last executing test programs: 8.020517439s ago: executing program 2 (id=675): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='errors=continue,nocheckpoint_merge,alloc_mode=default,active_logs=6,acl,fault_injection=00000000000000001262,acl,noacl,compress_cache\x00\x00lloc_mode=default,noextent_cache,compress_cache,mode=lfs,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="d8cea5dbcd3e7eda"}}) 6.669378635s ago: executing program 0 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@check_relaxed}, {@cruft}, {@check_strict}, {@check_strict}, {@mode={'mode', 0x3d, 0x8}}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x5a}}, {@cruft}]}, 0x8, 0xa11, &(0x7f0000005940)="$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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 6.614905566s ago: executing program 2 (id=685): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xde, 0x244, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = dup3(r1, r0, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x0, 0x0, 0x2}) 5.417987506s ago: executing program 0 (id=688): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) 4.229565718s ago: executing program 0 (id=696): prlimit64(0x0, 0xe, 0x0, 0x0) accept$ax25(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x7, 0x446c, &(0x7f0000004780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x100) ioctl$FS_IOC_RESVSP(r0, 0x80106f05, &(0x7f00000000c0)={0x0, 0x4, 0x32, 0x100000000}) 4.180807656s ago: executing program 2 (id=699): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x4f424752}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x2000e881) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000480)="b70ebe0f5e468c26921d557a576c009074ca8a969141efb7a81b45", 0x1b, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) 2.781307685s ago: executing program 1 (id=702): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="029993440c7a0c95d3bb8cf253fd63c588ff06000ff0fced840da0b08cb6e72082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c06045346588e2620d36a3ed8e8f2aa891268a9b33d2d55cb92f17bc9e8aaf62f94fb1143a79e72dcd910f5f45125df1bb3dc406cadfaa693beb85c9bf8daf45ad0d332b59be2550079eff7ac51dbfd801482dc1eb8e6f36990dc6e78940d2a3d0c16c023569ec2303690b40379bea72128dc680a09963beb9733c72cf749fd9409998b8c34349408deff7bca6bb7eddba08fee894b588291054aba8b41ef633e6a284d3827b8299736f5a204982f78fcd45ecf5d0188eb4151ea8056e3aa5197f809d7dfd7691cda00a9c7a6bf9cdce8eea4963a082d1d2fce8ab2fb6953b6cada8d103eee8bc10ca67b74498b67d701e1daccb2fd5c262e3ddffa65e0bf0a82bd76b41c0531cbefcb132bf6dfb6c0f3cbaec42bc0a566159441dc5717a1912d24f1199bdcf2a53d2f57526f69c3fc00407824ac6b888092105e6c26189186f16bd79c3c45725b64adc9fbbe3a36bad0defec7d0c5e89e00874a93eed41a4d4550d7bd5dae1a6ef99860568427b941991851427ecce64e07b9cb77ca2b9b084be48e7146917f1a904fd06ea74a2b2a2dc565e45790820b5cb9", 0x1da}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269a", 0x45}, {0x0}, {&(0x7f0000000580)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb837033927039b7de06e09c0dfd89a9db1973eae", 0x2f}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62", 0x5a}], 0x1}}], 0x3, 0xc0) 2.683994132s ago: executing program 3 (id=704): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000840)="ee60", 0x2}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$loop(0x0, 0x2, 0x40000) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) 2.650377171s ago: executing program 1 (id=705): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0\x00', 0x1a2e452, &(0x7f0000000500)={[{@nocompress}, {@sbsector={'sbsector', 0x3d, 0x4}}, {@nocompress}, {@showassoc}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@unhide}, {@overriderock}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@mode={'mode', 0x3d, 0x6}}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$eJzs3c9vHOX9B/D3+EdiDAoB8uWbIiCb0ICB1LGdEhpxaWKvk6X+UdmORFRVhJKkimKVCloJUKWmUtVTUXuoeqA3jj0hcYFLlVv7F/RQqeJfQD1FPXSrmV3HNvZ67dSxTXi9rPXOj888z+fZmZ1HHu/OE77Kms1m9bjL+Yt/3slk2XvOTXz+0ccflI9f3cy+9OaX+TQZSFJL+pIcTvrHJ+Zmp7sUdCO5nORWUiTZn9bzplxO8bs8tDx/K8WfynorF++yYWxKk6+13T7+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyrGJ0ZGRotMNWYuvlbrrBoCvNPKnuXyPqtG/S4+61pvUpSPDAwsDfV9+NDy6sfLX8fyZGvuyWpA8gzk/QcfP/jKY309S9tvkPBW/Kc9GPKWN3znvfdvvLG4ePXtbUrkq+Z8faYxP9uYPnu+XmvMz9bOnD49cvLC5HxtsjFVn780v1Cfro3P1c8uzM7Vhsafr42eOXOqVh++NHtx5vzE8FR9aeHL3xobGTlde3X4+/Wzc/OzMydfHZ4fv9CYmmrMnK9iytVlzMvlgfi9xkJtoX52ula7dn3x6qlVGa1zSJRBo91aUgaNdYnJ2MjY2Ojo2Njo6ZfOvPTyyEjf8oLeVAtGvmTtJncO2vKI3tKLzV72Yc9mI7f3BA7/g552/5+pNDKTi3kttXV/xjORucxmusP6tqX+//jJ+ob1ruz/l3r5w8urn0jV/z/dmnu6U//fIZed+3kn7+X93MgbWcxirubtVWv330WJzebut2rzP+dTz0wamc9sGpnO2WpJrb2kljM5ndMZyeu5kMnMp5bJNDKVeuZzKfNZSL06osYzl3rOZqGv3NG1DGU8z6eW0ZzJmZxKLfUM51JmczEzOZ+JnK1KuZbr1et+aoMc7wSNbiZobIOgDfr/9oIt9P98Td2DszjcnWa7/9/XPXRofCcSAgAAALbdN/6WA4ce/es/k/48VV1jBwAAAO431cf1niyf+supp1JMNqbqI7udFgAAALCNiuo7dkWSwRxpTS19E8pFAAAAALhPVP//f7p8GiynjqTw9z8AAADcb7rfY79rRHEitdwsV9WutCKvtCPa9/kdnGxM1YfHZ6deGc2z1V0Gqm8arCmtNweT6usHL+RoK+roYOt5cHWJA2XU6PAroxnIsXZDhp4pn54ZWidyrIx8Ic+1Ip9bihzImshTZSQA3O+ObdAfb7b/fyEnWhEnnqhu3973xDp98IieFQD2iu5j7HSNKL69NPxPh7//H821I62PFAznzbyVxVzJierbBtUnDtql5laR5VIHV3wM4USXqwGDK0Z4ObF0PeDIQ+teDxhcMdDLiTVXBDrFntqBPQEAO+fYmn54g/6/2WxNrbn+v/Hf/4M+UggAe8qdEezv4cRutxEAWO2ueunee5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Ad24v7/e3LiZpI9kIaJezsxsDNH+A/3JXulyds0sdtnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHZCkfSut7wn2Z/0jSQ5ufNZ3Ts3dzuBXVbczu28mwO7nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP2mff//nrSeH2wtSl9PcjzJ5SQ/2O0ct9Pt3U5gl624/3+5z9Ms0tfa7Sn6xyfmZqfL3Z/95frPP/r4g/JxN/WUBZQ1rBpcol1D560eqbYanLj6zo2fvfXT2sS5KslzC5NTE9Pn5767HPh48UlSS+uxZCnfXxTto3h1yz8pW7q5eiereifW1vv/6219p97jf/l957YtW07j+uLVsbKmhfprCz//yfV3VwQ9mqPJM0PJ0Oqaflw+OtR0NP0b1Vt8UfymOJA/5nK1/8s0imZR7qKHq/Y/cO364tXhN99avNIhp4M5kuRKMrD5nI6s3RNLqqOup7+sdaQKKn8d6lLehh7sPdBstkocXb8NDzxSHTKDW2pDrXMbKl1e93YbT3V4VR/Ls1ve0892qbHt382W1lzxRfGP4kL+nl+vGP+jp9z/x7OZd2cZU0WuOFI6t/n4csvHVq54/cuRHd+V3AO/zY/ynTv7v2fF+b+9r3bmfLSixnv2vihavVBbNX3oSz1S++zTKct2nodaUR3y/L+8uHa7Lnm+2OWMsk3v/9WKL4oPi6H8KzeN/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOx9RdK73vKe5HiSg0keLudrSXM76usZLLajmE3at2bJzR2sfe/ouTNV3M7tvJsDu5oOAAAAAAAAANvm3MTnH338Qfmo/h/fm28WnyYDrf/09yU5WPyhf3xibna6S0H9yeUkt8rpga3lUG6Xh5bnb5Vzh7feFgBgc/4bAAD//7Y4dyw=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 1.858297285s ago: executing program 0 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 1.857459021s ago: executing program 1 (id=707): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a800008100000008060001080e0604"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.725469735s ago: executing program 3 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 1.17479244s ago: executing program 1 (id=709): r0 = syz_io_uring_setup(0x6acf, &(0x7f0000000040)={0x0, 0xc7d0, 0x2, 0xa, 0xf7}, &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) 828.029021ms ago: executing program 3 (id=710): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') io_setup(0x2, 0x0) 747.12579ms ago: executing program 0 (id=711): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5ff, &(0x7f00000015c0)="$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") 697.702088ms ago: executing program 4 (id=712): unshare(0x62040200) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 653.699993ms ago: executing program 1 (id=713): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 623.772158ms ago: executing program 0 (id=714): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4106010805"], 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file1\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x2, 0x10040, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x1, @void, @value, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r9, r7, 0x25, 0x6, @val=@tcx={@void, @value}}, 0x1c) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r12) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r12, 0x5501, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x80000001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) 461.624148ms ago: executing program 4 (id=715): socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x416d, &(0x7f00000001c0)={0x0, 0xea90, 0x10100, 0x20000, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r0, 0x567, 0x3f00, 0x0, 0x0, 0x59) 419.443594ms ago: executing program 4 (id=716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 389.544688ms ago: executing program 3 (id=717): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000010000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 233.642626ms ago: executing program 3 (id=718): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5}]}}}]}, 0x3c}}, 0x0) 233.383382ms ago: executing program 4 (id=719): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a800008100000008060001080e0604"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 206.484815ms ago: executing program 2 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0/../file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 204.753847ms ago: executing program 1 (id=721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0x4) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x24, 0x2, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x24}}, 0x0) 189.669427ms ago: executing program 4 (id=722): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x5, 0xeb, 0x7cf2, 0x7, 0x2, "82fe57c4ee5fcb5c"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 151.961814ms ago: executing program 4 (id=723): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 150.752354ms ago: executing program 2 (id=724): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x300, 0x0, 0x0, 0x2) 37.600743ms ago: executing program 3 (id=725): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000240)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24042, 0x124) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x43) 0s ago: executing program 2 (id=726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) read$FUSE(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) read(0xffffffffffffffff, &(0x7f00000011c0)=""/221, 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) fchown(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. [ 32.375826][ T6416] cgroup: Unknown subsys name 'net' [ 32.611813][ T6416] cgroup: Unknown subsys name 'cpuset' [ 32.615304][ T6416] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.980534][ T6416] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.476930][ T6429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.479271][ T6429] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.481389][ T6429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.485135][ T6429] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.487705][ T6432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.490215][ T6432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.491862][ T6432] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.493421][ T6432] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.495069][ T6432] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.496718][ T6432] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.499506][ T6432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.501534][ T6432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.503232][ T6432] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.506091][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.519927][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.527551][ T6432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.530021][ T6432] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.532075][ T6432] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.545240][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.548117][ T6431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.550643][ T6431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.552644][ T6432] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.555279][ T6432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.557225][ T6432] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.561064][ T6432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.562888][ T6432] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.564505][ T6432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.565667][ T5996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.568352][ T5996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.570530][ T5996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.692694][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 35.807667][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.809350][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.811401][ T6427] bridge_slave_0: entered allmulticast mode [ 35.813196][ T6427] bridge_slave_0: entered promiscuous mode [ 35.816181][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.817652][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.819161][ T6427] bridge_slave_1: entered allmulticast mode [ 35.821437][ T6427] bridge_slave_1: entered promiscuous mode [ 35.833941][ T6426] chnl_net:caif_netlink_parms(): no params data found [ 35.865312][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 35.873407][ T6433] chnl_net:caif_netlink_parms(): no params data found [ 35.882998][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.926998][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.928566][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.930807][ T6426] bridge_slave_0: entered allmulticast mode [ 35.932508][ T6426] bridge_slave_0: entered promiscuous mode [ 35.936616][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.938582][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.940268][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.941993][ T6426] bridge_slave_1: entered allmulticast mode [ 35.943655][ T6426] bridge_slave_1: entered promiscuous mode [ 35.992689][ T6427] team0: Port device team_slave_0 added [ 35.996255][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.003358][ T6427] team0: Port device team_slave_1 added [ 36.005827][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.045681][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.047265][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.048810][ T6436] bridge_slave_0: entered allmulticast mode [ 36.050743][ T6436] bridge_slave_0: entered promiscuous mode [ 36.068725][ T6426] team0: Port device team_slave_0 added [ 36.072079][ T6426] team0: Port device team_slave_1 added [ 36.073541][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.075004][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.076561][ T6436] bridge_slave_1: entered allmulticast mode [ 36.078353][ T6436] bridge_slave_1: entered promiscuous mode [ 36.091658][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.093192][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.098603][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.103591][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.105090][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.110637][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.124008][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.125975][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.127993][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.129596][ T6433] bridge_slave_0: entered allmulticast mode [ 36.135091][ T6433] bridge_slave_0: entered promiscuous mode [ 36.162853][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.165027][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.166611][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.172211][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.174957][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.176506][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.178092][ T6433] bridge_slave_1: entered allmulticast mode [ 36.183539][ T6433] bridge_slave_1: entered promiscuous mode [ 36.199075][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.200750][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.206193][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.230015][ T6436] team0: Port device team_slave_0 added [ 36.239554][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.271786][ T6427] hsr_slave_0: entered promiscuous mode [ 36.300046][ T6427] hsr_slave_1: entered promiscuous mode [ 36.351533][ T6436] team0: Port device team_slave_1 added [ 36.354493][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.373172][ T6433] team0: Port device team_slave_0 added [ 36.384164][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.385674][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.391057][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.398589][ T6433] team0: Port device team_slave_1 added [ 36.404510][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 36.418685][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.421039][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.426274][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.435644][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.437152][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.443002][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.471523][ T6426] hsr_slave_0: entered promiscuous mode [ 36.520774][ T6426] hsr_slave_1: entered promiscuous mode [ 36.570192][ T6426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.571894][ T6426] Cannot create hsr debugfs directory [ 36.577203][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.578720][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.584210][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.661342][ T6433] hsr_slave_0: entered promiscuous mode [ 36.710110][ T6433] hsr_slave_1: entered promiscuous mode [ 36.749950][ T6433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.751556][ T6433] Cannot create hsr debugfs directory [ 36.831367][ T6436] hsr_slave_0: entered promiscuous mode [ 36.870199][ T6436] hsr_slave_1: entered promiscuous mode [ 36.909899][ T6436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.911507][ T6436] Cannot create hsr debugfs directory [ 36.955327][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.956917][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.958396][ T6437] bridge_slave_0: entered allmulticast mode [ 36.960458][ T6437] bridge_slave_0: entered promiscuous mode [ 36.971859][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.973460][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.974927][ T6437] bridge_slave_1: entered allmulticast mode [ 36.976699][ T6437] bridge_slave_1: entered promiscuous mode [ 37.010989][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.025728][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.057335][ T6437] team0: Port device team_slave_0 added [ 37.071291][ T6427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.076828][ T6437] team0: Port device team_slave_1 added [ 37.088965][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.090792][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.095828][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.098533][ T6427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.101775][ T6427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.106882][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.108371][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.114360][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.119644][ T6427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.192042][ T6437] hsr_slave_0: entered promiscuous mode [ 37.230329][ T6437] hsr_slave_1: entered promiscuous mode [ 37.269804][ T6437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.271415][ T6437] Cannot create hsr debugfs directory [ 37.307457][ T6433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.311449][ T6433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.315505][ T6433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.318710][ T6433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.369661][ T6426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.381582][ T6426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.384632][ T6426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.393101][ T6426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.421121][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.427987][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.447567][ T6436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.452302][ T6436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.456103][ T6436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.461016][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.462654][ T4433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.465510][ T6436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.481598][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.483131][ T4772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.540361][ T5996] Bluetooth: hci1: command tx timeout [ 37.556096][ T6437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.568424][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.571881][ T6437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.575855][ T6437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.579106][ T6437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.600993][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.615713][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.620067][ T6429] Bluetooth: hci0: command tx timeout [ 37.620437][ T6432] Bluetooth: hci3: command tx timeout [ 37.621472][ T6429] Bluetooth: hci2: command tx timeout [ 37.623444][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.624101][ T5996] Bluetooth: hci4: command tx timeout [ 37.625325][ T4433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.645097][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.646585][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.652886][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.662612][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.666656][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.673994][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.675558][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.680521][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.697759][ T6436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.700557][ T6436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.708069][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.709530][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.719212][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.720920][ T4772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.758622][ T6433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.765617][ T6433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.786151][ T4590] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.787701][ T4590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.797714][ T6427] veth0_vlan: entered promiscuous mode [ 37.829693][ T6427] veth1_vlan: entered promiscuous mode [ 37.850507][ T6426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.852684][ T6426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.857434][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.890727][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.899222][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.934370][ T6427] veth0_macvtap: entered promiscuous mode [ 37.937495][ T6427] veth1_macvtap: entered promiscuous mode [ 37.945441][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.948745][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.950244][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.953088][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.954637][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.983307][ T6437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.985440][ T6437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.009447][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.025811][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.040503][ T6436] veth0_vlan: entered promiscuous mode [ 38.051765][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.060246][ T6433] veth0_vlan: entered promiscuous mode [ 38.065495][ T6436] veth1_vlan: entered promiscuous mode [ 38.083266][ T6433] veth1_vlan: entered promiscuous mode [ 38.087586][ T6436] veth0_macvtap: entered promiscuous mode [ 38.097415][ T6426] veth0_vlan: entered promiscuous mode [ 38.103497][ T6427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.105507][ T6427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.107362][ T6427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.109146][ T6427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.128525][ T6436] veth1_macvtap: entered promiscuous mode [ 38.133284][ T6426] veth1_vlan: entered promiscuous mode [ 38.148202][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.196760][ T6433] veth0_macvtap: entered promiscuous mode [ 38.199402][ T6426] veth0_macvtap: entered promiscuous mode [ 38.204748][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.206909][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.209604][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.228480][ T6433] veth1_macvtap: entered promiscuous mode [ 38.231674][ T6426] veth1_macvtap: entered promiscuous mode [ 38.244883][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.247091][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.251721][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.265445][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.267680][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.270922][ T4501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.272545][ T4501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.275633][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.277747][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.280756][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.283250][ T6436] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.285094][ T6436] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.286855][ T6436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.288771][ T6436] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.295097][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.297438][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.299432][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.301748][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.303792][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.305965][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.309000][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.323150][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.325373][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.327426][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.329594][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.333081][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.335849][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.337945][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.341293][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.343429][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.345806][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.348013][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.351012][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.368651][ T6433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.371174][ T6433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.373030][ T6433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.374841][ T6433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.388316][ T6426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.391282][ T6426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.393096][ T6426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.394996][ T6426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.402318][ T4590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.403956][ T4590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.436694][ T4501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.442915][ T4501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.497801][ T4501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.499413][ T4501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.504558][ T6437] veth0_vlan: entered promiscuous mode [ 38.506207][ T6427] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.528017][ T6437] veth1_vlan: entered promiscuous mode [ 38.538445][ T4524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.550778][ T4524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.596152][ T6512] loop3: detected capacity change from 0 to 128 [ 38.605006][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.608246][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.626601][ T6512] syz.3.4: attempt to access beyond end of device [ 38.626601][ T6512] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 38.637094][ T6513] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 38.654203][ T6437] veth0_macvtap: entered promiscuous mode [ 38.671522][ T4590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.676931][ T4590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.683470][ T6437] veth1_macvtap: entered promiscuous mode [ 38.686711][ T4501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.688395][ T4501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.737136][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.739336][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.743863][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.758469][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.766234][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.768385][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.771027][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.777333][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.782127][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.798625][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.801931][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.809588][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.812725][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.814679][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.816858][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.818830][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.837246][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.845054][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.855368][ T6437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.857336][ T6437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.859037][ T6437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.865359][ T6437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.997205][ T30] audit: type=1326 audit(38.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.004692][ T4772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.006289][ T4772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.031621][ T30] audit: type=1326 audit(38.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.038618][ T30] audit: type=1326 audit(38.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.038649][ T30] audit: type=1326 audit(38.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.038673][ T30] audit: type=1326 audit(38.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.038697][ T30] audit: type=1326 audit(38.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.038719][ T30] audit: type=1326 audit(38.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.038743][ T30] audit: type=1326 audit(38.990:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.038765][ T30] audit: type=1326 audit(38.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.038790][ T30] audit: type=1326 audit(39.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 39.052588][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.052625][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.902567][ T6429] Bluetooth: hci1: command tx timeout [ 39.904072][ T6429] Bluetooth: hci2: command tx timeout [ 39.905484][ T6429] Bluetooth: hci4: command tx timeout [ 39.907572][ T6429] Bluetooth: hci3: command tx timeout [ 39.909015][ T6429] Bluetooth: hci0: command tx timeout [ 40.081405][ T6544] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 40.083255][ T6544] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 40.084941][ T6544] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 40.228130][ T6552] loop4: detected capacity change from 0 to 512 [ 40.243233][ T6552] ======================================================= [ 40.243233][ T6552] WARNING: The mand mount option has been deprecated and [ 40.243233][ T6552] and is ignored by this kernel. Remove the mand [ 40.243233][ T6552] option from the mount to silence this warning. [ 40.243233][ T6552] ======================================================= [ 40.303506][ T6574] Cannot find add_set index 0 as target [ 40.373803][ T6581] bond0: entered promiscuous mode [ 40.375119][ T6581] bond_slave_0: entered promiscuous mode [ 40.376735][ T6581] bond_slave_1: entered promiscuous mode [ 40.399549][ T6552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 40.401908][ T6552] System zones: 0-2, 18-18, 34-34 [ 40.465721][ T6552] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.19: bg 0: block 248: padding at end of block bitmap is not set [ 40.474801][ T6552] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.19: Failed to acquire dquot type 1 [ 40.484964][ T6552] EXT4-fs (loop4): 1 truncate cleaned up [ 40.486717][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.527304][ T6594] loop3: detected capacity change from 0 to 512 [ 40.547573][ T6594] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.32: corrupted xattr block 95: invalid header [ 40.551129][ T6552] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 40.554624][ T6594] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 40.557474][ T6594] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.32: bg 0: block 7: invalid block bitmap [ 40.562427][ T6594] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 40.564958][ T6594] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.32: corrupted xattr block 95: invalid header [ 40.569283][ T6594] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 40.577628][ T6594] EXT4-fs (loop3): 1 orphan inode deleted [ 40.579470][ T6594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.625819][ T6427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.646733][ T6604] loop2: detected capacity change from 0 to 2048 [ 40.696572][ T6604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.730190][ T6436] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.752468][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.814032][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.817496][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.138278][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 41.143247][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 41.538459][ T6618] loop0: detected capacity change from 0 to 1024 [ 41.726036][ T6635] netlink: 56 bytes leftover after parsing attributes in process `syz.2.46'. [ 41.728129][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 41.731639][ T6618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.826800][ T6638] loop1: detected capacity change from 0 to 2048 [ 41.880807][ T6638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.890794][ T6433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.942047][ T6426] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.946281][ T6437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.960861][ T6648] Illegal XDP return value 3211698176 on prog (id 1) dev N/A, expect packet loss! [ 41.982979][ T6429] Bluetooth: hci3: command tx timeout [ 41.984154][ T6429] Bluetooth: hci4: command tx timeout [ 41.985240][ T6429] Bluetooth: hci2: command tx timeout [ 42.004483][ T6435] Bluetooth: hci1: command tx timeout [ 42.005478][ T5996] Bluetooth: hci0: command tx timeout [ 42.014555][ T6426] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.165977][ T6664] loop2: detected capacity change from 0 to 128 [ 42.334589][ T6674] loop4: detected capacity change from 0 to 2048 [ 42.384655][ T6674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.651650][ T6437] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.318966][ T6437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.622241][ T6719] loop2: detected capacity change from 0 to 512 [ 43.637746][ T6719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.642873][ T6724] loop4: detected capacity change from 0 to 2048 [ 43.695860][ T6724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.705889][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 43.706399][ T6730] mmap: syz.3.85 (6730) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.777208][ T6437] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.794274][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'. [ 43.825898][ T6732] loop0: detected capacity change from 0 to 512 [ 43.839313][ T6437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.859484][ T6732] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.86: corrupted in-inode xattr: invalid ea_ino [ 43.867416][ T6732] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.86: couldn't read orphan inode 15 (err -117) [ 43.875350][ T6732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.912511][ T6743] loop3: detected capacity change from 0 to 2048 [ 43.916071][ T6743] EXT4-fs: Ignoring removed orlov option [ 43.917284][ T6743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.947697][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.007990][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 44.008007][ T30] audit: type=1326 audit(43.980:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8954534c code=0x7ffc0000 [ 44.022398][ T6432] Bluetooth: hci2: command tx timeout [ 44.022700][ T5996] Bluetooth: hci1: command tx timeout [ 44.023669][ T6432] Bluetooth: hci4: command tx timeout [ 44.023695][ T6432] Bluetooth: hci3: command tx timeout [ 44.039913][ T30] audit: type=1326 audit(43.980:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8a2f7904 code=0x7ffc0000 [ 44.044080][ T30] audit: type=1326 audit(43.980:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=212 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 44.048313][ T30] audit: type=1326 audit(43.990:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8954534c code=0x7ffc0000 [ 44.052895][ T30] audit: type=1326 audit(43.990:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8a2f7904 code=0x7ffc0000 [ 44.056839][ T30] audit: type=1326 audit(43.990:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=212 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 44.061499][ T5996] Bluetooth: hci0: command tx timeout [ 44.062838][ T30] audit: type=1326 audit(44.000:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8954534c code=0x7ffc0000 [ 44.067632][ T30] audit: type=1326 audit(44.000:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8a2f7904 code=0x7ffc0000 [ 44.072521][ T30] audit: type=1326 audit(44.000:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=212 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 44.076990][ T30] audit: type=1326 audit(44.010:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8954534c code=0x7ffc0000 [ 44.087590][ T6757] loop4: detected capacity change from 0 to 1024 [ 44.112794][ T6433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.276104][ T6757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.323639][ T6757] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 33 with error 28 [ 44.326349][ T6757] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.326349][ T6757] [ 44.328485][ T6757] EXT4-fs (loop4): Total free blocks count 0 [ 44.329784][ T6757] EXT4-fs (loop4): Free/Dirty block details [ 44.331030][ T6757] EXT4-fs (loop4): free_blocks=0 [ 44.332017][ T6757] EXT4-fs (loop4): dirty_blocks=0 [ 44.332992][ T6757] EXT4-fs (loop4): Block reservation details [ 44.334207][ T6757] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 44.370011][ T6437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.499657][ T6788] team_slave_0: entered promiscuous mode [ 44.501030][ T6788] team_slave_1: entered promiscuous mode [ 44.507946][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.513195][ T6788] macsec1: entered promiscuous mode [ 44.523221][ T6788] team0: entered promiscuous mode [ 44.524621][ T6788] macsec1: entered allmulticast mode [ 44.526435][ T6788] team0: entered allmulticast mode [ 44.527630][ T6788] team_slave_0: entered allmulticast mode [ 44.539861][ T6788] team_slave_1: entered allmulticast mode [ 44.544601][ T6788] team0: left allmulticast mode [ 44.545674][ T6788] team_slave_0: left allmulticast mode [ 44.546853][ T6788] team_slave_1: left allmulticast mode [ 44.548077][ T6788] team0: left promiscuous mode [ 44.549303][ T6788] team_slave_0: left promiscuous mode [ 44.550562][ T6788] team_slave_1: left promiscuous mode [ 44.765939][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 44.783575][ T6819] RDS: rds_bind could not find a transport for fe80::21, load rds_tcp or rds_rdma? [ 44.911685][ T6824] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.926230][ T6829] loop1: detected capacity change from 0 to 128 [ 45.133639][ T6841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.673477][ T6861] futex_wake_op: syz.2.141 tries to shift op by -1; fix this program [ 47.542025][ T6585] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 56.100089][ T6874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.249458][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 56.249476][ T30] audit: type=1326 audit(56.200:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.255424][ T30] audit: type=1326 audit(56.210:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.259472][ T30] audit: type=1326 audit(56.210:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.276422][ T30] audit: type=1326 audit(56.210:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.288892][ T30] audit: type=1326 audit(56.210:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.293378][ T30] audit: type=1326 audit(56.210:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.297563][ T30] audit: type=1326 audit(56.210:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.302685][ T30] audit: type=1326 audit(56.220:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.307014][ T30] audit: type=1326 audit(56.220:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.312033][ T30] audit: type=1326 audit(56.240:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 56.361596][ T6890] loop2: detected capacity change from 0 to 2048 [ 56.380151][ T6902] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 56.504766][ T6890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.537252][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.642910][ T6929] loop2: detected capacity change from 0 to 2048 [ 56.650087][ T6930] Zero length message leads to an empty skb [ 56.655526][ T6931] netlink: 'syz.3.169': attribute type 3 has an invalid length. [ 56.694649][ T6929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.718780][ T6938] loop4: detected capacity change from 0 to 128 [ 56.720724][ T6938] EXT4-fs: Ignoring removed nobh option [ 56.743336][ T6938] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.765064][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.813690][ T6437] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.933473][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'. [ 57.317995][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 57.342476][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 57.344183][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.345640][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.347127][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.348603][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.350349][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.351873][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.353439][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.354858][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.356292][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.357787][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.359190][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.360789][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.362387][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.365044][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.366717][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.368120][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.370195][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.371850][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.373423][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.374947][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.376488][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.378035][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.379626][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.381431][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.382937][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.384491][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.386096][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.387664][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.389304][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.390967][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.392594][ T1761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.399008][ T1761] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 57.406581][ T6987] loop0: detected capacity change from 0 to 512 [ 57.436089][ T7005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'. [ 57.530497][ T7009] netlink: 268 bytes leftover after parsing attributes in process `syz.3.204'. [ 57.582193][ T7017] loop4: detected capacity change from 0 to 128 [ 58.643095][ T7044] netlink: 84 bytes leftover after parsing attributes in process `syz.2.216'. [ 59.147109][ T7076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.803235][ T7108] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 59.806076][ T7108] IPVS: Error joining to the multicast group [ 59.809212][ T7108] 8021q: VLANs not supported on ipvlan1 [ 59.904706][ T7072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.906109][ T7072] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.976702][ T7072] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.978454][ T7120] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 59.983084][ T7072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.984461][ T7072] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.989255][ T7072] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.000743][ T7072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.002571][ T7072] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.007579][ T7072] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.012964][ T7072] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 60.014352][ T7072] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.017393][ T7072] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.035116][ T7072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.040998][ T7072] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.043206][ T7072] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.101368][ T7130] netlink: 136 bytes leftover after parsing attributes in process `syz.2.252'. [ 60.103403][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 60.322810][ T7145] loop2: detected capacity change from 0 to 2048 [ 60.351487][ T7145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.368013][ T7145] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.415398][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.548129][ T7171] loop2: detected capacity change from 0 to 512 [ 60.557442][ T7172] rdma_op 000000004f2dcddd conn xmit_rdma 0000000000000000 [ 60.601189][ T7171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.614305][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 60.658171][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.806419][ T7193] loop4: detected capacity change from 0 to 512 [ 60.934406][ T7205] loop4: detected capacity change from 0 to 512 [ 60.973331][ T7205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.179507][ T6437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.220705][ T5996] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.274472][ T7241] loop0: detected capacity change from 0 to 128 [ 61.276424][ T7241] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.291983][ T7241] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.403014][ T7250] loop2: detected capacity change from 0 to 128 [ 61.591626][ T7260] loop2: detected capacity change from 0 to 512 [ 61.595464][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 61.614139][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 61.614153][ T30] audit: type=1326 audit(61.590:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7265 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 61.614962][ T7266] syz.0.310 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.615580][ T30] audit: type=1326 audit(61.590:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7265 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 61.640829][ T30] audit: type=1326 audit(61.590:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7265 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=103 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 61.651153][ T7260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.654116][ T30] audit: type=1326 audit(61.630:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7265 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7ffc0000 [ 61.673597][ T7263] loop1: detected capacity change from 0 to 512 [ 61.680481][ T7263] EXT4-fs: Ignoring removed oldalloc option [ 61.688382][ T30] audit: type=1326 audit(61.660:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 61.693026][ T30] audit: type=1326 audit(61.660:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 61.697786][ T30] audit: type=1326 audit(61.660:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 61.703397][ T30] audit: type=1326 audit(61.660:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 61.708280][ T30] audit: type=1326 audit(61.660:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 61.721244][ T7263] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.311: Parent and EA inode have the same ino 15 [ 61.724797][ T7263] EXT4-fs (loop1): Remounting filesystem read-only [ 61.726361][ T7263] EXT4-fs (loop1): 1 orphan inode deleted [ 61.727963][ T7263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.763400][ T30] audit: type=1326 audit(61.740:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 61.772592][ T7275] capability: warning: `syz.4.312' uses deprecated v2 capabilities in a way that may be insecure [ 61.797315][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.903997][ T6426] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.018292][ T7289] loop4: detected capacity change from 0 to 128 [ 62.019878][ T6429] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.021211][ T6429] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.022524][ T5996] Bluetooth: hci4: command 0x0c1a tx timeout [ 62.025746][ T7289] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.095981][ T7289] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.096381][ T7298] loop1: detected capacity change from 0 to 512 [ 62.100467][ T5996] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.163157][ T7298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.168919][ T7278] futex_wake_op: syz.3.316 tries to shift op by -1; fix this program [ 62.270889][ T6426] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.282440][ T7308] loop2: detected capacity change from 0 to 764 [ 62.351834][ T7308] Symlink component flag not implemented [ 62.527189][ T7326] netlink: 'syz.4.335': attribute type 153 has an invalid length. [ 62.807169][ T7347] x_tables: ip_tables: udp match: only valid for protocol 17 [ 62.877819][ T7351] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 62.881669][ T7351] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 62.883494][ T7351] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 63.299849][ T5996] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.408507][ T2251] cfg80211: failed to load regulatory.db [ 64.109229][ T5996] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.112139][ T5996] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.112881][ T6432] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.179885][ T6429] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.335844][ T7441] loop4: detected capacity change from 0 to 2048 [ 64.382974][ T7441] EXT4-fs (loop4): failed to initialize system zone (-117) [ 64.384607][ T7441] EXT4-fs (loop4): mount failed [ 64.503309][ T2344] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.505998][ T2344] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.542402][ T6479] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.631569][ T7467] loop4: detected capacity change from 0 to 128 [ 64.635036][ T7467] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.638398][ T7467] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.679873][ T6479] usb 1-1: device descriptor read/64, error -71 [ 64.919933][ T6479] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.049825][ T6479] usb 1-1: device descriptor read/64, error -71 [ 65.160387][ T6479] usb usb1-port1: attempt power cycle [ 65.206828][ T7490] __nla_validate_parse: 1 callbacks suppressed [ 65.206845][ T7490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.407'. [ 65.379922][ T6429] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.531186][ T6479] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 66.098720][ T6479] usb 1-1: device descriptor read/8, error -71 [ 66.191348][ T6429] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.191383][ T6432] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.192754][ T6429] Bluetooth: hci4: command 0x0c1a tx timeout [ 66.276203][ T5996] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.339957][ T6479] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 66.360900][ T6479] usb 1-1: device descriptor read/8, error -71 [ 66.376860][ T7515] netlink: 44 bytes leftover after parsing attributes in process `syz.4.417'. [ 66.390690][ T7517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.418'. [ 66.436792][ T7511] smc: net device bond0 applied user defined pnetid SYZ0 [ 66.448684][ T7511] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.473324][ T6479] usb usb1-port1: unable to enumerate USB device [ 66.596199][ T7530] netlink: 'syz.4.424': attribute type 13 has an invalid length. [ 66.598031][ T7530] netlink: 152 bytes leftover after parsing attributes in process `syz.4.424'. [ 66.600794][ T7530] syz_tun: refused to change device tx_queue_len [ 66.602305][ T7530] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 66.639550][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 66.639566][ T30] audit: type=1326 audit(66.610:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.646552][ T30] audit: type=1326 audit(66.620:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.651158][ T30] audit: type=1326 audit(66.620:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.655057][ T30] audit: type=1326 audit(66.620:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.658984][ T30] audit: type=1326 audit(66.620:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.664600][ T30] audit: type=1326 audit(66.620:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.668178][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 66.671902][ T7536] IPVS: Error joining to the multicast group [ 66.674228][ T30] audit: type=1326 audit(66.620:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.689326][ T30] audit: type=1326 audit(66.620:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.694095][ T30] audit: type=1326 audit(66.620:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.698691][ T30] audit: type=1326 audit(66.620:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8254d828 code=0x7ffc0000 [ 66.728239][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 66.733081][ T7540] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.735095][ T7540] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.736966][ T7540] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.738802][ T7540] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.741638][ T7540] vxlan0: entered promiscuous mode [ 66.742813][ T7540] vxlan0: entered allmulticast mode [ 66.825341][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.827171][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.848519][ T7549] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 66.850717][ T7549] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 79.280613][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 79.280631][ T30] audit: type=1326 audit(79.260:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.296423][ T30] audit: type=1326 audit(79.270:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.312224][ T30] audit: type=1326 audit(79.270:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.316603][ T30] audit: type=1326 audit(79.270:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.325214][ T30] audit: type=1326 audit(79.270:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.334301][ T30] audit: type=1326 audit(79.270:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.338719][ T30] audit: type=1326 audit(79.270:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.364075][ T30] audit: type=1326 audit(79.270:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.377025][ T30] audit: type=1326 audit(79.270:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.389131][ T30] audit: type=1326 audit(79.270:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8954d828 code=0x7ffc0000 [ 79.427249][ T7632] loop2: detected capacity change from 0 to 512 [ 79.429033][ T7632] EXT4-fs: inline encryption not supported [ 79.465536][ T7632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.542360][ T7643] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.465: corrupted inode contents [ 79.546190][ T7643] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.465: mark_inode_dirty error [ 79.549210][ T7643] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.465: corrupted inode contents [ 79.804188][ T7594] team0 (unregistering): Port device team_slave_0 removed [ 79.812092][ T7594] team0 (unregistering): Port device team_slave_1 removed [ 79.856899][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 79.886182][ T7632] netlink: 'syz.2.465': attribute type 10 has an invalid length. [ 79.949887][ T7632] geneve0: entered promiscuous mode [ 79.960481][ T7632] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 79.961500][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.469'. [ 79.971510][ T7642] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 79.995169][ T7642] syz_tun: entered promiscuous mode [ 80.003799][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.014930][ T7642] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 80.137165][ T6479] IPVS: starting estimator thread 0... [ 80.138805][ T7651] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 80.239900][ T7659] IPVS: using max 26 ests per chain, 62400 per kthread [ 80.499456][ T7692] netlink: 256 bytes leftover after parsing attributes in process `syz.3.486'. [ 80.508762][ T7692] ksmbd: Unknown IPC event: 3, ignore. [ 80.535505][ T7697] loop4: detected capacity change from 0 to 512 [ 80.545564][ T7696] netlink: 'syz.2.487': attribute type 4 has an invalid length. [ 80.572962][ T7697] EXT4-fs (loop4): too many log groups per flexible block group [ 80.578825][ T7699] loop0: detected capacity change from 0 to 2048 [ 80.581333][ T7697] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 80.583435][ T7699] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.584962][ T7697] EXT4-fs (loop4): mount failed [ 80.652051][ T7699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.669139][ T7699] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.489: bg 0: block 234: padding at end of block bitmap is not set [ 80.673763][ T7708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.490'. [ 80.681467][ T7699] EXT4-fs (loop0): Remounting filesystem read-only [ 80.724927][ T6433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.856207][ T6479] hid (null): bogus close delimiter [ 80.857571][ T6479] hid (null): unknown global tag 0x30 [ 80.859826][ T6479] hid (null): unknown global tag 0xd [ 80.860959][ T6479] hid (null): unknown global tag 0xd [ 80.863044][ T6479] hid-generic 0000:067D:000A.0002: unknown main item tag 0x3 [ 80.864524][ T6479] hid-generic 0000:067D:000A.0002: collection stack underflow [ 80.866135][ T6479] hid-generic 0000:067D:000A.0002: item 0 2 0 12 parsing failed [ 80.867820][ T6479] hid-generic 0000:067D:000A.0002: probe with driver hid-generic failed with error -22 [ 80.983617][ T7744] loop2: detected capacity change from 0 to 2048 [ 80.986162][ T7744] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.053247][ T7744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.098016][ T7750] veth1_macvtap: left promiscuous mode [ 81.101656][ T7744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.505: bg 0: block 234: padding at end of block bitmap is not set [ 81.108069][ T7760] netlink: '+}[@': attribute type 4 has an invalid length. [ 81.109537][ T7760] netlink: 3657 bytes leftover after parsing attributes in process `+}[@'. [ 81.279930][ T7744] EXT4-fs (loop2): Remounting filesystem read-only [ 81.324869][ T7813] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.392103][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.466801][ T7823] lo: entered promiscuous mode [ 81.469248][ T7823] tunl0: entered promiscuous mode [ 81.478465][ T7823] gre0: entered promiscuous mode [ 81.507229][ T7823] gretap0: entered promiscuous mode [ 81.519980][ T7823] erspan0: entered promiscuous mode [ 81.548850][ T7823] ip_vti0: entered promiscuous mode [ 81.559485][ T7823] ip6_vti0: entered promiscuous mode [ 81.574245][ T7823] sit0: entered promiscuous mode [ 81.593633][ T7823] ip6tnl0: entered promiscuous mode [ 81.607362][ T7823] ip6gre0: entered promiscuous mode [ 81.636249][ T7823] syz_tun: entered promiscuous mode [ 81.651984][ T7838] process 'syz.1.521' launched './file1' with NULL argv: empty string added [ 81.655106][ T7823] ip6gretap0: entered promiscuous mode [ 81.666248][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.668501][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.679301][ T7823] bridge0: entered promiscuous mode [ 81.701309][ T7823] vcan0: entered promiscuous mode [ 81.727490][ T7823] bond0: entered promiscuous mode [ 81.728760][ T7823] bond_slave_0: entered promiscuous mode [ 81.736308][ T7823] bond_slave_1: entered promiscuous mode [ 81.757694][ T7823] team0: entered promiscuous mode [ 81.766713][ T7823] team_slave_0: entered promiscuous mode [ 81.768165][ T7823] team_slave_1: entered promiscuous mode [ 81.776005][ T7823] dummy0: entered promiscuous mode [ 81.789655][ T7823] nlmon0: entered promiscuous mode [ 81.796794][ T7850] loop1: detected capacity change from 0 to 1024 [ 81.800220][ T7823] caif0: entered promiscuous mode [ 81.807129][ T7823] batadv0: entered promiscuous mode [ 81.813562][ T7823] vxcan0: entered promiscuous mode [ 81.817915][ T7823] vxcan1: entered promiscuous mode [ 81.826158][ T7823] veth0: entered promiscuous mode [ 81.834567][ T7823] veth1: entered promiscuous mode [ 81.845675][ T7850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.863401][ T7850] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.523: missing EA_INODE flag [ 81.873473][ T7850] EXT4-fs (loop1): Remounting filesystem read-only [ 81.898856][ T6426] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.911418][ T7823] wg0: entered promiscuous mode [ 81.990299][ T7823] wg1: entered promiscuous mode [ 81.993245][ T7823] wg2: entered promiscuous mode [ 82.000859][ T7823] veth0_to_bridge: entered promiscuous mode [ 82.026976][ T7823] bridge_slave_0: left allmulticast mode [ 82.028396][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.051963][ T7871] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 82.054294][ T7823] veth1_to_bridge: entered promiscuous mode [ 82.061459][ T7823] bridge_slave_1: left allmulticast mode [ 82.065033][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.075977][ T7823] veth0_to_bond: entered promiscuous mode [ 82.081917][ T7823] bond0: (slave bond_slave_0): Releasing backup interface [ 82.122673][ T7823] veth1_to_bond: entered promiscuous mode [ 82.136724][ T7823] bond0: (slave bond_slave_1): Releasing backup interface [ 82.185805][ T7823] veth0_to_team: entered promiscuous mode [ 82.201165][ T7885] 9pnet_fd: Insufficient options for proto=fd [ 82.202617][ T7823] team0: Port device team_slave_0 removed [ 82.205395][ T7823] veth1_to_team: entered promiscuous mode [ 82.218584][ T7823] team0: Port device team_slave_1 removed [ 82.224179][ T7823] veth0_to_batadv: entered promiscuous mode [ 82.231593][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.235337][ T7823] batadv_slave_0: entered promiscuous mode [ 82.245056][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.259654][ T7823] veth1_to_batadv: entered promiscuous mode [ 82.266820][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.313326][ T7823] batadv_slave_1: entered promiscuous mode [ 82.323743][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.328543][ T7823] xfrm0: entered promiscuous mode [ 82.337412][ T7823] veth0_to_hsr: entered promiscuous mode [ 82.350686][ T7823] veth1_to_hsr: entered promiscuous mode [ 82.377579][ T7823] hsr0: entered promiscuous mode [ 82.388353][ T7823] veth1_virt_wifi: entered promiscuous mode [ 82.401098][ T7823] veth0_virt_wifi: entered promiscuous mode [ 82.409199][ T7823] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 82.444754][ T7823] vlan0: entered promiscuous mode [ 82.446804][ T7904] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.532'. [ 82.451480][ T7823] vlan1: entered promiscuous mode [ 82.480662][ T7823] macvlan0: entered promiscuous mode [ 82.540164][ T7823] macvlan1: entered promiscuous mode [ 82.544533][ T7823] ipvlan0: entered promiscuous mode [ 82.545775][ T7823] ipvlan1: entered promiscuous mode [ 82.572259][ T7823] bond0: (slave geneve0): Releasing backup interface [ 82.602257][ T7823] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.604126][ T7823] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.606744][ T7823] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.608704][ T7823] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.662967][ T7823] geneve1: entered promiscuous mode [ 82.673047][ T7823] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 82.678317][ T7823] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 82.684654][ T7823] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 82.688982][ T7823] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 82.773113][ T7823] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 82.832046][ T7823] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 82.836298][ T7823] erspan1: entered promiscuous mode [ 82.837684][ T7823] veth2: entered promiscuous mode [ 82.838957][ T7823] veth3: entered promiscuous mode [ 83.092853][ T7965] 9pnet_fd: Insufficient options for proto=fd [ 83.415557][ T7987] loop1: detected capacity change from 0 to 128 [ 83.417775][ T7987] FAT-fs (loop1): bogus number of FAT sectors [ 83.419061][ T7987] FAT-fs (loop1): Can't find a valid FAT filesystem [ 83.463576][ T7992] 9pnet_fd: Insufficient options for proto=fd [ 83.526719][ T7998] loop2: detected capacity change from 0 to 128 [ 83.653672][ T8003] loop2: detected capacity change from 0 to 512 [ 83.993802][ T8028] vlan2: entered promiscuous mode [ 83.998492][ T8028] vlan2: entered allmulticast mode [ 84.000776][ T8028] hsr_slave_1: entered allmulticast mode [ 84.017775][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 84.034757][ T8039] netlink: 256 bytes leftover after parsing attributes in process `syz.1.567'. [ 84.050231][ T8039] ksmbd: Unknown IPC event: 3, ignore. [ 84.074295][ T8041] loop0: detected capacity change from 0 to 512 [ 84.095105][ T8041] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.568: invalid indirect mapped block 256 (level 2) [ 84.104223][ T8041] EXT4-fs (loop0): 2 truncates cleaned up [ 84.105900][ T8041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.144456][ T6433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.213793][ T8028] hsr_slave_1 (unregistering): left allmulticast mode [ 84.400440][ T8056] pim6reg1: entered promiscuous mode [ 84.401661][ T8056] pim6reg1: entered allmulticast mode [ 84.495926][ T8090] loop0: detected capacity change from 0 to 512 [ 84.506484][ T8090] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 84.514468][ T8090] EXT4-fs: error: could not find journal device path [ 84.687505][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 84.693750][ T8102] macsec0: entered promiscuous mode [ 84.695136][ T8102] macsec0: entered allmulticast mode [ 84.696218][ T8102] batadv0: entered allmulticast mode [ 84.710045][ T8108] Falling back ldisc for ttyS3. [ 84.820399][ T8116] loop4: detected capacity change from 0 to 2048 [ 84.881408][ T8116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.906914][ T8119] loop2: detected capacity change from 0 to 2048 [ 84.908738][ T8119] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.946364][ T8119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.954969][ T8119] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.584: bg 0: block 234: padding at end of block bitmap is not set [ 84.958064][ T8119] EXT4-fs (loop2): Remounting filesystem read-only [ 85.002546][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.098394][ T8140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.163967][ T8140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.174758][ T8140] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 85.191889][ T8140] bond1: (slave vcan1): Error -95 calling set_mac_address [ 85.266983][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 85.475190][ T8116] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.481749][ T8116] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 85.484537][ T8116] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.484537][ T8116] [ 85.486671][ T8116] EXT4-fs (loop4): Total free blocks count 0 [ 85.487969][ T8116] EXT4-fs (loop4): Free/Dirty block details [ 85.489284][ T8116] EXT4-fs (loop4): free_blocks=2415919104 [ 85.493634][ T8116] EXT4-fs (loop4): dirty_blocks=8192 [ 85.494992][ T8116] EXT4-fs (loop4): Block reservation details [ 85.496276][ T8116] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 85.569600][ T38] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 85.569989][ T8170] loop2: detected capacity change from 0 to 2048 [ 85.575251][ T8170] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.602857][ T8170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.660749][ T6436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.807651][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 85.807667][ T30] audit: type=1326 audit(85.780:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8167 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7fc00000 [ 85.823200][ T30] audit: type=1326 audit(85.780:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8167 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d4d828 code=0x7fc00000 [ 85.998094][ T8189] netlink: 'syz.0.606': attribute type 4 has an invalid length. [ 85.998139][ T8189] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.606'. [ 86.060448][ T8192] sctp: [Deprecated]: syz.1.607 (pid 8192) Use of int in maxseg socket option. [ 86.060448][ T8192] Use struct sctp_assoc_value instead [ 86.367251][ T30] audit: type=1326 audit(86.340:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 86.368599][ T30] audit: type=1326 audit(86.340:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 86.384725][ T30] audit: type=1326 audit(86.350:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 86.384758][ T30] audit: type=1326 audit(86.350:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 86.384781][ T30] audit: type=1326 audit(86.350:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 86.859652][ T8253] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.626'. [ 86.860497][ T8249] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.626'. [ 87.032283][ T8256] loop0: detected capacity change from 0 to 8192 [ 87.070620][ T30] audit: type=1326 audit(87.040:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8270 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 87.074841][ T30] audit: type=1326 audit(87.040:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8270 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 87.079271][ T30] audit: type=1326 audit(87.040:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8270 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d4d828 code=0x7ffc0000 [ 87.465175][ T8298] netlink: 192 bytes leftover after parsing attributes in process `syz.0.640'. [ 87.682899][ T8315] nfs4: Bad value for 'source' [ 87.772753][ T8319] loop0: detected capacity change from 0 to 164 [ 87.783122][ T8319] Unable to read rock-ridge attributes [ 87.792681][ T8319] Unable to read rock-ridge attributes [ 87.873846][ T8326] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.941218][ T8347] binder: 8346:8347 tried to acquire reference to desc 0, got 1 instead [ 88.942629][ T8344] netlink: 'syz.4.658': attribute type 27 has an invalid length. [ 88.953810][ T8347] binder: 8346:8347 got transaction with invalid data ptr [ 88.955415][ T8347] binder: 8346:8347 transaction call to 8346:0 failed 6/29201/-14, size 0-4088 line 3436 [ 88.965740][ T6556] binder: undelivered TRANSACTION_COMPLETE [ 88.967224][ T6556] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.008981][ T6556] binder: undelivered transaction 5, process died. [ 89.193773][ T8344] bond0: (slave bond_slave_0): Releasing backup interface [ 89.197394][ T5996] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 90.656095][ T8376] smc: net device bond0 applied user defined pnetid SYZ0 [ 90.660281][ T8370] smc: net device bond0 erased user defined pnetid SYZ0 [ 91.653386][ T8410] loop0: detected capacity change from 0 to 1764 [ 91.654096][ T8401] loop2: detected capacity change from 0 to 40427 [ 91.667250][ T8401] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 91.669461][ T8401] F2FS-fs (loop2): Image doesn't support compression [ 91.679164][ T8401] F2FS-fs (loop2): invalid crc value [ 91.686548][ T8401] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.331948][ T8401] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.381659][ T8401] syz.2.675: attempt to access beyond end of device [ 92.381659][ T8401] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.392871][ T8401] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 93.323916][ T8432] loop0: detected capacity change from 0 to 1764 [ 93.338963][ T5996] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 93.340978][ T5996] Bluetooth: hci2: Injecting HCI hardware error event [ 93.343263][ T5996] Bluetooth: hci2: hardware error 0x00 [ 93.371226][ T8428] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 93.693000][ T8436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.687'. [ 93.694940][ T8436] netlink: 35 bytes leftover after parsing attributes in process `syz.3.687'. [ 93.696780][ T8436] netlink: 'syz.3.687': attribute type 5 has an invalid length. [ 93.698564][ T8436] netlink: 35 bytes leftover after parsing attributes in process `syz.3.687'. [ 93.920421][ T8447] loop2: detected capacity change from 0 to 128 [ 93.932144][ T8447] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.063577][ T8447] EXT4-fs (loop2): shut down requested (0) [ 94.069034][ T8454] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.692'. [ 94.072063][ T8451] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.692'. [ 94.121956][ T8457] loop4: detected capacity change from 0 to 1764 [ 94.876810][ T6436] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.985059][ T8467] loop1: detected capacity change from 0 to 64 [ 95.290990][ T8475] xt_nat: multiple ranges no longer supported [ 95.979491][ T5996] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 96.092895][ T8467] hfs: get root inode failed [ 96.138967][ T8478] loop4: detected capacity change from 0 to 512 [ 96.147424][ T8478] ext4: Unknown parameter 'fowner' [ 96.231577][ T8465] loop0: detected capacity change from 0 to 32768 [ 96.344382][ T8465] JBD2: Ignoring recovery information on journal [ 96.366821][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.368780][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.491038][ T8465] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 96.545313][ T8489] loop1: detected capacity change from 0 to 1764 [ 97.317474][ T6433] ocfs2: Unmounting device (7,0) on (node local) [ 98.355006][ T8509] loop0: detected capacity change from 0 to 1024 [ 98.384580][ T8509] EXT4-fs (loop0): invalid first ino: 0 [ 98.743246][ T8534] netlink: 204 bytes leftover after parsing attributes in process `syz.3.717'. [ 99.106187][ T5996] ================================================================== [ 99.107942][ T5996] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xc4/0x130 [ 99.109629][ T5996] Read of size 8 at addr ffff0000f0418188 by task kworker/u9:1/5996 [ 99.111287][ T5996] [ 99.111788][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: kworker/u9:1 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 99.113868][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.115887][ T5996] Workqueue: hci4 hci_rx_work [ 99.116909][ T5996] Call trace: [ 99.117558][ T5996] show_stack+0x2c/0x3c (C) [ 99.118538][ T5996] dump_stack_lvl+0xe4/0x150 [ 99.119507][ T5996] print_report+0x198/0x538 [ 99.120396][ T5996] kasan_report+0xd8/0x138 [ 99.121298][ T5996] __asan_report_load8_noabort+0x20/0x2c [ 99.122575][ T5996] l2cap_sock_ready_cb+0xc4/0x130 [ 99.123662][ T5996] l2cap_le_start+0xa6c/0x1384 [ 99.124741][ T5996] l2cap_connect_cfm+0x57c/0xe24 [ 99.125831][ T5996] hci_connect_cfm+0xa0/0x13c [ 99.126977][ T5996] le_conn_complete_evt+0xa1c/0xf0c [ 99.128165][ T5996] hci_le_conn_complete_evt+0x114/0x404 [ 99.129292][ T5996] hci_le_meta_evt+0x2a4/0x478 [ 99.130340][ T5996] hci_event_packet+0x890/0x106c [ 99.131690][ T5996] hci_rx_work+0x318/0xa80 [ 99.132710][ T5996] process_one_work+0x7bc/0x1600 [ 99.133851][ T5996] worker_thread+0x97c/0xeec [ 99.134898][ T5996] kthread+0x288/0x310 [ 99.135864][ T5996] ret_from_fork+0x10/0x20 [ 99.136949][ T5996] [ 99.137505][ T5996] Allocated by task 8553: [ 99.138425][ T5996] kasan_save_track+0x40/0x78 [ 99.139467][ T5996] kasan_save_alloc_info+0x40/0x50 [ 99.140627][ T5996] __kasan_kmalloc+0xac/0xc4 [ 99.141604][ T5996] __kmalloc_noprof+0x2a4/0x49c [ 99.142590][ T5996] sk_prot_alloc+0xc4/0x1f0 [ 99.143551][ T5996] sk_alloc+0x44/0x3f0 [ 99.144417][ T5996] bt_sock_alloc+0x4c/0x304 [ 99.145457][ T5996] l2cap_sock_create+0x140/0x2b8 [ 99.146540][ T5996] bt_sock_create+0x14c/0x248 [ 99.147877][ T5996] __sock_create+0x43c/0x8a0 [ 99.148908][ T5996] __sys_socket+0x134/0x340 [ 99.149945][ T5996] __arm64_sys_socket+0x7c/0x94 [ 99.151058][ T5996] invoke_syscall+0x98/0x2b8 [ 99.152253][ T5996] el0_svc_common+0x130/0x23c [ 99.153471][ T5996] do_el0_svc+0x48/0x58 [ 99.154364][ T5996] el0_svc+0x54/0x168 [ 99.155203][ T5996] el0t_64_sync_handler+0x84/0x108 [ 99.156364][ T5996] el0t_64_sync+0x198/0x19c [ 99.157380][ T5996] [ 99.157926][ T5996] Freed by task 8553: [ 99.158877][ T5996] kasan_save_track+0x40/0x78 [ 99.159922][ T5996] kasan_save_free_info+0x54/0x6c [ 99.161046][ T5996] __kasan_slab_free+0x64/0x8c [ 99.162154][ T5996] kfree+0x184/0x47c [ 99.163053][ T5996] __sk_destruct+0x4b8/0x74c [ 99.164241][ T5996] __sk_free+0x388/0x4f4 [ 99.165189][ T5996] sk_free+0x60/0xc8 [ 99.166166][ T5996] l2cap_sock_kill+0x12c/0x234 [ 99.167272][ T5996] l2cap_sock_release+0x138/0x1b4 [ 99.168406][ T5996] sock_close+0xa4/0x1e8 [ 99.169311][ T5996] __fput+0x1bc/0x75c [ 99.170151][ T5996] ____fput+0x20/0x30 [ 99.171103][ T5996] task_work_run+0x230/0x2e0 [ 99.172169][ T5996] do_notify_resume+0x178/0x1f4 [ 99.173290][ T5996] el0_svc+0xac/0x168 [ 99.174164][ T5996] el0t_64_sync_handler+0x84/0x108 [ 99.175316][ T5996] el0t_64_sync+0x198/0x19c [ 99.176317][ T5996] [ 99.177018][ T5996] The buggy address belongs to the object at ffff0000f0418000 [ 99.177018][ T5996] which belongs to the cache kmalloc-2k of size 2048 [ 99.180212][ T5996] The buggy address is located 392 bytes inside of [ 99.180212][ T5996] freed 2048-byte region [ffff0000f0418000, ffff0000f0418800) [ 99.183243][ T5996] [ 99.183739][ T5996] The buggy address belongs to the physical page: [ 99.185039][ T5996] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130418 [ 99.186897][ T5996] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 99.188828][ T5996] anon flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 99.190556][ T5996] page_type: f5(slab) [ 99.191450][ T5996] raw: 05ffc00000000040 ffff0000c0002000 0000000000000000 dead000000000001 [ 99.193558][ T5996] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 99.195492][ T5996] head: 05ffc00000000040 ffff0000c0002000 0000000000000000 dead000000000001 [ 99.197499][ T5996] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 99.199471][ T5996] head: 05ffc00000000003 fffffdffc3c10601 ffffffffffffffff 0000000000000000 [ 99.201343][ T5996] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 99.203242][ T5996] page dumped because: kasan: bad access detected [ 99.204721][ T5996] [ 99.205213][ T5996] Memory state around the buggy address: [ 99.206420][ T5996] ffff0000f0418080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.208253][ T5996] ffff0000f0418100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.210125][ T5996] >ffff0000f0418180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.211853][ T5996] ^ [ 99.212799][ T5996] ffff0000f0418200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.214638][ T5996] ffff0000f0418280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.216439][ T5996] ================================================================== [ 99.219596][ T5996] Disabling lock debugging due to kernel taint [ 99.319330][ T8557] Bluetooth: MGMT ver 1.23 [ 99.582118][ T2251] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.729839][ T2251] usb 1-1: device descriptor read/64, error -71 [ 99.969801][ T2251] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.099875][ T2251] usb 1-1: device descriptor read/64, error -71 [ 100.211755][ T2251] usb usb1-port1: attempt power cycle [ 100.559846][ T2251] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.580523][ T2251] usb 1-1: device descriptor read/8, error -71 [ 100.819919][ T2251] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.850157][ T2251] usb 1-1: device descriptor read/8, error -71 [ 100.959879][ T2251] usb usb1-port1: unable to enumerate USB device