last executing test programs: 4m59.021635784s ago: executing program 32 (id=44): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r0, &(0x7f0000000300)="240000001a005f03e494d9ecfd8900a9c4244b4b0a150c000800e6331d8ddcccfe66fcd7", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) 4m42.12416608s ago: executing program 0 (id=76): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) 4m41.413431021s ago: executing program 0 (id=78): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) pipe2(&(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) sigaltstack(&(0x7f0000000080)={&(0x7f0000000040)=""/42, 0x80000004, 0x2a}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f3640f84e9200f01c3baf80c66b8ddfa728566efbafc0cec0f18088f01baf80c66b8d6948e8f66efbafc0cec26dfad1d00660f38828ef3ffbaa100ecba200066ed", 0x41}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m40.046982671s ago: executing program 33 (id=82): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x45) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x30000c6, &(0x7f00000134c0), 0x1, 0x561, &(0x7f0000001c40)="$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") openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0xa08802, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT], 0x1, 0x693, &(0x7f0000000ec0)="$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") removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=@random={'osx.', 'user.incfs.metadata\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mkdir(&(0x7f0000000280)='./file0\x00', 0x103) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) 4m40.031683462s ago: executing program 0 (id=84): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 4m39.652926734s ago: executing program 0 (id=87): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x210145b, 0x0) mount$9p_xen(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) 4m38.585900047s ago: executing program 0 (id=89): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x26020480) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, 0x0, &(0x7f0000000300)}, 0x20) 4m37.481059031s ago: executing program 0 (id=92): r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x2200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 4m37.354430038s ago: executing program 34 (id=92): r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x2200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 4m30.078142083s ago: executing program 3 (id=108): timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m29.877200284s ago: executing program 3 (id=110): socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/6, 0x7d) 4m29.241324981s ago: executing program 3 (id=112): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44543, 0x23) 4m29.057502913s ago: executing program 3 (id=114): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x5, 0x4) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) clock_gettime(0x0, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000240)=@can, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/127, 0x7f}, 0x5}], 0x1, 0x61, &(0x7f00000011c0)) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0x0, 0x0, 0x4cf5}, 0x4c, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd6c8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xb7, 0x7ffff, 0x0, 0x0, 0x0, 0x5b7f28b1, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff41], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000500)='./control\x00', 0x105) 4m27.987790135s ago: executing program 3 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x910}, 0x0) 4m27.285080576s ago: executing program 3 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f0000000440)={'sit0\x00', 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0x3, 0x715, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x1ff) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00') accept4(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x6f, &(0x7f0000001040)}, 0x10) 4m27.042562s ago: executing program 35 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f0000000440)={'sit0\x00', 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0x3, 0x715, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x1ff) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00') accept4(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x6f, &(0x7f0000001040)}, 0x10) 4m23.493225637s ago: executing program 4 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/6, 0x7d) 4m23.237203052s ago: executing program 4 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4m22.297746627s ago: executing program 4 (id=132): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x40000) 4m22.204966262s ago: executing program 4 (id=133): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlinkat(0xffffffffffffff9c, 0x0, 0x200) pipe2$9p(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x48041, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 4m21.617672446s ago: executing program 4 (id=134): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2], 0x44}}, 0x0) 4m21.003151892s ago: executing program 4 (id=135): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4m20.826205073s ago: executing program 36 (id=135): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4m8.86612397s ago: executing program 6 (id=168): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e1d, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00"], 0x20}}], 0x2, 0x0) 4m7.692657509s ago: executing program 6 (id=171): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 4m6.784794012s ago: executing program 6 (id=172): semget(0x0, 0x4399276a8ce07062, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x20000, &(0x7f00000005c0)=ANY=[], 0x0, 0x27a, &(0x7f0000000980)="$eJzs3cFLm2cYAPDn00hUNuJhIJPBvrF7UMfuylCQBTYmOWynyVQ2jBMmCNtBs0t77qmX9l9oL4XSUws9lF77D5RCsYVetCcPhRSTaNKYVG2bpNTf7+KD7/t8z/N9ecmXBPLm96/W15Y3Nlf393djeDgZyszErYmDJMZiIAajphwAwKfkoFKJvUpNv3sBAHrjYMT9HwAumsb7/+TE/T8pH78m+Ln3nQEA3dLy+f9n/e4HAOi+xV9/+3G2UJj7ZS8djli/vFXcKtb+1sZnV+OvKMVKTEYuXkVUjtXiqwuFucn00LOxKK7v1PN3toqDR/nZav5U5GIsRuplj/PnFwpzU2nNm/lDMVqv/3g0VmI6cvHFyfqH+dPt8oci4tum/vORi0d/xEaUYrnaQCN/eypNf/ip0FI/W50HAAAAAAAAAAAAAAAAAAAAAADdkB+obp1TyaZp2/178vn0SMt4Lb95f6CRNvsDzd+pFzqxv08mJjL9O28AAAAAAAAAAAAAAAAAAAD4mGz++9/aUqm08s/bgr8f3rh/2pwzBkm9bts52Yh4/xJnDD7/5um1znP+P8/1+bDBva97XPTwsp8368Hun19+tzn+ffPQpbuNOZHpWs8DpzwomXan8yLXYWnVF2T53fu5eRTMvDx18pXFXq3wwdb/jF+fWbq9/eT5WY/Tr2ckAAAAAAAAAAAAAAAAAAC4uBpf+u13JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQP43f/+8QJNFxqDlIIqker81Qud/nCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArwMAAP//fRWT9A==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x5, 0x49, 0x0, 0x7fff0001}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffc) syz_emit_ethernet(0x5e, &(0x7f0000001980)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0040fa", 0x28, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4044014) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x10000000000000) read$msr(r0, &(0x7f00000002c0)=""/233, 0xe9) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffa) io_setup(0x81, &(0x7f0000001440)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffefb}]) 4m3.472677925s ago: executing program 6 (id=183): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) fsetxattr$security_ima(r1, 0x0, &(0x7f0000000080)=@v1={0x2, "f7022b"}, 0x4, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000180)=ANY=[], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fallocate(r0, 0x1, 0x8a5, 0x1001f0) 4m2.171631361s ago: executing program 6 (id=185): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x8, 0x8, 0x7ff}, 0x10, 0x9978, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dc"], 0xdd12}], 0x1}, 0x20040051) 4m0.29480388s ago: executing program 6 (id=193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x33) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 4m0.006638486s ago: executing program 37 (id=193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x33) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 2m32.509060773s ago: executing program 8 (id=439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4ea7, 0x0, @local, 0x1}, 0x1c) sendmsg(r4, 0x0, 0x44004) r5 = epoll_create1(0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x18, 0x8, 0x6, 0x2, 0x0, 0x70bd27, 0x25dfdbfb}, 0x10}}, 0x40000) openat$ptp0(0xffffffffffffff9c, 0x0, 0x14100, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x718, 0x0, &(0x7f00000001c0)=[r6]}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x40000008}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000001f40)=""/4092, 0x26, 0xffc, 0x1}, 0x28) 2m31.52716543s ago: executing program 8 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003000)={0x40, r1, 0x1, 0x0, 0x200000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @ntf_ch_w={0x7, 0x0, 0x1}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}}, 0x40000) 2m30.916552076s ago: executing program 8 (id=444): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0xcc4}}], 0x1, 0x4) pipe(&(0x7f0000000080)) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) 2m29.696547287s ago: executing program 8 (id=447): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000001880)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x100100d, 0x0) r0 = open(&(0x7f00000018c0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x1713, 0x0, 0x0, 0x0, 0x0, "ef35ff013bb93852f7d6d1ce5d202eee5e5ca9000f7c41c660e677df701908b90010f6a0040000000000fd00", "00bb0800002a0000efeaffffffed0000000000000000004efe66f90000000004b9f1e400", "43610000181c20585b348a8a192e5f01000000000000f001fffffff2ff00", [0x0, 0x9]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 2m25.8747405s ago: executing program 8 (id=461): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x2}]}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000180)={@link_local, @empty, @void, {@generic={0x88fb, "3684b6"}}}, 0x0) 2m23.909238095s ago: executing program 8 (id=470): r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 2m23.059235404s ago: executing program 38 (id=470): r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 9.832844527s ago: executing program 2 (id=861): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") semget(0x1, 0x4, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)='I', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 8.652539645s ago: executing program 5 (id=868): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x40000) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0xd83, 0xffffff00, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x67, 0x0, 0x7f, 0x2f, 0x0, @local, @private=0xa010102, {[@timestamp={0x44, 0x4, 0x10}, @timestamp_addr={0x44, 0xc, 0xa4, 0x1, 0x1, [{@rand_addr=0x64010102, 0x4}]}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.605990938s ago: executing program 2 (id=869): syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='cifs.spnego\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 7.537512551s ago: executing program 9 (id=873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r1, 0x1, 0x6, @remote}, 0x10) 7.03295163s ago: executing program 9 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000203030000001a0000000000000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 6.291885493s ago: executing program 5 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x0) 6.279191434s ago: executing program 9 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x80) 6.214977387s ago: executing program 7 (id=878): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) 6.133103112s ago: executing program 1 (id=879): signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x2]}, 0x8, 0x800) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00"/12], 0x48) syz_emit_ethernet(0x16, &(0x7f0000001700)=ANY=[@ANYBLOB="fffffffffffffcf3ff961f970004aaaa0b021951600443b5a053eb425074f1c877054f49bfae942e3bf0bf3e06fffa4aef340c7e7b9f98ba83802f1a62afa42b11831e61927251fe870a9e9a76c3faf223d870ca13fe9b03b9d077"], &(0x7f0000001880)={0x0, 0x3, [0xaa5, 0x3ad, 0x73d, 0x415]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioprio_get$pid(0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) 5.431048454s ago: executing program 2 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5.267218223s ago: executing program 5 (id=881): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.021193107s ago: executing program 9 (id=882): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$eJzs3M9rI+UbAPAn7XZ/f/dbRNDbDixCC5uw6XYXvVXdxR/Ypfjj4EnTZBqym2RKk6a1Jw8exYP/iSh48ujf4MGzt8WD4k1QMjPRrSgITRu7/Xxg8sz75s0zz5tD4ZkpCeDMWkx++akS1+JSRMxHxNWI/LxSHrm1IjwfEdcjYu6Jo1LO/zFxPiIuR8S1cfIiZ6V86/Oboxt3fnzz52++u3Duyhdffz+7XQOz9kJE9LaL871eEbN2ER+W841RJ4+91VEZizd6j8pxVsS9dDPPsNeYrGvk8Xa7WJ9t7w7GcavbaI5ju7OVz2/3iwsORu1JnvwDDxs7+biVbuaxM8jy2D4o6to/KP62HQyGRZ5Wme+jPH0Mh5NYzKf7abGf7Ud5bPaH5XyRN2ul++M4KmN5uWhm3VZex+ZRvun/trc6/d39ZJTuDDpZP7lTq79Yq9+t1neyVjpMV6uNXuvuarLU7o6XVYdpo7fWzrJ2N601s95ystRuNqv1erJ0L93sNPpJvV67XbtVvbNcnt1MXnvwXtJtJUvj+EqnvzvsdAfJVraTFJ9YTlZqt19aTm7Uk3fWN5KNt+/fX99494N77z94ef2NV8tFh8t6nK4mSyu3Vlaq9VvVlfryGdr/J2XRU9w/HEll1gUAnD76f2AWTnv/H/r/qThV/e+krLPa/x/D/uFI9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfWDwtfvp6fLBbjK+X8/8qpZ8pxJSLmIuK3vzEf5w/lnC/zLPzD+oW/1PBtJfIM42tcKI/LEbFWHr/+/7i/BQAAAHh6ffXx9c+Kbr14WZx1QZyk4qbN3NUPp5SvEhELi4+nlG1u/PLslJLFcxFxLvanlC2/gXVxSsmKW27nppXtX5k/FC4+ESpFmDvRcgAAgBNxuBM42S4EAACAk/TprAtgNioxeZQ5eRac/+f9nw8ELx0aAQAAAKdQZdYFAAAAAMcu7//9/h8AAAA83Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535yUoeiOACfFvoe74+RGOduxRkswyU4dGhYgJtgCbgFN8AacOYSDBjaEq3BxKS3bSTfl7SX25Afp4TJuZcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvRcrOaP91cPbXO2u3bS3A0AAABwzKZYzcsX02r+r75+Vl+6qOdZROQRcax3H8WvRuaozim+eH/xqYaniDJh/xm/6+NvRFzXx+t5198CAAAAnK71YjmruvXqNB26IPpULdrk/28S5WURUUxfEqXl+9NlorDy9z2Ou0Rp5QLWJFFYteQ2TpX2LaPGMPkwZNWQ91oOAADQi2Yn0G8XAgAAQJ9uhy6AYWRx2Mo87AWX/7x/3xD805gBAAAAP1A2dAEAAABA58r+3/P/AAAA4LRVz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS5tiNV8vlrO2OdtdO2nuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Y3/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnft5jaOKAwD+ZmZna6viGmUPEVHwoBe73dbWXj0owYN/ghDSbY1u/dHmYEsRcvEmOfciehQRlHjr/9BzC73UWw57iCAeI/MrmfwAt4TMbJLPB9687w6bed83CSHfeS8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZfLATJ9mhV8Rxee7R5r2lrH+8p888WHsyn7UsjppM+nh4vf4i6reXCAAAAKdHUtX3IYSn6fpC1se9vP5Pq/dkNf9PLxZxVc/vrfurvqr9s/bnHxuvbg/UK8bJLnp9eTy6sD+VztHNckb8u1XYc/ql//3CTn7n82cvSf4NiT9efWWS5vcz+uHhww+7eXjmqBIHAA7rfNWXQfX3UNYP20wMgFOjUyu8q/o/6bWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATJqvh+SqOQgjznZ0483jz3tJB/YO1J/NVu3L//lr9mtkl0hDC9eXx6EKDc5l1t+/c/WJxPB7daj54I4TQ3uhl8OkU7wmhzQwFhw3i8md9VvI5HkHLv5gAADhx0rJldf3TdH0hOxfNhbD18+76/+1aHKas/zc+u/KoPla9/h82NsPZN1i5+fXg9p277y7fXLwxujH68r2Lw/eHl65evnx1kD8rGXhiAgAAwOF0y1av/+O5/ev/52pxmLL+/+bH4Xf1sRL1/4F2Fv3azgQAAOB0e/nNf/6ODjgfdbvh28WVlVvD4rj9+mJxbCHVZ3ambPX6P5lrOysAAACgCZPVaNf6/7VaHKZc/3/hl9d+q18zCSGcLdf/zy99Nb7W3HRmWhP/Ttz2HAEAAGjX2bLV1//TfP9/vL3lIQ4hvPNWEZcfAzhV/Z989P2v9bHq+/8vNTfFmRT3i/uR9/0QOv22MwIAAOAke65sWbH/V7q+8Pnv5z7p2v8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LT/AgAA//8Yl0ni") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 4.831739479s ago: executing program 2 (id=883): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800ef0100800000000000000a0000000000c800000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000012"], 0x3c}, 0x1, 0x11, 0x0, 0x80}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500002c0000ff"], 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x7, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) 4.80869235s ago: executing program 7 (id=884): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x255, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 4.776844822s ago: executing program 5 (id=885): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) symlink(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @initdev}, &(0x7f00000001c0)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.689269305s ago: executing program 1 (id=886): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x40000) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0xd83, 0xffffff00, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x67, 0x0, 0x7f, 0x2f, 0x0, @local, @private=0xa010102, {[@timestamp={0x44, 0x4, 0x10}, @timestamp_addr={0x44, 0xc, 0xa4, 0x1, 0x1, [{@rand_addr=0x64010102, 0x4}]}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.105585687s ago: executing program 7 (id=887): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000380)=""/134, 0x86}], 0x2}, 0x5}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x1, 0x100, @void}}}}}}}, 0x0) 2.104831707s ago: executing program 5 (id=888): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 2.002414304s ago: executing program 2 (id=889): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800ef0100800000000000000a0000000000c800000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000012"], 0x3c}, 0x1, 0x11, 0x0, 0x80}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500002c0000ff"], 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x7, 0x0, 0x0}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000002000000850000006000000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xe0e4f3ee43f6dc44, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.766236788s ago: executing program 9 (id=890): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='cifs.spnego\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 1.671569182s ago: executing program 1 (id=891): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="00000000d3ec66ecc053c543da5f2e", @ANYRES16=r0], 0x48) 1.611118846s ago: executing program 7 (id=892): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/58, 0x3a}], 0x1}, 0x20) 1.159241322s ago: executing program 1 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 424.837975ms ago: executing program 9 (id=894): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB='discard,nfs,nodots\x00check=relaxed,nodots,\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") syz_clone(0x818a000, 0x0, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x800) 302.949022ms ago: executing program 7 (id=895): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 273.651154ms ago: executing program 2 (id=896): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000400)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x7}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x24, 0x3) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 262.854965ms ago: executing program 1 (id=897): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800800, &(0x7f0000000100)=ANY=[@ANYBLOB='fmask=00000000000000000001000,iocharset=cp857,iocharset=macgreek,errors=continue,namecase=1,iocharset=macgaelic,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x152e, &(0x7f0000003e40)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 122.973143ms ago: executing program 7 (id=898): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000600)=0x3922, 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479", 0x2}], 0x1}}], 0x1, 0x24044015) close(0x3) 57.196657ms ago: executing program 5 (id=899): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00004a8000/0x2000)=nil) fallocate(r0, 0x1, 0x8a5, 0x1001f0) 0s ago: executing program 1 (id=900): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0xcc4}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r3, 0x0, r5, 0x0, 0x39000, 0x0) kernel console output (not intermixed with test programs): command 0x040f tx timeout [ 118.591655][ T9] device veth0_vlan left promiscuous mode [ 118.608276][ T9] device veth1_macvtap left promiscuous mode [ 118.632654][ T9] device veth0_macvtap left promiscuous mode [ 118.731451][ T9] device veth1_vlan left promiscuous mode [ 118.741664][ T9] device veth0_vlan left promiscuous mode [ 119.610600][ T4992] loop6: detected capacity change from 0 to 512 [ 119.674898][ T4992] EXT4-fs (loop6): Ignoring removed oldalloc option [ 119.687705][ T4992] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.701472][ T4839] Bluetooth: hci4: command 0x0409 tx timeout [ 119.712175][ T4992] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 119.749112][ T4992] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 119.772635][ T4992] EXT4-fs (loop6): 1 truncate cleaned up [ 119.778301][ T4992] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 120.620944][ T5000] loop6: detected capacity change from 0 to 512 [ 120.649022][ T5000] EXT4-fs (loop6): Ignoring removed bh option [ 120.671600][ T4839] Bluetooth: hci1: command 0x0419 tx timeout [ 120.675150][ T5001] loop5: detected capacity change from 0 to 1024 [ 120.710750][ T5001] hfsplus: request for non-existent node 3 in B*Tree [ 120.712663][ T5000] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 120.732729][ T9] team0 (unregistering): Port device team_slave_1 removed [ 120.738864][ T5000] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.741608][ T5001] hfsplus: request for non-existent node 3 in B*Tree [ 120.776401][ T9] team0 (unregistering): Port device team_slave_0 removed [ 120.812239][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.828875][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.888765][ T9] bond0 (unregistering): Released all slaves [ 120.998960][ T9] team0 (unregistering): Port device team_slave_1 removed [ 121.012898][ T9] team0 (unregistering): Port device team_slave_0 removed [ 121.024249][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.037193][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.099185][ T9] bond0 (unregistering): Released all slaves [ 121.268556][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.280540][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.349732][ T4703] device veth0_vlan entered promiscuous mode [ 121.366697][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.376175][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.423688][ T4703] device veth1_vlan entered promiscuous mode [ 121.530127][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.539176][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.560093][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.587136][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.664100][ T4865] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 121.685810][ T4865] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 121.712920][ T4964] chnl_net:caif_netlink_parms(): no params data found [ 121.729118][ T4865] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 121.848079][ T4703] device veth0_macvtap entered promiscuous mode [ 121.954951][ T4703] device veth1_macvtap entered promiscuous mode [ 122.304094][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.366589][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 122.375579][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.385472][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.401077][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.410906][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.422530][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.443818][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.454631][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.467570][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.478374][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.490812][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.501069][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.515517][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.525687][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.558829][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.575210][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.588581][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.619720][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.642169][ T4865] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 122.669370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.682125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.690741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.699885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.737744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.746572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.841955][ T4703] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.853280][ T4703] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.865546][ T4703] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.882398][ T4703] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.070754][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.079452][ T4964] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.089802][ T5052] loop6: detected capacity change from 0 to 512 [ 124.090472][ T4964] device bridge_slave_0 entered promiscuous mode [ 124.130921][ T4818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.154297][ T5052] EXT4-fs (loop6): Ignoring removed bh option [ 124.160580][ T4818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.182192][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.189278][ T4964] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.218885][ T4964] device bridge_slave_1 entered promiscuous mode [ 124.292650][ T5052] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 124.308806][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.316660][ T5052] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.364994][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.405552][ T4964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.420510][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.430244][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 124.467832][ T4865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.500255][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.523910][ T4964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.570137][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.579732][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.680199][ T4964] team0: Port device team_slave_0 added [ 124.802350][ T4865] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.893284][ T4964] team0: Port device team_slave_1 added [ 125.962832][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.991876][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.012484][ T5086] loop5: detected capacity change from 0 to 16 [ 126.019400][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.026515][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.072546][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.155690][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.168757][ T5086] erofs: (device loop5): mounted with root inode @ nid 36. [ 126.211123][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.259880][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 126.259893][ T26] audit: type=1800 audit(1768939649.804:140): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.157" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 126.359150][ T4964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.412268][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.419243][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.511599][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 126.526722][ T4964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.598623][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.620046][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.664433][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.671592][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.701567][ T5098] loop7: detected capacity change from 0 to 1024 [ 126.714554][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.761981][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.781405][ T5098] EXT4-fs (loop7): Ignoring removed oldalloc option [ 126.788045][ T5098] EXT4-fs (loop7): Ignoring removed bh option [ 126.794334][ T5098] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.818413][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.837216][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.847077][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.863198][ T5098] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 126.923296][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.942147][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.963602][ T26] audit: type=1804 audit(1768939650.514:141): pid=5098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.155" name="/newroot/1/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 127.052859][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.070826][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.098693][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.140596][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.158889][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.244350][ T4964] device hsr_slave_0 entered promiscuous mode [ 127.321529][ T4964] device hsr_slave_1 entered promiscuous mode [ 127.367949][ T4964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.398968][ T4964] Cannot create hsr debugfs directory [ 127.758930][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.773404][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.816558][ T4865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.949725][ T4964] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 128.022398][ T4964] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 128.048547][ T4964] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 128.107029][ T4964] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 128.134602][ T5124] loop6: detected capacity change from 0 to 512 [ 128.213604][ T5124] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 128.231198][ T5124] EXT4-fs (loop6): mount failed [ 128.646751][ T4964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.868222][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.903171][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.925692][ T4964] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.872920][ T26] audit: type=1400 audit(1768939653.214:142): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5156 comm="syz.5.167" [ 130.082648][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.129041][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.204646][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.256475][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.297088][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.304234][ T4818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.355322][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.364183][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.373156][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.380230][ T4818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.389101][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.397955][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.407050][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.485052][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.532882][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.572643][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.599831][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.625083][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.660180][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.692329][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.718735][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.746968][ T4865] device veth0_vlan entered promiscuous mode [ 130.765287][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.781443][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.789733][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.822996][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.845756][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.868411][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.908521][ T4865] device veth1_vlan entered promiscuous mode [ 130.989129][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.005812][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.058541][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.091174][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.152778][ T4865] device veth0_macvtap entered promiscuous mode [ 131.192624][ T4865] device veth1_macvtap entered promiscuous mode [ 131.261798][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.300764][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.331081][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.351654][ T5188] loop6: detected capacity change from 0 to 256 [ 131.381391][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.427972][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.472251][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.498678][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.526131][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.540993][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.564742][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.604021][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.631722][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.641311][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.717168][ T4964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.731175][ T4237] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.743382][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.761240][ T5196] device batadv_slave_0 entered promiscuous mode [ 131.783550][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.173'. [ 131.814964][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.841308][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.856625][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.880674][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.913288][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.949383][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.968603][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.979902][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.996988][ T4237] usb 7-1: Using ep0 maxpacket: 16 [ 132.002298][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.024189][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.041281][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.059647][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.083196][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.122554][ T4237] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 110, changing to 10 [ 132.135608][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.146084][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.161184][ T4237] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 24931, setting to 1024 [ 132.183038][ T4865] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.196446][ T4865] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.205497][ T4237] usb 7-1: config 0 interface 0 has no altsetting 0 [ 132.225679][ T4237] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 132.246006][ T4865] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.271266][ T4237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.280181][ T4865] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.299001][ T4237] usb 7-1: config 0 descriptor?? [ 133.091675][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100176][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.256872][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.278865][ T4205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.303398][ T4205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.386660][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.927549][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.948457][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.971248][ T4237] usbhid 7-1:0.0: can't add hid device: -71 [ 133.977197][ T4237] usbhid: probe of 7-1:0.0 failed with error -71 [ 133.991729][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.032484][ T4237] usb 7-1: USB disconnect, device number 2 [ 134.064836][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.096095][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.117711][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.175189][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.228316][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.241658][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.290743][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.312032][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.344824][ T4964] device veth0_vlan entered promiscuous mode [ 134.380131][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.432839][ T4964] device veth1_vlan entered promiscuous mode [ 134.453837][ T5241] loop8: detected capacity change from 0 to 2048 [ 134.577729][ T5241] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 134.622849][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.639205][ T5241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.720672][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.826192][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.870343][ T4964] device veth0_macvtap entered promiscuous mode [ 134.951939][ T5244] loop6: detected capacity change from 0 to 8192 [ 135.045735][ T4964] device veth1_macvtap entered promiscuous mode [ 135.079195][ T5244] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.851919][ T4643] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 135.860645][ T4643] FAT-fs (loop6): Filesystem has been set read-only [ 135.864839][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.984541][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.048994][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.090070][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.131130][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.191476][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.222661][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.257526][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.278393][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.320532][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.337814][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.360301][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.392662][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.404682][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.463019][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.501681][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.527806][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.538994][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.556364][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.569204][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.584895][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.604488][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.619562][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.633725][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.649248][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.661977][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.678329][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.689947][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.708613][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.758739][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.818909][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.842017][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.874316][ T4964] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.910231][ T4964] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.008909][ T4964] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.030549][ T4964] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.066509][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.823829][ T4452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.865940][ T4452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.902659][ T4205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.910743][ T4205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.918970][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.180036][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.802617][ T5310] loop9: detected capacity change from 0 to 512 [ 139.841744][ T5310] EXT4-fs (loop9): Ignoring removed bh option [ 139.952667][ T5310] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 140.002981][ T5310] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.392581][ T5308] chnl_net:caif_netlink_parms(): no params data found [ 141.319131][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.226908][ T3519] Bluetooth: hci0: command 0x0409 tx timeout [ 142.262331][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.288253][ T5308] device bridge_slave_0 entered promiscuous mode [ 142.321103][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.366875][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.421190][ T5308] device bridge_slave_1 entered promiscuous mode [ 142.428341][ T5357] loop9: detected capacity change from 0 to 1024 [ 142.478137][ T5308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.491289][ T5308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.537625][ T5308] team0: Port device team_slave_0 added [ 142.539362][ T5308] team0: Port device team_slave_1 added [ 142.542007][ T5357] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,stripe=0x0000000000000004,noquota,barrier,auto_da_alloc,errors=remount-ro,. Quota mode: none. [ 142.542101][ T5357] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.590662][ T5357] EXT4-fs error (device loop9): ext4_free_blocks:6234: comm syz.9.207: Freeing blocks not in datazone - block = 0, count = 16 [ 142.611696][ T5357] EXT4-fs (loop9): Remounting filesystem read-only [ 142.612158][ T5357] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.207: bg 0: block 112: padding at end of block bitmap is not set [ 142.621693][ T5357] EXT4-fs (loop9): Remounting filesystem read-only [ 142.621721][ T5357] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 142.628556][ T5357] EXT4-fs (loop9): Remounting filesystem read-only [ 142.741194][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.741211][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.741233][ T5308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.771967][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.771984][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.772006][ T5308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.818879][ T5371] loop8: detected capacity change from 0 to 512 [ 142.843189][ T5371] EXT4-fs (loop8): Ignoring removed bh option [ 142.928101][ T5371] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 142.928275][ T5371] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.087877][ T5308] device hsr_slave_0 entered promiscuous mode [ 143.098168][ T5308] device hsr_slave_1 entered promiscuous mode [ 143.106220][ T5308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.116553][ T5308] Cannot create hsr debugfs directory [ 143.348521][ T5383] loop8: detected capacity change from 0 to 256 [ 143.486363][ T5387] loop7: detected capacity change from 0 to 128 [ 144.637005][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 144.653659][ T5407] loop7: detected capacity change from 0 to 764 [ 145.359562][ T5407] Symlink component flag not implemented [ 145.373985][ T5416] loop8: detected capacity change from 0 to 128 [ 145.389810][ T5415] loop9: detected capacity change from 0 to 512 [ 145.427327][ T5416] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.441217][ T5407] Symlink component flag not implemented [ 145.451494][ T5418] Symlink component flag not implemented (128) [ 145.469804][ T5416] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.517710][ T5418] Symlink component flag not implemented (122) [ 145.575998][ T5415] fuse: Unknown parameter 'user_i00000000000000000000' [ 146.119181][ T5420] loop9: detected capacity change from 0 to 1024 [ 146.677618][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 146.875364][ T4267] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.006380][ T9] device hsr_slave_0 left promiscuous mode [ 147.013380][ T9] device hsr_slave_1 left promiscuous mode [ 147.030886][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.706069][ T26] audit: type=1400 audit(1768939671.254:143): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5432 comm="syz.8.224" [ 147.760427][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.221823][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.229314][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.262053][ T9] device bridge_slave_1 left promiscuous mode [ 148.268290][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.321114][ T9] device bridge_slave_0 left promiscuous mode [ 148.327334][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.376659][ T9] device hsr_slave_0 left promiscuous mode [ 148.419265][ T9] device hsr_slave_1 left promiscuous mode [ 148.468485][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.498274][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.536741][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.557936][ T5441] loop9: detected capacity change from 0 to 2048 [ 148.574721][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.606483][ T9] device bridge_slave_1 left promiscuous mode [ 148.623597][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.965020][ T5441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.982349][ T9] device bridge_slave_0 left promiscuous mode [ 149.096954][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.245417][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 149.274649][ T9] device veth1_macvtap left promiscuous mode [ 149.335367][ T9] device veth0_macvtap left promiscuous mode [ 149.341496][ T9] device veth1_vlan left promiscuous mode [ 149.347283][ T9] device veth0_vlan left promiscuous mode [ 149.576210][ T9] device veth1_macvtap left promiscuous mode [ 149.765942][ T9] device veth0_macvtap left promiscuous mode [ 149.772779][ T9] device veth1_vlan left promiscuous mode [ 149.802114][ T9] device veth0_vlan left promiscuous mode [ 150.136990][ T5458] loop9: detected capacity change from 0 to 128 [ 152.822503][ T9] team0 (unregistering): Port device team_slave_1 removed [ 152.847630][ T9] team0 (unregistering): Port device team_slave_0 removed [ 152.870200][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.932469][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.199255][ T9] bond0 (unregistering): Released all slaves [ 154.108316][ T9] team0 (unregistering): Port device team_slave_1 removed [ 154.154471][ T9] team0 (unregistering): Port device team_slave_0 removed [ 154.169566][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.194986][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.355731][ T9] bond0 (unregistering): Released all slaves [ 155.304496][ T5508] loop8: detected capacity change from 0 to 1024 [ 155.313067][ T5510] loop9: detected capacity change from 0 to 256 [ 155.364655][ T5508] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 155.384547][ T5508] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.419770][ T5510] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 155.492957][ T5508] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 155.676648][ T5508] System zones: 0-1, 3-36 [ 155.912723][ T5508] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 156.313029][ T26] audit: type=1804 audit(1768939679.864:144): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.243" name="/newroot/13/bus/bus" dev="loop8" ino=18 res=1 errno=0 [ 156.373109][ T5308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.498588][ T5308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.554736][ T5308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.683357][ T5308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.678713][ T5548] usb usb8: usbfs: process 5548 (syz.8.253) did not claim interface 0 before use [ 157.822356][ T5308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.851953][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.870109][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.908963][ T5308] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.974437][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.000019][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.041780][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.049015][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.058040][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.070192][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.080275][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.089142][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.096282][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.143296][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.162602][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.188272][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.263008][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.302513][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.322439][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.349956][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.379115][ T5308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.451097][ T5308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.486079][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.508101][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.526659][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.350816][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.481719][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.804161][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.818416][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.846783][ T5308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.964483][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.000860][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.058308][ T5585] loop7: detected capacity change from 0 to 1024 [ 161.067755][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.085850][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.108012][ T5308] device veth0_vlan entered promiscuous mode [ 161.136638][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.172586][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.181427][ T5585] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 161.188748][ T5585] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.195116][ T5308] device veth1_vlan entered promiscuous mode [ 161.429138][ T5585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 161.451867][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.052045][ T5585] System zones: 0-1, 3-36 [ 162.066026][ T5585] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 162.114489][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.164949][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.275113][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.301241][ T5308] device veth0_macvtap entered promiscuous mode [ 163.334119][ T5308] device veth1_macvtap entered promiscuous mode [ 163.352550][ T5599] netlink: 24 bytes leftover after parsing attributes in process `syz.8.269'. [ 163.392080][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.443642][ T26] audit: type=1804 audit(1768939686.994:145): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.264" name="/newroot/30/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 163.453398][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.642962][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.700047][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.715004][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.725777][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.754007][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.471049][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.533260][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.571608][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.594007][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.702518][ T5617] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 165.803386][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.524397][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.681626][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.698295][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.829071][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.286056][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.400428][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.475814][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.613577][ T5629] loop9: detected capacity change from 0 to 2048 [ 167.644186][ T5629] UDF-fs: bad mount option "ÿ" or missing value [ 167.667589][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.696165][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.802234][ T4259] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 168.822523][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.968693][ T5308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.008063][ T5308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.097151][ T5308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.106191][ T5308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.151194][ T4259] usb 9-1: Using ep0 maxpacket: 32 [ 169.741310][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.749997][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.886942][ T4259] usb 9-1: unable to get BOS descriptor or descriptor too short [ 169.981301][ T4259] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 169.999908][ T4259] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 170.103509][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.119702][ T4259] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 170.146516][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.181131][ T4259] usb 9-1: config 128 has no interface number 0 [ 170.187438][ T4259] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 170.199812][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.211948][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.226454][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.280487][ T4259] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.290943][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.325027][ T4259] usb 9-1: config 128 interface 127 has no altsetting 0 [ 170.412570][ T4259] usb 9-1: string descriptor 0 read error: -71 [ 170.419355][ T4259] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 170.498171][ T4259] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.511355][ T5651] loop2: detected capacity change from 0 to 1024 [ 171.481897][ T5657] capability: warning: `syz.8.285' uses deprecated v2 capabilities in a way that may be insecure [ 171.631421][ T5660] loop7: detected capacity change from 0 to 128 [ 171.698395][ T4259] usb 9-1: can't set config #128, error -71 [ 171.712507][ T4259] usb 9-1: USB disconnect, device number 2 [ 171.873570][ T5660] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.963478][ T5671] loop9: detected capacity change from 0 to 764 [ 171.970220][ T5660] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.011121][ T3519] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 172.177187][ T5671] Symlink component flag not implemented [ 172.210238][ T5671] Symlink component flag not implemented [ 172.231757][ T5671] Symlink component flag not implemented (128) [ 172.250343][ T5671] Symlink component flag not implemented (122) [ 172.381259][ T3519] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.412923][ T3519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.481681][ T3519] usb 3-1: config 0 descriptor?? [ 172.530186][ T3519] cp210x 3-1:0.0: cp210x converter detected [ 173.771671][ T3519] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 174.088542][ T3519] usb 3-1: cp210x converter now attached to ttyUSB0 [ 174.331265][ T4337] usb 3-1: USB disconnect, device number 2 [ 174.377692][ T4337] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.104730][ T4337] cp210x 3-1:0.0: device disconnected [ 177.505533][ T5721] loop9: detected capacity change from 0 to 512 [ 177.663760][ T5724] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 177.730931][ T5721] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.801776][ T5721] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.045326][ T5734] Quota error (device loop9): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 178.056177][ T5734] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 178.066370][ T5734] EXT4-fs error (device loop9): ext4_acquire_dquot:6234: comm syz.9.291: Failed to acquire dquot type 0 [ 178.444099][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.518366][ T5735] loop8: detected capacity change from 0 to 1024 [ 179.110473][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.386747][ T26] audit: type=1800 audit(1768939702.934:146): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.297" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 179.403810][ T5735] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.457398][ T5735] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.504005][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.657800][ T5745] loop7: detected capacity change from 0 to 256 [ 179.672002][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.728926][ T5745] FAT-fs (loop7): error, clusters badly computed (0 != 128) [ 180.764742][ T5745] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 180.815897][ T5745] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 180.824617][ T26] audit: type=1800 audit(1768939704.364:147): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.294" name="file1" dev="loop7" ino=1048624 res=0 errno=0 [ 181.769606][ T5771] loop8: detected capacity change from 0 to 8 [ 182.541751][ T5780] loop2: detected capacity change from 0 to 128 [ 182.549413][ T5783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12 [ 182.659213][ T5780] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.690870][ T5780] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.879065][ T5794] loop7: detected capacity change from 0 to 1024 [ 183.085611][ T26] audit: type=1800 audit(1768939706.634:148): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.311" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 183.087545][ T5794] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.969183][ T5794] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.074056][ T5814] loop9: detected capacity change from 0 to 512 [ 185.224825][ T5814] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.302: bg 0: block 393: padding at end of block bitmap is not set [ 185.391112][ T5814] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 185.445451][ T5814] EXT4-fs (loop9): 2 truncates cleaned up [ 185.456314][ T5814] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.491110][ T9] device hsr_slave_0 left promiscuous mode [ 186.498196][ T9] device hsr_slave_1 left promiscuous mode [ 186.530077][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.558230][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.584528][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.700038][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.931636][ T9] device bridge_slave_1 left promiscuous mode [ 187.410829][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.564480][ T9] device bridge_slave_0 left promiscuous mode [ 188.570704][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.676074][ T9] device veth1_macvtap left promiscuous mode [ 188.709286][ T9] device veth0_macvtap left promiscuous mode [ 188.811165][ T9] device veth1_vlan left promiscuous mode [ 188.828499][ T9] device veth0_vlan left promiscuous mode [ 190.820677][ T5881] loop7: detected capacity change from 0 to 1024 [ 191.086407][ T26] audit: type=1800 audit(1768939714.634:149): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.326" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 191.113318][ T5877] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.249012][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.332'. [ 191.349595][ T5877] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.621004][ C0] sched: RT throttling activated [ 192.770984][ T5889] loop2: detected capacity change from 0 to 8192 [ 192.812537][ T9] team0 (unregistering): Port device team_slave_1 removed [ 192.847668][ T9] team0 (unregistering): Port device team_slave_0 removed [ 192.893225][ T5889] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.906146][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.659176][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.133995][ T9] bond0 (unregistering): Released all slaves [ 194.212224][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.222116][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.253133][ T5961] loop9: detected capacity change from 0 to 1024 [ 198.291602][ T5964] loop8: detected capacity change from 0 to 1156 [ 198.391896][ T26] audit: type=1800 audit(1768939721.944:150): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.349" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 198.393816][ T5961] hfsplus: request for non-existent node 16777216 in B*Tree [ 198.462165][ T5961] hfsplus: request for non-existent node 16777216 in B*Tree [ 198.692892][ T5975] loop8: detected capacity change from 0 to 128 [ 199.214072][ T5983] loop2: detected capacity change from 0 to 512 [ 199.308682][ T5983] EXT4-fs (loop2): Ignoring removed bh option [ 199.498790][ T5983] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 199.622930][ T5983] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.647321][ T5992] loop8: detected capacity change from 0 to 1024 [ 199.851739][ T5992] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 199.859086][ T5992] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.941749][ T5992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 199.991147][ T5992] System zones: 0-1, 3-36 [ 200.000458][ T5992] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 201.106068][ T26] audit: type=1804 audit(1768939724.654:151): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.356" name="/newroot/40/bus/bus" dev="loop8" ino=18 res=1 errno=0 [ 201.895449][ T6023] loop9: detected capacity change from 0 to 1024 [ 201.969575][ T6029] loop2: detected capacity change from 0 to 128 [ 202.079240][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.8.369'. [ 202.619764][ T26] audit: type=1800 audit(1768939726.164:152): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.365" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 205.826118][ T26] audit: type=1326 audit(1768939729.374:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 205.943558][ T26] audit: type=1326 audit(1768939729.404:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.062960][ T26] audit: type=1326 audit(1768939729.404:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.151044][ T26] audit: type=1326 audit(1768939729.404:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.221068][ T26] audit: type=1326 audit(1768939729.404:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.271138][ T3518] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 206.311098][ T26] audit: type=1326 audit(1768939729.404:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.380434][ T26] audit: type=1326 audit(1768939729.424:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.436004][ T26] audit: type=1326 audit(1768939729.434:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.654408][ T3518] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.686093][ T3518] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.730687][ T3518] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.799232][ T4839] Bluetooth: hci2: command 0x0406 tx timeout [ 206.805006][ T3518] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.819682][ T26] audit: type=1326 audit(1768939729.434:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.860277][ T26] audit: type=1326 audit(1768939729.434:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.9.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 206.882620][ T3518] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.887943][ T3518] usb 10-1: config 0 descriptor?? [ 207.904586][ T6117] loop2: detected capacity change from 0 to 256 [ 208.077674][ T3518] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 208.093204][ T3518] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 208.843497][ T3519] usb 10-1: USB disconnect, device number 2 [ 210.097966][ T6129] fido_id[6129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 211.613988][ T6151] loop7: detected capacity change from 0 to 128 [ 212.888725][ T6164] loop9: detected capacity change from 0 to 8 [ 214.066214][ T6164] SQUASHFS error: zlib decompression failed, data probably corrupt [ 214.091254][ T6164] SQUASHFS error: Failed to read block 0x4de: -5 [ 214.097955][ T6164] SQUASHFS error: Failed to read block 0x4e2: -5 [ 214.136802][ T6164] SQUASHFS error: Failed to read block 0x9ca: -5 [ 214.151329][ T6164] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 214.161549][ T6164] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 214.190793][ T6164] SQUASHFS error: Failed to read block 0x535f2: -5 [ 214.231557][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 214.231571][ T26] audit: type=1800 audit(1768939737.784:182): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.398" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 214.396040][ T6181] loop8: detected capacity change from 0 to 1024 [ 214.508221][ T26] audit: type=1800 audit(1768939738.054:183): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.388" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 214.510326][ T6181] hfsplus: request for non-existent node 16777216 in B*Tree [ 214.669756][ T6181] hfsplus: request for non-existent node 16777216 in B*Tree [ 216.082679][ T6205] loop2: detected capacity change from 0 to 1764 [ 216.184122][ T6208] loop9: detected capacity change from 0 to 2048 [ 216.204704][ T6211] loop7: detected capacity change from 0 to 128 [ 216.240558][ T6208] EXT4-fs (loop9): Ignoring removed oldalloc option [ 216.335224][ T6208] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 216.353377][ T6208] System zones: 0-7 [ 217.375362][ T6208] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,nodioread_nolock,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 217.610714][ T6208] EXT4-fs error (device loop9): ext4_ext_precache:608: inode #2: comm syz.9.409: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 217.641747][ T6219] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 217.703642][ T6208] EXT4-fs (loop9): Remounting filesystem read-only [ 218.404424][ T6219] EXT4-fs (loop9): Remounting filesystem read-only [ 220.238583][ T6240] 9pnet: Insufficient options for proto=fd [ 220.518976][ T6246] loop7: detected capacity change from 0 to 512 [ 221.295844][ T6246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 221.304007][ T6246] System zones: 1-12 [ 221.316479][ T6246] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.416: missing EA_INODE flag [ 221.330658][ T6246] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.416: error while reading EA inode 12 err=-117 [ 221.343332][ T6246] EXT4-fs (loop7): 1 orphan inode deleted [ 221.349048][ T6246] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 221.834601][ T6260] loop2: detected capacity change from 0 to 1024 [ 222.065840][ T6270] loop2: detected capacity change from 0 to 2048 [ 222.196776][ T6270] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 222.410865][ T6279] loop8: detected capacity change from 0 to 1024 [ 222.470836][ T6284] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.422: bg 0: block 234: padding at end of block bitmap is not set [ 222.529212][ T26] audit: type=1800 audit(1768939746.074:184): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.423" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 222.531386][ T6279] hfsplus: request for non-existent node 16777216 in B*Tree [ 222.555218][ T6284] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 198 with error 28 [ 222.644214][ T6284] EXT4-fs (loop2): This should not happen!! Data will be lost [ 222.644214][ T6284] [ 222.654067][ T6279] hfsplus: request for non-existent node 16777216 in B*Tree [ 222.718568][ T6293] loop7: detected capacity change from 0 to 256 [ 222.725614][ T6284] EXT4-fs (loop2): Total free blocks count 0 [ 222.750068][ T6284] EXT4-fs (loop2): Free/Dirty block details [ 222.761382][ T6284] EXT4-fs (loop2): free_blocks=0 [ 222.766408][ T6284] EXT4-fs (loop2): dirty_blocks=208 [ 222.776081][ T6284] EXT4-fs (loop2): Block reservation details [ 222.783468][ T6284] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 222.882284][ T6293] exfat: Bad value for 'errors' [ 223.913292][ T6315] loop2: detected capacity change from 0 to 128 [ 224.637020][ T26] audit: type=1400 audit(1768939748.184:185): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6311 comm="syz.9.433" [ 225.368683][ T6334] loop7: detected capacity change from 0 to 1024 [ 225.542356][ T6334] hfsplus: unable to parse mount options [ 227.158303][ T6354] loop7: detected capacity change from 0 to 1024 [ 227.165082][ T4231] Bluetooth: hci3: command 0x0406 tx timeout [ 228.305333][ T6362] loop2: detected capacity change from 0 to 128 [ 228.344604][ T26] audit: type=1800 audit(1768939751.894:186): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.443" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 229.239142][ T6375] loop2: detected capacity change from 0 to 8 [ 229.626168][ T26] audit: type=1326 audit(1768939753.174:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 230.782367][ T26] audit: type=1326 audit(1768939753.204:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 230.891127][ T26] audit: type=1326 audit(1768939753.204:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 230.996623][ T26] audit: type=1326 audit(1768939753.204:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 231.026849][ T26] audit: type=1326 audit(1768939753.204:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2c223f58e code=0x7ffc0000 [ 231.061318][ T6402] loop8: detected capacity change from 0 to 128 [ 231.070096][ T26] audit: type=1326 audit(1768939753.204:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 231.208561][ T26] audit: type=1326 audit(1768939753.204:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 231.285673][ T6402] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 231.420126][ T26] audit: type=1326 audit(1768939753.204:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 231.685945][ T26] audit: type=1326 audit(1768939753.204:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.9.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 231.991129][ T6402] loop_set_status: loop8 () has still dirty pages (nrpages=4) [ 232.082313][ T6417] loop9: detected capacity change from 0 to 128 [ 232.110818][ T4865] UDF-fs: error (device loop8): udf_read_inode: (ino 114) failed !bh [ 232.283223][ T4865] UDF-fs: error (device loop8): udf_read_inode: (ino 114) failed !bh [ 233.796121][ T26] audit: type=1326 audit(1768939757.254:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.9.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 233.916291][ T26] audit: type=1326 audit(1768939757.274:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.9.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 233.970234][ T154] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.971588][ T26] audit: type=1326 audit(1768939757.274:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.9.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 234.032981][ T6442] loop2: detected capacity change from 0 to 1024 [ 234.148001][ T26] audit: type=1326 audit(1768939757.274:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.9.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2c223f58e code=0x7ffc0000 [ 234.178596][ T26] audit: type=1326 audit(1768939757.274:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.9.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 234.209452][ T6442] hfsplus: request for non-existent node 16777216 in B*Tree [ 234.308350][ T6442] hfsplus: request for non-existent node 16777216 in B*Tree [ 234.437960][ T154] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.808595][ T26] audit: type=1326 audit(1768939757.274:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.9.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 234.870471][ T26] audit: type=1326 audit(1768939757.274:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.9.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 234.917621][ T154] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.946891][ T26] audit: type=1326 audit(1768939757.274:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.9.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2c227ecb9 code=0x7ffc0000 [ 235.033058][ T6467] binder: 6466:6467 ioctl c018620c 200000000040 returned -1 [ 235.073552][ T154] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.079117][ T26] audit: type=1800 audit(1768939757.754:204): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.467" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 236.164062][ T6495] loop2: detected capacity change from 0 to 2048 [ 236.434134][ T6495] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodioread_nolock,mb_optimize_scan=0x0000000000000001,bsddf,errors=remount-ro,data_err=ignore,. Quota mode: writeback. [ 236.711972][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 237.297615][ T6518] loop2: detected capacity change from 0 to 512 [ 237.363373][ T6518] EXT4-fs (loop2): Ignoring removed oldalloc option [ 237.390281][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.393641][ T6524] loop9: detected capacity change from 0 to 1024 [ 237.397624][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.411658][ T6518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.423044][ T6483] device bridge_slave_0 entered promiscuous mode [ 237.463758][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.479197][ T6518] EXT4-fs (loop2): 1 truncate cleaned up [ 237.495778][ T6518] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 237.578054][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.607582][ T6483] device bridge_slave_1 entered promiscuous mode [ 237.610262][ T26] audit: type=1800 audit(1768939761.154:205): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.485" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 237.640414][ T6524] hfsplus: request for non-existent node 16777216 in B*Tree [ 237.663272][ T6524] hfsplus: request for non-existent node 16777216 in B*Tree [ 237.665284][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.718881][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.741344][ T6518] loop_set_status: loop2 () has still dirty pages (nrpages=1) [ 237.807497][ T6483] team0: Port device team_slave_0 added [ 237.837202][ T5308] EXT4-fs error (device loop2): mb_free_blocks:1876: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 237.858209][ T6483] team0: Port device team_slave_1 added [ 237.909618][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.937924][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.994247][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.089912][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.101272][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.184235][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.187593][ T4231] Bluetooth: hci1: command 0x0409 tx timeout [ 238.332946][ T6483] device hsr_slave_0 entered promiscuous mode [ 238.354891][ T6483] device hsr_slave_1 entered promiscuous mode [ 238.808007][ T154] device hsr_slave_0 left promiscuous mode [ 239.064215][ T154] device hsr_slave_1 left promiscuous mode [ 239.512692][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.604801][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.782342][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.829691][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.841341][ T154] device bridge_slave_1 left promiscuous mode [ 239.848265][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.875971][ T154] device bridge_slave_0 left promiscuous mode [ 239.882334][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.897588][ T154] device veth1_macvtap left promiscuous mode [ 239.903846][ T154] device veth0_macvtap left promiscuous mode [ 239.925571][ T154] device veth1_vlan left promiscuous mode [ 239.937488][ T154] device veth0_vlan left promiscuous mode [ 240.162961][ T154] team0 (unregistering): Port device team_slave_1 removed [ 240.212381][ T154] team0 (unregistering): Port device team_slave_0 removed [ 240.231856][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.260884][ T6590] loop7: detected capacity change from 0 to 128 [ 240.268690][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 240.271297][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.490886][ T6593] loop7: detected capacity change from 0 to 1024 [ 240.569572][ T6593] hfsplus: request for non-existent node 16777216 in B*Tree [ 240.577356][ T26] audit: type=1800 audit(1768939764.104:206): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.501" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 240.629857][ T6593] hfsplus: request for non-existent node 16777216 in B*Tree [ 240.728170][ T154] bond0 (unregistering): Released all slaves [ 241.119756][ T6596] loop2: detected capacity change from 0 to 128 [ 241.199827][ T6596] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.230050][ T6596] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.327331][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.9.496'. [ 242.118992][ T6596] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 242.293783][ T6596] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 242.407837][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 242.421096][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 242.509298][ T6596] fscrypt: loop2: 3 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 14 [ 243.475174][ T6646] loop7: detected capacity change from 0 to 1024 [ 243.497281][ T6649] loop2: detected capacity change from 0 to 128 [ 243.619784][ T6646] hfsplus: request for non-existent node 16777216 in B*Tree [ 243.623918][ T26] audit: type=1800 audit(1768939767.164:207): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.512" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 244.098257][ T6646] hfsplus: request for non-existent node 16777216 in B*Tree [ 244.224501][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 244.679382][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 245.901325][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.518'. [ 247.083531][ T6483] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.476877][ T6483] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.813733][ T6483] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.053374][ T6695] loop7: detected capacity change from 0 to 512 [ 248.122543][ T6697] loop2: detected capacity change from 0 to 128 [ 248.132931][ T6483] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.530824][ T6695] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 248.701135][ T6695] UDF-fs: Scanning with blocksize 512 failed [ 248.799501][ T6695] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 248.860951][ T6695] UDF-fs: Scanning with blocksize 1024 failed [ 248.989980][ T6695] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 249.104592][ T6695] UDF-fs: Scanning with blocksize 2048 failed [ 249.192361][ T6695] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 249.241506][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.292198][ T6695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.375826][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.391897][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.397309][ T6716] loop9: detected capacity change from 0 to 128 [ 249.426529][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.495402][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.521090][ T6716] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.541174][ T6716] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.558342][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.566957][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.574082][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.594285][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.602617][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.652146][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.694347][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.701485][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.768224][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.074417][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.106669][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.169041][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.218613][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.341637][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.382236][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.607067][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.763913][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.785427][ T6483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.893438][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.975423][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.658066][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.856235][ T6755] loop9: detected capacity change from 0 to 128 [ 253.512628][ T6762] loop7: detected capacity change from 0 to 1024 [ 253.526515][ T6769] loop9: detected capacity change from 0 to 512 [ 253.596177][ T6769] EXT4-fs (loop9): Test dummy encryption mode enabled [ 253.608249][ T6762] EXT4-fs (loop7): Ignoring removed oldalloc option [ 253.623296][ T6769] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 253.638710][ T6769] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size [ 253.678483][ T6762] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 253.708968][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.753363][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.765832][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.972569][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.989975][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.040384][ T6787] overlayfs: failed to clone lowerpath [ 254.263275][ T6483] device veth0_vlan entered promiscuous mode [ 254.361889][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.380752][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.455464][ T6483] device veth1_vlan entered promiscuous mode [ 254.490740][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.530523][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.164181][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.311161][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.331451][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.370915][ T6483] device veth0_macvtap entered promiscuous mode [ 255.401524][ T6483] device veth1_macvtap entered promiscuous mode [ 255.516622][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.566353][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.596409][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.641483][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.647856][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.917382][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.991012][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.094230][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.152278][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.208152][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.246477][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.265323][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.281381][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.291362][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.307357][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.317210][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.327925][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.339316][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.357264][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.396393][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.481801][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.490513][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.576208][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.623575][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.679911][ T6483] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.721106][ T6483] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.729834][ T6483] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.801016][ T6483] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.837069][ T6797] loop7: detected capacity change from 0 to 40427 [ 256.896424][ T6831] loop9: detected capacity change from 0 to 1024 [ 257.110509][ T6831] hfsplus: request for non-existent node 16777216 in B*Tree [ 257.115249][ T26] audit: type=1800 audit(1768939780.654:208): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.549" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 257.273552][ T6797] F2FS-fs (loop7): invalid crc value [ 257.371180][ T6831] hfsplus: request for non-existent node 16777216 in B*Tree [ 257.535451][ T6797] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 258.029783][ T6797] F2FS-fs (loop7): Start checkpoint disabled! [ 258.122038][ T6797] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 258.169109][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.207659][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.248629][ T5162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.271086][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.292241][ T5162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.326579][ T26] audit: type=1400 audit(1768939781.874:209): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6796 comm="syz.7.542" [ 258.361371][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.511894][ T5162] attempt to access beyond end of device [ 258.511894][ T5162] loop7: rw=2049, want=45112, limit=40427 [ 259.291123][ T6841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 261.383136][ T26] audit: type=1400 audit(1768939784.844:210): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6877 comm="syz.7.552" [ 261.445571][ T6841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.710329][ T6841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.751111][ T6841] usb 2-1: string descriptor 0 read error: -71 [ 261.757330][ T6841] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.781029][ T6841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 261.842164][ T6841] usb 2-1: can't set config #1, error -71 [ 261.861507][ T6841] usb 2-1: USB disconnect, device number 2 [ 261.985318][ T6887] loop1: detected capacity change from 0 to 512 [ 262.042650][ T6887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.116295][ T6887] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.559: bg 0: block 384: padding at end of block bitmap is not set [ 262.207643][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 262.221064][ T6887] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 262.241113][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 262.247677][ T6887] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.559: attempt to clear invalid blocks 983260 len 1 [ 262.295887][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 262.313341][ T6887] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.559: Invalid inode table block 0 in block_group 0 [ 262.457241][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 262.501345][ T6887] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 262.523901][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 262.833604][ T6887] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 262.891376][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 262.940194][ T6887] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.559: Invalid inode table block 0 in block_group 0 [ 263.137494][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 263.144632][ T6906] 9pnet: Insufficient options for proto=fd [ 263.173385][ T6887] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 263.242783][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 263.249326][ T6887] EXT4-fs error (device loop1): ext4_truncate:4279: inode #11: comm syz.1.559: mark_inode_dirty error [ 263.359085][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 263.366695][ T6887] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 264.741825][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 264.748411][ T6887] EXT4-fs (loop1): 1 truncate cleaned up [ 264.898036][ T6887] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: writeback. [ 264.925736][ T6887] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.559: Invalid inode table block 0 in block_group 0 [ 264.950492][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 265.913340][ T6887] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 265.992950][ T6887] EXT4-fs (loop1): Remounting filesystem read-only [ 266.812027][ T6934] loop1: detected capacity change from 0 to 1024 [ 266.860179][ T6934] EXT4-fs (loop1): Ignoring removed orlov option [ 266.923087][ T6934] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,quota,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: writeback. [ 268.453099][ T6949] loop1: detected capacity change from 0 to 128 [ 268.556773][ T6949] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.692170][ T6949] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.064619][ T6959] loop7: detected capacity change from 0 to 1024 [ 272.188384][ T6959] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 272.231335][ T6959] EXT4-fs (loop7): invalid journal inode [ 272.237134][ T6959] EXT4-fs (loop7): can't get journal size [ 272.312111][ T6959] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 272.327538][ T7000] loop2: detected capacity change from 0 to 512 [ 272.703646][ T7000] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.787812][ T7000] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.323827][ T7021] loop9: detected capacity change from 0 to 1024 [ 274.415251][ T26] audit: type=1800 audit(1768939797.964:211): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.580" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 274.417203][ T7021] hfsplus: request for non-existent node 16777216 in B*Tree [ 274.491758][ T7021] hfsplus: request for non-existent node 16777216 in B*Tree [ 277.414052][ T7053] loop7: detected capacity change from 0 to 128 [ 277.496399][ T7053] EXT4-fs (loop7): Ignoring removed nobh option [ 279.442498][ T7053] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 279.471527][ T7053] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.952995][ T7076] binder: BINDER_SET_CONTEXT_MGR already set [ 279.999415][ T7076] binder: 7075:7076 ioctl 4018620d 2000000002c0 returned -16 [ 281.125173][ T7091] loop1: detected capacity change from 0 to 4096 [ 281.146887][ T7096] loop2: detected capacity change from 0 to 512 [ 282.041236][ T26] audit: type=1400 audit(1768939805.484:212): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7093 comm="syz.7.601" [ 282.220033][ T7091] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.361283][ T7091] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 282.378111][ T7091] System zones: 0-5 [ 282.432768][ T7091] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 282.519117][ T7104] IPv6: NLM_F_REPLACE set, but no existing node found! [ 283.220216][ T7096] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 283.341170][ T7096] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.517872][ T26] audit: type=1800 audit(1768939807.064:213): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.603" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 285.784653][ T7147] loop9: detected capacity change from 0 to 1024 [ 285.808495][ T7150] loop1: detected capacity change from 0 to 128 [ 286.738091][ T7147] EXT4-fs (loop9): Ignoring removed orlov option [ 287.501674][ T7163] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 287.752456][ T7166] fuse: Bad value for 'fd' [ 287.808528][ T7147] EXT4-fs (loop9): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 288.165419][ T7147] EXT4-fs error (device loop9): __ext4_new_inode:1286: comm syz.9.614: failed to insert inode 15: doubly allocated? [ 288.224861][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.623'. [ 288.641165][ T6841] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 289.644038][ T6841] usb 3-1: Using ep0 maxpacket: 8 [ 290.801949][ T6841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.813663][ T6841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.845276][ T6841] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 291.580593][ T6841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.596362][ T6841] usb 3-1: config 0 descriptor?? [ 291.621107][ T6841] usb 3-1: can't set config #0, error -71 [ 291.641805][ T6841] usb 3-1: USB disconnect, device number 3 [ 291.720782][ T7217] loop2: detected capacity change from 0 to 1024 [ 291.824423][ T7217] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 291.866287][ T7217] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.926182][ T7217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 291.981934][ T7217] System zones: 0-1, 3-36 [ 292.036395][ T7217] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 292.073226][ T7226] loop1: detected capacity change from 0 to 128 [ 292.118045][ T26] audit: type=1804 audit(1768939815.664:214): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.629" name="/newroot/81/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 293.920695][ T26] audit: type=1400 audit(1768939817.464:215): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7257 comm="syz.9.637" [ 294.029992][ T6841] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 295.081149][ T6841] usb 3-1: Using ep0 maxpacket: 32 [ 295.211335][ T6841] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.251064][ T6841] usb 3-1: config 1 interface 0 has no altsetting 0 [ 295.356581][ T7275] loop1: detected capacity change from 0 to 16 [ 295.431243][ T6841] usb 3-1: New USB device found, idVendor=18d1, idProduct=5061, bcdDevice= 0.40 [ 295.440319][ T6841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.465064][ T7275] erofs: (device loop1): mounted with root inode @ nid 36. [ 295.481002][ T6841] usb 3-1: Product: syz [ 295.485241][ T6841] usb 3-1: Manufacturer: syz [ 295.489837][ T6841] usb 3-1: SerialNumber: syz [ 296.122333][ T7295] loop9: detected capacity change from 0 to 128 [ 296.137937][ T7296] loop1: detected capacity change from 0 to 1024 [ 296.759376][ T26] audit: type=1800 audit(1768939820.304:216): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 297.768366][ T6841] usbhid 3-1:1.0: can't add hid device: -71 [ 297.842579][ T6841] usbhid: probe of 3-1:1.0 failed with error -71 [ 297.859472][ T6841] usb 3-1: USB disconnect, device number 4 [ 298.832907][ T7339] loop2: detected capacity change from 0 to 512 [ 300.182611][ T7339] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 300.220239][ T7339] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.283266][ T7339] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.656: corrupted inode contents [ 300.330119][ T7339] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.656: mark_inode_dirty error [ 300.466368][ T7360] loop9: detected capacity change from 0 to 1024 [ 300.489825][ T7339] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.656: corrupted inode contents [ 300.531424][ T7339] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.656: mark_inode_dirty error [ 301.150286][ T7360] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.191798][ T7364] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #18: comm syz.2.656: directory missing '.' [ 301.300883][ T7379] loop1: detected capacity change from 0 to 512 [ 301.699702][ T7392] loop7: detected capacity change from 0 to 128 [ 302.278009][ T7405] loop2: detected capacity change from 0 to 256 [ 302.309175][ T7405] exfat: Deprecated parameter 'utf8' [ 302.371072][ T7405] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 302.649069][ T7379] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 302.689244][ T7379] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.794066][ T7428] loop2: detected capacity change from 0 to 1024 [ 303.875218][ T26] audit: type=1800 audit(1768939827.424:217): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.669" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 303.899222][ T7428] hfsplus: request for non-existent node 16777216 in B*Tree [ 303.991063][ T7428] hfsplus: request for non-existent node 16777216 in B*Tree [ 304.700446][ T7443] loop9: detected capacity change from 0 to 8192 [ 305.322972][ T7443] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.325141][ T7462] loop2: detected capacity change from 0 to 512 [ 306.632805][ T7462] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 306.771777][ T7462] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.030619][ T7462] Zero length message leads to an empty skb [ 308.436154][ T7492] loop1: detected capacity change from 0 to 512 [ 308.474233][ T7493] loop9: detected capacity change from 0 to 512 [ 308.604056][ T7492] EXT4-fs (loop1): orphan cleanup on readonly fs [ 308.691440][ T7492] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.681: bg 0: block 248: padding at end of block bitmap is not set [ 308.730250][ T7493] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.742719][ T7493] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.758067][ T7492] Quota error (device loop1): write_blk: dquota write failed [ 308.805239][ T7510] input: syz0 as /devices/virtual/input/input13 [ 308.811733][ T5700] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 308.821601][ T7492] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 308.856674][ T7492] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.681: Failed to acquire dquot type 1 [ 308.911311][ T6841] Bluetooth: hci0: command 0x0406 tx timeout [ 309.524437][ T7492] EXT4-fs (loop1): 1 truncate cleaned up [ 309.531849][ T7492] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.543010][ T7519] loop9: detected capacity change from 0 to 1024 [ 309.651164][ T5700] usb 3-1: Using ep0 maxpacket: 16 [ 309.674346][ T7492] EXT4-fs (loop1): shut down requested (0) [ 309.684157][ T26] audit: type=1800 audit(1768939833.234:218): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.686" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 309.687878][ T7519] hfsplus: request for non-existent node 16777216 in B*Tree [ 310.459553][ T7519] hfsplus: request for non-existent node 16777216 in B*Tree [ 310.503436][ T7527] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.681: iget: bad i_size value: 360287970189639690 [ 310.531092][ T5700] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.541405][ T5700] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.637109][ T7525] loop7: detected capacity change from 0 to 8192 [ 310.701459][ T5700] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.720716][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.742060][ T7525] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.754996][ T5700] usb 3-1: Product: syz [ 310.768110][ T5700] usb 3-1: Manufacturer: syz [ 310.781183][ T5700] usb 3-1: SerialNumber: syz [ 311.421287][ T5700] usb 3-1: 0:2 : does not exist [ 312.526950][ T7559] overlayfs: failed to clone upperpath [ 312.535703][ T3518] usb 3-1: USB disconnect, device number 5 [ 312.546001][ T7557] mmap: syz.9.695 (7557) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 312.742196][ T7566] loop9: detected capacity change from 0 to 128 [ 313.968706][ T7582] overlayfs: missing 'lowerdir' [ 314.862145][ T7588] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 316.255374][ T7596] loop9: detected capacity change from 0 to 8192 [ 316.502625][ T7596] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.580136][ T7621] loop1: detected capacity change from 0 to 256 [ 316.966801][ T7621] exfat: Deprecated parameter 'utf8' [ 316.972568][ T7621] exfat: Deprecated parameter 'utf8' [ 317.066535][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.073091][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.141461][ T7621] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 319.506155][ T7648] loop9: detected capacity change from 0 to 256 [ 319.922420][ T7654] 9pnet: Insufficient options for proto=fd [ 320.065193][ T7659] loop7: detected capacity change from 0 to 512 [ 320.263590][ T7659] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 320.277112][ T7659] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.981034][ T26] audit: type=1800 audit(1768939844.524:219): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.717" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 321.282076][ T7684] loop7: detected capacity change from 0 to 256 [ 321.378084][ T7684] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 321.478023][ T7684] exFAT-fs (loop7): hint_cluster is invalid (17) [ 321.696475][ T23] kernel write not supported for file /vcs (pid: 23 comm: kworker/1:1) [ 321.757908][ T7697] loop1: detected capacity change from 0 to 1024 [ 321.816177][ T7704] 9pnet: Insufficient options for proto=fd [ 321.842381][ T7705] loop9: detected capacity change from 0 to 256 [ 321.921411][ T7705] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.990428][ T7708] loop2: detected capacity change from 0 to 2048 [ 322.000927][ T7705] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 322.089218][ T7705] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 322.111702][ T7708] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.151463][ T26] audit: type=1800 audit(1768939845.704:220): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.729" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 325.324794][ T7740] loop2: detected capacity change from 0 to 4096 [ 325.499526][ T7740] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.783658][ T7755] 9pnet: Insufficient options for proto=fd [ 325.834200][ T7758] 9pnet: Insufficient options for proto=fd [ 326.705439][ T7731] loop7: detected capacity change from 0 to 40427 [ 326.993071][ T7731] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288) [ 327.067961][ T7745] loop9: detected capacity change from 0 to 40427 [ 327.080726][ T7731] F2FS-fs (loop7): invalid crc value [ 327.094579][ T7731] F2FS-fs (loop7): Found nat_bits in checkpoint [ 327.200732][ T7745] F2FS-fs (loop9): Found nat_bits in checkpoint [ 327.397555][ T7731] F2FS-fs (loop7): recover fsync data on readonly fs [ 327.563807][ T7731] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 327.625130][ T7745] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 327.896061][ T7731] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 328.115341][ T7731] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 328.255440][ T7794] loop1: detected capacity change from 0 to 8192 [ 328.289782][ T7794] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.930479][ T7846] loop2: detected capacity change from 0 to 128 [ 331.781222][ T7858] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 332.282453][ T7846] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.341544][ T7846] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 332.414493][ T7868] loop9: detected capacity change from 0 to 256 [ 332.417821][ T7827] loop7: detected capacity change from 0 to 40427 [ 332.503251][ T7868] exfat: Deprecated parameter 'utf8' [ 332.528593][ T7868] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 332.571171][ T7862] loop1: detected capacity change from 0 to 8192 [ 332.648711][ T7862] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.099375][ T6483] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 334.154851][ T7881] loop9: detected capacity change from 0 to 2048 [ 334.155329][ T6483] FAT-fs (loop1): Filesystem has been set read-only [ 334.264848][ T7881] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.291228][ T7881] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.448354][ T7881] fs-verity: sha512 using implementation "sha512-avx2" [ 334.627750][ T7893] loop7: detected capacity change from 0 to 1024 [ 334.711111][ T7881] syz.9.770 (7881) used greatest stack depth: 20632 bytes left [ 334.735131][ T7893] EXT4-fs (loop7): Ignoring removed orlov option [ 335.512034][ T7893] EXT4-fs (loop7): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 335.701041][ T6842] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 336.432309][ T6842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.451056][ T6842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.376439][ T7934] loop9: detected capacity change from 0 to 8192 [ 337.401303][ T6842] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.420662][ T6842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.485557][ T6842] usb 2-1: Product: syz [ 337.502298][ T6842] usb 2-1: Manufacturer: syz [ 337.506930][ T6842] usb 2-1: SerialNumber: syz [ 337.517522][ T7934] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.281186][ T6842] usb 2-1: can't set config #1, error -71 [ 338.348487][ T4964] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 338.358400][ T6842] usb 2-1: USB disconnect, device number 3 [ 338.361061][ T4964] FAT-fs (loop9): Filesystem has been set read-only [ 340.393164][ T7965] loop7: detected capacity change from 0 to 512 [ 340.571574][ T7961] loop9: detected capacity change from 0 to 2048 [ 340.728214][ T7961] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 340.758278][ T7965] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.791: invalid indirect mapped block 256 (level 2) [ 340.834261][ T7961] UDF-fs: Scanning with blocksize 512 failed [ 341.325684][ T7965] EXT4-fs (loop7): 2 truncates cleaned up [ 341.651011][ T7965] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 341.688866][ T7961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.986634][ T26] audit: type=1804 audit(1768939865.534:221): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.786" name="/newroot/132/file1/bus" dev="loop9" ino=830 res=1 errno=0 [ 342.577113][ T6842] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 342.792698][ T7986] loop7: detected capacity change from 0 to 512 [ 342.861283][ T6842] usb 3-1: Using ep0 maxpacket: 16 [ 344.411085][ T6842] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 344.418768][ T6842] usb 3-1: can't read configurations, error -71 [ 344.496707][ T7986] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.795: invalid indirect mapped block 256 (level 2) [ 344.505112][ T7984] loop9: detected capacity change from 0 to 8192 [ 344.548079][ T7984] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.655668][ T7986] EXT4-fs (loop7): 2 truncates cleaned up [ 346.204347][ T7986] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 347.917756][ T8019] loop7: detected capacity change from 0 to 512 [ 349.424066][ T8046] loop2: detected capacity change from 0 to 8192 [ 349.599134][ T8046] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.707055][ T8089] loop1: detected capacity change from 0 to 512 [ 352.732865][ T8085] loop2: detected capacity change from 0 to 1024 [ 353.524002][ T8085] hfsplus: request for non-existent node 16777216 in B*Tree [ 353.524508][ T26] audit: type=1800 audit(1768939877.074:222): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.817" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 353.553003][ T8085] hfsplus: request for non-existent node 16777216 in B*Tree [ 353.561783][ T8089] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.823: invalid indirect mapped block 256 (level 2) [ 353.591757][ T8089] EXT4-fs (loop1): 2 truncates cleaned up [ 353.597515][ T8089] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 353.624216][ T8100] netlink: 'syz.7.825': attribute type 12 has an invalid length. [ 354.169142][ T8111] IPv6: NLM_F_REPLACE set, but no existing node found! [ 355.718748][ T8120] loop7: detected capacity change from 0 to 512 [ 355.830118][ T8125] 9pnet: Could not find request transport: fd0x0000000000000003 [ 355.989893][ T8120] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.829: bg 0: block 328: padding at end of block bitmap is not set [ 356.015001][ T8120] EXT4-fs (loop7): Remounting filesystem read-only [ 356.046477][ T8133] loop2: detected capacity change from 0 to 1024 [ 356.069825][ T8120] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 356.193210][ T8120] EXT4-fs (loop7): Remounting filesystem read-only [ 356.211802][ T8120] EXT4-fs (loop7): 1 orphan inode deleted [ 356.232820][ T8133] EXT4-fs (loop2): Test dummy encryption mode enabled [ 356.879274][ T8120] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,max_dir_size_kb=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 356.931307][ T8120] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.006625][ T8133] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,usrquota,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 359.521397][ T8182] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 360.909189][ T4173] Bluetooth: hci1: command 0x0406 tx timeout [ 361.004131][ T8188] loop1: detected capacity change from 0 to 512 [ 361.113197][ T8195] 9pnet: Could not find request transport: fd0x0000000000000003 [ 361.305498][ T8203] loop2: detected capacity change from 0 to 128 [ 361.336471][ T8188] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.840: invalid indirect mapped block 256 (level 2) [ 362.042614][ T8188] EXT4-fs (loop1): 2 truncates cleaned up [ 362.048386][ T8188] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 362.253432][ T8203] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.266681][ T8203] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.303988][ T8211] loop7: detected capacity change from 0 to 512 [ 362.366958][ T8214] IPv6: NLM_F_REPLACE set, but no existing node found! [ 362.857290][ T8211] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,barrier=0x0000000000000062,dioread_nolock,,errors=continue. Quota mode: none. [ 362.906986][ T8204] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 363.469394][ T8227] loop9: detected capacity change from 0 to 16 [ 365.299376][ T8227] erofs: (device loop9): mounted with root inode @ nid 36. [ 366.048900][ T8247] 9pnet: Could not find request transport: fd0x0000000000000003 [ 366.599780][ T8266] loop2: detected capacity change from 0 to 512 [ 367.175534][ T8266] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.859: invalid indirect mapped block 256 (level 2) [ 367.212237][ T8266] EXT4-fs (loop2): 2 truncates cleaned up [ 367.218445][ T8266] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 367.563356][ T8279] IPv6: NLM_F_REPLACE set, but no existing node found! [ 368.481919][ T8285] loop2: detected capacity change from 0 to 1024 [ 368.484157][ T8292] tipc: Started in network mode [ 368.501073][ T8292] tipc: Node identity 1, cluster identity 4711 [ 368.519112][ T8292] tipc: Node number set to 1 [ 368.551164][ T8285] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 368.570543][ T8292] tipc: Cannot configure node identity twice [ 368.585245][ T8285] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 368.676229][ T8285] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 368.693904][ T8285] System zones: 0-1, 3-36 [ 368.742226][ T8285] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 368.790406][ T26] audit: type=1804 audit(1768939892.334:223): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.861" name="/newroot/131/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 368.938046][ T8304] loop9: detected capacity change from 0 to 512 [ 369.085889][ T8304] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.865: invalid indirect mapped block 256 (level 2) [ 369.241754][ T8304] EXT4-fs (loop9): 2 truncates cleaned up [ 369.247556][ T8304] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 369.259265][ T8311] 9pnet: Insufficient options for proto=fd [ 369.302396][ T8310] loop7: detected capacity change from 0 to 256 [ 369.418840][ T8310] exfat: Deprecated parameter 'utf8' [ 369.434658][ T8310] exfat: Deprecated parameter 'utf8' [ 369.515288][ T8319] loop1: detected capacity change from 0 to 512 [ 369.601138][ T8310] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 369.626128][ T8325] IPv6: NLM_F_REPLACE set, but no existing node found! [ 370.037551][ T8319] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 370.417048][ T8333] loop7: detected capacity change from 0 to 512 [ 370.596996][ T8333] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.871: invalid indirect mapped block 256 (level 2) [ 370.619679][ T8341] device syz_tun entered promiscuous mode [ 370.739084][ T8340] device syz_tun left promiscuous mode [ 370.759756][ T8333] EXT4-fs (loop7): 2 truncates cleaned up [ 370.774317][ T8333] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. Stopping sshd: [ 370.991119][ T8273] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 371.071022][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.9.875'. [ 371.173005][ T8357] IPv6: NLM_F_REPLACE set, but no existing node found! stopped /usr/sbin/sshd (pid 3953) OK [ 372.101989][ T8373] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.879' sets config #1 Stopping crond: [ 373.034308][ T8380] 9pnet: Insufficient options for proto=fd [ 373.044768][ T8381] 9pnet: Insufficient options for proto=fd stopped /usr/sbin/crond (pid 3927) OK [ 373.175540][ T8386] loop2: detected capacity change from 0 to 512 [ 373.185050][ T8390] loop7: detected capacity change from 0 to 128 [ 374.397594][ T8386] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.883: invalid indirect mapped block 256 (level 2) [ 374.462990][ T8386] EXT4-fs (loop2): 2 truncates cleaned up [ 374.468752][ T8386] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 374.620557][ T8409] loop1: detected capacity change from 0 to 1024 [ 374.629933][ T8390] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.642049][ T8390] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.920652][ T8411] IPv6: NLM_F_REPLACE set, but no existing node found! Stopping dhcpcd... [ 375.758378][ T8409] hfsplus: request for non-existent node 16777216 in B*Tree [ 375.791186][ T26] audit: type=1800 audit(1768939899.304:224): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.886" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 375.851784][ T8409] hfsplus: request for non-existent node 16777216 in B*Tree [ 375.946674][ T8382] loop9: detected capacity change from 0 to 40427 stopped /sbin/dhcpcd (pid 3852) [ 376.013374][ T8382] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4) [ 376.147980][ T8426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 376.189331][ T8429] loop2: detected capacity change from 0 to 512 Stopping network: [ 376.453134][ T8429] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.889: invalid indirect mapped block 256 (level 2) [ 376.537184][ T8429] EXT4-fs (loop2): 2 truncates cleaned up [ 376.589566][ T8429] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 376.914031][ T8447] IPv6: NLM_F_REPLACE set, but no existing node found! [ 377.551408][ T8450] 9pnet: Insufficient options for proto=fd [ 377.566476][ T8451] loop9: detected capacity change from 0 to 512 [ 377.764784][ T8454] loop1: detected capacity change from 0 to 256 [ 377.765483][ T8454] exfat: Deprecated parameter 'namecase' [ 377.794244][ T8457] 9pnet: Insufficient options for proto=fd [ 377.864242][ T8454] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 377.882841][ T8460] loop2: detected capacity change from 0 to 512 [ 377.953681][ T8460] [ 377.953690][ T8460] ====================================================== [ 377.953695][ T8460] WARNING: possible circular locking dependency detected [ 377.953706][ T8460] syzkaller #0 Not tainted [ 377.953715][ T8460] ------------------------------------------------------ [ 377.953720][ T8460] syz.2.896/8460 is trying to acquire lock: [ 377.953728][ T8460] ffff88814c920bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 377.953788][ T8460] [ 377.953788][ T8460] but task is already holding lock: [ 377.953793][ T8460] ffff88805eecb2a0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 377.953830][ T8460] [ 377.953830][ T8460] which lock already depends on the new lock. [ 377.953830][ T8460] [ 377.953836][ T8460] [ 377.953836][ T8460] the existing dependency chain (in reverse order) is: [ 377.953842][ T8460] [ 377.953842][ T8460] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 377.953865][ T8460] down_write+0x38/0x60 [ 377.953880][ T8460] ext4_inline_data_truncate+0x1b2/0xbf0 [ 377.953894][ T8460] ext4_truncate+0x3a7/0x10f0 [ 377.953908][ T8460] ext4_evict_inode+0xb4f/0x1090 [ 377.953922][ T8460] evict+0x4c9/0x8d0 [ 377.953939][ T8460] do_unlinkat+0x3e7/0x710 [ 377.953953][ T8460] __x64_sys_unlink+0x45/0x50 [ 377.953967][ T8460] do_syscall_64+0x4c/0xa0 [ 377.953982][ T8460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.953997][ T8460] [ 377.953997][ T8460] -> #1 (sb_internal){.+.+}-{0:0}: [ 377.954018][ T8460] percpu_down_read+0x46/0x1b0 [ 377.954031][ T8460] ext4_evict_inode+0x44a/0x1090 [ 377.954045][ T8460] evict+0x4c9/0x8d0 [ 377.954059][ T8460] ext4_ext_migrate+0xc0c/0xe60 [ 377.954075][ T8460] ext4_ioctl+0x1a84/0x3820 [ 377.954090][ T8460] __se_sys_ioctl+0xfa/0x170 [ 377.954106][ T8460] do_syscall_64+0x4c/0xa0 [ 377.954120][ T8460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.954136][ T8460] [ 377.954136][ T8460] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 377.954157][ T8460] __lock_acquire+0x2c42/0x7d10 [ 377.954174][ T8460] lock_acquire+0x19e/0x400 [ 377.954189][ T8460] percpu_down_read+0x46/0x1b0 [ 377.954201][ T8460] ext4_writepages+0x20f/0x2df0 [ 377.954214][ T8460] do_writepages+0x476/0x6e0 [ 377.954229][ T8460] __writeback_single_inode+0x153/0xda0 [ 377.954243][ T8460] writeback_single_inode+0x3cb/0x8e0 [ 377.954260][ T8460] write_inode_now+0x23b/0x2c0 [ 377.954275][ T8460] iput+0x5ab/0x8a0 [ 377.954289][ T8460] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 377.954304][ T8460] ext4_xattr_block_set+0x4fd/0x2d20 [ 377.954318][ T8460] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 377.954334][ T8460] __ext4_expand_extra_isize+0x301/0x3e0 [ 377.954347][ T8460] __ext4_mark_inode_dirty+0x469/0x700 [ 377.954368][ T8460] ext4_evict_inode+0xa8d/0x1090 [ 377.954381][ T8460] evict+0x4c9/0x8d0 [ 377.954395][ T8460] ext4_orphan_cleanup+0xad2/0x1320 [ 377.954410][ T8460] ext4_fill_super+0x8e25/0x95a0 [ 377.954425][ T8460] mount_bdev+0x287/0x3c0 [ 377.954440][ T8460] legacy_get_tree+0xe6/0x180 [ 377.954455][ T8460] vfs_get_tree+0x88/0x270 [ 377.954469][ T8460] do_new_mount+0x24a/0xa40 [ 377.954482][ T8460] __se_sys_mount+0x2e3/0x3d0 [ 377.954496][ T8460] do_syscall_64+0x4c/0xa0 [ 377.954510][ T8460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.954523][ T8460] [ 377.954523][ T8460] other info that might help us debug this: [ 377.954523][ T8460] [ 377.954528][ T8460] Chain exists of: [ 377.954528][ T8460] &sbi->s_writepages_rwsem --> sb_internal --> &ei->xattr_sem [ 377.954528][ T8460] [ 377.954554][ T8460] Possible unsafe locking scenario: [ 377.954554][ T8460] [ 377.954559][ T8460] CPU0 CPU1 [ 377.954563][ T8460] ---- ---- [ 377.954568][ T8460] lock(&ei->xattr_sem); [ 377.954578][ T8460] lock(sb_internal); [ 377.954590][ T8460] lock(&ei->xattr_sem); [ 377.954602][ T8460] lock(&sbi->s_writepages_rwsem); [ 377.954613][ T8460] [ 377.954613][ T8460] *** DEADLOCK *** [ 377.954613][ T8460] [ 377.954617][ T8460] 3 locks held by syz.2.896/8460: [ 377.954626][ T8460] #0: ffff88814ba360e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 377.954684][ T8460] #1: ffff88814ba36650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 377.954720][ T8460] #2: ffff88805eecb2a0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 377.954759][ T8460] [ 377.954759][ T8460] stack backtrace: [ 377.954777][ T8460] CPU: 0 PID: 8460 Comm: syz.2.896 Not tainted syzkaller #0 [ 377.954793][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.954811][ T8460] Call Trace: [ 377.954817][ T8460] [ 377.954823][ T8460] dump_stack_lvl+0x188/0x250 [ 377.954840][ T8460] ? load_image+0x400/0x400 [ 377.954856][ T8460] ? show_regs_print_info+0x20/0x20 [ 377.954876][ T8460] ? print_circular_bug+0x12b/0x1a0 [ 377.954893][ T8460] check_noncircular+0x296/0x330 [ 377.954907][ T8460] ? look_up_lock_class+0x71/0x110 [ 377.954927][ T8460] ? add_chain_block+0x940/0x940 [ 377.954940][ T8460] ? lockdep_lock+0xf1/0x1f0 [ 377.954959][ T8460] ? mark_lock+0x94/0x320 [ 377.954977][ T8460] __lock_acquire+0x2c42/0x7d10 [ 377.955004][ T8460] ? mark_lock+0x94/0x320 [ 377.955020][ T8460] ? verify_lock_unused+0x140/0x140 [ 377.955038][ T8460] ? verify_lock_unused+0x140/0x140 [ 377.955054][ T8460] ? __lock_acquire+0x13bc/0x7d10 [ 377.955074][ T8460] ? 0xffffffffa001a000 [ 377.955091][ T8460] lock_acquire+0x19e/0x400 [ 377.955108][ T8460] ? ext4_writepages+0x20f/0x2df0 [ 377.955126][ T8460] ? check_noncircular+0x189/0x330 [ 377.955141][ T8460] ? __might_sleep+0xf0/0xf0 [ 377.955156][ T8460] ? read_lock_is_recursive+0x10/0x10 [ 377.955174][ T8460] ? mark_lock+0x94/0x320 [ 377.955192][ T8460] ? __lock_acquire+0x13bc/0x7d10 [ 377.955210][ T8460] percpu_down_read+0x46/0x1b0 [ 377.955225][ T8460] ? ext4_writepages+0x20f/0x2df0 [ 377.955239][ T8460] ext4_writepages+0x20f/0x2df0 [ 377.955260][ T8460] ? mark_lock+0x94/0x320 [ 377.955277][ T8460] ? verify_lock_unused+0x140/0x140 [ 377.955297][ T8460] ? mark_lock+0x94/0x320 [ 377.955314][ T8460] ? ext4_readpage+0x2e0/0x2e0 [ 377.955330][ T8460] ? __lock_acquire+0x13bc/0x7d10 [ 377.955347][ T8460] ? rcu_lock_release+0x5/0x20 [ 377.955368][ T8460] ? lock_chain_count+0x20/0x20 [ 377.955388][ T8460] ? ext4_readpage+0x2e0/0x2e0 [ 377.955403][ T8460] do_writepages+0x476/0x6e0 [ 377.955423][ T8460] ? __writepage+0x130/0x130 [ 377.955438][ T8460] ? writeback_single_inode+0x3c0/0x8e0 [ 377.955457][ T8460] ? __lock_acquire+0x7d10/0x7d10 [ 377.955473][ T8460] ? do_raw_spin_lock+0x128/0x2f0 [ 377.955489][ T8460] __writeback_single_inode+0x153/0xda0 [ 377.955507][ T8460] writeback_single_inode+0x3cb/0x8e0 [ 377.955527][ T8460] ? write_inode_now+0x2c0/0x2c0 [ 377.955550][ T8460] write_inode_now+0x23b/0x2c0 [ 377.955567][ T8460] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 377.955590][ T8460] ? do_raw_spin_unlock+0x11d/0x230 [ 377.955607][ T8460] iput+0x5ab/0x8a0 [ 377.955625][ T8460] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 377.955662][ T8460] ? ext4_xattr_ibody_set+0x330/0x330 [ 377.955683][ T8460] ? rcu_is_watching+0x11/0xa0 [ 377.955699][ T8460] ? kmem_cache_free+0x14c/0x210 [ 377.955717][ T8460] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 377.955738][ T8460] ext4_xattr_block_set+0x4fd/0x2d20 [ 377.955760][ T8460] ? ext4_get_inode_loc+0x120/0x120 [ 377.955777][ T8460] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 377.955797][ T8460] ? ext4_xattr_block_find+0x500/0x500 [ 377.955813][ T8460] ? ext4_xattr_block_find+0x433/0x500 [ 377.955832][ T8460] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 377.955860][ T8460] __ext4_expand_extra_isize+0x301/0x3e0 [ 377.955880][ T8460] __ext4_mark_inode_dirty+0x469/0x700 [ 377.955899][ T8460] ext4_evict_inode+0xa8d/0x1090 [ 377.955914][ T8460] ? _raw_spin_unlock+0x24/0x40 [ 377.955933][ T8460] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 377.955951][ T8460] ? do_raw_spin_unlock+0x11d/0x230 [ 377.955968][ T8460] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 377.955983][ T8460] evict+0x4c9/0x8d0 [ 377.956002][ T8460] ? proc_nr_inodes+0x320/0x320 [ 377.956019][ T8460] ? do_raw_spin_unlock+0x11d/0x230 [ 377.956036][ T8460] ? _raw_spin_unlock+0x24/0x40 [ 377.956050][ T8460] ? iput+0x706/0x8a0 [ 377.956068][ T8460] ext4_orphan_cleanup+0xad2/0x1320 [ 377.956088][ T8460] ? ext4_orphan_del+0xbf0/0xbf0 [ 377.956104][ T8460] ? errseq_check_and_advance+0x62/0x120 [ 377.956121][ T8460] ext4_fill_super+0x8e25/0x95a0 [ 377.956150][ T8460] ? ext4_mount+0x40/0x40 [ 377.956164][ T8460] ? set_blocksize+0x1f3/0x370 [ 377.956184][ T8460] ? sb_set_blocksize+0xa5/0xe0 [ 377.956202][ T8460] mount_bdev+0x287/0x3c0 [ 377.956218][ T8460] ? ext4_mount+0x40/0x40 [ 377.956234][ T8460] legacy_get_tree+0xe6/0x180 [ 377.956250][ T8460] ? ext4_errno_to_code+0x160/0x160 [ 377.956267][ T8460] vfs_get_tree+0x88/0x270 [ 377.956283][ T8460] do_new_mount+0x24a/0xa40 [ 377.956301][ T8460] __se_sys_mount+0x2e3/0x3d0 [ 377.956319][ T8460] ? __x64_sys_mount+0xc0/0xc0 [ 377.956337][ T8460] ? lockdep_hardirqs_on+0x94/0x140 [ 377.956353][ T8460] ? __x64_sys_mount+0x1c/0xc0 [ 377.956369][ T8460] do_syscall_64+0x4c/0xa0 [ 377.956383][ T8460] ? clear_bhb_loop+0x30/0x80 [ 377.956398][ T8460] ? clear_bhb_loop+0x30/0x80 [ 377.956413][ T8460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.956436][ T8460] RIP: 0033:0x7f1235f63f4a [ 377.956452][ T8460] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.956465][ T8460] RSP: 002b:00007f12341bde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.956482][ T8460] RAX: ffffffffffffffda RBX: 00007f12341bdee0 RCX: 00007f1235f63f4a [ 377.956494][ T8460] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f12341bdea0 [ 377.956505][ T8460] RBP: 0000200000000180 R08: 00007f12341bdee0 R09: 0000000000800700 [ 377.956517][ T8460] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 377.956529][ T8460] R13: 00007f12341bdea0 R14: 000000000000046f R15: 0000200000000400 [ 377.956546][ T8460] [ 377.988912][ T8460] ------------[ cut here ]------------ [ 377.988925][ T8460] EA inode 11 i_nlink=2 [ 377.989085][ T8460] WARNING: CPU: 1 PID: 8460 at fs/ext4/xattr.c:1005 ext4_xattr_inode_update_ref+0x4bd/0x510 [ 377.989123][ T8460] Modules linked in: [ 377.989135][ T8460] CPU: 1 PID: 8460 Comm: syz.2.896 Not tainted syzkaller #0 [ 377.989152][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.989162][ T8460] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510 [ 377.989183][ T8460] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 14 e8 a1 ff 49 8b 37 48 c7 c7 80 8f 3d 8a 89 da e8 a3 5d 93 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 3d 4a 9e 07 [ 377.989197][ T8460] RSP: 0018:ffffc900044af160 EFLAGS: 00010246 [ 377.989213][ T8460] RAX: 0af49693734b0400 RBX: 0000000000000002 RCX: 0000000000080000 [ 377.989225][ T8460] RDX: ffffc9000fb03000 RSI: 000000000003e8e8 RDI: 000000000003e8e9 [ 377.989237][ T8460] RBP: ffffc900044af250 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 377.989249][ T8460] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88804468d260 [ 377.989261][ T8460] R13: 1ffff110088d1a8b R14: dffffc0000000000 R15: ffff88804468d2a0 [ 377.989273][ T8460] FS: 00007f12341be6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 377.989288][ T8460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.989301][ T8460] CR2: 000055774b12e048 CR3: 000000004781e000 CR4: 00000000003506e0 [ 377.989316][ T8460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.989326][ T8460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.989336][ T8460] Call Trace: [ 377.989341][ T8460] [ 377.989350][ T8460] ? ext4_xattr_block_csum+0x560/0x560 [ 377.989371][ T8460] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 377.989389][ T8460] ? mb_cache_entry_create+0x62e/0x890 [ 377.989412][ T8460] ext4_xattr_set_entry+0xed9/0x3ea0 [ 377.989433][ T8460] ? mb_cache_entry_create+0x676/0x890 [ 377.989453][ T8460] ? ext4_xattr_block_set+0xda0/0x2d20 [ 377.989471][ T8460] ? ext4_xattr_ibody_set+0x330/0x330 [ 377.989491][ T8460] ? ext4_get_inode_loc+0x120/0x120 [ 377.989509][ T8460] ext4_xattr_ibody_set+0x112/0x330 [ 377.989529][ T8460] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 377.989556][ T8460] __ext4_expand_extra_isize+0x301/0x3e0 [ 377.989577][ T8460] __ext4_mark_inode_dirty+0x469/0x700 [ 377.989598][ T8460] ext4_evict_inode+0xa8d/0x1090 [ 377.989613][ T8460] ? _raw_spin_unlock+0x24/0x40 [ 377.989633][ T8460] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 377.989651][ T8460] ? do_raw_spin_unlock+0x11d/0x230 [ 377.989669][ T8460] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 377.989683][ T8460] evict+0x4c9/0x8d0 [ 377.989703][ T8460] ? proc_nr_inodes+0x320/0x320 [ 377.989720][ T8460] ? do_raw_spin_unlock+0x11d/0x230 [ 377.989736][ T8460] ? _raw_spin_unlock+0x24/0x40 [ 377.989751][ T8460] ? iput+0x706/0x8a0 [ 377.989770][ T8460] ext4_orphan_cleanup+0xad2/0x1320 [ 377.989791][ T8460] ? ext4_orphan_del+0xbf0/0xbf0 [ 377.989807][ T8460] ? errseq_check_and_advance+0x62/0x120 [ 377.989824][ T8460] ext4_fill_super+0x8e25/0x95a0 [ 377.989853][ T8460] ? ext4_mount+0x40/0x40 [ 377.989869][ T8460] ? set_blocksize+0x1f3/0x370 [ 377.989896][ T8460] ? sb_set_blocksize+0xa5/0xe0 [ 377.989917][ T8460] mount_bdev+0x287/0x3c0 [ 377.989934][ T8460] ? ext4_mount+0x40/0x40 [ 377.989951][ T8460] legacy_get_tree+0xe6/0x180 [ 377.989967][ T8460] ? ext4_errno_to_code+0x160/0x160 [ 377.989985][ T8460] vfs_get_tree+0x88/0x270 [ 377.990002][ T8460] do_new_mount+0x24a/0xa40 [ 377.990021][ T8460] __se_sys_mount+0x2e3/0x3d0 [ 377.990040][ T8460] ? __x64_sys_mount+0xc0/0xc0 [ 377.990058][ T8460] ? lockdep_hardirqs_on+0x94/0x140 [ 377.990075][ T8460] ? __x64_sys_mount+0x1c/0xc0 [ 377.990092][ T8460] do_syscall_64+0x4c/0xa0 [ 377.990107][ T8460] ? clear_bhb_loop+0x30/0x80 [ 377.990122][ T8460] ? clear_bhb_loop+0x30/0x80 [ 377.990139][ T8460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.990156][ T8460] RIP: 0033:0x7f1235f63f4a [ 377.990172][ T8460] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.990185][ T8460] RSP: 002b:00007f12341bde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.990203][ T8460] RAX: ffffffffffffffda RBX: 00007f12341bdee0 RCX: 00007f1235f63f4a [ 377.990214][ T8460] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f12341bdea0 [ 377.990224][ T8460] RBP: 0000200000000180 R08: 00007f12341bdee0 R09: 0000000000800700 [ 377.990235][ T8460] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 377.990246][ T8460] R13: 00007f12341bdea0 R14: 000000000000046f R15: 0000200000000400 [ 377.990262][ T8460] [ 377.990277][ T8460] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 377.990286][ T8460] CPU: 1 PID: 8460 Comm: syz.2.896 Not tainted syzkaller #0 [ 377.990302][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.990311][ T8460] Call Trace: [ 377.990316][ T8460] [ 377.990322][ T8460] dump_stack_lvl+0x188/0x250 [ 377.990341][ T8460] ? show_regs_print_info+0x20/0x20 [ 377.990357][ T8460] ? load_image+0x400/0x400 [ 377.990377][ T8460] panic+0x2e5/0x810 [ 377.990393][ T8460] ? bpf_jit_dump+0xd0/0xd0 [ 377.990412][ T8460] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 377.990431][ T8460] __warn+0x248/0x2b0 [ 377.990444][ T8460] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 377.990463][ T8460] report_bug+0x1b7/0x2e0 [ 377.990482][ T8460] handle_bug+0x3a/0x70 [ 377.990498][ T8460] exc_invalid_op+0x16/0x40 [ 377.990514][ T8460] asm_exc_invalid_op+0x16/0x20 [ 377.990530][ T8460] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510 [ 377.990549][ T8460] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 14 e8 a1 ff 49 8b 37 48 c7 c7 80 8f 3d 8a 89 da e8 a3 5d 93 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 3d 4a 9e 07 [ 377.990561][ T8460] RSP: 0018:ffffc900044af160 EFLAGS: 00010246 [ 377.990575][ T8460] RAX: 0af49693734b0400 RBX: 0000000000000002 RCX: 0000000000080000 [ 377.990586][ T8460] RDX: ffffc9000fb03000 RSI: 000000000003e8e8 RDI: 000000000003e8e9 [ 377.990598][ T8460] RBP: ffffc900044af250 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 377.990610][ T8460] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88804468d260 [ 377.990622][ T8460] R13: 1ffff110088d1a8b R14: dffffc0000000000 R15: ffff88804468d2a0 [ 377.990642][ T8460] ? ext4_xattr_block_csum+0x560/0x560 [ 377.990660][ T8460] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 377.990676][ T8460] ? mb_cache_entry_create+0x62e/0x890 [ 377.990697][ T8460] ext4_xattr_set_entry+0xed9/0x3ea0 [ 377.990717][ T8460] ? mb_cache_entry_create+0x676/0x890 [ 377.990739][ T8460] ? ext4_xattr_block_set+0xda0/0x2d20 [ 377.990757][ T8460] ? ext4_xattr_ibody_set+0x330/0x330 [ 377.990777][ T8460] ? ext4_get_inode_loc+0x120/0x120 [ 377.990798][ T8460] ext4_xattr_ibody_set+0x112/0x330 [ 377.990818][ T8460] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 377.990846][ T8460] __ext4_expand_extra_isize+0x301/0x3e0 [ 377.990865][ T8460] __ext4_mark_inode_dirty+0x469/0x700 [ 377.990884][ T8460] ext4_evict_inode+0xa8d/0x1090 [ 377.990911][ T8460] ? _raw_spin_unlock+0x24/0x40 [ 377.990927][ T8460] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 377.990945][ T8460] ? do_raw_spin_unlock+0x11d/0x230 [ 377.990962][ T8460] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 377.990977][ T8460] evict+0x4c9/0x8d0 [ 377.990995][ T8460] ? proc_nr_inodes+0x320/0x320 [ 377.991012][ T8460] ? do_raw_spin_unlock+0x11d/0x230 [ 377.991027][ T8460] ? _raw_spin_unlock+0x24/0x40 [ 377.991042][ T8460] ? iput+0x706/0x8a0 [ 377.991059][ T8460] ext4_orphan_cleanup+0xad2/0x1320 [ 377.991078][ T8460] ? ext4_orphan_del+0xbf0/0xbf0 [ 377.991094][ T8460] ? errseq_check_and_advance+0x62/0x120 [ 377.991111][ T8460] ext4_fill_super+0x8e25/0x95a0 [ 377.991138][ T8460] ? ext4_mount+0x40/0x40 [ 377.991152][ T8460] ? set_blocksize+0x1f3/0x370 [ 377.991171][ T8460] ? sb_set_blocksize+0xa5/0xe0 [ 377.991189][ T8460] mount_bdev+0x287/0x3c0 [ 377.991205][ T8460] ? ext4_mount+0x40/0x40 [ 377.991221][ T8460] legacy_get_tree+0xe6/0x180 [ 377.991238][ T8460] ? ext4_errno_to_code+0x160/0x160 [ 377.991254][ T8460] vfs_get_tree+0x88/0x270 [ 377.991270][ T8460] do_new_mount+0x24a/0xa40 [ 377.991287][ T8460] __se_sys_mount+0x2e3/0x3d0 [ 377.991305][ T8460] ? __x64_sys_mount+0xc0/0xc0 [ 377.991321][ T8460] ? lockdep_hardirqs_on+0x94/0x140 [ 377.991339][ T8460] ? __x64_sys_mount+0x1c/0xc0 [ 377.991355][ T8460] do_syscall_64+0x4c/0xa0 [ 377.991370][ T8460] ? clear_bhb_loop+0x30/0x80 [ 377.991385][ T8460] ? clear_bhb_loop+0x30/0x80 [ 377.991401][ T8460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.991418][ T8460] RIP: 0033:0x7f1235f63f4a [ 377.991432][ T8460] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.991444][ T8460] RSP: 002b:00007f12341bde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.991462][ T8460] RAX: ffffffffffffffda RBX: 00007f12341bdee0 RCX: 00007f1235f63f4a [ 377.991474][ T8460] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f12341bdea0 [ 377.991486][ T8460] RBP: 0000200000000180 R08: 00007f12341bdee0 R09: 0000000000800700 [ 377.991498][ T8460] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 377.991509][ T8460] R13: 00007f12341bdea0 R14: 000000000000046f R15: 0000200000000400 [ 377.991526][ T8460] [ 377.991863][ T8460] Kernel Offset: disabled [ 379.883295][ T8460] Rebooting in 86400 seconds..