] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 547.867571][ T8976] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 548.148116][ T4270] syz-executor: attempt to access beyond end of device [ 548.148116][ T4270] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 548.475416][ T9035] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1047'. [ 548.925779][ T9044] Illegal XDP return value 4290993200 on prog (id 24) dev syz_tun, expect packet loss! [ 549.890554][ T9050] netlink: 'syz.2.1051': attribute type 5 has an invalid length. [ 549.936128][ T9050] netlink: 'syz.2.1051': attribute type 10 has an invalid length. [ 552.203266][ T9078] loop6: detected capacity change from 0 to 512 [ 552.210502][ T9078] EXT4-fs: Ignoring removed i_version option [ 552.265053][ T9078] EXT4-fs (loop6): 1 truncate cleaned up [ 552.270790][ T9078] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 552.453199][ T9063] loop0: detected capacity change from 0 to 40427 [ 552.532509][ T9063] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 552.557263][ T9063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 552.646303][ T9063] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 553.510501][ T9063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 553.924648][ T9080] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 554.093811][ T9063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 554.129901][ T9063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 554.977688][ T9106] netlink: 'syz.7.1061': attribute type 4 has an invalid length. [ 554.989205][ T26] audit: type=1326 audit(1771742303.915:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a6f9c629 code=0x7ffc0000 [ 555.272105][ T26] audit: type=1326 audit(1771742303.915:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62a6f5cece code=0x7ffc0000 [ 555.581605][ T26] audit: type=1326 audit(1771742303.915:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62a6f5cece code=0x7ffc0000 [ 555.727128][ T9108] netlink: 'syz.7.1063': attribute type 5 has an invalid length. [ 555.753749][ T26] audit: type=1326 audit(1771742303.925:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a6f9c629 code=0x7ffc0000 [ 555.779169][ T9108] netlink: 'syz.7.1063': attribute type 10 has an invalid length. [ 555.799205][ T9108] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 555.833825][ T26] audit: type=1326 audit(1771742303.925:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f62a6f9c629 code=0x7ffc0000 [ 555.907460][ T26] audit: type=1326 audit(1771742303.925:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a6f9c629 code=0x7ffc0000 [ 555.986151][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 556.009885][ T26] audit: type=1326 audit(1771742303.925:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62a6f9dec7 code=0x7ffc0000 [ 556.139935][ T26] audit: type=1326 audit(1771742303.925:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a6f9c629 code=0x7ffc0000 [ 556.255492][ T26] audit: type=1326 audit(1771742303.925:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62a6f9c629 code=0x7ffc0000 [ 556.349255][ T26] audit: type=1326 audit(1771742303.925:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.7.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a6f9c629 code=0x7ffc0000 [ 557.269164][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1066'. [ 557.977154][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1067'. [ 559.001485][ T9148] 9pnet_fd: Insufficient options for proto=fd [ 563.106128][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.112587][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.258337][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1082'. [ 564.504304][ T9208] netlink: 'syz.6.1084': attribute type 5 has an invalid length. [ 564.565202][ T9208] netlink: 'syz.6.1084': attribute type 10 has an invalid length. [ 565.910565][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1094'. [ 566.076095][ T9240] loop0: detected capacity change from 0 to 32768 [ 567.644588][ T9257] fuse: Bad value for 'fd' [ 568.112920][ T9265] delete_channel: no stack [ 569.019690][ T9256] loop6: detected capacity change from 0 to 40427 [ 569.063658][ T9290] loop0: detected capacity change from 0 to 512 [ 569.082689][ T9256] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 569.091490][ T9290] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 569.112857][ T9256] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 569.135207][ T9256] F2FS-fs (loop6): invalid crc value [ 569.150696][ T9290] EXT4-fs (loop0): Test dummy encryption mode enabled [ 569.178005][ T9290] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 569.202318][ T9256] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 569.423401][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 569.493578][ T9256] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 569.506294][ T9256] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 569.743254][ T5487] syz-executor: attempt to access beyond end of device [ 569.743254][ T5487] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 572.672512][ T9316] loop6: detected capacity change from 0 to 32768 [ 572.798381][ T9316] add_index: next_index = 0. Resetting! [ 574.204664][ T9341] netlink: 'syz.3.1115': attribute type 5 has an invalid length. [ 574.252092][ T9341] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 574.281522][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.336717][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.343924][ T9341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.385963][ T9341] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 577.582997][ T9372] loop6: detected capacity change from 0 to 16 [ 577.717337][ T9372] erofs: (device loop6): mounted with root inode @ nid 36. [ 586.256956][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1150'. [ 586.451527][ T9445] loop6: detected capacity change from 0 to 8192 [ 586.687502][ T9445] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 586.734350][ T9445] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 586.799160][ T9451] loop0: detected capacity change from 0 to 16 [ 586.816001][ T9451] erofs: (device loop0): mounted with root inode @ nid 36. [ 587.012504][ T9445] REISERFS (device loop6): using ordered data mode [ 587.211723][ T9445] reiserfs: using flush barriers [ 587.555060][ T9445] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 587.637765][ T9445] REISERFS (device loop6): checking transaction log (loop6) [ 587.729322][ T9445] REISERFS (device loop6): Using r5 hash to sort names [ 587.758166][ T9445] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 588.064063][ T6370] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 588.395235][ T6370] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 588.404549][ T6370] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 588.412846][ T6370] usb 1-1: Product: syz [ 588.417192][ T6370] usb 1-1: Manufacturer: syz [ 588.423852][ T6370] usb 1-1: SerialNumber: syz [ 588.461781][ T6370] usb 1-1: config 0 descriptor?? [ 588.521192][ T6370] ch341 1-1:0.0: ch341-uart converter detected [ 589.849212][ T6370] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 590.438551][ T6370] usb 1-1: USB disconnect, device number 6 [ 590.477020][ T6370] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 590.506788][ T6370] ch341 1-1:0.0: device disconnected [ 595.848622][ T9496] netlink: 'syz.2.1163': attribute type 5 has an invalid length. [ 595.904745][ T9496] netlink: 'syz.2.1163': attribute type 10 has an invalid length. [ 596.443809][ T6370] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 596.885549][ T6370] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 596.894484][ T6370] usb 1-1: config 0 has no interface number 0 [ 596.900908][ T6370] usb 1-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 596.912749][ T6370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.089151][ T6370] usb 1-1: config 0 descriptor?? [ 597.099134][ T6370] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 597.979580][ T9523] loop6: detected capacity change from 0 to 512 [ 597.986805][ T9523] EXT4-fs: Ignoring removed i_version option [ 598.470846][ T6370] gspca_ov534_9: reg_w failed -110 [ 598.502757][ T1043] block nbd0: Attempted send on invalid socket [ 598.510872][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.551460][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.565127][ T9523] EXT4-fs (loop6): 1 truncate cleaned up [ 598.570835][ T9523] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 598.610085][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.512125][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 599.786825][ T9544] netlink: 'syz.2.1179': attribute type 5 has an invalid length. [ 599.893771][ T6370] gspca_ov534_9: Unknown sensor 0000 [ 599.894570][ T6370] ov534_9: probe of 1-1:0.111 failed with error -22 [ 600.081660][ T9544] netlink: 'syz.2.1179': attribute type 10 has an invalid length. [ 600.639626][ T6370] usb 1-1: USB disconnect, device number 7 [ 600.687311][ T9546] delete_channel: no stack [ 603.127519][ T9565] loop6: detected capacity change from 0 to 8192 [ 603.176348][ T9565] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 603.217480][ T9565] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 603.246983][ T9565] REISERFS (device loop6): using ordered data mode [ 603.262268][ T9565] reiserfs: using flush barriers [ 603.299226][ T9565] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 603.388887][ T9565] REISERFS (device loop6): checking transaction log (loop6) [ 604.558453][ T9565] REISERFS (device loop6): Using tea hash to sort names [ 604.602801][ T9565] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 604.878644][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1189'. [ 604.893299][ T9579] netlink: 'syz.7.1190': attribute type 5 has an invalid length. [ 604.949677][ T9579] netlink: 'syz.7.1190': attribute type 10 has an invalid length. [ 607.413310][ T9592] loop0: detected capacity change from 0 to 8192 [ 607.467436][ T9592] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 607.536589][ T9592] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 607.549596][ T9592] REISERFS (device loop0): using ordered data mode [ 607.560280][ T9592] reiserfs: using flush barriers [ 607.570589][ T9592] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 607.593941][ T9592] REISERFS (device loop0): checking transaction log (loop0) [ 607.602596][ T9592] REISERFS (device loop0): Using r5 hash to sort names [ 607.652248][ T9592] REISERFS (device loop0): using 3.5.x disk format [ 607.668821][ T9592] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 609.140797][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1202'. [ 613.529951][ T9657] No such timeout policy "syz1" [ 614.478542][ T9668] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1215'. [ 615.558551][ T9677] loop2: detected capacity change from 0 to 7 [ 615.591312][ T9677] Dev loop2: unable to read RDB block 7 [ 615.598259][ T9677] loop2: unable to read partition table [ 615.708673][ T9677] loop2: partition table beyond EOD, truncated [ 615.768858][ T9677] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 619.201802][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1233'. [ 619.379667][ T9695] loop6: detected capacity change from 0 to 40427 [ 619.405949][ T9695] F2FS-fs (loop6): invalid crc value [ 619.457042][ T9695] F2FS-fs (loop6): Found nat_bits in checkpoint [ 620.388932][ T9695] F2FS-fs (loop6): Start checkpoint disabled! [ 622.977203][ T9740] loop0: detected capacity change from 0 to 4096 [ 623.020139][ T9740] __ntfs_warning: 11 callbacks suppressed [ 623.020156][ T9740] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 623.160493][ T9740] ntfs: volume version 3.1. [ 623.433690][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1245'. [ 624.546193][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.552931][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.910189][ T9762] No such timeout policy "syz1" [ 627.426637][ T9787] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1257'. [ 629.657320][ T9797] loop6: detected capacity change from 0 to 512 [ 629.737248][ T9797] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 630.686987][ T9809] loop0: detected capacity change from 0 to 128 [ 630.726424][ T9456] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 632.345326][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1269'. [ 633.416896][ T9827] netlink: 'syz.6.1267': attribute type 5 has an invalid length. [ 633.580710][ T9827] netlink: 'syz.6.1267': attribute type 10 has an invalid length. [ 635.159770][ T9851] VFS: could not find a valid V7 on nullb0. [ 636.426602][ T9865] loop6: detected capacity change from 0 to 1024 [ 636.455818][ T9866] loop0: detected capacity change from 0 to 1024 [ 636.670952][ T9871] device bridge_slave_1 left promiscuous mode [ 636.677378][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.688655][ T9871] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 636.791652][ T9865] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 637.656285][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1280'. [ 638.007889][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 638.019856][ T63] hfsplus: b-tree write err: -5, ino 8 [ 639.684692][ T9892] netlink: 'syz.0.1283': attribute type 5 has an invalid length. [ 639.739149][ T9892] netlink: 'syz.0.1283': attribute type 10 has an invalid length. [ 640.066182][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.073528][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.263433][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.270645][ T9892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.278127][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.285403][ T9892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.560952][ T9892] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 643.749326][ T9920] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 643.795124][ T9921] syz.0.1289 (9921) used greatest stack depth: 17712 bytes left [ 644.108160][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1294'. [ 644.768170][ T9932] No such timeout policy "syz1" [ 645.153050][ T4428] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 646.880668][ T4428] usb 7-1: Using ep0 maxpacket: 32 [ 646.911479][ T4428] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.970257][ T4428] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.991668][ T4428] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 647.011086][ T4428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.058568][ T4428] usb 7-1: config 0 descriptor?? [ 647.073103][ T4428] hub 7-1:0.0: USB hub found [ 648.025826][ T4428] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 648.083801][ T4428] usbhid 7-1:0.0: can't add hid device: -71 [ 648.089850][ T4428] usbhid: probe of 7-1:0.0 failed with error -71 [ 648.251960][ T9955] loop6: detected capacity change from 0 to 47 [ 648.364527][ T4428] usb 7-1: USB disconnect, device number 5 [ 651.098524][ T9975] loop6: detected capacity change from 0 to 256 [ 651.199271][ T9975] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 652.099123][ T9981] 9pnet_fd: Insufficient options for proto=fd [ 653.287108][ T9990] loop0: detected capacity change from 0 to 256 [ 653.440588][ T9990] FAT-fs (loop0): Directory bread(block 64) failed [ 653.543778][ T9990] FAT-fs (loop0): Directory bread(block 65) failed [ 653.550475][ T9990] FAT-fs (loop0): Directory bread(block 66) failed [ 653.583801][ T9990] FAT-fs (loop0): Directory bread(block 67) failed [ 653.610457][ T9990] FAT-fs (loop0): Directory bread(block 68) failed [ 653.624404][ T9990] FAT-fs (loop0): Directory bread(block 69) failed [ 653.646695][ T9990] FAT-fs (loop0): Directory bread(block 70) failed [ 653.673786][ T9990] FAT-fs (loop0): Directory bread(block 71) failed [ 653.688109][ T9990] FAT-fs (loop0): Directory bread(block 72) failed [ 653.705385][ T9996] loop6: detected capacity change from 0 to 512 [ 653.717638][ T9990] FAT-fs (loop0): Directory bread(block 73) failed [ 653.774545][ T9996] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 653.854397][ T9996] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 653.893204][ T9996] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #13: comm syz.6.1317: iget: bad i_size value: 12154757448730 [ 654.216590][ T9996] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1317: couldn't read orphan inode 13 (err -117) [ 654.539032][ T9996] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 654.783022][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 656.534598][T10029] loop6: detected capacity change from 0 to 16 [ 656.573797][T10029] erofs: (device loop6): mounted with root inode @ nid 36. [ 660.207265][T10056] delete_channel: no stack [ 660.420867][T10063] device vlan0 entered promiscuous mode [ 662.372712][T10077] loop0: detected capacity change from 0 to 512 [ 662.456987][T10077] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 662.498301][T10077] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 662.766184][T10077] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 664.994681][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 665.614367][T10108] No such timeout policy "syz1" [ 669.477377][T10142] loop6: detected capacity change from 0 to 1024 [ 671.565050][T10156] No such timeout policy "syz1" [ 671.627992][ T4363] hfsplus: b-tree write err: -5, ino 3 [ 673.741301][T10180] netlink: 'syz.3.1367': attribute type 10 has an invalid length. [ 673.788934][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.925347][T10201] loop6: detected capacity change from 0 to 2048 [ 674.981680][T10201] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 675.219815][T10207] netlink: 'syz.2.1373': attribute type 29 has an invalid length. [ 675.229358][T10207] netlink: 'syz.2.1373': attribute type 29 has an invalid length. [ 675.971473][T10195] loop0: detected capacity change from 0 to 16 [ 676.152616][T10195] erofs: (device loop0): mounted with root inode @ nid 36. [ 679.631808][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1388'. [ 679.671762][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1388'. [ 680.740206][T10269] netlink: 'syz.2.1394': attribute type 10 has an invalid length. [ 683.775249][T10317] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 683.964969][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1408'. [ 684.004935][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1408'. [ 684.326189][T10327] loop6: detected capacity change from 0 to 2048 [ 684.400881][T10327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.147149][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1411'. [ 685.614019][ T26] audit: type=1800 audit(1771742434.505:44): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1411" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 685.735962][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.742345][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.154355][T10354] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 691.780273][T10377] overlayfs: failed to get inode (-116) [ 691.788553][T10377] overlayfs: failed to get inode (-116) [ 692.602891][T10395] No such timeout policy "syz1" [ 693.200408][T10394] loop0: detected capacity change from 0 to 2048 [ 693.499223][T10399] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 695.702759][T10424] netlink: 'syz.6.1435': attribute type 10 has an invalid length. [ 699.416644][T10445] loop0: detected capacity change from 0 to 8192 [ 699.641464][T10445] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 699.710936][T10445] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 699.829395][T10445] REISERFS (device loop0): using ordered data mode [ 699.870793][T10445] reiserfs: using flush barriers [ 699.913942][T10445] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 700.161756][T10445] REISERFS (device loop0): checking transaction log (loop0) [ 701.561470][T10445] REISERFS (device loop0): Using rupasov hash to sort names [ 703.161330][T10485] netlink: 'syz.0.1449': attribute type 10 has an invalid length. [ 703.192220][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.199615][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.812475][T10508] No such timeout policy "syz1" [ 705.754020][T10515] loop0: detected capacity change from 0 to 16 [ 705.830952][T10515] erofs: (device loop0): mounted with root inode @ nid 36. [ 706.730052][T10504] loop6: detected capacity change from 0 to 32768 [ 710.000910][T10548] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 710.254146][T10548] overlayfs: failed to set xattr on upper [ 710.265266][T10548] overlayfs: ...falling back to index=off,metacopy=off. [ 710.272450][T10548] overlayfs: conflicting lowerdir path [ 711.009583][T10557] No such timeout policy "syz1" [ 714.227012][T10580] netlink: 'syz.2.1483': attribute type 10 has an invalid length. [ 715.679349][T10599] No such timeout policy "syz1" [ 716.000223][T10604] loop0: detected capacity change from 0 to 512 [ 717.179411][T10613] loop6: detected capacity change from 0 to 2048 [ 718.709916][T10621] netlink: 'syz.2.1496': attribute type 10 has an invalid length. [ 720.302203][T10644] No such timeout policy "syz1" [ 722.375178][T10640] loop0: detected capacity change from 0 to 32768 [ 722.395974][T10640] (syz.0.1502,10640,1):ocfs2_verify_volume:2350 ERROR: found superblock with incorrect block size: found 4096, should be 512 [ 722.414474][T10640] (syz.0.1502,10640,1):ocfs2_verify_volume:2388 ERROR: status = -22 [ 722.430781][T10640] (syz.0.1502,10640,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 722.449963][T10640] (syz.0.1502,10640,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 722.506985][T10652] loop6: detected capacity change from 0 to 32768 [ 722.607077][T10652] XFS (loop6): Mounting V5 Filesystem [ 722.693008][T10652] XFS (loop6): Ending clean mount [ 722.754966][T10675] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 722.913175][T10674] netlink: 'syz.3.1511': attribute type 29 has an invalid length. [ 722.921763][T10674] netlink: 'syz.3.1511': attribute type 29 has an invalid length. [ 723.084325][ T5487] XFS (loop6): Unmounting Filesystem [ 723.516185][T10683] loop0: detected capacity change from 0 to 8192 [ 725.500869][T10720] netlink: 'syz.3.1523': attribute type 29 has an invalid length. [ 725.509193][T10720] netlink: 'syz.3.1523': attribute type 29 has an invalid length. [ 726.910227][T10723] netlink: 'syz.6.1526': attribute type 10 has an invalid length. [ 730.230633][T10764] netlink: 'syz.6.1541': attribute type 10 has an invalid length. [ 730.547176][T10772] netlink: 'syz.0.1540': attribute type 29 has an invalid length. [ 730.555512][T10772] netlink: 'syz.0.1540': attribute type 29 has an invalid length. [ 732.639217][T10807] netlink: 'syz.7.1553': attribute type 10 has an invalid length. [ 732.859139][T10810] loop6: detected capacity change from 0 to 1024 [ 732.890645][T10810] hfsplus: request for non-existent node 65536 in B*Tree [ 732.924037][T10810] hfsplus: request for non-existent node 65536 in B*Tree [ 732.952246][T10810] hfsplus: failed to load root directory [ 733.342439][T10800] loop0: detected capacity change from 0 to 32768 [ 733.478138][T10800] XFS (loop0): Mounting V5 Filesystem [ 733.586151][T10832] netlink: 'syz.6.1558': attribute type 29 has an invalid length. [ 733.594572][T10832] netlink: 'syz.6.1558': attribute type 29 has an invalid length. [ 733.993067][T10800] XFS (loop0): Ending clean mount [ 734.290810][ T4270] XFS (loop0): Unmounting Filesystem [ 734.776160][T10844] loop6: detected capacity change from 0 to 512 [ 734.786490][T10844] EXT4-fs: Ignoring removed i_version option [ 735.011383][T10844] EXT4-fs (loop6): 1 truncate cleaned up [ 735.017528][T10844] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 735.465560][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 736.924686][T10857] netlink: 'syz.6.1566': attribute type 10 has an invalid length. [ 739.512376][T10885] netlink: 'syz.6.1572': attribute type 29 has an invalid length. [ 739.520941][T10885] netlink: 'syz.6.1572': attribute type 29 has an invalid length. [ 739.723452][ C1] hrtimer: interrupt took 57878 ns [ 741.315665][T10893] netlink: 'syz.2.1578': attribute type 10 has an invalid length. [ 741.708131][T10909] loop6: detected capacity change from 0 to 512 [ 741.919822][T10909] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 741.928295][T10909] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 741.941942][T10909] EXT4-fs (loop6): orphan cleanup on readonly fs [ 741.948879][T10909] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 741.958628][T10909] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 741.973554][T10909] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 742.011054][T10909] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1581: bg 0: block 40: padding at end of block bitmap is not set [ 742.028528][T10909] EXT4-fs (loop6): Remounting filesystem read-only [ 742.035232][T10909] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 742.048036][T10909] EXT4-fs (loop6): Remounting filesystem read-only [ 742.056457][T10909] EXT4-fs (loop6): 1 truncate cleaned up [ 742.062258][T10909] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 742.350470][T10909] EXT4-fs (loop6): unmounting filesystem. [ 744.233449][T10938] netlink: 'syz.6.1592': attribute type 29 has an invalid length. [ 744.247453][T10938] netlink: 'syz.6.1592': attribute type 29 has an invalid length. [ 744.815124][T10941] netlink: 'syz.7.1593': attribute type 10 has an invalid length. [ 745.344617][T10958] No such timeout policy "syz1" [ 746.330430][T10962] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 746.701246][T10971] netlink: 'syz.0.1605': attribute type 29 has an invalid length. [ 746.709760][T10971] netlink: 'syz.0.1605': attribute type 29 has an invalid length. [ 747.019717][T10980] netlink: 'syz.7.1609': attribute type 10 has an invalid length. [ 747.234369][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.242254][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.562329][T11002] No such timeout policy "syz1" [ 749.014119][T11006] loop0: detected capacity change from 0 to 512 [ 749.137938][T11006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 749.230394][T11015] netlink: 'syz.7.1620': attribute type 10 has an invalid length. [ 749.257678][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 749.465005][ T4279] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 749.475290][ T4279] CPU: 0 PID: 4279 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 749.482892][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 749.492995][ T4279] Workqueue: hci2 hci_rx_work [ 749.497927][ T4279] Call Trace: [ 749.501243][ T4279] [ 749.504217][ T4279] dump_stack_lvl+0x188/0x24e [ 749.509014][ T4279] ? show_regs_print_info+0x12/0x12 [ 749.514269][ T4279] ? load_image+0x400/0x400 [ 749.518860][ T4279] sysfs_create_dir_ns+0x26a/0x290 [ 749.524088][ T4279] ? sysfs_warn_dup+0xa0/0xa0 [ 749.528835][ T4279] ? do_raw_spin_unlock+0x11d/0x230 [ 749.534162][ T4279] kobject_add_internal+0x61c/0xcc0 [ 749.539440][ T4279] kobject_add+0x160/0x230 [ 749.543921][ T4279] ? kobject_init+0x1d0/0x1d0 [ 749.548648][ T4279] ? klist_children_get+0x50/0x50 [ 749.553779][ T4279] ? get_device_parent+0x121/0x3f0 [ 749.558996][ T4279] device_add+0x483/0xfb0 [ 749.563383][ T4279] ? kmem_cache_free+0xf7/0x290 [ 749.568372][ T4279] hci_conn_add_sysfs+0xd1/0x1e0 [ 749.573421][ T4279] le_conn_complete_evt+0x105f/0x1670 [ 749.578916][ T4279] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 749.585226][ T4279] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 749.591012][ T4279] ? skb_pull_data+0xf7/0x200 [ 749.595766][ T4279] hci_le_conn_complete_evt+0x183/0x440 [ 749.601380][ T4279] ? hci_remote_host_features_evt+0x270/0x270 [ 749.607515][ T4279] hci_event_packet+0x7b6/0x1280 [ 749.612863][ T4279] ? bis_list+0x280/0x280 [ 749.617231][ T4279] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 749.623170][ T4279] ? kcov_remote_start+0x4c7/0x7e0 [ 749.628405][ T4279] ? sync_thread_backup+0x1510/0x2090 [ 749.633838][ T4279] ? hci_send_to_monitor+0x9c/0x4a0 [ 749.639086][ T4279] hci_rx_work+0x3eb/0xd40 [ 749.643551][ T4279] ? _raw_spin_unlock+0x40/0x40 [ 749.648462][ T4279] ? process_one_work+0x7b0/0x1160 [ 749.653692][ T4279] process_one_work+0x8a2/0x1160 [ 749.658697][ T4279] ? worker_detach_from_pool+0x240/0x240 [ 749.664391][ T4279] ? _raw_spin_lock_irq+0xb7/0xf0 [ 749.669488][ T4279] ? _raw_spin_lock_irqsave+0x100/0x100 [ 749.675080][ T4279] ? kthread_data+0x4b/0xc0 [ 749.679712][ T4279] worker_thread+0xaa2/0x1270 [ 749.684478][ T4279] kthread+0x29d/0x330 [ 749.688583][ T4279] ? worker_clr_flags+0x1a0/0x1a0 [ 749.693669][ T4279] ? kthread_blkcg+0xd0/0xd0 [ 749.698346][ T4279] ret_from_fork+0x1f/0x30 [ 749.702967][ T4279] [ 749.723814][ T4279] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 749.741067][ T4279] Bluetooth: hci2: failed to register connection device [ 751.796111][T11054] netlink: 'syz.7.1634': attribute type 10 has an invalid length. [ 751.897481][T11057] No such timeout policy "syz1" [ 752.999111][T11062] loop0: detected capacity change from 0 to 512 [ 753.226212][T11062] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value [ 755.300298][T11092] loop6: detected capacity change from 0 to 512 [ 755.661017][T11092] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 756.155749][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 756.187596][T11098] netlink: 'syz.0.1646': attribute type 10 has an invalid length. [ 758.442123][T11111] No such timeout policy "syz1" [ 759.479035][T11135] loop0: detected capacity change from 0 to 512 [ 759.489507][T11135] EXT4-fs: Ignoring removed i_version option [ 759.761047][T11134] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1657'. [ 759.913489][T11135] EXT4-fs (loop0): 1 truncate cleaned up [ 759.919506][T11135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 760.304902][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 760.865254][T11149] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 760.894441][T11148] loop6: detected capacity change from 0 to 512 [ 761.023399][T11148] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 761.335777][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 761.920295][T11165] No such timeout policy "syz1" [ 764.108161][T11192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1672'. [ 764.319741][T11199] netlink: 'syz.6.1675': attribute type 10 has an invalid length. [ 764.731336][T11204] loop6: detected capacity change from 0 to 512 [ 764.757468][T11204] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 764.820946][ T5487] EXT4-fs (loop6): unmounting filesystem. [ 765.537268][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1678'. [ 766.128227][T11221] loop0: detected capacity change from 0 to 512 [ 766.325347][T11221] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1680: inode has both inline data and extents flags [ 766.412257][T11228] No such timeout policy "syz1" [ 767.149964][T11221] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1680: couldn't read orphan inode 15 (err -117) [ 767.200559][T11221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 767.399589][T11233] loop6: detected capacity change from 0 to 64 [ 768.038817][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 768.708791][T11245] No such timeout policy "syz1" [ 769.542685][T11248] netlink: 'syz.2.1687': attribute type 10 has an invalid length. [ 769.790634][T11252] loop0: detected capacity change from 0 to 512 [ 769.881728][T11252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 770.130341][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 770.375439][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1690'. [ 771.594815][T11268] delete_channel: no stack [ 771.686600][T11276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1697'. [ 771.754492][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 773.219462][T11293] netlink: 'syz.2.1700': attribute type 10 has an invalid length. [ 774.124990][T11295] loop0: detected capacity change from 0 to 512 [ 774.425536][T11295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 808.616748][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.623145][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.056736][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.063110][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.693601][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 879.700619][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10706/1:b..l [ 879.709442][ C1] (detected by 1, t=10503 jiffies, g=55529, q=105 ncpus=2) [ 879.716763][ C1] task:udevd state:R running task stack:24560 pid:10706 ppid:3638 flags:0x00004002 [ 879.729211][ C1] Call Trace: [ 879.732529][ C1] [ 879.735502][ C1] __schedule+0x11d1/0x40e0 [ 879.740074][ C1] ? mark_lock+0x94/0x320 [ 879.744506][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 879.750529][ C1] ? __sched_text_start+0x8/0x8 [ 879.755429][ C1] ? lock_chain_count+0x20/0x20 [ 879.760419][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 879.765750][ C1] preempt_schedule_irq+0xbb/0x160 [ 879.770922][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 879.776707][ C1] ? rcu_is_watching+0x11/0xa0 [ 879.781614][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 879.787557][ C1] irqentry_exit+0x63/0x70 [ 879.792016][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 879.798036][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 879.803384][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 879.823047][ C1] RSP: 0018:ffffc90003af7780 EFLAGS: 00000206 [ 879.829150][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f57acc8dc0a44500 [ 879.837164][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0de0 [ 879.845176][ C1] RBP: ffffc90003af78a0 R08: dffffc0000000000 R09: 1ffffffff215ea48 [ 879.853193][ C1] R10: dffffc0000000000 R11: fffffbfff215ea49 R12: 0000000000000001 [ 879.861210][ C1] R13: 1ffff9200075eefc R14: 0000000000000246 R15: dffffc0000000000 [ 879.869251][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 879.875288][ C1] ? read_lock_is_recursive+0x10/0x10 [ 879.880710][ C1] ? lock_chain_count+0x20/0x20 [ 879.885616][ C1] ? read_seqbegin+0x127/0x210 [ 879.890460][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 879.895701][ C1] ? __d_lookup+0x8b/0x7c0 [ 879.900154][ C1] __d_lookup+0xa8/0x7c0 [ 879.904428][ C1] ? __d_lookup+0x8b/0x7c0 [ 879.908880][ C1] ? rwsem_write_trylock+0x135/0x1c0 [ 879.914660][ C1] d_lookup+0x21/0x60 [ 879.918693][ C1] path_openat+0x905/0x2ee0 [ 879.923261][ C1] ? do_syscall_64+0x4c/0xa0 [ 879.927896][ C1] ? do_filp_open+0x430/0x430 [ 879.932631][ C1] do_filp_open+0x1f1/0x430 [ 879.937183][ C1] ? vfs_tmpfile+0x480/0x480 [ 879.941889][ C1] ? _raw_spin_unlock+0x24/0x40 [ 879.946783][ C1] ? alloc_fd+0x58f/0x630 [ 879.951237][ C1] do_sys_openat2+0x150/0x4b0 [ 879.956018][ C1] ? do_mkdirat+0x400/0x440 [ 879.960556][ C1] ? kmem_cache_free+0xf7/0x290 [ 879.965446][ C1] ? do_sys_open+0xe0/0xe0 [ 879.969914][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 879.976207][ C1] ? lock_chain_count+0x20/0x20 [ 879.981113][ C1] __x64_sys_openat+0x135/0x160 [ 879.986021][ C1] do_syscall_64+0x4c/0xa0 [ 879.990477][ C1] ? clear_bhb_loop+0x60/0xb0 [ 879.995513][ C1] ? clear_bhb_loop+0x60/0xb0 [ 880.000230][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.006166][ C1] RIP: 0033:0x7f87154a7407 [ 880.010624][ C1] RSP: 002b:00007fffd1174130 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 880.019084][ C1] RAX: ffffffffffffffda RBX: 00007f8715bb3880 RCX: 00007f87154a7407 [ 880.027098][ C1] RDX: 00000000000a0241 RSI: 00007fffd1174df0 RDI: ffffffffffffff9c [ 880.035106][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.043194][ C1] R10: 0000000000000124 R11: 0000000000000202 R12: 000055692f4afb40 [ 880.051209][ C1] R13: 00007fffd1174df0 R14: 00007fffd11749f0 R15: 00007fffd11745f0 [ 880.059236][ C1] [ 880.062288][ C1] rcu: rcu_preempt kthread starved for 9651 jiffies! g55529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 880.073430][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 880.083427][ C1] rcu: RCU grace-period kthread stack dump: [ 880.089436][ C1] task:rcu_preempt state:R running task stack:27736 pid:16 ppid:2 flags:0x00004000 [ 880.100262][ C1] Call Trace: [ 880.103683][ C1] [ 880.106652][ C1] __schedule+0x11d1/0x40e0 [ 880.111368][ C1] ? __sched_text_start+0x8/0x8 [ 880.116282][ C1] ? __mod_timer+0x91e/0xd00 [ 880.121005][ C1] schedule+0xb9/0x180 [ 880.125213][ C1] schedule_timeout+0x184/0x2d0 [ 880.130206][ C1] ? console_conditional_schedule+0x40/0x40 [ 880.136157][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 880.142095][ C1] ? update_process_times+0x1b0/0x1b0 [ 880.147519][ C1] ? prepare_to_swait_event+0x335/0x350 [ 880.153174][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 880.158076][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 880.164288][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 880.169102][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 880.174012][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 880.179258][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 880.184497][ C1] rcu_gp_kthread+0x99/0x3b0 [ 880.189134][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 880.194287][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 880.200218][ C1] ? __kthread_parkme+0x162/0x1c0 [ 880.205299][ C1] kthread+0x29d/0x330 [ 880.209495][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 880.214650][ C1] ? kthread_blkcg+0xd0/0xd0 [ 880.219276][ C1] ret_from_fork+0x1f/0x30 [ 880.223765][ C1] [ 880.226842][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 880.233207][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 880.240263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.250440][ C1] RIP: 0010:default_idle+0xb/0x10 [ 880.255526][ C1] Code: 48 89 df e8 27 c3 9c f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 0c 50 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 880.275211][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 880.281319][ C1] RAX: 5ba84207602dc800 RBX: ffffffff8a36a2b7 RCX: 5ba84207602dc800 [ 880.289324][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 880.297332][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 880.305340][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 1ffff9200002efc8 [ 880.313379][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 0000000000000001 [ 880.321401][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 880.330381][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.336999][ C1] CR2: 00007ffe6eb7cec0 CR3: 000000007e16f000 CR4: 00000000003506e0 [ 880.345095][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 880.353114][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 880.361123][ C1] Call Trace: [ 880.364434][ C1] [ 880.367398][ C1] default_idle_call+0x84/0xc0 [ 880.372222][ C1] do_idle+0x20d/0x5a0 [ 880.376341][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 880.381590][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 880.387817][ C1] ? schedule_idle+0x57/0x90 [ 880.392546][ C1] cpu_startup_entry+0x3f/0x60 [ 880.397361][ C1] start_secondary+0xe4/0xf0 [ 880.402090][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 880.408036][ C1]