last executing test programs: 6m47.134612705s ago: executing program 3 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x5) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) 6m43.522427024s ago: executing program 3 (id=173): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r1 = socket(0x25, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x9, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x2000c001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000480), &(0x7f0000000140)=0x8) 6m41.186237412s ago: executing program 3 (id=176): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000300)={0x50, 0x0, 0x36b, {0x7, 0x2b, 0x10000007, 0x80000, 0xc, 0xfb, 0x3, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0xf500}}, 0x30) 6m39.616505416s ago: executing program 3 (id=178): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4, &(0x7f00000001c0)={[{@gid}, {@unhide}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@gid}, {@adinicb}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0xff, 0xc53, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 6m39.187984633s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff0, 0x4800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 6m38.074416222s ago: executing program 3 (id=184): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r1 = socket(0x25, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x9, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x2000c001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000480), &(0x7f0000000140)=0x8) 6m36.701457864s ago: executing program 32 (id=184): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r1 = socket(0x25, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x9, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x2000c001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000480), &(0x7f0000000140)=0x8) 9.268844491s ago: executing program 2 (id=1280): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x20) 8.263043537s ago: executing program 2 (id=1282): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x8}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) dup3(r1, r5, 0x0) 7.323417432s ago: executing program 2 (id=1284): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0xf, 0xce, [@broadcast, @multicast1, @empty]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 6.073827532s ago: executing program 2 (id=1288): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000017000/0x4000)=nil, 0x4000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000340)=0x0) r4 = socket$inet(0x2, 0x40240a2532b017f9, 0x9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x3c, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_submit(r0, r3, &(0x7f0000000b80)=@IORING_OP_SENDMSG={0x9, 0xd, 0x0, r4, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @remote}, 0x1, 0x1, 0x4, 0x3}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000007c0)="ab648c5a1d168da63e3ca9fccc2a181c93e63bff3b645541c07e5f1ba9ae1286a52e55a2fa4c7df7e115c0e99438c9d4b813bb1cbab2c39239ae5a2211ceaabfb9fe0f9ecc054266e99f720cffab8c2db24d2246bda48a4434df1f6af6450f271265531a795dc4bfc493a2c0a5be23b9cdf3652027dd0c766bbde5ff76be8395bf03e1eef75ba27d1dc7", 0x8a}, {0x0}, {&(0x7f0000000940)="f7c646909c1a71846a9f121a177225646b06727451dacc3aa3e64d1c035117a464bf2a8d35f3b7d946bfb3f2a2151c2e0ba6b1468f1b229e44f665994e06590a9db5a89d8aa2726b474f09312e62904b4584b2c2284ef60fede4513e8211d72790d28430981ea71b1c4cd566fbc170b205a2c5205ebaad460e772f6de5b72a7af987df85730e0cc85e06dea58f849f53212ef01f0953b16ffd99fd6b0201de16b0f27c46b4c441abc6a68d07bfe62e5f5ebe9c579309d1a7acac2422e766e5c52300b59ad95dedf910e36843eb0952b6da0fb98986de0dc898ef9b453c5ebf1b804972d45bfa6a8f0e43b0", 0xeb}], 0x3, &(0x7f0000000a80)=[{0x88, 0x102, 0xb, "5d1c1c0df4e45e872c763969b33da15f4acf331d0544b40395f37597c81cb67d373fd9c09c4e072e13efb19dca299ec1c2edfa3f6b5eeb5bcb6f08e10d13931bd70a495c1b29b8b60b3ea1ac32b04583330f961a317226309be49dc506c8ac08cd694dd711a2d2ebb20764239b7406cffa1127164aa0fc"}], 0x88}, 0x0, 0x800}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5e, &(0x7f0000000780)={&(0x7f0000002740)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xc, 0xd}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000200)="c30663", 0x3, 0x0, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r9, 0xda90) accept4(r9, 0x0, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f00000006c0)={0x10003, 0x200, 0x140, &(0x7f00000002c0)=[0x7, 0xe73, 0x6, 0x7, 0x4, 0x9, 0xfff, 0x6, 0x8, 0x7fff, 0x3, 0xffffffff, 0x33, 0x80, 0x1, 0x5, 0x1, 0x0, 0x2, 0x2, 0x1, 0x401, 0x8, 0x8000, 0x80000001, 0x3, 0x7, 0x3, 0x1, 0x1, 0x15a4a0000000000, 0x3, 0x6, 0x3, 0x2, 0x9, 0x9, 0xffffffff, 0xff, 0x8, 0x41, 0x3, 0x200, 0x2, 0x3, 0x1, 0x4, 0x39489499, 0x8, 0xffffffffffffff81, 0x7, 0x400, 0x6, 0x7, 0x7, 0x8, 0x1, 0x1, 0x6, 0x7, 0xfffffffffffffffa, 0x1b, 0x2c3, 0xfff, 0x6, 0x8001, 0x1, 0x100000001, 0x2ea, 0x8000000000000001, 0x3, 0x8, 0x83, 0x6, 0x8, 0x10000, 0x3, 0x37, 0x4, 0x5, 0x1d, 0x6f, 0x5fc, 0x732, 0x0, 0x7, 0x9, 0x2, 0x0, 0x3, 0x3, 0x3, 0x40000, 0x8, 0x0, 0x8, 0x43a9, 0x1, 0x100000001, 0x6a, 0x6, 0x51d, 0xb, 0x8, 0x6, 0x3c, 0xe, 0x6, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x8, 0x4f9, 0xff, 0x9, 0x1, 0x8, 0x8, 0x2, 0x40, 0x8b1e, 0x100, 0xfffffffffffffffd, 0x8, 0xffffffffffff0d76, 0x8, 0xf, 0x40]}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b901010040b8e0e7265eba000000000f30b93f0300000f32c4e1ffe669fe0f01c2360f225bc4e2112c17b9ef0b00000f320f015b46b9800000c00f3235004000000f30c4e219cf97f9000000", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)={0x2000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.947340844s ago: executing program 1 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f0000000440)={{}, {0x77359400}}, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) timer_create(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030102000000000000000000000000090002000000004702000000080003400000000008"], 0x30}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8044}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) faccessat(0xffffffffffffffff, 0x0, 0x4) 5.946537474s ago: executing program 4 (id=1290): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x20) 5.664774339s ago: executing program 4 (id=1292): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x8}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) dup3(r1, r5, 0x0) 4.728608804s ago: executing program 1 (id=1293): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sysinfo(&(0x7f0000000000)=""/196) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 4.551865146s ago: executing program 1 (id=1295): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) pread64(r1, 0x0, 0x0, 0x4eb) 4.422969949s ago: executing program 1 (id=1296): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x808, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$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") socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x2787bf88466864e, 0x8000) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x40, 0x0, 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) 3.70747903s ago: executing program 2 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e92, &(0x7f0000018400)="$eJzs3U1vHVf9B/DfffD1Q/9No+qvKkQs3BRKS2nzHChPTVl0AQuQUNckct0qkAJKAqJVRFxlgdgALwE23bDoW+AF9DUgXgCRbFZdUAaNfU4yHl/nOiS+c6/P5yM5M785d3zP5Ovx3OuZuScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPj+Wz8+24uIK79OC45H/F8MIvoRy3W9GvXM5fz4YUSciO3meC4iBosR9frb/zwTcSEiPj0Wsbl1e61efO6A/bh45taNz3/wvb//7o93T/z0nZ983G7/0f+f/+T3dyKO//D1Tz6/82S2HQAAAEpRVVXVS2/zT6b39/2uOwUATEU+/ldJXq5Wq9XqJ1r/oT9b/VEXWjdV491pFhGx0Vynfs3gdDwAzJmN+KzrLtAh+RdtGBFPdd0JYKb1uu4Ah2Jz6/ZaL+Xbax4PVnfa898pd+W/0bt/f8d+00na15hM6+frbgzi2X36szylPsySnH+/nf+VnfZRetxh5z8t++U/2rn1qTg5/0E7/5Zd+f8pIuY2//7Y/EuV8x8+Sv4bgzne/+UPAAAAAMDRl//+f7zj87+Lj78pB/Kw87+rU+oDAAAAAAAAADxpjzv+333G/wMAAICZVb9Xr/352INl+30WW7387V7E063HA4VZbXw4IAAAAAAAAAAAAAAwHcOIlXRd/0JEPL2yUlVV/dXUrh/V464/70rffihZ17/kAQBgx6fHWvfy9yKWIuLt9Fl/CysrK1W1tLxSrVTLi/n17GhxqVpuvK/N03rZ4ugAL4iHo6r+ZkuN9ZomvV+e1N7+fvVzjarBATo2HR0GDgARsXM02nREOmKq6pno+lUO88H+f/TY/zmIrn9OAQAAgMNXVVXVSx/nfTKd8+933SkAYCry8b99XkCtVqvVavXRq5uq8e40i4jYaK5Tv2YwHD8AzJmN+KzrLtAh+RdtGBEnuu4EMNN6XXeAQ7G5dXutl/LtNY8Hqzvt+VqQXflv9LbXy+uPm07SvsZkWj9fd2MQz+7Tn+em1IdZkvPvt/O/stOeh/g/7PynZb/86+083kF/upbzH7Tzbzk6+ffH5l+qnP/wkfIfyB8AAAAAAGZY/vv/ced/8yYDAAAAAAAAwNzZ3Lq9lu97zef/vzjmcb3mnPs/j4ycf+/A+bv/9yjJ+ffb+bcuyBk05u+9+SD/f23dXvv41j+/kKczn//CYFQ/90KvPxima36qhXfjWlyP9Tiz5/HDXe1n97Qv7Go/N6H9/J72Ud2+vN3+Vl2vxS/ierxzv31xwoVRSxPaqwntOf+B/b9IOf9h46vOfyW191rT2r2P+nv2++Z03PNc/uu/X9y7d03f3Rjc37amevtOddCf7f+Tp0bxq5vrN177zdVbt26cjTTZtfRcpMkTlvNfSF85/5de2GnPv/eb++u9j0aPnP+suBvDffN/oTFfb+/LU+5bF3L+o/SV889HoPH7/zznv//+/0oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5erp1Usz1h+1Wq1WH926qRrvjWYREX9rrlO/ZvjtuG8GAMyy/0TEP7ruBJ2Rf8Hy5/3V0y913Rlgqm5+8OHPrl6/vn7jZtc9AQAAAAAAAAD+V3n8z9XG+M/b1wG1xo3eNf7rm7E6t+N/9keD7bHO0wY9Hw8f//tUPHz87+GE51uY0D6a0L44oX1pQvvYGz0acv7Pp4xz/ifThpU0/utLHfSnazn/U2ms55z/V1qPa+Zf/WWe8+/vyv/0rfd/efrmBx++eu39q++tv7f+87NnLl04f/HC+YsXT7977fr6mZ1/O+zx4cr557GvXQdalpx/zlz+Zcn5fznV8i9Lzv/FVMu/LDn//HpP/mXJ+ef3PvIvS87/5VTLvyw5/6+mWv5lyfm/kmr5lyXn/7VUy78sOf9XUy3/suT8X0u1/MuS8z+davmXJeefz3DJvyw5/3xlg/zLkvM/l2r5lyXnfz7V8i9Lzv9CquVflpz/xVTLvyw5/0upln9Zcv5fT7X8y5Lz/0aq5V+WnP/rqZZ/WXL+30y1/MuS8/9WquVflpz/t1Mt/7Lk/L+TavmXJef/3VTLvyw5/zdSLf+yPPj8fzNmzJjJM13/ZgIAAAAAAAAAAAAA2qZxOXHX2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/JcdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkKu/7gZ+92WtDgv+BcIsDtrkZWNhd38AhBpOE/CnphZKQNi2pcbxrs4lv9e5yEyqbQluiIBWpVUVfNE2iNIrUVqAqaqlEIqRGat81rxrxJmqlvPALqByUVEoV2OrMPM+zM7Ozc9aXsWfO+XyQ/fPunJl55syZ2fku+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Gjzx6f/ZCDLsvxP7a8NWXZx/u912d78y4VdF3qFAAAAwNl6t/b3312SvrF3FWdq2OZfr/n37y4uLi5mX3jn5Ht/triYTtiUZUNrs6x2WvRvv/j5YuM2wXPZ6MBgw9eDBVc/VHD6cMHpIwWnryk4fW3B6aMFpy/bAcusq/8+pnZh19f+uaG+S7PLspHaade3OddzA2sHB+PvcmoGaudZHDmYzWSHs+lsYtl5Bmr/Zdnrm/Pruj+L1zXYcF0bsyw79dNnDsQ1DIR9fH3WdGU1jffd2/dmm9756TMHvj331lXtZuFuWLbSLNu6JV/n81m29OuqbCBbm/ZJXOdgwzo3tlnnUNM6B2rny//dus5Tq1xnvN2jYZ0/7LDOjeF7T16XZdlCtuI2rZ7LBrP1Ldea9vdo/YjILyO/Kz+QDZ/WcbJ5FcdJfp6fXNd8nLQek3H/bw77ZHiFNTTeHW9/ec2y/X6mx0l+q3vhWM0v+8H8SkdHG3+12nSs5ts8c8PKx0Db+67NMZCO5YZjYEvRMTC4Zqh2DAwurXlL0zEwuew8g9lA7bpO3tD5GBifO3J8fPapp2+bObL/0PSh6aOTE7t2bN+5Y/vOneMHZw5PT9T/Pr1d2kfWZ4PpGNwSnmviMXhTy7aNh+TiN87d42C0Rx4H+W3/zI35gi4ezFY4xvNtnt969o+D9HO/4XEw3PA4aPuc2uZxMLyKx0G+zamtq/uZOdzwp90auvVcuKHhGLiQPw/z63zk5pWfCzeGdb1wy+n+PBxadgzEmzUQHnv5d9LrvdE7w35ZflxcnZ9w0Zpsfnb6xO1P7p+bOzGZhXFeXNpwX7UeL+sbblO27HgZPO3jZe/f/vLGq9t8f0PYV6O3dr6v8m12jHW+r2rP7u33Z9N3t2VhnGPne3+2+2mW78+UJTrsz3yb5287+9eCKZc0PP+NFD3/DY0M15//htLeGGl6/lt+1wzVVpZlp25b3fPfSPhzvp//LuuR5798Xz1ye+djIN/mhfHTPQaGOz7/XRfmQFjPzSExjDbk/vdqpy/UD9OG+7LwuBkeHgnHzXC8xubjZvuy8+SXll/31okzO262Xtd8XzW9binhcZPvqz+f6Hzc5Nu8MXn2zx3r4j8bnjvWFB0DI0Nr8vWOpIOg/ny3uC4eA7dnB7Jj2eFsKp0nv5fz6xrbtrpjYE34c76fO67skWMg31cvb+t8DOTb/GD7uX3ttDV8J23T8Nqp9fcLK2X+q4eXLq91t53rzJ+v8xM7Ov9uKN/mrR2nmzM676dbw3cuarOfWh8/Kx3TU9n52U9XhnUe3tn5d1P5NpftWuXxtDfLsjcn36z9viv8fvcf5v/ju02/9233O+U3J998YPyhH53O+gEAOHPv1f5eWFN/rdnwf6xX8///AQAAgL4Qc/9gmIn8DwAAAKURc/9QmIn8DwAAAKURc/9wmElF8v9jd+5+5d1ns/RugItBPD3uhgfvrm8XO94L4etNi0vy73/sWyOvfOXZ1V33YJZlv3zgQ223f+zuuK6643GdH2n+/jJXXruq63/04aXtGt8/4dTu+uXH27PawyB2lV8f31a73E1PTdbmGw9ktfnQwgvP1S+//nXc/uT2+vZ/Fd60ZO/Bgabzbw3ruT7MTeE9ZR7cu7Qf8hnP98rGa/7l0s8uXV8838CW99du5st/UL/c+B5RL11a3z7e7pXW/72vfueVfPsnb2i//mcH26//ZLjcn4T5iz317Rv3+Vca1v9HYf3x+uL5bv/m99uu/9Ur6tu/Go6Lr4fZuv57//TD77a7v+L17L2rfr54/RP/s6N2vnh58fJb1z/67GTT/mi9/DfeqV/Onsd/NtS4ffx+vJ7o0buaj++BcP829cizLPvOH2dN+zn7aP18/9yy/nh5x+9qv/5bW9Z5fODa2vmXbs+Gptv1tb/Z1vb2xvXs/fsNTbfnpfvC/ntn/Af55Z58KByP4fT//WH98lrfy/TV+5qfb+L2X99Qf9zGyxtvWf9LLetfuDbfd8Xrv/+d+vpfvWdt0/r3fjIcT/fXZ9H6D/31JU3n/8a36/fHiSfGjh6bnZ+ZatirjY/jtaPr1l908fvef0l4Lm39et+xucemT2ya2DSRZZv68C0Du73+b4b53/WxcO6voe5HP6sfdy9+qv5z66af179+KXz/0XB/xp+PX/vLkabjtfV+X7inPs92/beEdazWFV/9r2tXteHJz78+/09/+Fbr64J4e45/cLR2+17efHnttIE36qe3Pl8V+c8PNj+ufzw8UZuvhf26GN6Zecvl9etrvfz43iQvfrr++I2v5OL5s5b3E9kw1Hw7znb9Pw6vY75/ZfPzXzw+Xnu25d2cN2QD+RIWwvNDtlA/PW4V9/eLpy5ve33xfXiyhatOZ5krmn1qdvzwzNH5J8fnpmfnxmefenrfkWPzR+f21d67dN8Xi86/9PheX3t8T03v2pHVHu3H6qPLLvT6jz98YOqOiRunpg/unz849/Dx6ROHDszOHpiemr1x/8GD008UnX9mas/ktt3b79g2dmhmas+du3dv3z02c/RYvoz6ogrsmvjS2NET+2pnmd2zY/fkzp07JsaOHJua3nPHxMTYfNH5az+bxvJzPz52Yvrw/rmZI9NjszNPT++Z3L1r17bCd388cvzg7KbxE/NHx+dnp0+M12/Lprnat/OffUXnpxpmj4XnuxYD4dX5527dld4fN/etL694UfVNml+eZm+H94KKP9+Kvo65fyTMpCL5HwAAAKog5v7wxv9LJ8j/AAAAUBox968NM5H/AQAAoDRi7h8NM6lI/tf/1//X/1+h//+P39P/1//X/z8H9P/1/zvR/9f/7+f16//r/1Os1/r/Mfevy7JK5n8AAACogpj714eZyP8AAABQGjH3XxRmIv8DAABAacTcf3GYSTXy/0jrP/X/9f/1/xs//z9uq/+f6f/r/58h/X/9/070/0vc/39v8Jys8YKtvz/7/+v0/+k1vdb/j7n/fWEm1cj/AAAAUAkx978/zET+BwAAgNKIuf+SMBP5HwAAAEoj5v4NYSYVyf8+/1//X/+/U//f5/830v/X/z8T+v/6/53o/5e4/+/z/33+P/Rg/z/m/v8XZlKR/A8AAABVEHP/B8JM5H8AAAAojZj7Lw0zkf8BAACgNGLuvyzMpCL5X/9f/1//X/9f/1//v5v0//X/O9H/1//v5/Xr/+v/U6zX+v8x938wzKQi+R8AAACqIOb+y8NM5H8AAAAojZj7rwgzkf8BAACgNGLuvzLMpCL5X/9f/1//X/9f/1//v5v0//X/O9H/1//v5/Xr/+v/U6zX+v8x918VZlKR/A8AAABVEHP/1WEm8j8AAACURsz9Hwozkf8BAACgNGLu3xhmUpH8r/+v/6//r/+v/6//30391f8fXPEU/f86/f9m+v/6/+es/5+/FNf/p4R6rf8fc/+Hw0wqkv8BAACgCmLuvybMRP4HAACA0oi5/9owE/kfAAAASiPm/k1hJhXJ//r/+v/6/73c/6/f0mr2/1/7i9b9qf+v/9+Oz//X/8/0/8/Yhe7P9/v6ff6//j/Feq3/H3P/5jCTiuR/AAAAqIKY+7eEmcj/AAAAUBox918XZiL/AwAAQGnE3H99mElF8r/+v/6//n8v9/99/n+m/6//X0D/X/8/0/8/Yxe6P9/v69f/X13/f03RBVFq57H/P5ytov8fc/8NYSYVyf8AAABQBTH33xhmIv8DAABAacTcf1OYifwPAAAApRFz/9Ywk4rkf/1//X/9f/1//X/9/27S/9f/70T/X/+/n9ev/+/z/ynWa5//H3P/zWEmFcn/AAAAUAUx998SZiL/AwAAQGnE3H9rmIn8DwAAAKURc/9YmElF8r/+v/6//r/+v/6//n83lbX/n55H9f/1//X/9f/1//X/WVGv9f9j7r8tzKQi+R8AAACqIOb+28NM5H8AAAAojZj7x8NM5H8AAAAojZj7J8JMKpL/9f/1//X/9f/1//X/u6ms/X+f/6//n+n/6//r/+v/U6jX+v8x90+GmVQk/wMAAEAVxNy/LcxE/gcAAIDSiLl/e5iJ/A8AAAClEXP/jjCTiuR//X/9f/1//X/9f/3/btL/1//vRP9f/7+f16//r/9Ps8E23+u1/n/M/TvDTCqS/wEAAKAKYu7fFWYi/wMAAEBpxNx/R5iJ/A8AAAClEXP/nWEmFcn/+v/6//r/+v/6//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5f3eYSUXyPwAAAFRBzP0fCTOR/wEAAKA0Yu6/K8xE/gcAAIC+0u5zCKOY+z8aZlKR/K//X/b+/+Ja/X/9f/3/zuvX/+8u/X/9/070//X/+3n9+v/6/xTrtf5/zP17wkwqkv8BAACgCmLuvzvMRP4HAACA0oi5/54wE/kfAAAASiPm/r1hJhXJ//r/Ze//+/x//X/9/6L16/93l/6//n8n+v/92f8PL1v0/3uo/58fQ/r/9KJe6//H3H9vmElF8j8AAABUQcz9Hwszkf8BAACgNGLu/3iYifwPAAAApRFz/yfCTCqS//X/9f/1//X/9f/1/7tJ/1//vxP9//7s/0f6/73T//f5//SqXuv/x9x/X5hJRfI/AAAAVEHM/Z8MM5H/AQAAoDRi7v//YSbyPwAAAJRGzP33h5lUJP/r/+v/6//r/+v/6/93k/6//n8n+v/6//28fv1//X+K9Vr/P+b+XwkzqUj+BwAAgCqIuf+BMBP5HwAAAEoj5v5PhZnI/wAAAFAaMff/aphJRfK//v/56f8PpsvX/9f/1//X/9f/P5f0//X/M/3/M3ah+/P9vn79f/1/ivVa/z/m/l8LM6lI/gcAAIAqiLn/18NM5H8AAAAojZj7fyPMRP4HAACA0oi5/8Ewk4rkf/1/n/+v/6//r/+v/99N+v/6/53o/+v/9/P69f/1/ynWa/3/mPt/M8ykIvkfAAAAqiDm/ofCTOR/AAAAKI2Y+z8dZiL/AwAAQGnE3P+ZMJOK5H/9f/1//X/9f/1//f9u0v/X/+9E/1//v5/Xr/+v/0+xXuv/x9z/cJhJRfI/AAAAVEHM/Z8NM5H/AQAAoDRi7v+tMBP5HwAAAEoj5v7fDjOpSP7X/9f/1//X/9f/1//vJv3/5f3//DnsQvb/16xmQ/3/VdH/1//X/9f/p7Ne6//H3P+5MJOK5H8AAACogpj7fyfMRP4HAACA0oi5/3fDTOR/AAAAKI2Y+x8JM6lI/tf/1//X/9f/1//vdv//Df1//X+f/78C/X/9/35ev/6//j/Feq3/H3P/58NMKpL/AQAAoApi7v+9MBP5HwAAAEoj5v59YSbyPwAAAJRGzP2PhplUJP/r/+v/X7D+fziP/v/S+fT/w/1auv6/z//X/9f/X4n+v/5/P69f/1//n2K91v+PuX9/mElF8j8AAABUQcz9Xwgzkf8BAACgNGLuPxBmIv8DAABAacTcPxVmUpH8r/+v/+/z//X/9f/1/7tJ/1//vxP9f/3/fl6//r/+P8V6rf8fc/90mElF8j8AAABUQcz9B8NM5H8AAAAojZj7D4WZyP8AAABQGjH3PxZmUpH8r/+v/6//r/+v/6//3036//r/nej/6//38/r1//X/KdZr/f+Y+2fCTCqS/wEAAKAKYu7/YpiJ/A8AAAClEXP/l8JM5H8AAAAojZj7D4eZVCT/6//r/+v/6/+36//XD0n9f/3/s6f/r//fif6//n8/r1//X/+fYr3W/4+5/0iYSUXyPwAAAFRBzP1Hw0zkfwAAACiNmPuPhZnI/wAAAFAaMfcfDzOpSP7X/9f/1//X//f5//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5//fDTCqS/wEAAKAKYu4/EWYi/wMAAEBpxNw/G2Yi/wMAAEBpxNw/F2ZSmP/XdXFV54/+v/6//r/+v/6//n836f/r/3ei/6//38/r1//X/6dYr/X/Y+6fDzPx//8BAACgNGLufzzMRP4HAACA0oi5/4kwE/kfAID/Y++udwW7qjiO35a0JSGEZ+EJeASegbfA3Yq7u7u7u7u7OxSKa1ICd601ZTrdZ+xw99nr8/lnBTrt7Mz965fJNweAZeTuv2fc0mT/6//1//r/afr/085P/6//1/9fEv2//v9E/3/ZzrqfP/r79f/6f7bN1v/n7r9X3NJk/wMAAEAHufvvHbfY/wAAALCM3P33iVvsfwAAAFhG7v77xi1N9r/+X/+v/5+m//f9//y56v/1/5dA/6//P9H/X7az7ueP/n79v/6fbbP1/7n77xe3NNn/AAAA0EHu/vvHLfY/AAAALCN3/wPiFvsfAAAAlpG7/4FxS5P9r//X/+v/9f/6f/3/nvT/+v8R/b/+/8jv1//r/9k2W/+fu/9BcUuT/Q8AAAAd5O5/cNxi/wMAAMAycvc/JG6x/wEAAGAZufsfGrc02f/6f/2//l//r//X/+9J/6//H9H/6/+P/H79v/6fbbP1/7n7Hxa3NNn/AAAA0EHu/ofHLfY/AAAALCN3/yPiFvsfAAAAlpG7/5FxS5P9r//X/+v/9f/6f/3/nvT/+v8R/b/+/8jv1//r/9m2e/9/9xv/ey+2/8/df2Pc0mT/AwAAQAe5+x8Vt9j/AAAAsIzc/Y+OW+x/AAAAWEbu/sfELU32v/5f/3+u/7/lGv2//l//f+7/1/9fHfp//f+I/n/W/v/i/iT0//p//T9bdu//N3r/8/937v7Hxi1N9j8AAAB0kLv/cXGL/Q8AAADLyN3/+LjF/gcAAIBl5O5/QtzSZP/r//X/vv+v/9f/6//3pP/X/4/o/2ft/33//0r7/7tdxPv1/3QwW/+fu/+JcUuT/Q8AAAAd5O5/Utxi/wMAAMAycvc/OW6x/wEAAGAZufufErc02f/6f/2//l//r//X/+9J/6//H9H/6/+P/H7f/9f/s222/j93/1Pjlib7HwAAADrI3f+0uMX+BwAAgGXk7n963GL/AwAAwDJy9z8jbmmy//X/+n/9v/7/ivr/O+j/9f9j+n/9/4j+X/9/5PdfYv9/w/n/vv6fDmbr/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAWEbu/mfHLfY/AAAALCN3/3Pilib7X/+v/9f/6/99/1//vyf9/3L9/zX6/3P0//p/3//X/zM2W/+fu/+5cUuT/Q8AAAAd5O5/Xtxi/wMAAMAycvc/P26x/wEAAGAZuftfELc02f/6f/2//l//r//X/+9J/79c/+/7/7ei/9f/6//1/4zN1v/n7n9h3NJk/wMAAEAHuftfFLfY/wAAALCM3P0vjlvsfwAAAFhG7v6XxC1N9v+U/f91+v9j9P/Xn5yc6P/1//p//f+Y/l//P6L/v3D/f8fb+f30/3O9X/+v/2fbbP1/7v6Xxi1N9j8AAAB0kLv/ZXGL/Q8AAADLyN3/8rjF/gcAAIBl5O5/RdzSZP/fXv9/851O/7nv/1+cnv2/7//r///3Pfp//f+F6P/1/yP6f9//P/L79f/6f7bN1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAALCM3P2vjlvsfwAAAFhG7v7XxC1N9v+U3//X/+v/9f/139H/6//1/2P6f/3/if7/sp11P3/09+v/9f9sm63/z93/2rilyf4HAACADnL3vy5usf8BAABgGbn7Xx+32P8AAACwjNz9b4hbmux//b/+/8z7/2v1/0n/Hz9X/b/+/xLo//X/J/r/y3bW/fzR36//1/+zbbb+P3f/G+OWJvsfAAAAOsjd/6a4xf4HAACAZeTuf3PcYv8DAADAMnL3vyVuabL/9f/6/zPv/33/v+j/4+e6Q///nz9D/f/Z0P/r/0f0//r/I79f/6//Z9ts/X/u/rfGLU32PwAAAHSQu/9tcYv9DwAAAMvI3f/2uMX+BwAAgGXk7n9H3NJk/+v/9f/6f/1/h/5/9H79/770//r/Ef2//v/I79f/6//ZNlv/n7v/nXFLk/0PAAAAHeTuf1fcYv8DAADAMnL3vztusf8BAABgGbn73xO3NNn/+v+j9//3uCleoP/X/+v/9f9T0v/r/0f0//r/I79f/6//Z9ts/X/u/vfGLU32PwAAAHSQu/99cYv9DwAAAMvI3f/+uMX+BwAAgGXk7v9A3NJk//fo/6+7zS9bp//3/X/9v/5f/z83/b/+f0T/r/8/8vv1//p/ts3W/+fu/2Dc0mT/AwAAQAe5+z8Ut9j/AAAAsIzc/R+OW+x/AAAAWEbu/o/ELU32f4/+/7b0/6euev9/y130//r/ov/X/5/o//X/G/T/+v8jv1//r/9n22z9f+7+j8YtTfY/AAAAdJC7/2Nxi/0PAAAAy8jd//G4xf4HAACAZeTu/0TccNc7n92T/q/0//p/3//X/+v/9f970v/r/0f0//r/I79f/6//Z9ts/X/u/k/GLf7+HwAAAJaRu/9TcYv9DwAAAMvI3f/puMX+BwAAgGXk7v9M3NJk/+v/9f/6/2P3/9fq//X/k9P/6/9H9P/6/yO/X/+v/2fbbP1/7v7Pxi1N9j8AAAB0kLv/c3GL/Q8AAADLyN3/+bjF/gcAAIBl5O7/QtzSZP/r//X/+v9j9/++/6//n53+X/8/ov/X/x/5/fp//T/bZuv/c/d/MW5psv8BAACgg9z9X4pb7H8AAABYRu7+L8ct9j8AAAAsI3f/V+KWJvtf/6//1//r//X/+v896f/1/yP6f/3/kd+v/9f/s222/j93/1fjlib7HwAAADrI3f+1uMX+BwAAgGXk7v963GL/AwAAwDJy938jbmmy/1fu/0e/TP9/Sv+v/z/R/+v/d6b/1/+P6P/1/0d+v/5f/8+22fr/3P3fjFua7H8AAADoIHf/t+IW+x8AAACWkbv/23GL/Q8AAADLyN3/nbilyf5fuf8f0f+f0v/r/0/0//r/nen/9f8j+n/9/5Hfr//X/7Nttv4/d/9345Ym+x8AAAA6yN3/vbjF/gcAAIBl5O7/ftxi/wMAAMAycvf/IG5psv/1//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/zBuabL/AQAAoIPc/T+KW+x/AAAAWEbu/h/HLfY/AAAALCN3/0/ilib7X/+v/9f/6//1//r/Pen/9f8j+n/9/5Hfr//X/7Nttv4/d/9P45Ym+x8AAAA6yN3/s7jF/gcAAIBl5O7/edxi/wMAAMAycvf/Im5psv/1//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/zJuabL/AQAAoIPc/b+KW+x/AAAAWEbu/l/HLfY/AAAALCN3/2/ilib7X/+v/9f/6/8b9v/X3/r30//vS/+v/x/R/+v/j/x+/b/+n21Xrf/PX3CF/X/u/pvilib7HwAAADrI3f/buMX+BwAAgGXk7v9d3GL/AwAAwDJy998ctzTZ//p//f+S/f8N+n/9v+//z0L/r/8f0f/r/4/8fv2//p9ts33/P3f/7+OWJvsfAAAAOsjd/4e4xf4HAACAZeTu/2PcYv8DAADAMnL3/yluabL/9f/6/yX7f9//1//r/6eh/9f/j+j/9f9Hfr/+X//Pttn6/9z9f45bmux/AAAA6CB3/1/iFvsfAAAAlpG7/69xi/0PAAAAy8jd/7e45cL7//xs9PD0//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/z1u8ff/AAAAsIzc/f+IW+x/AAAAWEbu/n/GLfY/AAAALCN3/7/ilib7X/+v/9f/6//1//r/Pen/9f8j+n/9/5Hfr//X/7Nttv4/d/+/AwAA//+foDTn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1eda02, 0x39) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) syz_usb_connect(0x3, 0xfffffd4e, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 3.381791275s ago: executing program 4 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x2040400) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x2000, 0x6, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xfffffffd}) r5 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0x80086e1, 0x2, 0x8, 0x1}, 0x0, &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)=""/43, 0x2b}], 0x1) 3.254192618s ago: executing program 1 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f0000000440)={{}, {0x77359400}}, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) timer_create(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030102000000000000000000000000090002000000004702000000080003400000000008"], 0x30}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8044}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) faccessat(0xffffffffffffffff, 0x0, 0x4) 3.022175061s ago: executing program 0 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') utime(0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r5 = syz_open_dev$cec(0x0, 0x0, 0xa0000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r5, 0x1, {0x6, 0x6d4}, 0xf2}, 0x1) 2.320612943s ago: executing program 4 (id=1303): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sysinfo(&(0x7f0000000000)=""/196) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 2.114359596s ago: executing program 0 (id=1304): keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100, 0x0, 0xfc}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) 2.100358096s ago: executing program 4 (id=1305): connect(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x0, 0x0, 0x6}}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) 1.767226982s ago: executing program 0 (id=1306): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/174, &(0x7f0000000180)=0xae) write(r1, &(0x7f0000000080)="aa6003", 0x3) 1.550685325s ago: executing program 0 (id=1307): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002280)=@newtaction={0x43c, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x424, 0x1, [@m_bpf={0xac, 0x406, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}]}, {0x5d, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed37602646c6855209b52b2022e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x124, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffeff, 0x6, 0x4, 0x6}, 0x32}}]}, {0xd9, 0x6, "51faf7335320ed7b354230acb137694145a70ec11e2f79535356bbabe75c1cf43e9599937f1222c821355d08c9296f647da3cee86f1d1307ada4d0439b9958f20eb60a1d09a36a8e8fe2b40dee67235407cc32d0443c90f719783f20e6af042b71dbe4822e96811047bc3dc33abb68997d8c395fcfde396685e34c9745023c01b8034c2a377139cd8f089779ee6e63205ae08445df2b7bc020bf93d087ce5855407ce1b50c7b8c9863ecdc8c8c115836bfc1cca102463d7fbd85dfbc9582fff4b7a15f5512df23731e9dd64cc418f9d0d8411afd63"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x134, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe215, 0x7fffffff, 0x5, 0x7, 0xd}, 0x70}}]}, {0xe9, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3b99b8089d418ec3d6d27aa68b96ef236cc10ce12fb9c2fcd2426"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x11c, 0x1b, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x9, 0x6, 0x8000, 0xf8d}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "a347c6f48aa43e01851034300e41aae2"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0xad, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6dd198d0c2f84f876aceee9a631a5585232049c053fd7bbe1393ecb0aa735b3b1d360493f2ae18bbe6abade7594754d54413afc4df70a1368"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x55af273330585cce}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.23747649s ago: executing program 0 (id=1308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0xf, 0xce, [@broadcast, @multicast1, @empty]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 493.912202ms ago: executing program 1 (id=1309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000005000000000000000200000d0000000000000000020000000000000000001800030000000000000e01000000000000000000005f"], &(0x7f00000000c0)=""/169, 0x49, 0xa9, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 159.747347ms ago: executing program 0 (id=1310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') utime(0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r5 = syz_open_dev$cec(0x0, 0x0, 0xa0000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r5, 0x1, {0x6, 0x6d4}, 0xf2}, 0x1) 471.71µs ago: executing program 2 (id=1311): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x2040400) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x2000, 0x6, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xfffffffd}) r5 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0x80086e1, 0x2, 0x8, 0x1}, 0x0, &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)=""/43, 0x2b}], 0x1) 0s ago: executing program 4 (id=1312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') utime(0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r5 = syz_open_dev$cec(0x0, 0x0, 0xa0000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r5, 0x1, {0x6, 0x6d4}, 0xf2}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 69.323884][ T5760] cgroup: Unknown subsys name 'net' [ 69.461602][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.969818][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.410041][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.416681][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.995385][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.011835][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.016553][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.038365][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.046203][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.053945][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.062291][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.062439][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.078175][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.078317][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.092795][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.100586][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.108777][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.119776][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.130047][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.137255][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.151878][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.159503][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.164506][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.174768][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.182199][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.190791][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.198783][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.206643][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.616761][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 73.677540][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 73.746864][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 73.812404][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 73.866075][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.873270][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.881076][ T5771] bridge_slave_0: entered allmulticast mode [ 73.888474][ T5771] bridge_slave_0: entered promiscuous mode [ 73.923623][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.931203][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.939216][ T5771] bridge_slave_1: entered allmulticast mode [ 73.946384][ T5771] bridge_slave_1: entered promiscuous mode [ 73.953256][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.960589][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.967801][ T5770] bridge_slave_0: entered allmulticast mode [ 73.974886][ T5770] bridge_slave_0: entered promiscuous mode [ 74.015882][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.023036][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.031160][ T5770] bridge_slave_1: entered allmulticast mode [ 74.038689][ T5770] bridge_slave_1: entered promiscuous mode [ 74.077124][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.102673][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.110604][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.118372][ T5780] bridge_slave_0: entered allmulticast mode [ 74.125623][ T5780] bridge_slave_0: entered promiscuous mode [ 74.134688][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.167993][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.192305][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.200448][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.207758][ T5780] bridge_slave_1: entered allmulticast mode [ 74.215215][ T5780] bridge_slave_1: entered promiscuous mode [ 74.233840][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.277301][ T5771] team0: Port device team_slave_0 added [ 74.302964][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.310502][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.317743][ T5776] bridge_slave_0: entered allmulticast mode [ 74.325331][ T5776] bridge_slave_0: entered promiscuous mode [ 74.334376][ T5771] team0: Port device team_slave_1 added [ 74.342300][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.356540][ T5770] team0: Port device team_slave_0 added [ 74.362748][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.370078][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.377695][ T5776] bridge_slave_1: entered allmulticast mode [ 74.384746][ T5776] bridge_slave_1: entered promiscuous mode [ 74.403902][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.415322][ T5770] team0: Port device team_slave_1 added [ 74.473839][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.480818][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.508127][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.550732][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.561182][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.568276][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.594504][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.614690][ T5780] team0: Port device team_slave_0 added [ 74.621900][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.629767][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.656164][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.669313][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.701068][ T5780] team0: Port device team_slave_1 added [ 74.719416][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.726479][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.752557][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.785377][ T5776] team0: Port device team_slave_0 added [ 74.819449][ T5776] team0: Port device team_slave_1 added [ 74.840902][ T5771] hsr_slave_0: entered promiscuous mode [ 74.847974][ T5771] hsr_slave_1: entered promiscuous mode [ 74.877766][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.884856][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.911016][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.936869][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.943943][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.969978][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.986334][ T5770] hsr_slave_0: entered promiscuous mode [ 74.992768][ T5770] hsr_slave_1: entered promiscuous mode [ 74.999077][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.007422][ T5770] Cannot create hsr debugfs directory [ 75.013598][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.020555][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.046754][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.077263][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.084439][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.110619][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.154767][ T5779] Bluetooth: hci0: command tx timeout [ 75.160414][ T5784] Bluetooth: hci1: command tx timeout [ 75.200334][ T5780] hsr_slave_0: entered promiscuous mode [ 75.206711][ T5780] hsr_slave_1: entered promiscuous mode [ 75.212788][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.221266][ T5780] Cannot create hsr debugfs directory [ 75.233719][ T5784] Bluetooth: hci2: command tx timeout [ 75.239391][ T5784] Bluetooth: hci3: command tx timeout [ 75.306867][ T5776] hsr_slave_0: entered promiscuous mode [ 75.313267][ T5776] hsr_slave_1: entered promiscuous mode [ 75.320333][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.328223][ T5776] Cannot create hsr debugfs directory [ 75.662966][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.676031][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.686708][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.697327][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.763653][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.774152][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.790121][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.806111][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.885395][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.896308][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.907255][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.916866][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.990546][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.001627][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.016424][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.042902][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.125767][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.166458][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.191317][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.216208][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.223658][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.260459][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.267650][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.280528][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.322410][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.329568][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.339147][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.346276][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.363799][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.418240][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.456148][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.482563][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.509234][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.516421][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.534540][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.541703][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.587124][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.649802][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.657041][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.671825][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.679042][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.890279][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.005464][ T5771] veth0_vlan: entered promiscuous mode [ 77.046456][ T5771] veth1_vlan: entered promiscuous mode [ 77.061083][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.185357][ T5771] veth0_macvtap: entered promiscuous mode [ 77.212412][ T5771] veth1_macvtap: entered promiscuous mode [ 77.236737][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.243474][ T5784] Bluetooth: hci0: command tx timeout [ 77.246013][ T5779] Bluetooth: hci1: command tx timeout [ 77.262450][ T5770] veth0_vlan: entered promiscuous mode [ 77.278744][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.305224][ T5770] veth1_vlan: entered promiscuous mode [ 77.314406][ T5779] Bluetooth: hci3: command tx timeout [ 77.315795][ T5784] Bluetooth: hci2: command tx timeout [ 77.329485][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.342992][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.377416][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.388041][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.399109][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408030][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.443220][ T5780] veth0_vlan: entered promiscuous mode [ 77.508263][ T5780] veth1_vlan: entered promiscuous mode [ 77.527084][ T5770] veth0_macvtap: entered promiscuous mode [ 77.575733][ T5770] veth1_macvtap: entered promiscuous mode [ 77.607160][ T5776] veth0_vlan: entered promiscuous mode [ 77.632665][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.640041][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.652911][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.667547][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.672738][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.706811][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.721235][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.733007][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.742330][ T5776] veth1_vlan: entered promiscuous mode [ 77.768063][ T5780] veth0_macvtap: entered promiscuous mode [ 77.778991][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.788313][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.799381][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.808159][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.834125][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.842003][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.851439][ T5780] veth1_macvtap: entered promiscuous mode [ 77.912082][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.923689][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.933837][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.945148][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.957329][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.027099][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.041816][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.060164][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.071215][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.091073][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.129720][ T5776] veth0_macvtap: entered promiscuous mode [ 78.154257][ T5776] veth1_macvtap: entered promiscuous mode [ 78.161757][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.171203][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.180177][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.188957][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.269467][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.288311][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.325724][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.341872][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.351862][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.367911][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.378467][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.389237][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.401191][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.441058][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.471078][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.485582][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.500055][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.511047][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.532168][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.567296][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.582230][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.600353][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.610217][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.624306][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.712652][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.731874][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.795023][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.804517][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.806554][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.825095][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.026959][ T5868] syz.0.1[5868]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.063954][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.079820][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.099218][ T5868] loop0: detected capacity change from 0 to 1024 [ 79.136669][ T5868] ======================================================= [ 79.136669][ T5868] WARNING: The mand mount option has been deprecated and [ 79.136669][ T5868] and is ignored by this kernel. Remove the mand [ 79.136669][ T5868] option from the mount to silence this warning. [ 79.136669][ T5868] ======================================================= [ 79.226722][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.271528][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.305474][ T5868] EXT4-fs: Ignoring removed nobh option [ 79.329298][ T5868] EXT4-fs: Ignoring removed bh option [ 79.346475][ T5784] Bluetooth: hci0: command tx timeout [ 79.351930][ T5784] Bluetooth: hci1: command tx timeout [ 79.393722][ T5784] Bluetooth: hci3: command tx timeout [ 79.399455][ T5779] Bluetooth: hci2: command tx timeout [ 79.426842][ T5868] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.541420][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.472689][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.538252][ T5868] sched: RT throttling activated [ 81.538828][ T5784] Bluetooth: hci1: command tx timeout [ 81.543785][ T5779] Bluetooth: hci0: command tx timeout [ 81.543882][ T5784] Bluetooth: hci3: command tx timeout [ 81.549214][ T5779] Bluetooth: hci2: command tx timeout [ 82.897534][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.074858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.083565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 83.477232][ T5897] vivid-000: ================= START STATUS ================= [ 83.485616][ T5897] vivid-000: Generate PTS: true [ 83.490796][ T5897] vivid-000: Generate SCR: true [ 83.495953][ T5897] tpg source WxH: 640x360 (Y'CbCr) [ 83.501118][ T5897] tpg field: 1 [ 83.504600][ T5897] tpg crop: 640x360@0x0 [ 83.508819][ T5897] tpg compose: 640x360@0x0 [ 83.513307][ T5897] tpg colorspace: 8 [ 83.517239][ T5897] tpg transfer function: 0/0 [ 83.521877][ T5897] tpg Y'CbCr encoding: 0/0 [ 83.526382][ T5897] tpg quantization: 0/0 [ 83.530934][ T5897] tpg RGB range: 0/2 [ 83.534985][ T5897] vivid-000: ================== END STATUS ================== [ 84.234809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.281437][ T5899] loop0: detected capacity change from 0 to 1024 [ 84.579220][ T3476] hfsplus: b-tree write err: -5, ino 4 [ 86.782600][ T55] cfg80211: failed to load regulatory.db [ 86.831741][ T1528] IPVS: starting estimator thread 0... [ 87.113737][ T5924] IPVS: using max 18 ests per chain, 43200 per kthread [ 88.045520][ T5930] capability: warning: `syz.2.18' uses deprecated v2 capabilities in a way that may be insecure [ 88.590350][ T5934] vivid-000: kernel_thread() failed [ 88.860052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.913862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.923091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.433893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.515974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.516029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.516120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.190621][ T5981] vivid-000: kernel_thread() failed [ 96.248458][ T5982] Zero length message leads to an empty skb [ 99.747757][ T6018] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 101.535079][ T6027] vivid-000: kernel_thread() failed [ 102.047407][ T6036] vivid-000: ================= START STATUS ================= [ 102.087792][ T6036] vivid-000: Generate PTS: true [ 102.114092][ T6036] vivid-000: Generate SCR: true [ 102.136170][ T6036] tpg source WxH: 640x360 (Y'CbCr) [ 102.167762][ T6036] tpg field: 1 [ 102.182300][ T6036] tpg crop: 640x360@0x0 [ 102.208125][ T6036] tpg compose: 640x360@0x0 [ 102.221508][ T6036] tpg colorspace: 8 [ 102.251452][ T6036] tpg transfer function: 0/0 [ 102.260485][ T6036] tpg Y'CbCr encoding: 0/0 [ 102.282723][ T6036] tpg quantization: 0/0 [ 102.300398][ T6036] tpg RGB range: 0/2 [ 102.326219][ T6036] vivid-000: ================== END STATUS ================== [ 102.810353][ T6043] netlink: 'syz.2.45': attribute type 10 has an invalid length. [ 102.872901][ T6043] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.882443][ T6043] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.964571][ T6053] netlink: set zone limit has 8 unknown bytes [ 107.952494][ T6087] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 107.983871][ T6087] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.031374][ T6087] bond0: (slave team0): Enslaving as an active interface with an up link [ 108.151112][ T6089] warning: `syz.2.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.117171][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 109.127990][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 109.332157][ T6104] loop2: detected capacity change from 0 to 512 [ 109.339688][ T6104] EXT4-fs: Ignoring removed nobh option [ 110.626487][ T6104] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.64: invalid indirect mapped block 256 (level 2) [ 110.726480][ T6104] EXT4-fs (loop2): 2 truncates cleaned up [ 110.764861][ T6104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.482319][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.785417][ T6127] loop1: detected capacity change from 0 to 256 [ 111.988596][ T6127] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.563562][ T6127] FAT-fs (loop1): Directory bread(block 64) failed [ 112.578774][ T6127] FAT-fs (loop1): Directory bread(block 65) failed [ 112.598633][ T6127] FAT-fs (loop1): Directory bread(block 66) failed [ 112.613554][ T6127] FAT-fs (loop1): Directory bread(block 67) failed [ 112.623150][ T6131] loop3: detected capacity change from 0 to 512 [ 112.633840][ T6127] FAT-fs (loop1): Directory bread(block 68) failed [ 112.640409][ T6127] FAT-fs (loop1): Directory bread(block 69) failed [ 112.692767][ T6127] FAT-fs (loop1): Directory bread(block 70) failed [ 112.728568][ T6127] FAT-fs (loop1): Directory bread(block 71) failed [ 112.729388][ T6131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.744020][ T6127] FAT-fs (loop1): Directory bread(block 72) failed [ 112.754887][ T6127] FAT-fs (loop1): Directory bread(block 73) failed [ 112.774274][ T6131] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.760879][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.050785][ T6179] loop3: detected capacity change from 0 to 4096 [ 119.214854][ T6191] mmap: syz.2.86 (6191) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.556554][ T6179] ntfs3: loop3: Failed to read $UpCase (-4). [ 126.476828][ T6226] netlink: 'syz.0.96': attribute type 39 has an invalid length. [ 127.732636][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 132.883656][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.891033][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.060981][ T6288] netlink: 'syz.3.112': attribute type 10 has an invalid length. [ 133.481730][ T6288] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.634294][ T6288] bond0: (slave team0): Enslaving as an active interface with an up link [ 143.235104][ T6368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.242727][ T6368] IPv6: NLM_F_CREATE should be set when creating new route [ 143.390772][ T6368] lo: entered allmulticast mode [ 143.513872][ T6368] tunl0: entered allmulticast mode [ 144.007202][ T9] IPVS: starting estimator thread 0... [ 144.174544][ T6377] IPVS: using max 19 ests per chain, 45600 per kthread [ 144.403812][ T6368] gre0: entered allmulticast mode [ 144.542039][ T6368] gretap0: entered allmulticast mode [ 144.623920][ T6368] erspan0: entered allmulticast mode [ 144.844979][ T6368] ip_vti0: entered allmulticast mode [ 144.912775][ T6368] ip6_vti0: entered allmulticast mode [ 145.083813][ T6368] sit0: entered allmulticast mode [ 145.918030][ T6368] ip6tnl0: entered allmulticast mode [ 145.969667][ T6368] ip6gre0: entered allmulticast mode [ 146.015887][ T6368] syz_tun: entered allmulticast mode [ 146.050330][ T6368] ip6gretap0: entered allmulticast mode [ 146.080349][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.088948][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.120117][ T6368] bridge0: entered allmulticast mode [ 147.556743][ T6368] vcan0: entered allmulticast mode [ 147.906860][ T6368] bond0: entered allmulticast mode [ 147.912011][ T6368] bond_slave_0: entered allmulticast mode [ 147.918735][ T6368] bond_slave_1: entered allmulticast mode [ 147.925400][ T6368] team0: entered allmulticast mode [ 147.930688][ T6368] team_slave_0: entered allmulticast mode [ 147.936728][ T6368] team_slave_1: entered allmulticast mode [ 148.087513][ T6368] dummy0: entered allmulticast mode [ 148.236247][ T6368] nlmon0: entered allmulticast mode [ 148.321188][ T6368] caif0: entered allmulticast mode [ 148.406046][ T6368] batadv0: entered allmulticast mode [ 148.626719][ T6368] vxcan0: entered allmulticast mode [ 148.637926][ T6368] vxcan1: entered allmulticast mode [ 148.648127][ T6368] veth0: entered allmulticast mode [ 148.671246][ T6368] veth1: entered allmulticast mode [ 148.690913][ T6368] wg0: entered allmulticast mode [ 148.705841][ T6368] wg1: entered allmulticast mode [ 148.718061][ T6368] wg2: entered allmulticast mode [ 148.726698][ T6368] veth0_to_bridge: entered allmulticast mode [ 148.751006][ T6368] veth1_to_bridge: entered allmulticast mode [ 148.784978][ T6368] veth0_to_bond: entered allmulticast mode [ 148.804107][ T6368] veth1_to_bond: entered allmulticast mode [ 148.839933][ T6368] veth0_to_team: entered allmulticast mode [ 148.887439][ T6368] veth1_to_team: entered allmulticast mode [ 148.962340][ T6368] veth0_to_batadv: entered allmulticast mode [ 148.973135][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.076067][ T6368] batadv_slave_0: entered allmulticast mode [ 149.114163][ T6368] veth1_to_batadv: entered allmulticast mode [ 149.129764][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.150680][ T6368] batadv_slave_1: entered allmulticast mode [ 149.183965][ T6368] xfrm0: entered allmulticast mode [ 149.220669][ T6368] veth0_to_hsr: entered allmulticast mode [ 149.243782][ T6368] hsr_slave_0: entered allmulticast mode [ 149.269069][ T6368] veth1_to_hsr: entered allmulticast mode [ 149.285107][ T6368] hsr_slave_1: entered allmulticast mode [ 149.318655][ T6368] hsr0: entered allmulticast mode [ 149.350955][ T6368] veth1_virt_wifi: entered allmulticast mode [ 149.381580][ T6368] veth0_virt_wifi: entered allmulticast mode [ 149.398628][ T6368] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 149.421053][ T6368] veth1_vlan: entered allmulticast mode [ 149.452219][ T6368] veth0_vlan: entered allmulticast mode [ 149.506860][ T6368] vlan0: entered allmulticast mode [ 149.512197][ T6368] vlan1: entered allmulticast mode [ 149.542846][ T6368] macvlan0: entered allmulticast mode [ 149.572378][ T6368] macvlan1: entered allmulticast mode [ 149.585765][ T6368] ipvlan0: entered allmulticast mode [ 149.591273][ T6368] ipvlan1: entered allmulticast mode [ 149.616069][ T6368] veth1_macvtap: entered allmulticast mode [ 149.651991][ T6368] veth0_macvtap: entered allmulticast mode [ 149.687583][ T6368] macvtap0: entered allmulticast mode [ 149.717279][ T6368] macsec0: entered allmulticast mode [ 149.746745][ T6368] geneve0: entered allmulticast mode [ 149.778409][ T6368] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.788188][ T6368] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.803172][ T6368] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.812449][ T6368] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.822733][ T6368] geneve1: entered allmulticast mode [ 149.851554][ T6368] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 149.876659][ T6368] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 149.908064][ T6368] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 149.931145][ T6368] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 149.970755][ T6368] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 150.011018][ T6368] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 150.025181][ T6368] bond1: entered allmulticast mode [ 151.355014][ T6446] loop0: detected capacity change from 0 to 2048 [ 151.476674][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.263455][ T6406] IPVS: starting estimator thread 0... [ 152.573492][ T6452] IPVS: using max 17 ests per chain, 40800 per kthread [ 152.611257][ T6449] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 153.677998][ T140] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 278 with error 28 [ 153.710406][ T6463] loop1: detected capacity change from 0 to 128 [ 153.732458][ T140] EXT4-fs (loop0): This should not happen!! Data will be lost [ 153.732458][ T140] [ 153.753478][ T140] EXT4-fs (loop0): Total free blocks count 0 [ 153.759701][ T140] EXT4-fs (loop0): Free/Dirty block details [ 153.764538][ T6463] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 153.789396][ T140] EXT4-fs (loop0): free_blocks=2415919504 [ 153.808885][ T140] EXT4-fs (loop0): dirty_blocks=288 [ 153.821871][ T140] EXT4-fs (loop0): Block reservation details [ 153.843605][ T140] EXT4-fs (loop0): i_reserved_data_blocks=18 [ 153.882832][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.438699][ T6492] loop2: detected capacity change from 0 to 512 [ 156.854827][ T6492] EXT4-fs: Ignoring removed nobh option [ 157.025772][ T6492] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.160: invalid indirect mapped block 256 (level 2) [ 157.082398][ T6492] EXT4-fs (loop2): 2 truncates cleaned up [ 157.091983][ T6492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.788410][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.236332][ T6506] loop2: detected capacity change from 0 to 2048 [ 158.304546][ T6506] Alternate GPT is invalid, using primary GPT. [ 158.311027][ T6506] loop2: p1 p2 p3 [ 160.796129][ T6528] netlink: 184 bytes leftover after parsing attributes in process `syz.1.170'. [ 161.650154][ T6537] loop3: detected capacity change from 0 to 2048 [ 161.739541][ T6537] Alternate GPT is invalid, using primary GPT. [ 161.746600][ T6537] loop3: p1 p2 p3 [ 164.683432][ T6552] netlink: set zone limit has 8 unknown bytes [ 165.329074][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 165.455234][ T6558] loop3: detected capacity change from 0 to 2048 [ 165.492770][ T6558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.552099][ T6558] overlayfs: upper fs needs to support d_type. [ 165.567581][ T6561] netlink: 184 bytes leftover after parsing attributes in process `syz.2.179'. [ 165.579713][ T6558] overlayfs: upper fs does not support tmpfile. [ 165.590572][ T6558] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 165.600442][ T6558] overlayfs: failed to set xattr on upper [ 165.609410][ T6558] overlayfs: ...falling back to redirect_dir=nofollow. [ 165.617218][ T6561] ip6_vti0: entered allmulticast mode [ 165.633604][ T6558] overlayfs: ...falling back to index=off. [ 165.651091][ T6558] overlayfs: ...falling back to uuid=null. [ 165.716964][ T5776] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 165.730787][ T5776] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 166.908794][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.165977][ T6578] netlink: set zone limit has 8 unknown bytes [ 167.921929][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.126260][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.269284][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.313785][ T6585] netlink: 184 bytes leftover after parsing attributes in process `syz.2.190'. [ 168.351018][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 169.762919][ T6413] IPVS: starting estimator thread 0... [ 169.994904][ T6606] IPVS: using max 19 ests per chain, 45600 per kthread [ 170.389284][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.404614][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.412415][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.421638][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.429840][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.437527][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.170033][ T3510] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.518675][ T5785] Bluetooth: hci3: command tx timeout [ 172.905175][ T6641] netlink: 184 bytes leftover after parsing attributes in process `syz.2.198'. [ 173.051263][ T6609] chnl_net:caif_netlink_parms(): no params data found [ 173.544368][ T6654] loop2: detected capacity change from 0 to 128 [ 173.597872][ T6654] EXT4-fs (loop2): Test dummy encryption mode enabled [ 173.699464][ T6654] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.714918][ T6654] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.085014][ T12] hsr_slave_0: left promiscuous mode [ 174.113865][ T12] hsr_slave_1: left promiscuous mode [ 174.125529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.147833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.164949][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.189790][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.193569][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 174.199886][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.245545][ T12] bridge_slave_1: left allmulticast mode [ 174.255925][ T12] bridge_slave_1: left promiscuous mode [ 174.263474][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.348860][ T12] bridge_slave_0: left allmulticast mode [ 174.368069][ T12] bridge_slave_0: left promiscuous mode [ 174.382500][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.492620][ T12] veth1_macvtap: left promiscuous mode [ 174.510328][ T12] veth0_macvtap: left promiscuous mode [ 174.531250][ T12] veth1_vlan: left promiscuous mode [ 174.540011][ T12] veth0_vlan: left promiscuous mode [ 174.593640][ T5779] Bluetooth: hci3: command tx timeout [ 176.661629][ T12] team0 (unregistering): Port device team_slave_1 removed [ 176.674886][ T5779] Bluetooth: hci3: command tx timeout [ 176.737671][ T12] team0 (unregistering): Port device team_slave_0 removed [ 176.802789][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.870146][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.053201][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 178.154494][ T12] bond0 (unregistering): Released all slaves [ 178.246577][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.255022][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.262149][ T6609] bridge_slave_0: entered allmulticast mode [ 178.269494][ T6609] bridge_slave_0: entered promiscuous mode [ 178.283478][ T6683] netlink: 184 bytes leftover after parsing attributes in process `syz.0.206'. [ 178.315310][ T6683] ip6_vti0: entered allmulticast mode [ 178.386205][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.399819][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.415904][ T6609] bridge_slave_1: entered allmulticast mode [ 178.427018][ T6609] bridge_slave_1: entered promiscuous mode [ 178.628899][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.641246][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.696750][ T6609] team0: Port device team_slave_0 added [ 178.784064][ T5785] Bluetooth: hci3: command tx timeout [ 178.838422][ T6609] team0: Port device team_slave_1 added [ 179.349573][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.380587][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.433393][ T6609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.461678][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.483511][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.525377][ T6609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.546786][ T6701] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 179.575282][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.657103][ T6701] bond0: (slave team0): Enslaving as an active interface with an up link [ 179.965155][ T12] IPVS: stop unused estimator thread 0... [ 180.448387][ T6609] hsr_slave_0: entered promiscuous mode [ 180.486889][ T6609] hsr_slave_1: entered promiscuous mode [ 180.501215][ T6609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.530704][ T6609] Cannot create hsr debugfs directory [ 180.553979][ T6716] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 182.093244][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 183.394778][ T6609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.428255][ T6609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.471685][ T6733] netlink: 184 bytes leftover after parsing attributes in process `syz.1.216'. [ 183.485778][ T6609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.551667][ T6609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.781839][ T6609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.849550][ T6609] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.898675][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.905842][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.103905][ T6609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.125000][ T6609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.168794][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.175975][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.186346][ T6609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.346169][ T6787] netlink: 184 bytes leftover after parsing attributes in process `syz.2.224'. [ 187.070014][ T6801] loop2: detected capacity change from 0 to 16 [ 187.116132][ T6801] erofs: (device loop2): mounted with root inode @ nid 36. [ 187.650111][ T6806] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 187.660141][ T6806] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 187.669867][ T6806] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 187.679202][ T6806] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 187.688862][ T6806] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 187.713492][ T6806] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 187.723160][ T6806] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 187.732322][ T6806] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 187.741990][ T6806] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 187.751196][ T6806] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 187.760845][ T6806] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 187.770481][ T6806] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 187.918870][ T27] audit: type=1800 audit(1750491586.662:2): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.226" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 188.125894][ T6806] syz.2.226 (6806) used greatest stack depth: 19752 bytes left [ 188.520009][ T6609] veth0_vlan: entered promiscuous mode [ 188.547088][ T6609] veth1_vlan: entered promiscuous mode [ 188.618903][ T6609] veth0_macvtap: entered promiscuous mode [ 188.648092][ T6609] veth1_macvtap: entered promiscuous mode [ 188.686667][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.711534][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.725567][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.737289][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.779295][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.825992][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.843507][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.863590][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.879117][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.902552][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.910160][ T6831] netlink: 184 bytes leftover after parsing attributes in process `syz.2.233'. [ 188.932692][ T6609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.941945][ T6609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.952107][ T6609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.983614][ T6609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.120585][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.152146][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.246492][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.275736][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.064693][ T6868] netlink: 184 bytes leftover after parsing attributes in process `syz.1.241'. [ 193.473840][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.480503][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 194.387056][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404562][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.110340][ T6926] loop0: detected capacity change from 0 to 128 [ 195.286330][ T6926] EXT4-fs (loop0): Test dummy encryption mode enabled [ 195.357047][ T6926] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.655054][ T6926] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.151939][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.215246][ T3510] Bluetooth: hci4: Frame reassembly failed (-84) [ 196.359505][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 196.359519][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 196.433452][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 197.295766][ T6956] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 197.302586][ T6956] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.330787][ T6956] vhci_hcd vhci_hcd.0: Device attached [ 197.487591][ T6957] vhci_hcd: connection closed [ 197.489304][ T3510] vhci_hcd: stop threads [ 197.524055][ T3510] vhci_hcd: release socket [ 197.539985][ T3510] vhci_hcd: disconnect device [ 197.554443][ T6422] vhci_hcd: vhci_device speed not set [ 198.273950][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 198.280572][ T5784] Bluetooth: hci4: command 0x1003 tx timeout [ 206.903161][ T7095] loop1: detected capacity change from 0 to 16 [ 206.944795][ T7095] erofs: (device loop1): mounted with root inode @ nid 36. [ 207.394331][ T7102] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 207.404254][ T7102] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 207.413938][ T7102] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 207.423094][ T7102] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 207.432838][ T7102] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 207.442593][ T7102] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 207.452331][ T7102] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 207.461567][ T7102] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 207.471201][ T7102] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 207.480581][ T7102] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 207.490253][ T7102] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 207.499893][ T7102] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 207.522638][ T27] audit: type=1800 audit(1750491606.392:3): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.293" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 212.194869][ T7148] loop0: detected capacity change from 0 to 1024 [ 212.390858][ T7148] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 212.459168][ T7148] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 212.489659][ T7151] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 212.514430][ T7151] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 212.577141][ T7151] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 212.788790][ T35] hfsplus: b-tree write err: -5, ino 4 [ 214.524689][ T7177] loop2: detected capacity change from 0 to 256 [ 214.589911][ T7170] netlink: 'syz.4.310': attribute type 3 has an invalid length. [ 215.967863][ T7177] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 216.003558][ T7177] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 217.938835][ T7213] loop2: detected capacity change from 0 to 16 [ 217.947874][ T7213] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 219.545454][ T6409] IPVS: starting estimator thread 0... [ 219.870867][ T7215] IPVS: using max 19 ests per chain, 45600 per kthread [ 223.623815][ T7260] loop1: detected capacity change from 0 to 2048 [ 223.677835][ T7260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.008100][ T7315] loop1: detected capacity change from 0 to 2048 [ 231.045425][ T7315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.344353][ T7413] loop2: detected capacity change from 0 to 4096 [ 242.572510][ T7421] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.718173][ T7506] loop4: detected capacity change from 0 to 1024 [ 250.799730][ T7506] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 250.865456][ T7506] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 250.988377][ T59] hfsplus: b-tree write err: -5, ino 4 [ 254.511815][ T7546] loop2: detected capacity change from 0 to 1024 [ 254.550226][ T7546] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 254.561346][ T7546] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 254.856432][ T3476] hfsplus: b-tree write err: -5, ino 4 [ 255.964807][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.964939][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.764943][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 274.004868][ T140] Bluetooth: hci4: Frame reassembly failed (-84) [ 276.033608][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 276.033839][ T5785] Bluetooth: hci4: command 0x1003 tx timeout [ 276.296490][ T7767] netlink: set zone limit has 8 unknown bytes [ 276.531878][ T7771] loop2: detected capacity change from 0 to 4096 [ 276.632492][ T7771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.640194][ T7775] loop4: detected capacity change from 0 to 2048 [ 276.851919][ T7775] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.377795][ T7775] overlayfs: upper fs needs to support d_type. [ 277.478425][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.602054][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 281.058421][ T7806] netlink: set zone limit has 8 unknown bytes [ 281.129300][ T7810] loop0: detected capacity change from 0 to 16 [ 281.286077][ T7810] erofs: (device loop0): mounted with root inode @ nid 36. [ 281.834822][ T5785] Bluetooth: hci4: command 0x1003 tx timeout [ 281.842329][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 285.744014][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.765751][ T7843] netlink: set zone limit has 8 unknown bytes [ 285.787319][ T7838] bond0: (slave rose0): Enslaving as an active interface with an up link [ 286.139773][ T7849] loop4: detected capacity change from 0 to 1024 [ 286.280436][ T7849] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 286.314891][ T7849] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 286.454728][ T7860] loop2: detected capacity change from 0 to 16 [ 286.496180][ T3476] hfsplus: b-tree write err: -5, ino 4 [ 286.502825][ T7860] erofs: (device loop2): mounted with root inode @ nid 36. [ 287.785275][ T7870] loop4: detected capacity change from 0 to 16 [ 287.967275][ T7870] erofs: (device loop4): mounted with root inode @ nid 36. [ 288.422931][ T7883] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 288.433414][ T7883] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 288.443046][ T7883] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 288.452256][ T7883] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 288.461887][ T7883] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 288.471069][ T7883] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 288.481746][ T7883] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 288.490925][ T7883] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 288.500574][ T7883] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 288.509797][ T7883] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 288.556370][ T7883] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 288.566052][ T7883] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 288.672122][ T27] audit: type=1800 audit(1750491687.462:4): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.476" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 289.165310][ T7891] loop4: detected capacity change from 0 to 512 [ 289.199890][ T7891] EXT4-fs: Ignoring removed nobh option [ 289.738555][ T7891] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.479: invalid indirect mapped block 256 (level 2) [ 289.822386][ T7891] EXT4-fs (loop4): 2 truncates cleaned up [ 289.870729][ T7891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.916106][ T7900] netlink: set zone limit has 8 unknown bytes [ 290.232162][ T7907] loop1: detected capacity change from 0 to 512 [ 290.317878][ T7907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 290.356903][ T7907] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.512958][ T7907] overlayfs: failed to resolve './file1': -2 [ 290.607806][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 290.778622][ T7919] loop1: detected capacity change from 0 to 128 [ 290.794697][ T7919] EXT4-fs (loop1): Test dummy encryption mode enabled [ 290.829926][ T7919] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.842490][ T7919] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.923160][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.101272][ T7928] loop1: detected capacity change from 0 to 16 [ 291.112219][ T7928] erofs: (device loop1): mounted with root inode @ nid 36. [ 291.261765][ T7897] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 292.086155][ T7937] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 292.095946][ T7937] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 292.105616][ T7937] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 292.114962][ T7937] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 292.125223][ T7937] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 292.134550][ T7937] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 292.144195][ T7937] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 292.153370][ T7937] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 292.162945][ T7937] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 292.172171][ T7937] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 292.186651][ T7937] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 292.196363][ T7937] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 292.209567][ T27] audit: type=1800 audit(1750491691.092:5): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.485" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 293.989082][ T7949] netlink: set zone limit has 8 unknown bytes [ 294.917914][ T6609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.699388][ T7979] loop4: detected capacity change from 0 to 16 [ 296.751244][ T7979] erofs: (device loop4): mounted with root inode @ nid 36. [ 297.113188][ T7985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.123055][ T7985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.132825][ T7985] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 297.142539][ T7985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.152287][ T7985] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 297.161508][ T7985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.171235][ T7985] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 297.180427][ T7985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.190066][ T7985] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 297.199319][ T7985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.249367][ T7985] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.259111][ T7985] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 297.353497][ T27] audit: type=1800 audit(1750491696.152:6): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.497" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 298.134083][ T7991] netlink: set zone limit has 8 unknown bytes [ 300.142952][ T8000] loop2: detected capacity change from 0 to 128 [ 300.155806][ T8000] EXT4-fs (loop2): Test dummy encryption mode enabled [ 300.454961][ T8000] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.471088][ T8000] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.537198][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.070108][ T8020] netlink: set zone limit has 8 unknown bytes [ 303.151610][ T8037] loop2: detected capacity change from 0 to 1024 [ 303.553588][ T8037] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 303.588600][ T8037] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 303.606999][ T8045] loop0: detected capacity change from 0 to 128 [ 303.615060][ T8045] EXT4-fs (loop0): Test dummy encryption mode enabled [ 303.653472][ T8045] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.678627][ T8045] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.952997][ T3493] hfsplus: b-tree write err: -5, ino 4 [ 306.862645][ T8074] netlink: set zone limit has 8 unknown bytes [ 307.135143][ T8080] vivid-002: disconnect [ 307.194102][ T8072] vivid-002: reconnect [ 307.611996][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.217317][ T8118] netlink: set zone limit has 8 unknown bytes [ 313.500524][ T8126] loop2: detected capacity change from 0 to 32768 [ 313.534164][ T8126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.536 (8126) [ 313.596156][ T8126] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.637467][ T8126] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 313.663391][ T8126] BTRFS info (device loop2): using free space tree [ 314.890316][ T8154] loop1: detected capacity change from 0 to 2048 [ 314.936854][ T8154] EXT4-fs: Ignoring removed bh option [ 315.056481][ T8154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.096685][ T8126] BTRFS error (device loop2): open_ctree failed: -4 [ 315.291915][ T8169] netlink: set zone limit has 8 unknown bytes [ 315.463490][ T27] audit: type=1800 audit(1750491714.172:7): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.543" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 315.483783][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.805349][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.157509][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.180286][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.186645][ T8209] netlink: set zone limit has 8 unknown bytes [ 322.501013][ T8232] loop2: detected capacity change from 0 to 1024 [ 323.263031][ T3493] hfsplus: b-tree write err: -5, ino 4 [ 325.006629][ T8273] loop4: detected capacity change from 0 to 1024 [ 325.571559][ T8273] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 325.586796][ T8273] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 325.601532][ T8282] loop2: detected capacity change from 0 to 16 [ 325.612571][ T8282] erofs: (device loop2): mounted with root inode @ nid 36. [ 325.632616][ T3510] hfsplus: b-tree write err: -5, ino 4 [ 325.890137][ T8287] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 325.899973][ T8287] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 325.909651][ T8287] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 325.921482][ T8287] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 325.931107][ T8287] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 325.940275][ T8287] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 325.949925][ T8287] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 325.959055][ T8287] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 325.968679][ T8287] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 325.977875][ T8287] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 325.987914][ T8287] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 325.997745][ T8287] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 326.044933][ T27] audit: type=1800 audit(1750491724.892:8): pid=8287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.579" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 326.109225][ T8289] netlink: set zone limit has 8 unknown bytes [ 327.635190][ T8315] netlink: 47 bytes leftover after parsing attributes in process `syz.0.588'. [ 328.804699][ T8327] netlink: set zone limit has 8 unknown bytes [ 333.475923][ T8370] netlink: set zone limit has 8 unknown bytes [ 334.763915][ T8368] loop2: detected capacity change from 0 to 32768 [ 334.798453][ T8380] loop4: detected capacity change from 0 to 16 [ 334.824964][ T8368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.606 (8368) [ 334.845812][ T8380] erofs: (device loop4): mounted with root inode @ nid 36. [ 335.112413][ T8368] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.130714][ T8368] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 335.203383][ T8368] BTRFS info (device loop2): force clearing of disk cache [ 335.225968][ T8384] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 335.236529][ T8384] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 335.246200][ T8384] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 335.255527][ T8384] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 335.265265][ T8384] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 335.274645][ T8384] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 335.284399][ T8384] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 335.293657][ T8384] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 335.303371][ T8384] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 335.312702][ T8384] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 335.381156][ T8384] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 335.390845][ T8384] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 335.477697][ T8368] BTRFS info (device loop2): enabling ssd optimizations [ 335.484590][ T27] audit: type=1800 audit(1750491734.282:9): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.610" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 335.707598][ T8384] syz.4.610 (8384) used greatest stack depth: 19112 bytes left [ 335.744752][ T8368] BTRFS info (device loop2): turning on sync discard [ 335.751477][ T8368] BTRFS info (device loop2): disabling tree log [ 335.824844][ T8368] BTRFS info (device loop2): metadata ratio 5 [ 335.830976][ T8368] BTRFS info (device loop2): using free space tree [ 336.030294][ T8368] BTRFS info (device loop2): rebuilding free space tree [ 337.219282][ T5771] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 337.310931][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 337.557340][ T8389] loop0: detected capacity change from 0 to 32768 [ 337.612004][ T8389] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.611 (8389) [ 337.686821][ T8389] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 337.707975][ T8389] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 337.811661][ T8389] BTRFS info (device loop0): using free space tree [ 338.814073][ T8389] BTRFS info (device loop0): enabling ssd optimizations [ 338.831372][ T8389] BTRFS info (device loop0): auto enabling async discard [ 338.868949][ T8443] loop2: detected capacity change from 0 to 1024 [ 338.970322][ T5770] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 339.009553][ T8443] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 339.028623][ T8443] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 339.244850][ T12] hfsplus: b-tree write err: -5, ino 4 [ 340.136193][ T8454] netlink: set zone limit has 8 unknown bytes [ 340.304759][ T8460] overlayfs: failed to clone upperpath [ 342.012992][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 342.249766][ T8483] netlink: set zone limit has 8 unknown bytes [ 343.533649][ T8490] overlayfs: failed to clone upperpath [ 345.134516][ T8512] trusted_key: encrypted_key: key user:syz not found [ 346.217233][ T8521] netlink: set zone limit has 8 unknown bytes [ 347.109122][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 348.883762][ T8547] fuse: Bad value for 'fd' [ 349.012040][ T8550] trusted_key: encrypted_key: key user:syz not found [ 349.576426][ T8552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.590503][ T8552] IPv6: NLM_F_CREATE should be set when creating new route [ 349.658942][ T8554] loop4: detected capacity change from 0 to 256 [ 350.343769][ T8560] loop0: detected capacity change from 0 to 128 [ 350.376780][ T8560] EXT4-fs (loop0): Test dummy encryption mode enabled [ 350.421238][ T8560] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.435805][ T8560] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.822294][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.009943][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 353.265188][ T8592] trusted_key: encrypted_key: key user:syz not found [ 356.203115][ T8618] trusted_key: encrypted_key: key user:syz not found [ 361.246162][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 361.888100][ T8660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.373808][ T8666] netlink: 47 bytes leftover after parsing attributes in process `syz.2.679'. [ 363.196018][ T8672] trusted_key: encrypted_key: key user:syz not found [ 364.565507][ T8687] loop0: detected capacity change from 0 to 512 [ 364.711903][ T8687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.771774][ T8687] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.086016][ T8700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.093371][ T8700] IPv6: NLM_F_CREATE should be set when creating new route [ 365.150109][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.359665][ T8706] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 365.510472][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 366.375248][ T8715] trusted_key: encrypted_key: key user:syz not found [ 367.789009][ T8726] loop4: detected capacity change from 0 to 2048 [ 367.832586][ T8726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.191457][ T8738] 9pnet_fd: Insufficient options for proto=fd [ 369.316318][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 369.785768][ T8764] overlayfs: missing 'lowerdir' [ 371.813634][ T8781] 9pnet_fd: Insufficient options for proto=fd [ 372.075563][ T8784] overlayfs: failed to clone upperpath [ 372.311669][ T8792] loop0: detected capacity change from 0 to 2048 [ 372.327912][ T8795] loop4: detected capacity change from 0 to 16 [ 372.350845][ T8795] erofs: (device loop4): mounted with root inode @ nid 36. [ 372.583352][ T8792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.698835][ T8800] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 373.708512][ T8800] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 373.718168][ T8800] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 373.727317][ T8800] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 373.737654][ T8800] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 373.746775][ T8800] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 373.756549][ T8800] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 373.765836][ T8800] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 373.775649][ T8800] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 373.799837][ T8800] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 373.809735][ T8800] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 373.819511][ T8800] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 373.832158][ T27] audit: type=1800 audit(1750491772.712:10): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.722" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 374.115064][ T8792] overlayfs: missing 'lowerdir' [ 375.576639][ T8815] overlayfs: failed to clone upperpath [ 375.642567][ T8821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.705797][ T8823] vivid-008: disconnect [ 375.710251][ T8822] vivid-008: reconnect [ 377.133246][ T8835] loop4: detected capacity change from 0 to 16 [ 377.273958][ T8835] erofs: (device loop4): mounted with root inode @ nid 36. [ 377.778796][ T8843] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 377.788635][ T8843] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 377.798428][ T8843] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 377.807624][ T8843] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 377.817318][ T8843] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 377.826539][ T8843] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 377.836770][ T8843] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 377.850754][ T8843] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 377.860439][ T8843] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 377.869551][ T8843] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 377.879280][ T8843] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 377.888900][ T8843] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 377.900079][ T27] audit: type=1800 audit(1750491776.782:11): pid=8843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.734" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 378.319848][ T8854] overlayfs: failed to clone upperpath [ 378.604609][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.616515][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.632698][ T8860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.639969][ T8860] IPv6: NLM_F_CREATE should be set when creating new route [ 379.595961][ T5781] Bluetooth: hci3: link tx timeout [ 379.624496][ T5781] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 380.077308][ T8881] netlink: 47 bytes leftover after parsing attributes in process `syz.4.749'. [ 381.725990][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 381.861842][ T8893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.265460][ T8905] loop4: detected capacity change from 0 to 2048 [ 382.318822][ T8905] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.919645][ T8905] overlay: Unknown parameter '/bus' [ 385.354557][ T8927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.850424][ T8962] delete_channel: no stack [ 391.802260][ T8991] netlink: 47 bytes leftover after parsing attributes in process `syz.0.782'. [ 392.687048][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 392.782281][ T9000] loop4: detected capacity change from 0 to 2048 [ 392.866606][ T9000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.935908][ T9000] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 393.013470][ T9000] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 393.436279][ T9016] loop4: detected capacity change from 0 to 512 [ 393.597270][ T9016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.641415][ T9016] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.458960][ T6609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.542457][ T9029] vivid-000: disconnect [ 395.313699][ T9025] vivid-000: reconnect [ 395.514374][ T9042] netlink: 47 bytes leftover after parsing attributes in process `syz.2.796'. [ 396.216708][ T9051] loop4: detected capacity change from 0 to 512 [ 396.282717][ T9051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.299395][ T9051] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.159121][ T6609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.156197][ T9077] netlink: set zone limit has 8 unknown bytes [ 402.895408][ T9103] loop2: detected capacity change from 0 to 16 [ 402.905259][ T9103] erofs: (device loop2): mounted with root inode @ nid 36. [ 403.151516][ T9103] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 403.161212][ T9103] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 403.170877][ T9103] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 403.179959][ T9103] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 403.189563][ T9103] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 403.198708][ T9103] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 403.208320][ T9103] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 403.217847][ T9103] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 403.228080][ T9103] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 403.237276][ T9103] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 403.246930][ T9103] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 403.256560][ T9103] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 403.908400][ T27] audit: type=1800 audit(1750491802.152:12): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.817" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 404.241780][ T9117] netlink: set zone limit has 8 unknown bytes [ 408.864060][ T9155] delete_channel: no stack [ 409.584951][ T9161] netlink: 47 bytes leftover after parsing attributes in process `syz.0.833'. [ 410.045457][ T9171] loop2: detected capacity change from 0 to 1024 [ 410.432483][ T9174] Cannot find add_set index 0 as target [ 411.964173][ T9192] loop2: detected capacity change from 0 to 16 [ 412.093968][ T9192] erofs: (device loop2): mounted with root inode @ nid 36. [ 412.409165][ T9192] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 412.409234][ T9192] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 412.409252][ T9192] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 412.409276][ T9192] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 412.409290][ T9192] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 412.409312][ T9192] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 412.409327][ T9192] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 412.409348][ T9192] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 412.409363][ T9192] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 412.409391][ T9192] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 412.409411][ T9192] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 412.409426][ T9192] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 412.411023][ T27] audit: type=1800 audit(1750491811.292:13): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.840" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 414.658919][ T9218] loop0: detected capacity change from 0 to 512 [ 414.735381][ T9218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.807985][ T9218] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.980540][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.863345][ T9230] overlayfs: failed to clone upperpath [ 417.230237][ T9254] loop0: detected capacity change from 0 to 16 [ 417.393757][ T9255] netlink: 47 bytes leftover after parsing attributes in process `syz.1.859'. [ 417.618418][ T9254] erofs: (device loop0): mounted with root inode @ nid 36. [ 417.826661][ T9254] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 417.836307][ T9254] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 417.845945][ T9254] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 417.855029][ T9254] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 417.864655][ T9254] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 417.874624][ T9254] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 417.884250][ T9254] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 417.893401][ T9254] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 417.902971][ T9254] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 417.912094][ T9254] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 417.921778][ T9254] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 417.931484][ T9254] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 417.940346][ T27] audit: type=1800 audit(1750491816.822:14): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.860" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 420.381117][ T9281] loop0: detected capacity change from 0 to 16 [ 420.423906][ T9281] erofs: (device loop0): mounted with root inode @ nid 36. [ 420.638370][ T9281] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 420.648098][ T9281] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 420.663397][ T9281] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 420.672447][ T9281] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 420.682075][ T9281] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 420.691140][ T9281] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 420.700695][ T9281] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 420.709921][ T9281] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 420.719668][ T9281] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 420.728878][ T9281] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 420.739134][ T9281] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 420.748753][ T9281] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 420.772229][ T9288] Cannot find add_set index 0 as target [ 421.354410][ T27] audit: type=1800 audit(1750491819.642:15): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.870" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 426.607891][ T9330] netlink: set zone limit has 8 unknown bytes [ 426.770911][ T9337] Cannot find add_set index 0 as target [ 427.945496][ T9351] delete_channel: no stack [ 429.534689][ T9363] netlink: set zone limit has 8 unknown bytes [ 430.382500][ T9380] loop4: detected capacity change from 0 to 128 [ 430.404977][ T9380] EXT4-fs (loop4): Test dummy encryption mode enabled [ 430.417391][ T9380] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.429829][ T9380] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.678828][ T6609] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.717679][ T9391] fuse: Bad value for 'fd' [ 433.475208][ T9413] overlayfs: failed to clone upperpath [ 440.101012][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.107605][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.253713][ T9479] fuse: Unknown parameter 'grou00000000000000000000' [ 441.209682][ T9490] loop2: detected capacity change from 0 to 16 [ 441.306696][ T9490] erofs: (device loop2): mounted with root inode @ nid 36. [ 441.737503][ T9494] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 441.767185][ T9494] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 441.806489][ T9494] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 441.842704][ T9494] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 441.879844][ T9494] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 441.916798][ T9494] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 441.995602][ T9494] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 442.234074][ T9494] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 442.259197][ T9494] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 442.269895][ T9494] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 442.286117][ T9494] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 442.483852][ T9494] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 442.620052][ T27] audit: type=1800 audit(1750491841.502:16): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.934" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 443.430142][ T9511] fuse: Unknown parameter 'grou00000000000000000000' [ 444.894776][ T9536] fuse: Unknown parameter 'grou00000000000000000000' [ 444.909960][ T9538] loop4: detected capacity change from 0 to 16 [ 444.956183][ T9538] erofs: (device loop4): mounted with root inode @ nid 36. [ 444.990943][ T9543] loop2: detected capacity change from 0 to 1024 [ 446.035313][ T9551] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 446.045007][ T9551] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 446.054620][ T9551] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 446.063714][ T9551] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 446.073383][ T9551] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 446.082530][ T9551] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 446.092159][ T9551] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 446.101262][ T9551] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 446.110969][ T9551] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 446.120095][ T9551] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 446.130320][ T9551] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 446.147609][ T9551] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 446.166348][ T27] audit: type=1800 audit(1750491845.042:17): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.950" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 448.972885][ T9581] fuse: Unknown parameter 'group_i00000000000000000000' [ 452.481812][ T9612] fuse: Unknown parameter 'group_i00000000000000000000' [ 456.277707][ T9652] fuse: Unknown parameter 'group_i00000000000000000000' [ 457.964702][ T9667] loop4: detected capacity change from 0 to 1024 [ 459.119192][ T9688] fuse: Unknown parameter 'group_id00000000000000000000' [ 460.070553][ T9693] fuse: Unknown parameter 'group_id00000000000000000000' [ 460.121302][ T9695] loop4: detected capacity change from 0 to 512 [ 460.185480][ T9695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.253824][ T9695] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.201902][ T6609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.112438][ T9729] fuse: Unknown parameter 'group_id00000000000000000000' [ 463.453095][ T9736] loop0: detected capacity change from 0 to 512 [ 463.760960][ T9736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.774677][ T9741] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1009'. [ 463.792678][ T9736] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.954595][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.175472][ T9745] loop0: detected capacity change from 0 to 16 [ 464.302785][ T9745] erofs: (device loop0): mounted with root inode @ nid 36. [ 465.171182][ T9764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1018'. [ 465.224868][ T9765] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 465.234575][ T9765] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 465.244196][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 465.253306][ T9765] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 465.262867][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 465.271982][ T9765] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 465.282181][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 465.291257][ T9765] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 465.300854][ T9765] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 465.309933][ T9765] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 465.319538][ T9765] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 465.336751][ T9765] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 465.348200][ T27] audit: type=1800 audit(1750491864.232:18): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1011" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 465.426655][ T9766] fuse: Unknown parameter 'group_id00000000000000000000' [ 467.485164][ T9792] loop0: detected capacity change from 0 to 16 [ 467.529732][ T9792] erofs: (device loop0): mounted with root inode @ nid 36. [ 467.548477][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1027'. [ 467.554394][ T9795] fuse: Bad value for 'user_id' [ 469.750921][ T9822] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 469.760591][ T9822] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 469.770259][ T9822] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 469.779339][ T9822] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 469.789615][ T9822] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 469.798829][ T9822] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 469.808482][ T9822] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 469.817577][ T9822] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 469.827252][ T9822] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 469.842752][ T9822] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 469.852454][ T9822] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 469.863171][ T9822] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 469.929259][ T27] audit: type=1800 audit(1750491868.752:19): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1029" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 470.310831][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1040'. [ 470.321875][ T9834] overlayfs: failed to clone upperpath [ 472.119985][ T9858] loop0: detected capacity change from 0 to 128 [ 472.170397][ T9858] EXT4-fs (loop0): Test dummy encryption mode enabled [ 472.184742][ T9858] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.197414][ T9858] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 472.809482][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.200714][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 473.384456][ T9875] loop0: detected capacity change from 0 to 256 [ 473.431510][ T9880] loop4: detected capacity change from 0 to 16 [ 473.459685][ T9880] erofs: (device loop4): mounted with root inode @ nid 36. [ 474.284641][ T9889] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1059'. [ 474.809501][ T9892] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 474.819181][ T9892] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 474.828810][ T9892] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 474.837973][ T9892] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 474.847563][ T9892] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 474.856771][ T9892] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 474.866451][ T9892] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 474.875645][ T9892] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 474.885268][ T9892] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 474.902135][ T9892] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 474.912461][ T9892] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 474.922116][ T9892] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 475.073752][ T27] audit: type=1800 audit(1750491873.812:20): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1055" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 475.484866][ T9899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1062'. [ 476.339707][ T9906] delete_channel: no stack [ 479.255113][ T9936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1073'. [ 480.383331][ T9951] delete_channel: no stack [ 484.608673][ T9980] loop2: detected capacity change from 0 to 128 [ 484.625014][ T9980] EXT4-fs (loop2): Test dummy encryption mode enabled [ 484.657379][ T9980] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.684295][ T9980] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.053845][ T9994] delete_channel: no stack [ 486.234828][ T9998] fuse: Bad value for 'fd' [ 487.036711][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.768187][T10033] delete_channel: no stack [ 490.388753][T10045] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1104'. [ 491.206764][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 493.772067][T10075] loop4: detected capacity change from 0 to 2048 [ 493.829694][T10075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.610534][T10072] loop2: detected capacity change from 0 to 32768 [ 495.749185][ T27] audit: type=1800 audit(1750491894.632:21): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1114" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 496.222751][T10086] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 496.222751][T10086] [ 496.236402][T10086] ERROR: (device loop2): remounting filesystem as read-only [ 497.418982][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 499.992130][T10119] netlink: set zone limit has 8 unknown bytes [ 501.334693][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 501.486326][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.501204][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.531110][T10150] loop2: detected capacity change from 0 to 1024 [ 503.733710][ T9111] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 503.890647][T10154] Cannot find add_set index 0 as target [ 504.897292][T10168] netlink: set zone limit has 8 unknown bytes [ 507.472057][T10191] Cannot find add_set index 0 as target [ 508.696637][T10203] netlink: set zone limit has 8 unknown bytes [ 511.244951][T10228] loop2: detected capacity change from 0 to 16 [ 511.318080][T10231] Cannot find add_set index 0 as target [ 511.499227][T10228] erofs: (device loop2): mounted with root inode @ nid 36. [ 511.546626][T10233] fuse: Bad value for 'rootmode' [ 512.012973][T10238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 512.022762][T10238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 512.032475][T10238] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 512.041711][T10238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 512.051356][T10238] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 512.060574][T10238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 512.070224][T10238] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 512.117311][T10238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 512.127002][T10238] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 512.136234][T10238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 512.145916][T10238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 512.155544][T10238] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 512.237417][ T27] audit: type=1800 audit(1750491911.052:22): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1157" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 512.534321][T10236] netlink: set zone limit has 8 unknown bytes [ 514.922410][ T27] audit: type=1326 audit(1750491913.802:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f258078e929 code=0x0 [ 516.266159][T10276] netlink: set zone limit has 8 unknown bytes [ 516.315336][T10280] loop4: detected capacity change from 0 to 1024 [ 516.960712][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 518.107383][T10304] loop2: detected capacity change from 0 to 16 [ 518.131037][T10304] erofs: (device loop2): mounted with root inode @ nid 36. [ 518.803792][T10315] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 518.820741][T10315] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 518.830694][T10315] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 518.840717][T10315] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 518.852776][T10315] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 518.862727][T10315] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 518.872627][T10315] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 518.881969][T10315] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 518.891953][T10315] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 518.902680][T10315] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 519.032816][T10315] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 519.043692][T10315] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 519.875758][ T27] audit: type=1800 audit(1750491917.932:24): pid=10315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1178" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 520.294617][T10325] fuse: Unknown parameter 'use00000000000000000000' [ 521.225117][T10329] netlink: set zone limit has 8 unknown bytes [ 523.359131][T10351] loop4: detected capacity change from 0 to 16 [ 523.439558][T10351] erofs: (device loop4): mounted with root inode @ nid 36. [ 524.318108][T10355] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 524.327867][T10355] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 524.337526][T10355] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 524.346712][T10355] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 524.356443][T10355] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 524.366124][T10355] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 524.413961][T10355] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 524.423121][T10355] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 524.432781][T10355] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 524.442005][T10355] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 524.451666][T10355] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 524.461288][T10355] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 524.497762][ T27] audit: type=1800 audit(1750491923.352:25): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1192" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 525.040781][T10364] fuse: Unknown parameter 'use00000000000000000000' [ 525.199548][T10370] loop4: detected capacity change from 0 to 16 [ 525.211171][T10370] erofs: (device loop4): mounted with root inode @ nid 36. [ 525.231405][T10369] netlink: set zone limit has 8 unknown bytes [ 525.669047][T10374] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 525.678828][T10374] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 525.688500][T10374] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 525.698176][T10374] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 525.707871][T10374] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 525.717065][T10374] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 525.726688][T10374] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 525.777352][T10374] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 525.787031][T10374] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 525.796966][T10374] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 525.806764][T10374] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 525.816393][T10374] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 525.846176][ T27] audit: type=1800 audit(1750491924.712:26): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1198" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 527.850827][T10397] fuse: Unknown parameter 'use00000000000000000000' [ 528.487725][T10408] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1210'. [ 529.273443][T10406] netlink: set zone limit has 8 unknown bytes [ 530.803549][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 533.334451][T10453] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 535.016790][T10459] fuse: Unknown parameter 'user_i00000000000000000000' [ 535.217458][T10465] Cannot find add_set index 0 as target [ 535.355745][T10467] overlayfs: failed to resolve './file0': -2 [ 537.999402][T10489] loop2: detected capacity change from 0 to 2048 [ 538.062657][T10489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 538.805518][T10496] fuse: Unknown parameter 'user_i00000000000000000000' [ 540.182320][ T27] audit: type=1800 audit(1750491939.062:27): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1234" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 541.465162][T10511] overlayfs: failed to resolve './file0': -2 [ 541.822561][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 542.335622][T10526] fuse: Unknown parameter 'user_id00000000000000000000' [ 542.540156][T10530] loop4: detected capacity change from 0 to 16 [ 542.560154][T10530] erofs: (device loop4): mounted with root inode @ nid 36. [ 542.784104][T10532] delete_channel: no stack [ 542.943004][T10534] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 542.952796][T10534] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 542.962461][T10534] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 542.971686][T10534] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 542.981371][T10534] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 542.990574][T10534] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 543.000784][T10534] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 543.010025][T10534] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 543.057018][T10534] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 543.066300][T10534] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 543.076021][T10534] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 543.085663][T10534] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 543.501768][ T27] audit: type=1800 audit(1750491941.982:28): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1247" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 545.907371][T10553] overlayfs: failed to resolve './file0': -2 [ 547.927517][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 556.845353][T10659] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1281'. [ 559.060369][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 560.248660][T10694] netlink: set zone limit has 8 unknown bytes [ 562.678429][T10726] netlink: set zone limit has 8 unknown bytes [ 562.909014][T10712] loop2: detected capacity change from 0 to 32768 [ 562.923991][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.930328][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.023700][ T27] audit: type=1800 audit(1750491961.892:29): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1298" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 563.949773][T10712] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 563.949773][T10712] [ 563.993311][T10712] ERROR: (device loop2): remounting filesystem as read-only [ 565.124169][ T5771] ------------[ cut here ]------------ [ 565.130270][ T5771] kernel BUG at fs/jfs/inode.c:169! [ 565.135986][ T5771] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 565.142152][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Not tainted 6.6.94-syzkaller #0 [ 565.150302][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.160378][ T5771] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 565.165950][ T5771] Code: e4 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 a9 08 e4 fe e9 0a fe ff ff e8 9f 61 8b fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 565.185570][ T5771] RSP: 0018:ffffc90003dd7ac0 EFLAGS: 00010293 [ 565.191659][ T5771] RAX: ffffffff82fa3431 RBX: ffff88805bb6ce30 RCX: ffff888028e41e00 [ 565.199654][ T5771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805bb6ce30 [ 565.207728][ T5771] RBP: 0000000000000001 R08: ffffffff90d856af R09: 1ffffffff21b0ad5 [ 565.215736][ T5771] R10: dffffc0000000000 R11: fffffbfff21b0ad6 R12: dffffc0000000000 [ 565.223730][ T5771] R13: dffffc0000000000 R14: ffff88805bb6cab8 R15: ffff88805bb6d000 [ 565.231725][ T5771] FS: 000055557472a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 565.240668][ T5771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.247264][ T5771] CR2: 00007f53ce0e56c0 CR3: 00000000623a6000 CR4: 00000000003506e0 [ 565.255247][ T5771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.263231][ T5771] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.271230][ T5771] Call Trace: [ 565.274524][ T5771] [ 565.277468][ T5771] ? evict+0x480/0x870 [ 565.281647][ T5771] ? jfs_write_inode+0x220/0x220 [ 565.286619][ T5771] evict+0x486/0x870 [ 565.290549][ T5771] ? proc_nr_inodes+0x230/0x230 [ 565.295431][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 565.300682][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 565.305900][ T5771] evict_inodes+0x5fe/0x690 [ 565.310430][ T5771] ? clear_inode+0x150/0x150 [ 565.315044][ T5771] generic_shutdown_super+0x97/0x2b0 [ 565.320366][ T5771] kill_block_super+0x44/0x90 [ 565.325059][ T5771] deactivate_locked_super+0x97/0x100 [ 565.330446][ T5771] cleanup_mnt+0x429/0x4c0 [ 565.334880][ T5771] task_work_run+0x1ce/0x250 [ 565.339490][ T5771] ? task_work_cancel+0x240/0x240 [ 565.344563][ T5771] ? exit_to_user_mode_loop+0x3b/0x110 [ 565.350049][ T5771] exit_to_user_mode_loop+0xe6/0x110 [ 565.355359][ T5771] exit_to_user_mode_prepare+0xb1/0x140 [ 565.360921][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 565.366392][ T5771] do_syscall_64+0x61/0xb0 [ 565.370830][ T5771] ? clear_bhb_loop+0x40/0x90 [ 565.375639][ T5771] ? clear_bhb_loop+0x40/0x90 [ 565.380335][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.386275][ T5771] RIP: 0033:0x7f7ce4f8fc57 [ 565.390715][ T5771] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 565.410335][ T5771] RSP: 002b:00007fffb91c2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 565.418769][ T5771] RAX: 0000000000000000 RBX: 00007f7ce5010925 RCX: 00007f7ce4f8fc57 [ 565.426753][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb91c2240 [ 565.434820][ T5771] RBP: 00007fffb91c2240 R08: 0000000000000000 R09: 0000000000000000 [ 565.442802][ T5771] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb91c32d0 [ 565.450783][ T5771] R13: 00007f7ce5010925 R14: 0000000000089779 R15: 00007fffb91c3310 [ 565.458773][ T5771] [ 565.461809][ T5771] Modules linked in: [ 565.966280][ T5771] ---[ end trace 0000000000000000 ]--- [ 565.971852][ T5771] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 565.978649][ T5771] Code: e4 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 a9 08 e4 fe e9 0a fe ff ff e8 9f 61 8b fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 565.998677][ T5771] RSP: 0018:ffffc90003dd7ac0 EFLAGS: 00010293 [ 566.004800][ T5771] RAX: ffffffff82fa3431 RBX: ffff88805bb6ce30 RCX: ffff888028e41e00 [ 566.012794][ T5771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805bb6ce30 [ 566.020838][ T5771] RBP: 0000000000000001 R08: ffffffff90d856af R09: 1ffffffff21b0ad5 [ 566.028867][ T5771] R10: dffffc0000000000 R11: fffffbfff21b0ad6 R12: dffffc0000000000 [ 566.036894][ T5771] R13: dffffc0000000000 R14: ffff88805bb6cab8 R15: ffff88805bb6d000 [ 566.045617][ T5771] FS: 000055557472a500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 566.054637][ T5771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.061248][ T5771] CR2: 0000200000008000 CR3: 00000000623a6000 CR4: 00000000003506f0 [ 566.069845][ T5771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 566.077924][ T5771] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 566.085950][ T5771] Kernel panic - not syncing: Fatal exception [ 566.092354][ T5771] Kernel Offset: disabled [ 566.096674][ T5771] Rebooting in 86400 seconds..