last executing test programs: 23.781037098s ago: executing program 3 (id=159): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x102, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@empty, @in=@empty, 0x4e21, 0x800, 0x4e21, 0x400, 0x2, 0x0, 0x80, 0x2c, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0xffffffffffffffff, 0x100, 0x2, 0x8, 0x8000000000000001, 0x7}, {0x3, 0x3, 0xffff, 0x4}, 0x8000, 0x6e6bbc, 0x2, 0x0, 0x4, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in=@remote, 0x3506, 0x0, 0x1, 0x2, 0x0, 0x2, 0x800}}, 0xe8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000010000000000000003000000020300000003000000000000000000"], &(0x7f0000000140)=""/240, 0x32, 0xf0, 0x1}, 0x20) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 22.184707692s ago: executing program 3 (id=162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(0x0, 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 20.776449874s ago: executing program 3 (id=165): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x21820, 0x0) 20.552534057s ago: executing program 3 (id=167): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$char_usb(r1, &(0x7f0000000cc0)=""/137, 0x89) 16.047052256s ago: executing program 3 (id=178): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=00007,heartbeat=none,inode64,\x00'/98], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 11.945985078s ago: executing program 4 (id=182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20004000) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001e40)=""/66, 0x42}], 0x1}, 0xc}], 0x1, 0x10000, 0x0) 10.552743899s ago: executing program 4 (id=185): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 10.335885603s ago: executing program 2 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x3, 0x15, 0x0, 0xb, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x2, 0x6e, 0x7, 0xfa, '\x00', 0x3, 0x20000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.901134999s ago: executing program 4 (id=188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2020) 9.777871292s ago: executing program 1 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRES64=r0, @ANYRESHEX, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT, @ANYRESOCT=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 9.767069512s ago: executing program 2 (id=190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40801) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/81, 0x51}], 0x1}, 0x0) 8.813529616s ago: executing program 0 (id=191): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) 8.809498606s ago: executing program 4 (id=192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x852572a58090e1e6, 0x0, 0x1, 0x0, &(0x7f0000000080)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 8.690051408s ago: executing program 2 (id=193): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)=ANY=[], 0x12bc}], 0x1, 0x0, 0x0, 0x80}, 0x880) recvmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10044, 0x0) 7.756116982s ago: executing program 1 (id=194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)) 7.607185754s ago: executing program 4 (id=195): syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x684, &(0x7f0000001780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000640)='./bus\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 7.606031764s ago: executing program 0 (id=205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) 7.486055276s ago: executing program 3 (id=196): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x18, 0x4000000}) 6.766439847s ago: executing program 1 (id=197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2020) 5.659120984s ago: executing program 2 (id=198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2020) 5.658073894s ago: executing program 0 (id=199): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(0x0, 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(0x0, 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 5.508412946s ago: executing program 1 (id=200): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0x40305839, &(0x7f00000002c0)={0xfffffffffffffc3e, 0x400000, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x44, 0x1b}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 4.63352282s ago: executing program 4 (id=201): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x55e}}, {@delalloc}, {@abort}, {@nodelalloc}]}, 0x3, 0x57e, &(0x7f0000001280)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 3.041052664s ago: executing program 0 (id=202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2020) 2.926787616s ago: executing program 2 (id=203): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.31513166s ago: executing program 0 (id=204): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x80c0) 1.31337233s ago: executing program 1 (id=215): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.095923433s ago: executing program 0 (id=206): r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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") fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 26.41094ms ago: executing program 2 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="0f23d266baa00066b86b4266ba420066efc4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0xad}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=208): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 73.857033][ T4255] cgroup: Unknown subsys name 'net' [ 74.018969][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.601569][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.141871][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.141867][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.143844][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.151965][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.159375][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.164690][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.171425][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.179803][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.199336][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.199374][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.206589][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.214849][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.221803][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.227731][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.235751][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.248411][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.251115][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.257657][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.264233][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.271506][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.277770][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.285268][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.291113][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.298621][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.305888][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.313733][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.319607][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.330559][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.412476][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.419868][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.767846][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 77.875929][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 77.985560][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 77.995988][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 78.037149][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.045423][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.053989][ T4267] device bridge_slave_0 entered promiscuous mode [ 78.085930][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 78.095240][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.102921][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.110792][ T4267] device bridge_slave_1 entered promiscuous mode [ 78.188730][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.198828][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.206260][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.214355][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.244089][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.263462][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.270763][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.278843][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.326062][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.333407][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.341253][ T4266] device bridge_slave_0 entered promiscuous mode [ 78.359179][ T4267] team0: Port device team_slave_0 added [ 78.377580][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.385236][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.393769][ T4266] device bridge_slave_1 entered promiscuous mode [ 78.401002][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.408410][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.416382][ T4277] device bridge_slave_0 entered promiscuous mode [ 78.425155][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.433028][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.441091][ T4277] device bridge_slave_1 entered promiscuous mode [ 78.449790][ T4267] team0: Port device team_slave_1 added [ 78.457893][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.500410][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.518324][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.525611][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.533980][ T4265] device bridge_slave_0 entered promiscuous mode [ 78.574237][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.581380][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.590021][ T4265] device bridge_slave_1 entered promiscuous mode [ 78.600171][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.613705][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.631467][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.639143][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.665456][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.679165][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.686534][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.712897][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.733790][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.753949][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.765529][ T4275] team0: Port device team_slave_0 added [ 78.807052][ T4275] team0: Port device team_slave_1 added [ 78.834340][ T4277] team0: Port device team_slave_0 added [ 78.842564][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.854868][ T4266] team0: Port device team_slave_0 added [ 78.862786][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.890583][ T4277] team0: Port device team_slave_1 added [ 78.898558][ T4266] team0: Port device team_slave_1 added [ 78.911590][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.919179][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.945319][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.988733][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.995920][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.021948][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.037544][ T4267] device hsr_slave_0 entered promiscuous mode [ 79.044801][ T4267] device hsr_slave_1 entered promiscuous mode [ 79.074167][ T4265] team0: Port device team_slave_0 added [ 79.080649][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.087756][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.114463][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.130085][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.137203][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.163689][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.176463][ T4265] team0: Port device team_slave_1 added [ 79.191940][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.199509][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.225736][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.243257][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.250345][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.276579][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.326193][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.333599][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.359955][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.376340][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.383359][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.393433][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 79.409875][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 79.416587][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 79.422892][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.450789][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.457991][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.465411][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.473052][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 79.473562][ T4275] Cannot create hsr debugfs directory [ 79.479347][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 79.549092][ T4266] device hsr_slave_0 entered promiscuous mode [ 79.556382][ T4266] device hsr_slave_1 entered promiscuous mode [ 79.564007][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.571612][ T4266] Cannot create hsr debugfs directory [ 79.580498][ T4277] device hsr_slave_0 entered promiscuous mode [ 79.587769][ T4277] device hsr_slave_1 entered promiscuous mode [ 79.594586][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.602176][ T4277] Cannot create hsr debugfs directory [ 79.697058][ T4265] device hsr_slave_0 entered promiscuous mode [ 79.703919][ T4265] device hsr_slave_1 entered promiscuous mode [ 79.710430][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.718434][ T4265] Cannot create hsr debugfs directory [ 80.000658][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.013633][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.023572][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.033199][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.115510][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.134987][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.148788][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.174804][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.206238][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.218386][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.241057][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.255886][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.280338][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.324343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.335721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.353920][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.369741][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.379485][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.389395][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.413240][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.429611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.441386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.451728][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.459163][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.468117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.498466][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.509727][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.518886][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.526076][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.540451][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.589341][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.605542][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.615597][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.626157][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.645948][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.656098][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.666002][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.675922][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.705978][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.720591][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.731273][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.747547][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.759696][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.776856][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.788813][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.799913][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.827866][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.867600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.878843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.894576][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.920859][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.949919][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.959161][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.973780][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.987645][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.994966][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.009554][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.019081][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.029509][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.036683][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.044864][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.076257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.089542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.107826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.119853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.131958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.143651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.154270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.171231][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.189835][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.205217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.219554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.228495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.244917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.258921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.267171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.276381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.286340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.296537][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.303704][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.311860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.344707][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.356374][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.365519][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.372852][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.381364][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.390333][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.400031][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.407289][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.415393][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.424387][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.433317][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.442143][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.449986][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.457790][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.467182][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.474778][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 81.474820][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 81.483253][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 81.507699][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.517772][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.526807][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.533987][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.542870][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.554241][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.562331][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 81.562796][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 81.584350][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.596653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.608003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.624091][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.642821][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.651024][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.668053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.691617][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.704183][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.733937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.750919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.761845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.786016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.802109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.815123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.863366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.871457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.899185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.924573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.936277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.945930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.979628][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.007007][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.050225][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.071127][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.088129][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.109569][ T4275] device veth0_vlan entered promiscuous mode [ 82.139679][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.154177][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.169993][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.179933][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.196716][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.206624][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.233577][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.246883][ T4275] device veth1_vlan entered promiscuous mode [ 82.262707][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.271175][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.281394][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.317342][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.328004][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.371331][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.420430][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.440298][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.470975][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.516423][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.523645][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.548196][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.589516][ T4275] device veth0_macvtap entered promiscuous mode [ 82.620620][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.631086][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.653844][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.661028][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.678734][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.690752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.706424][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.718369][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.728632][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.738980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.748005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.758141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.767029][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.775798][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.796852][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.806532][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.827311][ T4275] device veth1_macvtap entered promiscuous mode [ 82.872200][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.881713][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.897589][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.907728][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.916826][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.925356][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.938622][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.952207][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.984165][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.006313][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.027689][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.044894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.060763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.105588][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.135190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.150021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.176195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.188067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.244646][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.260892][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.281080][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.289994][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.310838][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.320163][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.345655][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.354489][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.395738][ T4277] device veth0_vlan entered promiscuous mode [ 83.414562][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.425354][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.433936][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.443230][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.452079][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.461601][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.475006][ T4266] device veth0_vlan entered promiscuous mode [ 83.515755][ T4277] device veth1_vlan entered promiscuous mode [ 83.527200][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.537734][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.546344][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.562865][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 83.562881][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 83.562928][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 83.622733][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.633190][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 83.633234][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 83.650123][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.662194][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.670705][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.683592][ T4266] device veth1_vlan entered promiscuous mode [ 83.707337][ T4267] device veth0_vlan entered promiscuous mode [ 83.749625][ T4267] device veth1_vlan entered promiscuous mode [ 83.759590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.773550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.782144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.791751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.800837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.810008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.824458][ T4277] device veth0_macvtap entered promiscuous mode [ 83.853617][ T4266] device veth0_macvtap entered promiscuous mode [ 83.860817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.869350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.878926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.888805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.896628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.905429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.915047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.939288][ T4277] device veth1_macvtap entered promiscuous mode [ 83.960384][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.986301][ T4266] device veth1_macvtap entered promiscuous mode [ 83.993361][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.001419][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.041180][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.053223][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.065236][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.077164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.086129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.095674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.104773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.118528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.129064][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.139797][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.149952][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.160677][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.172436][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.201539][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.213480][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.226398][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.237596][ T4267] device veth0_macvtap entered promiscuous mode [ 84.251667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.260518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.269645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.279965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.289119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.299221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.309170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.336360][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.345952][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.358980][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.368956][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.381727][ T4267] device veth1_macvtap entered promiscuous mode [ 84.393112][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.411381][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.415505][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.423725][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.440471][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.451088][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.464706][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.486238][ T4265] device veth0_vlan entered promiscuous mode [ 84.493481][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.501636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.515354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.524568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.533770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.542098][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.561851][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.573174][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.583685][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.595365][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.605417][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.617055][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.628651][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.637362][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.647142][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.656279][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.665453][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.693793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.702872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.711033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.720659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.740911][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.755122][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.765443][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.776313][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.786438][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.797292][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.808665][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.836698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.845920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.871527][ T4265] device veth1_vlan entered promiscuous mode [ 84.903709][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.922938][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.931815][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.941326][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.989084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.034957][ T4387] device syzkaller1 entered promiscuous mode [ 85.067033][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.077737][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.127202][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.151232][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.167801][ T4265] device veth0_macvtap entered promiscuous mode [ 85.175316][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.186115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.195894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.204897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.213890][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.242593][ T4265] device veth1_macvtap entered promiscuous mode [ 85.256324][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.271555][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.284025][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.293746][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.322846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.332067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.341182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.361665][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.374800][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.394917][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.408210][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.419041][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.430372][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.440932][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.451617][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.462003][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.474139][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.487737][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.495996][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.504894][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.514940][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.550356][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.571071][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.583455][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.602632][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.612918][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.624039][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.638253][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 85.638283][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 85.645529][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 85.658237][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.668869][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.681114][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.704080][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.704252][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.713472][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 85.722247][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 85.736136][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.747600][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.773179][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.824039][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846884][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.871732][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.887469][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.217708][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.252998][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.295488][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.349437][ T4401] affs: No valid root block on device nullb0 [ 86.395069][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.413418][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.440623][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.522439][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.613476][ T4406] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.673200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.732405][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 86.746640][ T22] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 86.789291][ T22] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.820608][ T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.844170][ T126] cfg80211: failed to load regulatory.db [ 86.872765][ T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.900492][ T4411] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 86.902402][ T22] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.913055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.973725][ T22] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.006850][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.302540][ T22] usb 4-1: usb_control_msg returned -32 [ 87.308378][ T22] usbtmc 4-1:16.0: can't read capabilities [ 87.585379][ T4414] loop0: detected capacity change from 0 to 1024 [ 87.638708][ T4414] ======================================================= [ 87.638708][ T4414] WARNING: The mand mount option has been deprecated and [ 87.638708][ T4414] and is ignored by this kernel. Remove the mand [ 87.638708][ T4414] option from the mount to silence this warning. [ 87.638708][ T4414] ======================================================= [ 87.755518][ T4417] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 87.960704][ T4414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 87.984159][ T4334] usb 4-1: USB disconnect, device number 2 [ 88.077788][ T4414] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.125223][ T4425] loop1: detected capacity change from 0 to 256 [ 88.250042][ T4414] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 88.269053][ T4427] random: crng reseeded on system resumption [ 88.328953][ T4414] EXT4-fs (loop0): Remounting filesystem read-only [ 88.475484][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 88.660566][ T4439] loop3: detected capacity change from 0 to 128 [ 88.698421][ T4439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.781938][ T4439] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.877703][ T4427] Restarting kernel threads ... done. [ 88.966273][ T4444] loop0: detected capacity change from 0 to 256 [ 88.995112][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 89.041928][ T4444] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 89.263908][ T4448] loop3: detected capacity change from 0 to 4096 [ 89.307378][ T4450] Zero length message leads to an empty skb [ 89.433228][ T4452] loop1: detected capacity change from 0 to 64 [ 89.659634][ T27] audit: type=1800 audit(1752012356.120:2): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=34 res=0 errno=0 [ 89.738166][ T4452] syz.1.23: attempt to access beyond end of device [ 89.738166][ T4452] loop1: rw=2049, sector=73, nr_sectors = 89 limit=64 [ 90.194810][ T4469] loop1: detected capacity change from 0 to 2048 [ 90.260717][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.349819][ T4469] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.451122][ T4469] fs-verity: sha512 using implementation "sha512-avx2" [ 90.729027][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 90.854243][ T4485] loop2: detected capacity change from 0 to 64 [ 91.056704][ T4488] loop1: detected capacity change from 0 to 1024 [ 91.190534][ T4488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.393022][ T4334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.449668][ T4488] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.34: Allocating blocks 497-513 which overlap fs metadata [ 91.510594][ T4475] loop0: detected capacity change from 0 to 32768 [ 91.548757][ T4475] XFS: ikeep mount option is deprecated. [ 91.561964][ T4487] EXT4-fs (loop1): pa ffff8880757a47e0: logic 128, phys. 273, len 15 [ 91.570532][ T4487] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 91.593062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.612513][ T4334] usb 5-1: Using ep0 maxpacket: 32 [ 91.625891][ T4334] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 91.652710][ T4334] usb 5-1: config 0 has no interface number 0 [ 91.681791][ T4334] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 91.690993][ T4504] loop3: detected capacity change from 0 to 16 [ 91.714105][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 91.723051][ T4504] erofs: (device loop3): mounted with root inode @ nid 36. [ 91.746786][ T4334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.755792][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 91.781513][ T4334] usb 5-1: Product: syz [ 91.786172][ T4334] usb 5-1: Manufacturer: syz [ 91.790822][ T4334] usb 5-1: SerialNumber: syz [ 91.798742][ T4334] usb 5-1: config 0 descriptor?? [ 91.817684][ T4334] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 91.829797][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 91.833870][ T4475] XFS (loop0): Mounting V5 Filesystem [ 91.849762][ T4281] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 91.864765][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 91.874552][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 91.884808][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 91.896406][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 91.905895][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 91.915532][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 91.925152][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 91.936586][ T4504] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 91.946194][ T4504] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 91.980907][ T4504] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 91.994118][ T27] audit: type=1800 audit(1752012358.460:3): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.40" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 92.026343][ T4334] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 92.040736][ T4334] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 92.082579][ T4268] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.166973][ T4504] syz.3.40 (4504) used greatest stack depth: 19344 bytes left [ 92.272694][ T4268] usb 3-1: Using ep0 maxpacket: 16 [ 92.284908][ T4268] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.297626][ T4475] XFS (loop0): Ending clean mount [ 92.316012][ T4268] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 92.326477][ T4268] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 92.328449][ T4475] XFS (loop0): Quotacheck needed: Please wait. [ 92.338107][ T4268] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.353499][ T4268] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.403756][ T4268] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.413908][ T4268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.422759][ T4268] usb 3-1: SerialNumber: syz [ 92.436626][ T4475] XFS (loop0): Quotacheck: Done. [ 92.437783][ T4500] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.465645][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 92.474034][ T4371] usb 5-1: USB disconnect, device number 2 [ 92.484759][ T4371] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 92.510238][ T4268] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 92.522395][ T4334] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.538558][ T4371] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 92.588671][ T4371] quatech2 5-1:0.51: device disconnected [ 92.666154][ T4517] loop3: detected capacity change from 0 to 512 [ 92.674894][ T4517] EXT4-fs: Ignoring removed i_version option [ 92.717682][ T4517] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.734214][ T4334] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 92.765073][ T4517] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.772832][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.797869][ T4331] usb 3-1: USB disconnect, device number 2 [ 92.826056][ T4334] usb 2-1: config 0 descriptor?? [ 92.865303][ T4517] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.887536][ T4517] EXT4-fs (loop3): 1 truncate cleaned up [ 92.898633][ T4334] usb 2-1: selecting invalid altsetting 3 [ 92.910605][ T4517] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.936661][ T4334] comedi comedi5: could not set alternate setting 3 in high speed [ 92.946486][ T4334] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 92.967998][ T4334] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 92.980756][ T4517] EXT4-fs error (device loop3): ext4_read_inline_dir:1593: inode #12: block 7: comm syz.3.42: path /6/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=327693, rec_len=0, size=80 fake=0 [ 93.009688][ T4517] EXT4-fs (loop3): Remounting filesystem read-only [ 93.090503][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 93.140771][ T4265] XFS (loop0): Unmounting Filesystem [ 93.551998][ T4529] loop3: detected capacity change from 0 to 256 [ 93.612345][ T4529] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.723642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.732370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.928435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.101071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.111560][ T4334] usb 2-1: USB disconnect, device number 2 [ 94.252485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.342508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.844019][ T4552] loop3: detected capacity change from 0 to 1024 [ 94.882618][ T4552] EXT4-fs: Ignoring removed bh option [ 95.253279][ T4268] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.356998][ T4552] EXT4-fs (loop3): Test dummy encryption mode enabled [ 95.410247][ T4552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.475876][ T4268] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 95.489435][ T4268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.501553][ T4268] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 95.531315][ T4268] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 95.539717][ T4268] usb 5-1: Manufacturer: syz [ 95.565623][ T4268] usb 5-1: config 0 descriptor?? [ 95.904776][ T4268] rc_core: IR keymap rc-hauppauge not found [ 95.913175][ T4268] Registered IR keymap rc-empty [ 95.972761][ T4552] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 95.993549][ T4268] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 95.998724][ T4561] loop1: detected capacity change from 0 to 32768 [ 96.015840][ T4561] XFS: ikeep mount option is deprecated. [ 96.070206][ T4268] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 96.161232][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 96.170220][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 96.198222][ T4268] usb 5-1: USB disconnect, device number 3 [ 96.218767][ T4561] XFS (loop1): Mounting V5 Filesystem [ 96.237410][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 96.426696][ T4561] XFS (loop1): Ending clean mount [ 96.459890][ T4561] XFS (loop1): Quotacheck needed: Please wait. [ 96.487795][ T4572] loop2: detected capacity change from 0 to 32768 [ 96.497259][ T4572] XFS: ikeep mount option is deprecated. [ 96.591381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.804908][ T4572] XFS (loop2): Mounting V5 Filesystem [ 96.928076][ T4561] XFS (loop1): Quotacheck: Done. [ 97.660225][ T4572] XFS (loop2): Ending clean mount [ 97.688086][ T4572] XFS (loop2): Quotacheck needed: Please wait. [ 97.954334][ T4277] XFS (loop1): Unmounting Filesystem [ 97.972696][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.112893][ T4572] XFS (loop2): Quotacheck: Done. [ 98.248097][ T22] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.300900][ T22] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.464492][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.611205][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 98.778663][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 98.931393][ T22] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.042950][ T22] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.157274][ T22] usb 5-1: Product: syz [ 99.209461][ T22] usb 5-1: Manufacturer: syz [ 99.373240][ T4266] XFS (loop2): Unmounting Filesystem [ 99.408855][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 99.462050][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 99.548587][ T22] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 99.565736][ T22] cdc_wdm 5-1:1.0: Unknown control protocol [ 99.757426][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.764199][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.771364][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.771453][ T4268] usb 5-1: USB disconnect, device number 4 [ 99.777991][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.778011][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 100.737021][ T4630] loop1: detected capacity change from 0 to 4096 [ 100.886241][ T4632] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.326570][ T4652] binder: 4645:4652 ioctl 4018620d 0 returned -22 [ 106.489952][ T4665] loop3: detected capacity change from 0 to 1024 [ 108.134534][ T4665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.731488][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.849681][ T4665] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.537144][ T4665] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 109.711640][ T4665] EXT4-fs (loop3): Remounting filesystem read-only [ 110.591366][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 111.008706][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 111.956437][ T4716] binder: 4713:4716 ioctl 4018620d 0 returned -22 [ 112.759419][ T4718] loop3: detected capacity change from 0 to 512 [ 114.512019][ T4740] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 114.548521][ T4718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.567764][ T4718] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.653495][ T4740] comedi comedi3: 8255: I/O port conflict (0xffffffff80000000,4) [ 114.676987][ T4740] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 114.710117][ T4740] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 114.762623][ T4740] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 114.802405][ T4740] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 114.823768][ T4740] comedi comedi3: 8255: I/O port conflict (0xf,4) [ 114.851602][ T4740] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 114.876466][ T4740] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 115.168063][ T4750] tap0: tun_chr_ioctl cmd 1074025677 [ 115.175620][ T4750] tap0: linktype set to 0 [ 115.930528][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 116.412309][ T4766] tap0: tun_chr_ioctl cmd 1074025677 [ 116.418522][ T4766] tap0: linktype set to 0 [ 117.868783][ T4780] loop3: detected capacity change from 0 to 512 [ 118.040832][ T4780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.062962][ T4780] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.136421][ T4786] loop2: detected capacity change from 0 to 1024 [ 118.264712][ T4794] binder: 4787:4794 ioctl 4018620d 0 returned -22 [ 118.296935][ T4786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.001611][ T4786] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.2.105: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 119.152515][ T4786] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 119.192906][ T4786] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #2: comm syz.2.105: Deleting old file: nlink 4, error=-117 [ 119.226491][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 119.261392][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 119.505550][ T4315] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.683298][ T4811] tap0: tun_chr_ioctl cmd 1074025677 [ 119.689867][ T4811] tap0: linktype set to 0 [ 119.735250][ T4812] binder: 4805:4812 ioctl 4018620d 0 returned -22 [ 121.176575][ T4315] usb 2-1: device descriptor read/64, error -71 [ 121.494259][ T4819] loop0: detected capacity change from 0 to 1024 [ 121.592299][ T4822] tap0: tun_chr_ioctl cmd 1074025677 [ 121.597823][ T4822] tap0: linktype set to 0 [ 124.296565][ T4818] loop3: detected capacity change from 0 to 40427 [ 124.308492][ T4818] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 124.316762][ T4818] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.392056][ T4844] binder: 4842:4844 ioctl 4018620d 0 returned -22 [ 125.175931][ T4818] F2FS-fs (loop3): invalid crc value [ 125.202750][ T4818] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 125.523689][ T4852] loop0: detected capacity change from 0 to 256 [ 125.573092][ T4852] exfat: Unknown parameter '0x00000000000000030xffffffffffffffff' [ 125.812630][ T4847] loop4: detected capacity change from 0 to 32768 [ 125.955454][ T4859] tap0: tun_chr_ioctl cmd 1074025677 [ 125.961393][ T4859] tap0: linktype set to 0 [ 126.607517][ T27] audit: type=1800 audit(1752012393.070:4): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.121" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 127.019055][ T4869] tap0: tun_chr_ioctl cmd 1074025677 [ 127.026462][ T4869] tap0: linktype set to 0 [ 127.785225][ T4863] binder: 4861:4863 ioctl 4018620d 0 returned -22 [ 128.098832][ T4850] loop1: detected capacity change from 0 to 32768 [ 130.593547][ T4891] Bluetooth: MGMT ver 1.22 [ 130.817274][ T4897] binder: 4894:4897 ioctl 4018620d 0 returned -22 [ 131.272857][ T4315] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.534009][ T4315] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.590857][ T4315] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.795310][ T4315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.964051][ T4315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 132.131964][ T4315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 132.294693][ T4315] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.370137][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.447384][ T4315] usb 2-1: Product: syz [ 132.485266][ T4315] usb 2-1: Manufacturer: syz [ 132.674975][ T4315] cdc_wdm 2-1:1.0: skipping garbage [ 132.720956][ T4315] cdc_wdm 2-1:1.0: skipping garbage [ 132.872061][ T4315] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 132.915010][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.921839][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930811][ T4315] cdc_wdm 2-1:1.0: Unknown control protocol [ 133.006914][ T4315] usb 2-1: USB disconnect, device number 5 [ 133.141710][ T4913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.140'. [ 133.149706][ T4914] loop3: detected capacity change from 0 to 512 [ 133.241232][ T4914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.252527][ T4914] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.332849][ T27] audit: type=1800 audit(1752012399.800:5): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.139" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 133.966135][ T4925] tap0: tun_chr_ioctl cmd 1074025677 [ 133.972752][ T4925] tap0: linktype set to 0 [ 133.996717][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 134.027990][ T4922] tap0: tun_chr_ioctl cmd 1074025677 [ 134.033757][ T4922] tap0: linktype set to 0 [ 135.010473][ T4940] binder: 4936:4940 ioctl 4018620d 0 returned -22 [ 135.482391][ T4347] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.570087][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 136.727552][ T4347] usb 4-1: device descriptor read/64, error -32 [ 136.817193][ T4946] loop0: detected capacity change from 0 to 47 [ 136.950729][ T4951] Bluetooth: hci0: service_discovery: too big uuid_count value 4457 [ 136.960878][ T4948] kvm: emulating exchange as write [ 137.022416][ T4347] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.222518][ T4347] usb 4-1: Using ep0 maxpacket: 16 [ 137.230386][ T4347] usb 4-1: config 0 has no interfaces? [ 137.247117][ T4347] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 137.277714][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.354205][ T4347] usb 4-1: config 0 descriptor?? [ 137.386812][ T4347] usb 4-1: can't set config #0, error -71 [ 137.424641][ T4347] usb 4-1: USB disconnect, device number 4 [ 137.477132][ T4965] loop4: detected capacity change from 0 to 512 [ 137.514019][ T4965] EXT4-fs: Ignoring removed orlov option [ 137.539726][ T4965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.594257][ T4965] EXT4-fs (loop4): orphan cleanup on readonly fs [ 137.662039][ T4965] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.155: bg 0: block 248: padding at end of block bitmap is not set [ 137.690966][ T4969] process 'syz.0.157' launched './file0' with NULL argv: empty string added [ 137.723802][ T4965] Quota error (device loop4): write_blk: dquota write failed [ 137.731587][ T4965] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 137.734413][ T4947] loop1: detected capacity change from 0 to 32768 [ 137.819950][ T4971] tap0: tun_chr_ioctl cmd 1074025677 [ 137.826301][ T4971] tap0: linktype set to 0 [ 138.407880][ T4965] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.155: Failed to acquire dquot type 1 [ 138.479764][ T4947] XFS (loop1): Mounting V5 Filesystem [ 138.530050][ T4965] EXT4-fs (loop4): 1 truncate cleaned up [ 138.539243][ T4965] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.582896][ T4947] XFS (loop1): Ending clean mount [ 138.599355][ T4947] XFS (loop1): Quotacheck needed: Please wait. [ 138.679384][ T4965] EXT4-fs: Ignoring removed orlov option [ 138.691249][ T4947] XFS (loop1): Quotacheck: Done. [ 138.722657][ T4965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.752493][ T4965] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 138.961815][ T4965] EXT4-fs error (device loop4): __ext4_remount:6623: comm syz.4.155: Abort forced by user [ 138.986669][ T4965] EXT4-fs (loop4): Remounting filesystem read-only [ 139.002508][ T4965] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 139.010154][ T4965] ext4 filesystem being remounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.071193][ T4987] tap0: tun_chr_ioctl cmd 1074025677 [ 139.077485][ T4987] tap0: linktype set to 0 [ 139.093396][ T4315] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.291019][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.471610][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.730280][ T4315] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.749907][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.786456][ T4315] usb 3-1: config 0 descriptor?? [ 139.786927][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 141.402718][ T4277] XFS (loop1): Unmounting Filesystem [ 141.579340][ T4315] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input6 [ 141.706019][ T4315] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input7 [ 141.735482][ T4315] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input8 [ 141.794893][ T4315] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input9 [ 141.924961][ T4315] uclogic 0003:256C:006D.0001: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 142.051956][ T4315] usb 3-1: USB disconnect, device number 3 [ 142.292426][ T4385] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.321944][ T5013] loop0: detected capacity change from 0 to 2048 [ 142.370664][ T5012] fido_id[5012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 142.443047][ T5013] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.605771][ T4385] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.740852][ T5013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.305527][ T4385] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.320871][ T4385] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.330010][ T4385] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 143.341168][ T4385] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 143.374378][ T4385] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.392405][ T4385] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.400559][ T4385] usb 4-1: Product: syz [ 143.404929][ T4385] usb 4-1: Manufacturer: syz [ 143.416406][ T4385] cdc_wdm 4-1:1.0: skipping garbage [ 143.421777][ T4385] cdc_wdm 4-1:1.0: skipping garbage [ 143.450670][ T4385] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 143.462949][ T4385] cdc_wdm 4-1:1.0: Unknown control protocol [ 143.596200][ T5013] overlayfs: failed to resolve './file0': -2 [ 143.715799][ T5030] tap0: tun_chr_ioctl cmd 1074025677 [ 143.722044][ T5030] tap0: linktype set to 0 [ 144.975436][ T5045] tap0: tun_chr_ioctl cmd 1074025677 [ 144.981633][ T5045] tap0: linktype set to 0 [ 146.382489][ T4331] usb 4-1: USB disconnect, device number 5 [ 150.304727][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 150.570307][ T5068] loop0: detected capacity change from 0 to 1024 [ 150.957322][ T5068] hfsplus: xattr searching failed [ 151.116756][ T5080] tap0: tun_chr_ioctl cmd 1074025677 [ 151.122797][ T5080] tap0: linktype set to 0 [ 152.260681][ T5060] loop3: detected capacity change from 0 to 32768 [ 152.509764][ T5060] (syz.3.178,5060,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.596147][ T5060] (syz.3.178,5060,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.774298][ T5097] loop1: detected capacity change from 0 to 256 [ 152.794948][ T5097] exfat: Unknown parameter '0x00000000000000030xffffffffffffffff' [ 152.960079][ T5060] JBD2: Ignoring recovery information on journal [ 153.684190][ T5108] loop4: detected capacity change from 0 to 512 [ 153.829739][ T5060] JBD2: recovery failed [ 153.908086][ T5060] (syz.3.178,5060,1):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 154.121958][ T5060] (syz.3.178,5060,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 154.161956][ T5108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.333474][ T5060] (syz.3.178,5060,1):ocfs2_check_volume:2489 ERROR: status = -5 [ 154.367281][ T5108] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.510127][ T5060] (syz.3.178,5060,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 154.677375][ T5060] (syz.3.178,5060,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 154.848417][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 155.942319][ T5133] loop4: detected capacity change from 0 to 1024 [ 161.171204][ T5150] loop4: detected capacity change from 0 to 1024 [ 161.190935][ T5155] loop3: detected capacity change from 0 to 128 [ 161.284447][ T5150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 161.288483][ T5155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.305375][ T5155] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.226157][ T5167] loop0: detected capacity change from 0 to 4096 [ 162.344706][ T5150] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.4.201: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 162.511631][ T5150] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 162.558595][ T5173] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.570190][ T5150] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.201: Deleting old file: nlink 4, error=-117 [ 162.612745][ T5155] [ 162.615140][ T5155] ====================================================== [ 162.622189][ T5155] WARNING: possible circular locking dependency detected [ 162.629343][ T5155] 6.1.143-syzkaller #0 Not tainted [ 162.634495][ T5155] ------------------------------------------------------ [ 162.641548][ T5155] syz.3.196/5155 is trying to acquire lock: [ 162.647475][ T5155] ffff8880552670e0 (&ei->i_data_sem/1){+.+.}-{3:3}, at: ext4_move_extents+0x325/0xb90 [ 162.657151][ T5155] [ 162.657151][ T5155] but task is already holding lock: [ 162.664549][ T5155] ffff8880552634b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_double_down_write_data_sem+0x28/0x40 [ 162.675241][ T5155] [ 162.675241][ T5155] which lock already depends on the new lock. [ 162.675241][ T5155] [ 162.685657][ T5155] [ 162.685657][ T5155] the existing dependency chain (in reverse order) is: [ 162.694684][ T5155] [ 162.694684][ T5155] -> #3 (&ei->i_data_sem/2){++++}-{3:3}: [ 162.702539][ T5155] down_read+0x42/0x2d0 [ 162.707244][ T5155] ext4_map_blocks+0x316/0x1b60 [ 162.712648][ T5155] ext4_getblk+0x1ab/0x6d0 [ 162.717633][ T5155] ext4_bread+0x26/0x170 [ 162.722415][ T5155] ext4_quota_read+0x180/0x380 [ 162.727720][ T5155] find_tree_dqentry+0x1cd/0xf30 [ 162.733200][ T5155] find_tree_dqentry+0x6b0/0xf30 [ 162.738676][ T5155] find_tree_dqentry+0x6b0/0xf30 [ 162.744162][ T5155] find_tree_dqentry+0x6b0/0xf30 [ 162.749654][ T5155] qtree_read_dquot+0x558/0x7f0 [ 162.755047][ T5155] v2_read_dquot+0xc0/0x110 [ 162.760086][ T5155] dquot_acquire+0x152/0x520 [ 162.765211][ T5155] ext4_acquire_dquot+0x2d9/0x4a0 [ 162.770775][ T5155] dqget+0x778/0xeb0 [ 162.775210][ T5155] __dquot_initialize+0x328/0xcb0 [ 162.780773][ T5155] ext4_process_orphan+0x54/0x300 [ 162.786329][ T5155] ext4_orphan_cleanup+0xbd3/0x1400 [ 162.792061][ T5155] ext4_fill_super+0x7b78/0x8110 [ 162.797536][ T5155] get_tree_bdev+0x3f1/0x610 [ 162.802773][ T5155] vfs_get_tree+0x88/0x270 [ 162.807725][ T5155] do_new_mount+0x24a/0xa40 [ 162.812761][ T5155] __se_sys_mount+0x2d6/0x3c0 [ 162.817978][ T5155] do_syscall_64+0x4c/0xa0 [ 162.822933][ T5155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.829367][ T5155] [ 162.829367][ T5155] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 162.837489][ T5155] down_read+0x42/0x2d0 [ 162.843320][ T5155] v2_read_dquot+0x4a/0x110 [ 162.848365][ T5155] dquot_acquire+0x152/0x520 [ 162.853583][ T5155] ext4_acquire_dquot+0x2d9/0x4a0 [ 162.859144][ T5155] dqget+0x778/0xeb0 [ 162.863745][ T5155] __dquot_initialize+0x3b6/0xcb0 [ 162.869308][ T5155] ext4_mkdir+0x16c/0xc50 [ 162.874173][ T5155] vfs_mkdir+0x387/0x570 [ 162.879038][ T5155] do_mkdirat+0x1d0/0x430 [ 162.883903][ T5155] __x64_sys_mkdirat+0x85/0x90 [ 162.889205][ T5155] do_syscall_64+0x4c/0xa0 [ 162.894161][ T5155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.900614][ T5155] [ 162.900614][ T5155] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 162.908320][ T5155] __mutex_lock+0x120/0xaf0 [ 162.913402][ T5155] dquot_commit+0x5a/0x410 [ 162.918368][ T5155] ext4_write_dquot+0x1f0/0x360 [ 162.923776][ T5155] mark_all_dquot_dirty+0xf9/0x400 [ 162.929457][ T5155] __dquot_alloc_space+0x5fc/0xe60 [ 162.935127][ T5155] ext4_mb_new_blocks+0xf74/0x4720 [ 162.940786][ T5155] ext4_new_meta_blocks+0x151/0x3a0 [ 162.946520][ T5155] ext4_ext_insert_extent+0x1048/0x4740 [ 162.952605][ T5155] ext4_split_extent_at+0x7d3/0xf80 [ 162.958349][ T5155] ext4_swap_extents+0xfe6/0x1c90 [ 162.963922][ T5155] move_extent_per_page+0x1f63/0x47e0 [ 162.969853][ T5155] ext4_move_extents+0x89a/0xb90 [ 162.975361][ T5155] ext4_ioctl+0x3501/0x3dd0 [ 162.980413][ T5155] __se_sys_ioctl+0xfa/0x170 [ 162.985571][ T5155] do_syscall_64+0x4c/0xa0 [ 162.990555][ T5155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.997010][ T5155] [ 162.997010][ T5155] -> #0 (&ei->i_data_sem/1){+.+.}-{3:3}: [ 163.004955][ T5155] __lock_acquire+0x2cf8/0x7c50 [ 163.010444][ T5155] lock_acquire+0x1b4/0x490 [ 163.015525][ T5155] down_write_nested+0x39/0x60 [ 163.020847][ T5155] ext4_move_extents+0x325/0xb90 [ 163.026346][ T5155] ext4_ioctl+0x3501/0x3dd0 [ 163.031414][ T5155] __se_sys_ioctl+0xfa/0x170 [ 163.036556][ T5155] do_syscall_64+0x4c/0xa0 [ 163.041537][ T5155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.047984][ T5155] [ 163.047984][ T5155] other info that might help us debug this: [ 163.047984][ T5155] [ 163.058239][ T5155] Chain exists of: [ 163.058239][ T5155] &ei->i_data_sem/1 --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 163.058239][ T5155] [ 163.072093][ T5155] Possible unsafe locking scenario: [ 163.072093][ T5155] [ 163.079644][ T5155] CPU0 CPU1 [ 163.085035][ T5155] ---- ---- [ 163.090425][ T5155] lock(&ei->i_data_sem/2); [ 163.095049][ T5155] lock(&s->s_dquot.dqio_sem); [ 163.102465][ T5155] lock(&ei->i_data_sem/2); [ 163.109593][ T5155] lock(&ei->i_data_sem/1); [ 163.114233][ T5155] [ 163.114233][ T5155] *** DEADLOCK *** [ 163.114233][ T5155] [ 163.122398][ T5155] 4 locks held by syz.3.196/5155: [ 163.127429][ T5155] #0: ffff888055db6460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 163.137132][ T5155] #1: ffff888055263628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: lock_two_nondirectories+0xd5/0x150 [ 163.148401][ T5155] #2: ffff888055267258 (&sb->s_type->i_mutex_key#8/4){+.+.}-{3:3}, at: ext4_move_extents+0x30a/0xb90 [ 163.159486][ T5155] #3: ffff8880552634b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_double_down_write_data_sem+0x28/0x40 [ 163.170572][ T5155] [ 163.170572][ T5155] stack backtrace: [ 163.176502][ T5155] CPU: 1 PID: 5155 Comm: syz.3.196 Not tainted 6.1.143-syzkaller #0 [ 163.184491][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.194586][ T5155] Call Trace: [ 163.197886][ T5155] [ 163.200833][ T5155] dump_stack_lvl+0x168/0x22e [ 163.205541][ T5155] ? load_image+0x3b0/0x3b0 [ 163.210064][ T5155] ? show_regs_print_info+0x12/0x12 [ 163.215290][ T5155] ? print_circular_bug+0x12b/0x1a0 [ 163.220539][ T5155] check_noncircular+0x274/0x310 [ 163.225495][ T5155] ? add_chain_block+0x940/0x940 [ 163.230453][ T5155] ? lockdep_lock+0xdc/0x1e0 [ 163.235061][ T5155] ? add_lock_to_list+0x191/0x280 [ 163.240209][ T5155] ? _find_first_zero_bit+0xcf/0x100 [ 163.245510][ T5155] __lock_acquire+0x2cf8/0x7c50 [ 163.250395][ T5155] ? lock_chain_count+0x20/0x20 [ 163.255267][ T5155] ? verify_lock_unused+0x140/0x140 [ 163.260485][ T5155] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.266694][ T5155] ? lockdep_hardirqs_on+0x94/0x140 [ 163.272108][ T5155] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.278736][ T5155] lock_acquire+0x1b4/0x490 [ 163.283278][ T5155] ? ext4_move_extents+0x325/0xb90 [ 163.288432][ T5155] ? inode_dio_wait+0x226/0x290 [ 163.293321][ T5155] ? __might_sleep+0xd0/0xd0 [ 163.297932][ T5155] ? preempt_count_add+0x8d/0x190 [ 163.302973][ T5155] ? read_lock_is_recursive+0x10/0x10 [ 163.308367][ T5155] ? rwsem_write_trylock+0x12f/0x1b0 [ 163.313673][ T5155] ? clear_nonspinnable+0x60/0x60 [ 163.318722][ T5155] down_write_nested+0x39/0x60 [ 163.323515][ T5155] ? ext4_move_extents+0x325/0xb90 [ 163.328674][ T5155] ext4_move_extents+0x325/0xb90 [ 163.333634][ T5155] ? rcu_read_lock_any_held+0xb0/0x120 [ 163.339124][ T5155] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 163.344435][ T5155] ? ext4_double_up_write_data_sem+0x30/0x30 [ 163.350437][ T5155] ? sb_start_write+0x110/0x1c0 [ 163.355335][ T5155] ? mnt_want_write_file+0x160/0x200 [ 163.360633][ T5155] ext4_ioctl+0x3501/0x3dd0 [ 163.365155][ T5155] ? ext4_fileattr_set+0x16c0/0x16c0 [ 163.370464][ T5155] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 163.376464][ T5155] ? do_vfs_ioctl+0x1583/0x1d10 [ 163.381336][ T5155] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 163.386990][ T5155] ? tomoyo_path_number_perm+0x1b6/0x600 [ 163.392642][ T5155] ? __lock_acquire+0x7c50/0x7c50 [ 163.397684][ T5155] ? slab_free_freelist_hook+0x131/0x1a0 [ 163.403341][ T5155] ? tomoyo_path_number_perm+0x4ae/0x600 [ 163.408996][ T5155] ? __kmem_cache_free+0xb6/0x1f0 [ 163.414052][ T5155] ? tomoyo_path_number_perm+0x503/0x600 [ 163.420315][ T5155] ? tomoyo_path_number_perm+0x1b6/0x600 [ 163.425969][ T5155] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 163.431472][ T5155] ? __fget_files+0x28/0x4d0 [ 163.436091][ T5155] ? bpf_lsm_file_ioctl+0x5/0x10 [ 163.441146][ T5155] ? security_file_ioctl+0x7c/0xa0 [ 163.446278][ T5155] ? ext4_fileattr_set+0x16c0/0x16c0 [ 163.451578][ T5155] __se_sys_ioctl+0xfa/0x170 [ 163.456191][ T5155] do_syscall_64+0x4c/0xa0 [ 163.460645][ T5155] ? clear_bhb_loop+0x60/0xb0 [ 163.465342][ T5155] ? clear_bhb_loop+0x60/0xb0 [ 163.470034][ T5155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.475940][ T5155] RIP: 0033:0x7f2d01b8e929 [ 163.480397][ T5155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.500106][ T5155] RSP: 002b:00007f2d02ad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.508623][ T5155] RAX: ffffffffffffffda RBX: 00007f2d01db5fa0 RCX: 00007f2d01b8e929 [ 163.516608][ T5155] RDX: 0000200000000080 RSI: 00000000c028660f RDI: 0000000000000005 [ 163.524593][ T5155] RBP: 00007f2d01c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.532580][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.540570][ T5155] R13: 0000000000000000 R14: 00007f2d01db5fa0 R15: 00007ffde7c575a8 [ 163.548562][ T5155] [ 163.595092][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 163.696856][ T4275] EXT4-fs (loop3): unmounting filesystem.