last executing test programs: 6m29.985273491s ago: executing program 4 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000039000701000000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff070000080010000700020008000f"], 0x54}}, 0x0) 6m29.754869324s ago: executing program 4 (id=92): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f0000000d00)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@ptr={0xffffffff}, @fwd={0x5}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x43}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) 6m25.118831149s ago: executing program 4 (id=94): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 6m24.019468513s ago: executing program 4 (id=99): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) close(0x4) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 6m19.945845313s ago: executing program 4 (id=138): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m19.119072149s ago: executing program 4 (id=148): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 6m3.950239999s ago: executing program 32 (id=148): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 5m9.160381351s ago: executing program 0 (id=352): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x26, 0x34b, &(0x7f0000000700)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, 0xffffffffffffffff, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x45) 5m4.558163136s ago: executing program 0 (id=370): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x40010) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r6, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 5m2.001454072s ago: executing program 0 (id=372): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)={0x20, 0x76, 0x31f, 0x70bd28, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x8, 0xd, 0x0, 0x1, [@generic="f27ec2a3"]}]}, 0x20}], 0x1, 0x0, 0x0, 0x8040000}, 0x4040000) 4m58.477299128s ago: executing program 0 (id=381): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) 4m56.901458908s ago: executing program 0 (id=384): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0x1054}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) 4m52.736626798s ago: executing program 0 (id=391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/45], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 4m51.910322043s ago: executing program 33 (id=391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/45], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 4m35.615201537s ago: executing program 5 (id=450): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x989680}}, 0x0) 4m34.325049244s ago: executing program 5 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="0100000000000400000001000000240003000000000000000000000000000000000000000000000000000000000000000000140002007767310000000000000000"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5428a09"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 4m33.682076813s ago: executing program 5 (id=453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x200, 0x4) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000640)='<', 0x1}, {&(0x7f0000000700)=',', 0x1}, {&(0x7f0000000780)='t', 0x1}, {&(0x7f0000000800)="f2", 0x1}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001cc0)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002240)='.', 0x1}], 0x1}}], 0x3, 0x400a055) 4m32.706524391s ago: executing program 5 (id=456): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 4m31.068401837s ago: executing program 5 (id=464): bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002100)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) openat$sw_sync(0xffffff9c, 0x0, 0x40840, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) 4m21.676291037s ago: executing program 5 (id=486): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f0000000d00)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0xffffffff}, @fwd={0x5}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x37}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) 4m20.936791784s ago: executing program 34 (id=486): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f0000000d00)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0xffffffff}, @fwd={0x5}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x37}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) 2m42.340537518s ago: executing program 2 (id=704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2, 0x0, 0x30, 0x19}, {0xeeef0000, 0x100000, 0x9, 0x0, 0x40, 0x5, 0x7d, 0x4, 0x58, 0x3, 0x3}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0x1, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x9, 0xe, 0x4}, {0xdddd0000, 0x70000, 0x10, 0x0, 0x0, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0xb000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x25000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x7e, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x16, 0x2, 0x13, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x3ff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x9501, 0x80a0000, [0x6840000000000002, 0x3, 0x91, 0xff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0) 2m41.733160289s ago: executing program 2 (id=708): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8000000000000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@tz_utc}]}, 0x1, 0x370, &(0x7f0000002980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) 2m39.046923773s ago: executing program 2 (id=712): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x22020600) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.events\x00', 0x300, 0x0) 2m35.554012565s ago: executing program 2 (id=716): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x10001}}, {@errors_continue}, {@delalloc}, {@nombcache}, {@grpquota}, {@noblock_validity}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 2m32.884762782s ago: executing program 2 (id=719): setns(0xffffffffffffffff, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x2) listen(r0, 0x0) 2m29.501603509s ago: executing program 2 (id=729): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05170100000000000109022400010000000009040000010300000009210100080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="202409000000f033"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m28.991111567s ago: executing program 35 (id=729): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05170100000000000109022400010000000009040000010300000009210100080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="202409000000f033"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m9.330543404s ago: executing program 3 (id=767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = geteuid() sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x15, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x88, 0x0, r3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) brk(0xc00000000000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") 2m8.543187775s ago: executing program 3 (id=768): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8000000000000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@tz_utc}]}, 0x1, 0x370, &(0x7f0000002980)="$eJzs3U9oHFUYAPBvO/lbaJODUBSE0ZugoX/woHhIKSkU96KyVD2Ii01VsrGQxcX00G28iEfBo4LgRTzowUPPIijizYNXK2hVPGhvBYtPdnd2d7a7SSMlldDf77B8+d77Zt6bvGQnm+zLy8uxdm46zl+/fi3m5ioxtXxqOW5UYjGy6Lsc42Ym5ACA/eFGSvFX6tllSWWPhwQA7LHu8/+rh0qZt7/eqX/y7A8A+17x8//8Tn3mxlO/PNV5vLB34wIA9s7Y6/8PjzTPjP6qf6r0VwEAwH713AsvPn2yGvFsns9FrL/TqrVq8eSw/eT5eD0asRpHYyFuRvRuFDoPle7j6TPVlaN5nrfj18WoRcRHrVrEertV690pnMy69bNxLBZisagv7jZSStnpL6orx/KuiLjc7p4/1iut2nQcLM7/48FYjeORx31j9RFnqivH8+IAtfV+fTtiK+biQG8SnfEvxUJ8/0pciEacmz8bKfVva6orl47l+alUHalv1Wbj3OAqTHgFBAAAAAAAAAAAAAAAAAAAAAAA7sBSPrA42P8mDffvWVqa0N7dH6dXX+wPtNXbHyjNpkjpz7ceq72bxcj+QLfuz9OqTfV35wEAAAAAAAAAAAAAAAAAAIB7XnNzJuqNxupGc/PiWjlobzQ3D0REJ/PGt599NR/jfW4TTBXnKDXlReriWj1l/c4pG+lTBFnn5P3Mp1cGIy73mR3MYuIwZrdvajQOPfTzB8PMg1n/yP8M+2QxeYLZLcMoB+uHe0MaZKaHU972ip0oguO3uapXU0rbHefSS+NVUYmY+u+fuJ2D1Am+ufba/SeaRx7vZr5MPY88unD26vsf/75Wb3TO3NH4ZGajeTOt1YuPJy+27YOstH4qxTWslFfC1E7lW6OZevbDH88/8N53uzt7KmfenNAn603n843mZqX4Suk2zfSCTu6WqvnGmWxsJUxPWPx3FkxcbEc+XK5fufTTb7s9TumbhI06AAAAAAAAAAAAAAAAAADgrii9V7xQvNl3eqeqJ54pgrm9HR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3B3D//9fCrbGMrsJ/m7HeNPs6kYz4vD/PU0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5x/wYAAP//Q7dpOg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) fadvise64(r2, 0x8, 0x9, 0x0) 2m7.352613413s ago: executing program 3 (id=769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x7, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m6.998073861s ago: executing program 3 (id=771): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) truncate(&(0x7f0000000200)='./file0/file2\x00', 0x1) 2m6.199347323s ago: executing program 3 (id=773): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000008c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5522, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x5, 0x2}], 0xee00}, 0x18, 0x1) lsetxattr$security_evm(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) 2m3.061320772s ago: executing program 3 (id=778): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x395c06b, 0x0, 0x11, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2m2.736007433s ago: executing program 36 (id=778): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x395c06b, 0x0, 0x11, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1m59.151450202s ago: executing program 1 (id=786): syz_open_dev$usbfs(0x0, 0x76, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 1m58.106617334s ago: executing program 1 (id=787): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_raw(r1, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x1, 0x10080) openat(0xffffffffffffff9c, 0x0, 0x200, 0x119) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x9f, &(0x7f0000000340)=ANY=[@ANYBLOB="1201500200000040d118042d40000102030109028d00030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d020001002009040100000102200009040101010102200008240201fc01510410240105c408000000000609000000cd090501090800"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 1m56.110122207s ago: executing program 1 (id=788): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x20009}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@minixdf}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f00000003c0)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)) unlink(&(0x7f0000000280)='./file1\x00') 1m55.739148208s ago: executing program 1 (id=789): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 1m54.590185679s ago: executing program 1 (id=790): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000880)={[{@nodiscard}, {@nobarrier}, {@checkpoint_enable}, {@compress_cache}, {@noinline_xattr}, {@compress_cache}, {@noinline_xattr}, {@nodiscard}, {@noacl}, {@background_gc_off}, {@nogc_merge}, {@resuid}, {@adaptive_mode}, {@fault_type={'fault_type', 0x3d, 0x402}}]}, 0xfd, 0x5540, &(0x7f0000000980)="$eJzs3M9rI+UbAPB32u3+/u63iIK3HViEFjah6Y9Fb1V38Qd2KasePGmapCG7SaY0aVp78uBRPPifiIInj/4NHjx7Ew+KN0HJvBPdagWxabLdfj4weWbeefPM84YSeGZKAnBuzae//JSEG+FKCGE2hHA9hEujc8loZz2G50MIN0MIM49tSTH+x8DFEMLVEMKNYfKYMylOfXZ7cGvtxzd//vrbSxeuff7Vd1NZMPBEGH6tdHbi/n4nxqwZ48NivDpo5bGzOihiPNG+HM93sji+39jKM+xXR/OqeVxpxvnZzl5vGLfb1dowNlvb+fhON16wN2iO8uRveFjdzY/rja08tnpZHpuH8boHh/G77bDXj3nqRb4P8/Sh3x/FON44aMT17DzKY63bL8Zj3qzeOBjGQRGLy4Va1q7ndWyd4IN+wr3V6u4dpIPGbq+VddO1cuXFcuVOqbKb1Rv9xmqp2qnfWU0Xmu3htFK/Ue2sN7Os2W6Ua1lnMV1o1mqlSiVduNvYalW7aaVSXikvldYWi73b6Wv3303b9XRhGF9pdff6rXYv3c520/iOxXS5vPLSYnqrkr69sZluPrh3b2Pznffvvnf/5Y03Xi0m/a2sdGF5aXm5VFkqLVcWz9H6Py6KHuP64USSaRcAcPYc0//n+4n+HzhFL5yg/+88Ko6P7f93H4Rw+v1/0P+PxZnqf897/38K64cT+W/9/3NjrwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn7fu6L1/Od+Xh8rRj/XzH0THGchBBmQgi/HWM2XDySc7bIM/cP8+f+UsM3ScgzDK9xqdiuhhDWi+3X/5/2pwAAAABPry8/uvlp7Nbjy/y0C2KS4k2bmesfjClfEkKYm/9hTNlmhi/PjilZ/vd9IRyMKVt+A+vymJLFW24XxpXtX5k9Ei4/FpIYZiZaDgAAMBFHO4HJdiEAAABM0ifTLoDpSMLoUeboWXD+n/d/PhC8cuQIAAAAOIOSaRcAAAAAnLq8//f7fwAAAPB0i7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv7NzPrdMwHAfwX5IaHv9EhbhzYw5u743BCBw5og7AEh2AQ2dggc5QboyAGtQ4hQYVAYqTiKfPR0pdp8m3dpSLbckAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFP6knYpPrz6ODbn2I5TpjcAAADANYe0u+u+rHP9SX/+WX/qRV+vIqKOiGtj9yYeDDKbPif9vP7T5fXplzZ8jugSTv/xsD8eR8Sb/vj2fOqnAAAAAPfXfrO9zaP1/LFeukHMKU/a1E/fFsqrIiKtv/7TPW3zu1/qU97LEu2K/v1exftCad0E1k2hsDzltiqV9lfyUz/P2t1cFFUu6qu3rbqpuZJ9BwAAZtQMinlHIQAAAMzp3dINYBlVnJcyfywFDpf3Hg1qAAAAwH+oWroBAAAAwOS68f8f9/97nbrN+Ufu/9fa/w8AAACWkff/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEqHtLvbb7a3Y3OO7ThlegMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN/Zn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLnfl7kpuIAgL8kk6mtiusqc1gRBQ96sdNpbe1NPCiLB/8EYdlO69qpP9o92FLEvXiTPfciehQRlPXW/6HnFnqptx7mUEE8jiSTzKTtUmdLTdLdzwde3jch5H1fBob95mUWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNL4/XmcZJulaRwXx27eu7qe9bce6DPXt2+vZC2LozqTfjq8Wt2Jes0lAgAAwMGRlPV9COFOurOa9fFSXv+n5TlZzf/j89O4rOcfrPvLvqz9s/bH73dfng20NB0nu+jZjdHw2MOpdP6/WbbbC/95Rie/8/mzlyT/QOKPtl4ap/n9jL6/ceODbh4eqiNbAOBxHC37Iij/Hsr6QZOJAXBgdCqFd1n/J0vN5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh/FWeLaMoxDCSmceZ27du7q+W399+/ZK2U5du7Ydvp1fM7tEGkI4uzEaHqt1Nu126fKV82uj0fBi/cFrIYSmRn+vmP75TxY4OYRG7s/eg3/akUbbgrj4sNuSz9MRPNbXSfzEvpgAANh30qJldf2ddGc1OxYthzD56f76/81KHBas/+9+eupmdaxq/T+obYbt19+88GX/0uUrb29cWDs3PDf8/J3jg3cHJ06fPHm6nz8r6XtiAgAAwJ5NJpPJbKdbtGr9Hy8/vP5/pBKHBev/r34YfFMdOFH/72q+6Nd0JgAAAAfbi6///Ve0y/Go2w1fr21uXhxMt7P949NtA6nu2aGiVev/ZLnprAAAAIA6jLei+9b/z1TisOD6/3M/v/Jr9ZpJCOFwsf5/dP2L0Zn6ptNqT+g3w9Gjflzd9BwBAABo1uGiVdf/0/z9/3j2ykMcQnjrjWlc/BvAR9b/aVH/Jx9+90t1rOr7/yfqm2Irxb3p/cj7XgidXtMZAQAAsJ89U7Ss2P8z3Vn97LcjH3e9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt38DAAD//zVFQwE=") 1m51.837503242s ago: executing program 1 (id=791): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0xc, 0x4) write(r0, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) recvmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 1m51.621352694s ago: executing program 37 (id=791): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0xc, 0x4) write(r0, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) recvmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 49.037308875s ago: executing program 8 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4515", 0x2}], 0x1}}], 0x1, 0x4000045) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 48.37753679s ago: executing program 8 (id=845): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0xffffffff, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 47.922689557s ago: executing program 8 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 47.30566134s ago: executing program 8 (id=848): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 46.409202476s ago: executing program 8 (id=849): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000380), 0x1, 0xbac, &(0x7f00000017c0)="$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") mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) r0 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x7b, 0x1a00, 0x0, 0x3) 45.019124372s ago: executing program 8 (id=851): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512f", 0x6b}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 44.33598066s ago: executing program 38 (id=851): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512f", 0x6b}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.422708495s ago: executing program 9 (id=894): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'wlan0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1, 0x2, 0xb8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.792293421s ago: executing program 9 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000003c0)) 2.584867423s ago: executing program 9 (id=896): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x21d, &(0x7f0000000e40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) fremovexattr(0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.355854062s ago: executing program 9 (id=897): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xe1d21000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) 21.440796ms ago: executing program 9 (id=898): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0xa40, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140)) 0s ago: executing program 9 (id=899): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0x0, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): 0000-0000-0000-000000000000. [ 329.056328][ T8095] chnl_net:caif_netlink_parms(): no params data found [ 329.092040][ T8228] loop1: detected capacity change from 0 to 256 [ 329.237201][ T7817] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.324713][ T8228] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x6fed4391, utbl_chksum : 0xe619d30d) [ 329.376000][ T37] audit: type=1800 audit(1776917052.724:9): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.660" name="file1" dev="loop1" ino=1048633 res=0 errno=0 [ 329.460300][ T7817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.524008][ T7817] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.634929][ T7817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.710500][ T7817] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.897311][ T7817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.197765][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 330.322431][ T822] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.347049][ T7817] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 330.415592][ T7817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.090174][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.090514][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.090889][ T8095] bridge_slave_0: entered allmulticast mode [ 331.191130][ T8095] bridge_slave_0: entered promiscuous mode [ 331.367313][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.368181][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.368489][ T8095] bridge_slave_1: entered allmulticast mode [ 331.385018][ T8095] bridge_slave_1: entered promiscuous mode [ 331.678550][ T8095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.726788][ T8095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.874688][ T3521] bridge_slave_1: left allmulticast mode [ 331.874746][ T3521] bridge_slave_1: left promiscuous mode [ 331.875062][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.034156][ T8261] loop2: detected capacity change from 0 to 256 [ 332.047063][ T8261] exfat: Deprecated parameter 'utf8' [ 332.090352][ T8261] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 332.178095][ T3521] bridge_slave_0: left allmulticast mode [ 332.178136][ T3521] bridge_slave_0: left promiscuous mode [ 332.178513][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.808905][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.908960][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.970008][ T3521] bond0 (unregistering): Released all slaves [ 334.167720][ T8095] team0: Port device team_slave_0 added [ 334.202651][ T8095] team0: Port device team_slave_1 added [ 334.507773][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.507793][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.507822][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.652413][ T8281] loop1: detected capacity change from 0 to 256 [ 334.769983][ T3521] hsr_slave_0: left promiscuous mode [ 334.807682][ T3521] hsr_slave_1: left promiscuous mode [ 334.808404][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.836654][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.989835][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 336.111561][ T8290] loop2: detected capacity change from 0 to 256 [ 336.145077][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 336.206631][ T5560] kernel read not supported for file /vcsa (pid: 5560 comm: kworker/0:3) [ 337.215164][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.215185][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.215233][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.235401][ T8300] loop2: detected capacity change from 0 to 4096 [ 337.244973][ T8300] EXT4-fs: inline encryption not supported [ 337.333705][ T8300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 337.339461][ T8300] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8856c019, mo2=0003] [ 337.354620][ T8300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.657020][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.936359][ T8307] loop2: detected capacity change from 0 to 512 [ 337.971696][ T8307] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.681: missing EA_INODE flag [ 337.971734][ T8307] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 337.983496][ C1] EXT4-fs (loop2): initial error at time 1776917061: ext4_xattr_inode_iget:441: inode 12 [ 337.983534][ C1] EXT4-fs (loop2): last error at time 1776917061: ext4_xattr_inode_iget:441: inode 12 [ 338.084338][ T8307] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.681: error while reading EA inode 12 err=-117 [ 338.084376][ T8307] loop2: lost filesystem error report for type 5 error -117 [ 338.085030][ T8307] EXT4-fs (loop2): 1 orphan inode deleted [ 338.175251][ T8307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.466437][ T8095] hsr_slave_0: entered promiscuous mode [ 338.511156][ T8095] hsr_slave_1: entered promiscuous mode [ 338.513267][ T8095] debugfs: 'hsr0' already exists in 'hsr' [ 338.513298][ T8095] Cannot create hsr debugfs directory [ 339.643559][ T8318] loop1: detected capacity change from 0 to 512 [ 339.684083][ T8318] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 339.714048][ T8318] EXT4-fs (loop1): 1 truncate cleaned up [ 339.725002][ T8318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.901359][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.355553][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.711249][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.784783][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.786855][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.790282][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.812424][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.838542][ T5560] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 341.163006][ T5560] usb 3-1: unable to get BOS descriptor or descriptor too short [ 341.164223][ T5560] usb 3-1: not running at top speed; connect to a high speed hub [ 341.166369][ T5560] usb 3-1: config 172 has an invalid interface number: 25 but max is 0 [ 341.166398][ T5560] usb 3-1: config 172 has no interface number 0 [ 341.166432][ T5560] usb 3-1: config 172 interface 25 has no altsetting 0 [ 341.173315][ T5560] usb 3-1: New USB device found, idVendor=03f0, idProduct=4439, bcdDevice=3c.ff [ 341.173345][ T5560] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.173364][ T5560] usb 3-1: Product: syz [ 341.173377][ T5560] usb 3-1: Manufacturer: syz [ 341.173392][ T5560] usb 3-1: SerialNumber: syz [ 341.463763][ T8336] netlink: 104 bytes leftover after parsing attributes in process `syz.1.690'. [ 341.796719][ T8323] loop2: detected capacity change from 0 to 4096 [ 341.960781][ T8323] EXT4-fs (loop2): Test dummy encryption mode enabled [ 342.042920][ T8323] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 342.393207][ T8323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.167645][ T5835] Bluetooth: hci4: command tx timeout [ 344.483805][ T5560] pl2303 3-1:172.25: required endpoints missing [ 344.557057][ T5560] usb 3-1: USB disconnect, device number 5 [ 344.716062][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.113546][ T8375] loop2: detected capacity change from 0 to 256 [ 346.570772][ T8375] FAT-fs (loop2): Directory bread(block 64) failed [ 346.570814][ T8375] FAT-fs (loop2): Directory bread(block 65) failed [ 346.570943][ T8375] FAT-fs (loop2): Directory bread(block 66) failed [ 346.570967][ T8375] FAT-fs (loop2): Directory bread(block 67) failed [ 346.571085][ T8375] FAT-fs (loop2): Directory bread(block 68) failed [ 346.571108][ T8375] FAT-fs (loop2): Directory bread(block 69) failed [ 346.571218][ T8375] FAT-fs (loop2): Directory bread(block 70) failed [ 346.571241][ T8375] FAT-fs (loop2): Directory bread(block 71) failed [ 346.571349][ T8375] FAT-fs (loop2): Directory bread(block 72) failed [ 346.571373][ T8375] FAT-fs (loop2): Directory bread(block 73) failed [ 347.863007][ T5835] Bluetooth: hci4: command tx timeout [ 347.864496][ T37] audit: type=1800 audit(1776917070.464:10): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.698" name="bus" dev="loop2" ino=1048639 res=0 errno=0 [ 348.134469][ T5489] 8021q: adding VLAN 0 to HW filter on device eth13 [ 348.863169][ T8392] loop3: detected capacity change from 0 to 1024 [ 348.911226][ T8392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.385228][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.490678][ T8404] loop2: detected capacity change from 0 to 256 [ 349.769063][ T8404] FAT-fs (loop2): Directory bread(block 64) failed [ 349.769102][ T8404] FAT-fs (loop2): Directory bread(block 65) failed [ 349.769199][ T8404] FAT-fs (loop2): Directory bread(block 66) failed [ 349.769220][ T8404] FAT-fs (loop2): Directory bread(block 67) failed [ 349.769310][ T8404] FAT-fs (loop2): Directory bread(block 68) failed [ 349.769332][ T8404] FAT-fs (loop2): Directory bread(block 69) failed [ 349.769437][ T8404] FAT-fs (loop2): Directory bread(block 70) failed [ 349.769458][ T8404] FAT-fs (loop2): Directory bread(block 71) failed [ 349.769550][ T8404] FAT-fs (loop2): Directory bread(block 72) failed [ 349.769571][ T8404] FAT-fs (loop2): Directory bread(block 73) failed [ 349.887548][ T5835] Bluetooth: hci4: command tx timeout [ 350.701015][ T8416] loop1: detected capacity change from 0 to 4096 [ 350.720064][ T37] audit: type=1800 audit(1776917073.574:11): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.708" name="bus" dev="loop2" ino=1048640 res=0 errno=0 [ 351.213089][ T8416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.701300][ T37] audit: type=1800 audit(1776917075.054:12): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.709" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 351.731233][ T8416] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.709: corrupted inode contents [ 351.745323][ T8416] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.709: mark_inode_dirty error [ 351.761406][ T8416] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.709: corrupted inode contents [ 351.762450][ T8416] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.709: mark_inode_dirty error [ 351.776434][ T8416] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.709: corrupted inode contents [ 351.797724][ T8416] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.709: mark_inode_dirty error [ 351.807702][ T8416] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.709: corrupted inode contents [ 351.834805][ T8416] EXT4-fs error (device loop1): ext4_truncate:4690: inode #15: comm syz.1.709: mark_inode_dirty error [ 351.857615][ T8416] EXT4-fs error (device loop1) in ext4_setattr:6120: Corrupt filesystem [ 353.238055][ T5835] Bluetooth: hci4: command tx timeout [ 353.488202][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.692687][ T8422] loop2: detected capacity change from 0 to 512 [ 353.848306][ T8422] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 354.865206][ T8422] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.712: corrupted in-inode xattr: e_value size too large [ 354.865246][ T8422] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 354.865689][ T8422] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.712: couldn't read orphan inode 15 (err -117) [ 354.865722][ T8422] loop2: lost filesystem error report for type 5 error -117 [ 354.879407][ T8422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.644107][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.334069][ T8435] loop2: detected capacity change from 0 to 4096 [ 357.335424][ T8435] EXT4-fs: inline encryption not supported [ 357.337127][ T8435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.425824][ T8435] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8856c019, mo2=0003] [ 357.646108][ T8438] loop1: detected capacity change from 0 to 256 [ 357.957107][ T8435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.407259][ T8443] loop3: detected capacity change from 0 to 512 [ 358.455104][ T8443] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 358.455129][ T8443] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 358.455230][ T8443] System zones: 0-1, 15-15, 18-18, 34-34 [ 358.455616][ T8443] EXT4-fs (loop3): orphan cleanup on readonly fs [ 358.455730][ T8443] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 358.455841][ T8443] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 358.455869][ T8443] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 358.505648][ T8443] EXT4-fs (loop3): 1 truncate cleaned up [ 358.510355][ T8443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.755129][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.193346][ T8457] loop1: detected capacity change from 0 to 512 [ 360.216914][ T8457] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 360.276437][ T8457] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.724: corrupted in-inode xattr: e_value size too large [ 360.276541][ T8457] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.282363][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 360.282423][ C1] EXT4-fs (loop1): initial error at time 1776917083: ext4_iget_extra_inode:5128: inode 15 [ 360.282536][ C1] EXT4-fs (loop1): last error at time 1776917083: ext4_iget_extra_inode:5128: inode 15 [ 360.367425][ T8457] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.724: couldn't read orphan inode 15 (err -117) [ 360.367465][ T8457] loop1: lost filesystem error report for type 5 error -117 [ 360.374211][ T8457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.969409][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.175943][ T8468] loop1: detected capacity change from 0 to 512 [ 361.218414][ T8468] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.727: corrupted in-inode xattr: bad e_name length [ 361.218455][ T8468] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.219069][ T8468] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.727: couldn't read orphan inode 15 (err -117) [ 361.219101][ T8468] loop1: lost filesystem error report for type 5 error -117 [ 361.270869][ T8468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.285225][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.288520][ T8468] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.727: corrupted in-inode xattr: bad e_name length [ 361.456642][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.601570][ T8471] loop1: detected capacity change from 0 to 1024 [ 361.603043][ T8471] EXT4-fs: Ignoring removed mblk_io_submit option [ 361.634952][ T8471] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 361.634952][ T8471] [ 362.176488][ T8474] loop1: detected capacity change from 0 to 1024 [ 362.181623][ T8474] EXT4-fs: Ignoring removed orlov option [ 362.293357][ T8474] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 362.293491][ T8474] System zones: 0-1, 3-12 [ 362.308154][ T8474] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.982884][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 363.090839][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.134632][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.193065][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.194589][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.233222][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.410049][ T8489] loop1: detected capacity change from 0 to 512 [ 363.451804][ T8489] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 363.460182][ T8489] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.734: corrupted in-inode xattr: e_value size too large [ 363.460218][ T8489] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.460630][ T8489] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.734: couldn't read orphan inode 15 (err -117) [ 363.460657][ T8489] loop1: lost filesystem error report for type 5 error -117 [ 363.463795][ T8489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.688510][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 364.061461][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.389019][ T8494] loop1: detected capacity change from 0 to 256 [ 364.506500][ T8494] FAT-fs (loop1): Directory bread(block 64) failed [ 364.506540][ T8494] FAT-fs (loop1): Directory bread(block 65) failed [ 364.506651][ T8494] FAT-fs (loop1): Directory bread(block 66) failed [ 364.506674][ T8494] FAT-fs (loop1): Directory bread(block 67) failed [ 364.506784][ T8494] FAT-fs (loop1): Directory bread(block 68) failed [ 364.506809][ T8494] FAT-fs (loop1): Directory bread(block 69) failed [ 364.506924][ T8494] FAT-fs (loop1): Directory bread(block 70) failed [ 364.506948][ T8494] FAT-fs (loop1): Directory bread(block 71) failed [ 364.507052][ T8494] FAT-fs (loop1): Directory bread(block 72) failed [ 364.507075][ T8494] FAT-fs (loop1): Directory bread(block 73) failed [ 364.627039][ T8498] loop3: detected capacity change from 0 to 1024 [ 364.639692][ T8498] EXT4-fs: Ignoring removed orlov option [ 364.909358][ T8498] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 364.934116][ T8498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.173495][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.410233][ T5835] Bluetooth: hci0: command tx timeout [ 366.027780][ T3521] bridge_slave_1: left allmulticast mode [ 366.027821][ T3521] bridge_slave_1: left promiscuous mode [ 366.028226][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.099310][ T3521] bridge_slave_0: left allmulticast mode [ 366.099351][ T3521] bridge_slave_0: left promiscuous mode [ 366.114242][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.368257][ T8516] loop3: detected capacity change from 0 to 40427 [ 366.386495][ T8516] F2FS-fs (loop3): invalid crc value [ 366.681961][ T8516] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 366.716124][ T8516] F2FS-fs (loop3): Start checkpoint disabled! [ 366.759569][ T8516] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 366.766354][ T8516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 366.968785][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.058159][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.141145][ T3521] bond0 (unregistering): Released all slaves [ 367.487528][ T5835] Bluetooth: hci0: command tx timeout [ 367.717543][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.717903][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.718262][ T8325] bridge_slave_0: entered allmulticast mode [ 367.749731][ T8325] bridge_slave_0: entered promiscuous mode [ 367.850883][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.851178][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.851560][ T8325] bridge_slave_1: entered allmulticast mode [ 367.872260][ T8325] bridge_slave_1: entered promiscuous mode [ 368.034958][ T8095] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.122994][ T8095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.223037][ T8095] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.300140][ T8095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.331981][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.388547][ T8095] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.457914][ T8095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.637486][ T3521] hsr_slave_0: left promiscuous mode [ 368.657599][ T3521] hsr_slave_1: left promiscuous mode [ 368.658811][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.702837][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.757605][ T7134] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 368.820519][ T67] kworker/u8:4: attempt to access beyond end of device [ 368.820519][ T67] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 368.820568][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.820583][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.820592][ T67] Workqueue: writeback wb_workfn (flush-7:3) [ 368.820620][ T67] Call Trace: [ 368.820625][ T67] [ 368.820632][ T67] dump_stack_lvl+0xe8/0x150 [ 368.820650][ T67] f2fs_stop_checkpoint+0x383/0x540 [ 368.820669][ T67] f2fs_write_end_io+0x1274/0x1740 [ 368.820699][ T67] __submit_merged_bio+0x256/0x6a0 [ 368.820718][ T67] __submit_merged_write_cond+0x3c9/0x4e0 [ 368.820738][ T67] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 368.820767][ T67] f2fs_write_data_pages+0x287e/0x34f0 [ 368.820807][ T67] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 368.820867][ T67] ? __lock_acquire+0x6b5/0x2cf0 [ 368.820910][ T67] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 368.820927][ T67] do_writepages+0x32e/0x550 [ 368.820945][ T67] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 368.820958][ T67] ? reacquire_held_locks+0x104/0x190 [ 368.820975][ T67] ? rt_spin_lock+0x1e0/0x400 [ 368.820994][ T67] __writeback_single_inode+0x133/0x10e0 [ 368.821011][ T67] ? rt_spin_unlock+0x160/0x200 [ 368.821025][ T67] writeback_sb_inodes+0x97f/0x1980 [ 368.821060][ T67] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 368.821127][ T67] ? rcu_is_watching+0x15/0xb0 [ 368.821156][ T67] wb_writeback+0x445/0xb00 [ 368.821172][ T67] ? queue_io+0x291/0x440 [ 368.821191][ T67] ? __pfx_wb_writeback+0x10/0x10 [ 368.821216][ T67] wb_workfn+0x3fd/0xf20 [ 368.821233][ T67] ? __lock_acquire+0x6b5/0x2cf0 [ 368.821247][ T67] ? look_up_lock_class+0x57/0x110 [ 368.821274][ T67] ? __pfx_wb_workfn+0x10/0x10 [ 368.821295][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.821308][ T67] ? lock_acquire+0x106/0x350 [ 368.821324][ T67] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.821340][ T67] ? process_one_work+0x8b7/0x1710 [ 368.821353][ T67] ? process_one_work+0x8b7/0x1710 [ 368.821374][ T67] ? process_one_work+0x8b7/0x1710 [ 368.821385][ T67] process_one_work+0x9a3/0x1710 [ 368.821411][ T67] ? __pfx_process_one_work+0x10/0x10 [ 368.821422][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.821447][ T67] worker_thread+0xba8/0x11e0 [ 368.821478][ T67] kthread+0x388/0x470 [ 368.821494][ T67] ? __pfx_worker_thread+0x10/0x10 [ 368.821505][ T67] ? __pfx_kthread+0x10/0x10 [ 368.821522][ T67] ret_from_fork+0x514/0xb70 [ 368.821545][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 368.821558][ T67] ? __switch_to+0xc79/0x1410 [ 368.821579][ T67] ? __pfx_kthread+0x10/0x10 [ 368.821596][ T67] ret_from_fork_asm+0x1a/0x30 [ 368.821623][ T67] [ 368.821864][ T67] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 369.217561][ T7134] usb 2-1: Using ep0 maxpacket: 16 [ 369.233441][ T7134] usb 2-1: config index 0 descriptor too short (expected 67, got 36) [ 369.233502][ T7134] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.233548][ T7134] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 369.233573][ T7134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.293148][ T7134] usb 2-1: config 0 descriptor?? [ 369.306495][ T7134] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 369.558918][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 369.567728][ T5835] Bluetooth: hci0: command tx timeout [ 369.618496][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 370.006145][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.007268][ T8095] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 370.074315][ T8095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.273883][ T8325] team0: Port device team_slave_0 added [ 370.372948][ T8325] team0: Port device team_slave_1 added [ 370.699174][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.699194][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.699222][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.803488][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.803508][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.803539][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.456278][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.511214][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.516853][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.521368][ T8325] hsr_slave_0: entered promiscuous mode [ 371.534668][ T8325] hsr_slave_1: entered promiscuous mode [ 371.541675][ T8325] debugfs: 'hsr0' already exists in 'hsr' [ 371.541701][ T8325] Cannot create hsr debugfs directory [ 371.556783][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.558742][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.648859][ T60] Bluetooth: hci0: command tx timeout [ 371.822661][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 371.836240][ T5843] usb 2-1: USB disconnect, device number 4 [ 373.714189][ T8579] loop3: detected capacity change from 0 to 128 [ 373.720940][ T8579] EXT4-fs (loop3): Test dummy encryption mode enabled [ 373.727528][ T5835] Bluetooth: hci5: command tx timeout [ 373.775542][ T8579] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.776103][ T8579] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.919258][ T5843] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 373.937719][ T5489] 8021q: adding VLAN 0 to HW filter on device eth15 [ 374.059425][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.059878][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.060232][ T8481] bridge_slave_0: entered allmulticast mode [ 374.093766][ T8481] bridge_slave_0: entered promiscuous mode [ 374.113682][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 374.113722][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.113775][ T5843] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 374.113806][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.180905][ T5843] usb 2-1: config 0 descriptor?? [ 374.341547][ T5827] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.623220][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.623612][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.623973][ T8481] bridge_slave_1: entered allmulticast mode [ 374.678877][ T8481] bridge_slave_1: entered promiscuous mode [ 374.990855][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.023608][ T5843] aquacomputer_d5next 0003:0C70:F0B6.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 375.032858][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.551009][ T5843] usb 2-1: USB disconnect, device number 5 [ 375.827442][ T5835] Bluetooth: hci5: command tx timeout [ 376.188884][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.260679][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.428484][ T8481] team0: Port device team_slave_0 added [ 377.893304][ T5835] Bluetooth: hci5: command tx timeout [ 377.912512][ T8603] usb usb9: usbfs: process 8603 (syz.1.758) did not claim interface 4 before use [ 378.023460][ T8481] team0: Port device team_slave_1 added [ 378.300713][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 378.620336][ T8605] loop1: detected capacity change from 0 to 40427 [ 378.662780][ T8605] F2FS-fs (loop1): invalid crc value [ 378.729966][ T8607] veth0: entered promiscuous mode [ 378.777488][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.777606][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.950650][ T8605] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 379.015046][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.015068][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.015095][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.056350][ T8605] F2FS-fs (loop1): Start checkpoint disabled! [ 379.165050][ T8605] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 379.166254][ T8605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 379.360083][ T8605] syz.1.759: attempt to access beyond end of device [ 379.360083][ T8605] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 379.428877][ T8613] syz.1.759: attempt to access beyond end of device [ 379.428877][ T8613] loop1: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 379.523769][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.523781][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.523798][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.536321][ T2254] kworker/u8:12: attempt to access beyond end of device [ 379.536321][ T2254] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 379.536395][ T2254] CPU: 0 UID: 0 PID: 2254 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 379.536417][ T2254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.536430][ T2254] Workqueue: writeback wb_workfn (flush-7:1) [ 379.536469][ T2254] Call Trace: [ 379.536477][ T2254] [ 379.536485][ T2254] dump_stack_lvl+0xe8/0x150 [ 379.536511][ T2254] f2fs_stop_checkpoint+0x383/0x540 [ 379.536539][ T2254] f2fs_write_end_io+0x1274/0x1740 [ 379.536588][ T2254] __submit_merged_bio+0x256/0x6a0 [ 379.536619][ T2254] __submit_merged_write_cond+0x3c9/0x4e0 [ 379.536652][ T2254] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 379.536700][ T2254] f2fs_write_data_pages+0x287e/0x34f0 [ 379.536765][ T2254] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 379.536814][ T2254] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 379.536884][ T2254] ? __lock_acquire+0x6b5/0x2cf0 [ 379.536925][ T2254] ? __perf_event_task_sched_in+0x1606/0x1800 [ 379.536975][ T2254] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 379.537002][ T2254] do_writepages+0x32e/0x550 [ 379.537031][ T2254] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 379.537050][ T2254] ? reacquire_held_locks+0x104/0x190 [ 379.537076][ T2254] ? rt_spin_lock+0x1e0/0x400 [ 379.537108][ T2254] __writeback_single_inode+0x133/0x10e0 [ 379.537134][ T2254] ? rt_spin_unlock+0x160/0x200 [ 379.537158][ T2254] writeback_sb_inodes+0x97f/0x1980 [ 379.537202][ T2254] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.537235][ T2254] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 379.537305][ T2254] ? rcu_is_watching+0x15/0xb0 [ 379.537352][ T2254] wb_writeback+0x445/0xb00 [ 379.537383][ T2254] ? queue_io+0x291/0x440 [ 379.537415][ T2254] ? __pfx_wb_writeback+0x10/0x10 [ 379.537459][ T2254] wb_workfn+0x3fd/0xf20 [ 379.537485][ T2254] ? __lock_acquire+0x6b5/0x2cf0 [ 379.537508][ T2254] ? look_up_lock_class+0x57/0x110 [ 379.537552][ T2254] ? __pfx_wb_workfn+0x10/0x10 [ 379.537584][ T2254] ? do_raw_spin_lock+0x12b/0x2f0 [ 379.537604][ T2254] ? lock_acquire+0x106/0x350 [ 379.537630][ T2254] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.537655][ T2254] ? process_one_work+0x8b7/0x1710 [ 379.537677][ T2254] ? process_one_work+0x8b7/0x1710 [ 379.537710][ T2254] ? process_one_work+0x8b7/0x1710 [ 379.537729][ T2254] process_one_work+0x9a3/0x1710 [ 379.537773][ T2254] ? __pfx_process_one_work+0x10/0x10 [ 379.537791][ T2254] ? do_raw_spin_lock+0x12b/0x2f0 [ 379.537840][ T2254] worker_thread+0xba8/0x11e0 [ 379.537872][ T2254] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.537900][ T2254] ? __kthread_parkme+0x7a/0x1f0 [ 379.537922][ T2254] ? __kthread_parkme+0x19c/0x1f0 [ 379.537952][ T2254] kthread+0x388/0x470 [ 379.537977][ T2254] ? __pfx_worker_thread+0x10/0x10 [ 379.537995][ T2254] ? __pfx_kthread+0x10/0x10 [ 379.538022][ T2254] ret_from_fork+0x514/0xb70 [ 379.538046][ T2254] ? __pfx_ret_from_fork+0x10/0x10 [ 379.538068][ T2254] ? __switch_to+0xc79/0x1410 [ 379.538100][ T2254] ? __pfx_kthread+0x10/0x10 [ 379.538126][ T2254] ret_from_fork_asm+0x1a/0x30 [ 379.538169][ T2254] [ 379.538727][ T5843] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 379.548226][ T2254] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 379.687504][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 379.690138][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 379.694273][ T5843] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 379.694299][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.694318][ T5843] usb 4-1: Product: syz [ 379.694330][ T5843] usb 4-1: Manufacturer: syz [ 379.694344][ T5843] usb 4-1: SerialNumber: syz [ 379.968257][ T5835] Bluetooth: hci5: command tx timeout [ 380.266194][ T5843] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 380.419975][ T5843] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 381.025233][ T8481] hsr_slave_0: entered promiscuous mode [ 381.038260][ T8481] hsr_slave_1: entered promiscuous mode [ 381.042637][ T8481] debugfs: 'hsr0' already exists in 'hsr' [ 381.042657][ T8481] Cannot create hsr debugfs directory [ 382.039511][ T8629] netlink: 104 bytes leftover after parsing attributes in process `syz.3.767'. [ 382.052156][ T8629] loop3: detected capacity change from 0 to 512 [ 382.180777][ T8629] EXT4-fs (loop3): Test dummy encryption mode enabled [ 382.180803][ T8629] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 382.204049][ T8629] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.767: bad orphan inode 131083 [ 382.204081][ T8629] loop3: lost filesystem error report for type 5 error -117 [ 382.207630][ T8629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.459596][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.654225][ T5843] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 382.667695][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 382.701487][ T5843] usb 4-1: USB disconnect, device number 11 [ 382.741970][ T8636] loop3: detected capacity change from 0 to 256 [ 382.789075][ T6427] udevd[6427]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.852769][ T8636] FAT-fs (loop3): Directory bread(block 64) failed [ 382.852808][ T8636] FAT-fs (loop3): Directory bread(block 65) failed [ 382.852918][ T8636] FAT-fs (loop3): Directory bread(block 66) failed [ 382.852941][ T8636] FAT-fs (loop3): Directory bread(block 67) failed [ 382.853050][ T8636] FAT-fs (loop3): Directory bread(block 68) failed [ 382.853074][ T8636] FAT-fs (loop3): Directory bread(block 69) failed [ 382.853191][ T8636] FAT-fs (loop3): Directory bread(block 70) failed [ 382.853214][ T8636] FAT-fs (loop3): Directory bread(block 71) failed [ 382.853323][ T8636] FAT-fs (loop3): Directory bread(block 72) failed [ 382.853347][ T8636] FAT-fs (loop3): Directory bread(block 73) failed [ 383.370804][ T37] audit: type=1800 audit(1776917106.734:13): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.768" name="bus" dev="loop3" ino=1048642 res=0 errno=0 [ 384.001348][ T8643] loop1: detected capacity change from 0 to 512 [ 384.094100][ T8647] loop3: detected capacity change from 0 to 512 [ 384.101501][ T8643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.101673][ T8643] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.150493][ T8647] EXT4-fs (loop3): Test dummy encryption mode enabled [ 384.150519][ T8647] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 384.192750][ T8647] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.771: bad orphan inode 131083 [ 384.192785][ T8647] loop3: lost filesystem error report for type 5 error -117 [ 384.196573][ T8647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.302566][ T8647] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 384.336336][ T8647] overlayfs: upper fs needs to support d_type. [ 384.336632][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.366288][ T8650] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.771: invalid fast symlink length 39 [ 384.634092][ T8653] loop1: detected capacity change from 0 to 512 [ 384.722051][ T8653] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.772: iget: bad i_size value: 38620345925642 [ 384.722094][ T8653] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 384.722640][ T8653] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.772: couldn't read orphan inode 15 (err -117) [ 384.722672][ T8653] loop1: lost filesystem error report for type 5 error -117 [ 384.728628][ T8653] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.765438][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.798231][ T5827] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /206/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 384.841853][ T37] audit: type=1800 audit(1776917108.204:14): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.772" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 384.987504][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 385.302228][ T7586] bridge0: port 4(syz_tun) entered disabled state [ 385.551607][ T7586] syz_tun (unregistering): left allmulticast mode [ 385.551643][ T7586] syz_tun (unregistering): left promiscuous mode [ 385.551804][ T7586] bridge0: port 4(syz_tun) entered disabled state [ 386.794979][ T8663] loop1: detected capacity change from 0 to 256 [ 386.848728][ T8663] FAT-fs (loop1): Directory bread(block 64) failed [ 386.848756][ T8663] FAT-fs (loop1): Directory bread(block 65) failed [ 386.848823][ T8663] FAT-fs (loop1): Directory bread(block 66) failed [ 386.848837][ T8663] FAT-fs (loop1): Directory bread(block 67) failed [ 386.848903][ T8663] FAT-fs (loop1): Directory bread(block 68) failed [ 386.848916][ T8663] FAT-fs (loop1): Directory bread(block 69) failed [ 386.848977][ T8663] FAT-fs (loop1): Directory bread(block 70) failed [ 386.848999][ T8663] FAT-fs (loop1): Directory bread(block 71) failed [ 386.849068][ T8663] FAT-fs (loop1): Directory bread(block 72) failed [ 386.849081][ T8663] FAT-fs (loop1): Directory bread(block 73) failed [ 387.139932][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.176820][ T37] audit: type=1800 audit(1776917110.534:15): pid=8665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.776" name="bus" dev="loop1" ino=1048643 res=0 errno=0 [ 387.538822][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.539116][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.539372][ T8544] bridge_slave_0: entered allmulticast mode [ 387.541762][ T8544] bridge_slave_0: entered promiscuous mode [ 387.588904][ T7586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.643232][ T8325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.756887][ T8325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.845908][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.846265][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.846638][ T8544] bridge_slave_1: entered allmulticast mode [ 387.900376][ T8544] bridge_slave_1: entered promiscuous mode [ 387.913108][ T8325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.999641][ T8325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.560919][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.616313][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.711491][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.715426][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.733476][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.738187][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.964620][ T8325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 389.046194][ T8325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.136846][ T8325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 389.175165][ T8325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.421448][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.506532][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.768742][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.824142][ T8682] loop1: detected capacity change from 0 to 512 [ 389.841546][ T8682] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.781: iget: bad i_size value: 38620345925642 [ 389.841584][ T8682] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.847510][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 389.847535][ C0] EXT4-fs (loop1): initial error at time 1776917113: ext4_orphan_get:1397: inode 15 [ 389.847565][ C0] EXT4-fs (loop1): last error at time 1776917113: ext4_orphan_get:1397: inode 15 [ 389.864752][ T8682] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.781: couldn't read orphan inode 15 (err -117) [ 389.864788][ T8682] loop1: lost filesystem error report for type 5 error -117 [ 389.917994][ T8682] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.933076][ T37] audit: type=1800 audit(1776917113.284:16): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.781" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 390.019864][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 390.219121][ T8544] team0: Port device team_slave_0 added [ 390.332116][ T8544] team0: Port device team_slave_1 added [ 390.485383][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.485396][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.485413][ T8544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.551135][ T8481] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 390.615814][ T8692] loop1: detected capacity change from 0 to 256 [ 390.623221][ T8692] exfat: Deprecated parameter 'utf8' [ 390.665394][ T8481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.674718][ T8692] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 390.674999][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.675014][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.675043][ T8544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.770210][ T5835] Bluetooth: hci2: command tx timeout [ 391.053202][ T8481] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 391.082739][ T8481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.151552][ T8481] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 391.201753][ T8481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.280790][ T8481] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 391.321307][ T8481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.531942][ T8544] hsr_slave_0: entered promiscuous mode [ 391.533546][ T8544] hsr_slave_1: entered promiscuous mode [ 391.534746][ T8544] debugfs: 'hsr0' already exists in 'hsr' [ 391.534772][ T8544] Cannot create hsr debugfs directory [ 391.797787][ T12] bridge_slave_1: left allmulticast mode [ 391.797824][ T12] bridge_slave_1: left promiscuous mode [ 391.798045][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.859718][ T12] bridge_slave_0: left allmulticast mode [ 391.859749][ T12] bridge_slave_0: left promiscuous mode [ 391.865174][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.338832][ T12] bridge_slave_1: left allmulticast mode [ 392.338873][ T12] bridge_slave_1: left promiscuous mode [ 392.350249][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.419452][ T12] bridge_slave_0: left allmulticast mode [ 392.419481][ T12] bridge_slave_0: left promiscuous mode [ 392.419666][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.858233][ T5835] Bluetooth: hci2: command tx timeout [ 393.138715][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.188133][ T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 393.218283][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.300392][ T12] bond0 (unregistering): Released all slaves [ 393.372800][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 393.373924][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.373948][ T49] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 393.374016][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 393.376318][ T49] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 393.376363][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.376379][ T49] usb 2-1: Product: syz [ 393.376387][ T49] usb 2-1: Manufacturer: syz [ 393.376408][ T49] usb 2-1: SerialNumber: syz [ 393.675373][ T49] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 393.675403][ T49] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 393.675423][ T49] usb 2-1: 1:1 : unsupported sample bitwidth 1 in 252 bytes [ 393.676057][ T49] usb 2-1: unit 2 not found! [ 393.676075][ T49] usb 2-1: unit 0 not found! [ 393.824072][ T49] usb 2-1: USB disconnect, device number 6 [ 393.933292][ T8637] udevd[8637]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.958568][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.038229][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.060010][ T12] bond0 (unregistering): Released all slaves [ 394.731331][ T12] tipc: Left network mode [ 394.934034][ T5835] Bluetooth: hci2: command tx timeout [ 394.995349][ T8711] loop1: detected capacity change from 0 to 1024 [ 395.000629][ T8711] EXT4-fs: Ignoring removed orlov option [ 395.023582][ T8711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.075986][ T8711] EXT4-fs (loop1): shut down requested (0) [ 395.281599][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.350622][ T8670] chnl_net:caif_netlink_parms(): no params data found [ 396.503704][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.504142][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.504504][ T8670] bridge_slave_0: entered allmulticast mode [ 396.530091][ T8670] bridge_slave_0: entered promiscuous mode [ 396.727526][ T12] hsr_slave_0: left promiscuous mode [ 396.767690][ T12] hsr_slave_1: left promiscuous mode [ 396.768902][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.812979][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.007852][ T5835] Bluetooth: hci2: command tx timeout [ 397.067839][ T12] hsr_slave_0: left promiscuous mode [ 397.107734][ T12] hsr_slave_1: left promiscuous mode [ 397.109050][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.109078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.148403][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.148432][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.208962][ T12] veth1_macvtap: left promiscuous mode [ 397.209092][ T12] veth0_macvtap: left promiscuous mode [ 397.210030][ T12] veth1_vlan: left promiscuous mode [ 397.210226][ T12] veth0_vlan: left promiscuous mode [ 397.798083][ T12] team0 (unregistering): Port device team_slave_1 removed [ 397.838090][ T12] team0 (unregistering): Port device team_slave_0 removed [ 398.508655][ T12] team0 (unregistering): Port device team_slave_1 removed [ 398.558559][ T12] team0 (unregistering): Port device team_slave_0 removed [ 398.775941][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.776300][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.776499][ T8670] bridge_slave_1: entered allmulticast mode [ 398.783509][ T8670] bridge_slave_1: entered promiscuous mode [ 399.304451][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.336515][ T8670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.363506][ T8670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.623723][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.656096][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.676588][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.686751][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.725517][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.778770][ T8670] team0: Port device team_slave_0 added [ 399.791740][ T8670] team0: Port device team_slave_1 added [ 400.112677][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.112697][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.112727][ T8670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.125366][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.129055][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.129072][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.129097][ T8670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.200844][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.201359][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.277119][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.547277][ T8670] hsr_slave_0: entered promiscuous mode [ 400.561054][ T8670] hsr_slave_1: entered promiscuous mode [ 400.563152][ T8670] debugfs: 'hsr0' already exists in 'hsr' [ 400.563179][ T8670] Cannot create hsr debugfs directory [ 400.825014][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.840908][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.843408][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.845871][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.871492][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.809146][ T5835] Bluetooth: hci1: command tx timeout [ 401.837910][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.142908][ T4582] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.143065][ T4582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.175676][ T8544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 402.205783][ T8544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.246226][ T8544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.310943][ T8544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.379591][ T8544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.437877][ T8544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.453741][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.453943][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.482251][ T8544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.556298][ T8544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.008816][ T5835] Bluetooth: hci3: command tx timeout [ 403.244077][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 403.426636][ T8670] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 403.466083][ T8670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.573812][ T8670] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 403.621355][ T8670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.664363][ T8670] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 403.691428][ T8670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.890537][ T5835] Bluetooth: hci1: command tx timeout [ 403.976931][ T8670] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 404.015029][ T8670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.060984][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 404.176046][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.176463][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.176799][ T8743] bridge_slave_0: entered allmulticast mode [ 404.195742][ T8743] bridge_slave_0: entered promiscuous mode [ 404.425144][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.425486][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.425720][ T8743] bridge_slave_1: entered allmulticast mode [ 404.438411][ T8743] bridge_slave_1: entered promiscuous mode [ 404.821573][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.920358][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.087741][ T5835] Bluetooth: hci3: command tx timeout [ 405.271393][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.271791][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.271995][ T8746] bridge_slave_0: entered allmulticast mode [ 405.274157][ T8746] bridge_slave_0: entered promiscuous mode [ 405.333316][ T8743] team0: Port device team_slave_0 added [ 405.337277][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.339369][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.339737][ T8746] bridge_slave_1: entered allmulticast mode [ 405.343220][ T8746] bridge_slave_1: entered promiscuous mode [ 405.369137][ T8743] team0: Port device team_slave_1 added [ 405.496265][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.513979][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.513997][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.514023][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.716323][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.718804][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.718819][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.718844][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.890879][ T8746] team0: Port device team_slave_0 added [ 405.924319][ T8746] team0: Port device team_slave_1 added [ 405.967671][ T5835] Bluetooth: hci1: command tx timeout [ 406.082525][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.166663][ T8743] hsr_slave_0: entered promiscuous mode [ 406.169788][ T8743] hsr_slave_1: entered promiscuous mode [ 406.171631][ T8743] debugfs: 'hsr0' already exists in 'hsr' [ 406.171676][ T8743] Cannot create hsr debugfs directory [ 406.300752][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.300765][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.300781][ T8746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.358094][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.358112][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.358142][ T8746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.500540][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.938862][ T8746] hsr_slave_0: entered promiscuous mode [ 406.940476][ T8746] hsr_slave_1: entered promiscuous mode [ 406.941619][ T8746] debugfs: 'hsr0' already exists in 'hsr' [ 406.941644][ T8746] Cannot create hsr debugfs directory [ 407.167589][ T5835] Bluetooth: hci3: command tx timeout [ 407.170917][ T2254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.387001][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.596693][ T2254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.765043][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.766378][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.024422][ T2254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.047642][ T5835] Bluetooth: hci1: command tx timeout [ 408.507195][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.517004][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.741180][ T2254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.184053][ T8670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.255464][ T5835] Bluetooth: hci3: command tx timeout [ 409.460148][ T8481] veth0_vlan: entered promiscuous mode [ 409.650149][ T8481] veth1_vlan: entered promiscuous mode [ 409.984123][ T8670] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.073603][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.073761][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.115539][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.115724][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.631519][ T2254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.721192][ T8481] veth0_macvtap: entered promiscuous mode [ 410.877881][ T8481] veth1_macvtap: entered promiscuous mode [ 411.176983][ T2254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.553106][ T2254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.870407][ T2254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.911088][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.125396][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.185230][ T8544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.260616][ T1191] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.265387][ T1191] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.508024][ T1191] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.512813][ T1191] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.465365][ T8670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.107864][ T2254] bridge_slave_1: left allmulticast mode [ 414.107892][ T2254] bridge_slave_1: left promiscuous mode [ 414.108094][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.168742][ T2254] bridge_slave_0: left allmulticast mode [ 414.168772][ T2254] bridge_slave_0: left promiscuous mode [ 414.168969][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.538177][ T2254] bridge_slave_1: left allmulticast mode [ 414.538219][ T2254] bridge_slave_1: left promiscuous mode [ 414.538512][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.598631][ T2254] bridge_slave_0: left allmulticast mode [ 414.598659][ T2254] bridge_slave_0: left promiscuous mode [ 414.598864][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.938030][ T2254] vlan2: left promiscuous mode [ 414.938049][ T2254] vlan1: left promiscuous mode [ 414.962200][ T2254] bridge0: port 3(vlan2) entered disabled state [ 415.018714][ T2254] bridge_slave_1: left allmulticast mode [ 415.018743][ T2254] bridge_slave_1: left promiscuous mode [ 415.018944][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.078744][ T2254] bridge_slave_0: left allmulticast mode [ 415.078772][ T2254] bridge_slave_0: left promiscuous mode [ 415.078982][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.148529][ T2254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.229723][ T2254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.309172][ T2254] bond0 (unregistering): Released all slaves [ 416.838333][ T2254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.949092][ T2254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.990753][ T2254] bond0 (unregistering): Released all slaves [ 417.488589][ T2254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.568558][ T2254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.589625][ T2254] bond0 (unregistering): Released all slaves [ 417.773851][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.773876][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.246503][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.246525][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.368632][ T8743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.402311][ T8743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.460175][ T8743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.516626][ T8743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.573071][ T8544] veth0_vlan: entered promiscuous mode [ 418.592851][ T8743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.621230][ T8743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.014996][ T8743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.066326][ T8743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.523648][ T8544] veth1_vlan: entered promiscuous mode [ 419.714147][ T8818] loop8: detected capacity change from 0 to 4096 [ 419.891272][ T8818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.408987][ T8481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.888762][ T8746] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.021286][ T8746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.040378][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.8.797'. [ 424.259571][ T8746] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 424.388951][ T8746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.390500][ T8670] veth0_vlan: entered promiscuous mode [ 425.594100][ T8838] loop8: detected capacity change from 0 to 1024 [ 425.606413][ T8838] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 425.617837][ T8838] JBD2: no valid journal superblock found [ 425.658334][ T8838] EXT4-fs (loop8): Could not load journal inode [ 425.751285][ T8746] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.791363][ T8746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.833042][ T8746] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.871341][ T8746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.957508][ T5843] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 426.006276][ T8670] veth1_vlan: entered promiscuous mode [ 426.107554][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 426.110424][ T5843] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.110452][ T5843] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.115498][ T5843] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.115528][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.115542][ T5843] usb 9-1: Product: syz [ 426.115551][ T5843] usb 9-1: Manufacturer: syz [ 426.115559][ T5843] usb 9-1: SerialNumber: syz [ 426.153885][ T5843] usb 9-1: 0:2 : does not exist [ 426.227775][ T2254] hsr_slave_0: left promiscuous mode [ 426.247640][ T2254] hsr_slave_1: left promiscuous mode [ 426.250227][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.298313][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.394789][ T5843] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 426.497503][ T2254] hsr_slave_0: left promiscuous mode [ 426.503601][ T5843] usb 9-1: USB disconnect, device number 2 [ 426.540585][ T2254] hsr_slave_1: left promiscuous mode [ 426.556741][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.556781][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.583883][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.583911][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.663690][ T8801] udevd[8801]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.768029][ T2254] hsr_slave_0: left promiscuous mode [ 426.788659][ T2254] hsr_slave_1: left promiscuous mode [ 426.790257][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.790278][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.829072][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.829098][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.962142][ T2254] veth1_macvtap: left promiscuous mode [ 426.962210][ T2254] veth0_macvtap: left promiscuous mode [ 427.009033][ T2254] veth1_vlan: left promiscuous mode [ 427.009383][ T2254] veth0_vlan: left promiscuous mode [ 427.157909][ T2254] veth1_macvtap: left promiscuous mode [ 427.157977][ T2254] veth0_macvtap: left promiscuous mode [ 427.158161][ T2254] veth1_vlan: left promiscuous mode [ 427.158319][ T2254] veth0_vlan: left promiscuous mode [ 427.948156][ T2254] team0 (unregistering): Port device team_slave_1 removed [ 427.998526][ T2254] team0 (unregistering): Port device team_slave_0 removed [ 428.678914][ T2254] team0 (unregistering): Port device team_slave_1 removed [ 428.738666][ T2254] team0 (unregistering): Port device team_slave_0 removed [ 429.388483][ T2254] team0 (unregistering): Port device team_slave_1 removed [ 429.429325][ T2254] team0 (unregistering): Port device team_slave_0 removed [ 429.672938][ T8544] veth0_macvtap: entered promiscuous mode [ 429.755581][ T8544] veth1_macvtap: entered promiscuous mode [ 429.871583][ T8850] loop8: detected capacity change from 0 to 512 [ 429.876195][ T8850] EXT4-fs: Ignoring removed oldalloc option [ 429.899958][ T8850] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 429.943486][ T8850] EXT4-fs (loop8): 1 truncate cleaned up [ 430.026278][ T8850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.051553][ T8670] veth0_macvtap: entered promiscuous mode [ 430.130317][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.204644][ T8670] veth1_macvtap: entered promiscuous mode [ 430.240431][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.290625][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.290982][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.342158][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.370161][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.390365][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.433732][ T49] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 430.499113][ T8670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.627599][ T49] usb 9-1: Using ep0 maxpacket: 8 [ 430.633284][ T49] usb 9-1: unable to get BOS descriptor or descriptor too short [ 430.634587][ T49] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 430.696477][ T49] usb 9-1: New USB device found, idVendor=0499, idProduct=1718, bcdDevice= 0.40 [ 430.696511][ T49] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.696532][ T49] usb 9-1: Product: syz [ 430.696547][ T49] usb 9-1: Manufacturer: syz [ 430.696562][ T49] usb 9-1: SerialNumber: syz [ 430.795383][ T8670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.884347][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.025956][ T49] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 431.040635][ T49] usb 9-1: found format II with max.bitrate = 1023, frame size=0 [ 431.040665][ T49] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 431.172785][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.173051][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.377709][ T3521] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.393955][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.394235][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.461315][ T3521] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.676137][ T49] usb 9-1: USB disconnect, device number 3 [ 431.684555][ T3521] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.134117][ T8481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.308777][ T3521] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.402299][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.592816][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.665079][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.706593][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.750608][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.788381][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.625554][ T8746] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.026146][ T5835] Bluetooth: hci4: command tx timeout [ 435.345473][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.345656][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.424617][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.424641][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.766997][ T8865] loop8: detected capacity change from 0 to 40427 [ 435.788295][ T8865] F2FS-fs (loop8): invalid crc value [ 436.000306][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.000624][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.028822][ T8865] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 436.070905][ T8865] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 436.336072][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.336103][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.410495][ T8481] syz-executor: attempt to access beyond end of device [ 436.410495][ T8481] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 436.449527][ T8481] CPU: 1 UID: 0 PID: 8481 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 436.449557][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.449568][ T8481] Call Trace: [ 436.449575][ T8481] [ 436.449583][ T8481] dump_stack_lvl+0xe8/0x150 [ 436.449612][ T8481] f2fs_stop_checkpoint+0x383/0x540 [ 436.449638][ T8481] f2fs_write_end_io+0x1274/0x1740 [ 436.449683][ T8481] __submit_merged_bio+0x256/0x6a0 [ 436.449711][ T8481] __submit_merged_write_cond+0x3c9/0x4e0 [ 436.449764][ T8481] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 436.449807][ T8481] f2fs_write_data_pages+0x287e/0x34f0 [ 436.449866][ T8481] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 436.449943][ T8481] ? do_raw_spin_lock+0x12b/0x2f0 [ 436.449984][ T8481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 436.450017][ T8481] ? lockdep_hardirqs_on+0x7a/0x110 [ 436.450040][ T8481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 436.450062][ T8481] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 436.450089][ T8481] ? reacquire_held_locks+0x104/0x190 [ 436.450113][ T8481] ? rt_spin_lock+0x1e0/0x400 [ 436.450137][ T8481] ? rt_spin_unlock+0x14f/0x200 [ 436.450159][ T8481] ? rt_spin_unlock+0x160/0x200 [ 436.450196][ T8481] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 436.450220][ T8481] do_writepages+0x32e/0x550 [ 436.450245][ T8481] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 436.450266][ T8481] ? rt_spin_unlock+0x14f/0x200 [ 436.450301][ T8481] filemap_fdatawrite+0x1ec/0x2f0 [ 436.450329][ T8481] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 436.450350][ T8481] ? __lock_acquire+0x6b5/0x2cf0 [ 436.450406][ T8481] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 436.450435][ T8481] ? rt_spin_unlock+0x160/0x200 [ 436.450458][ T8481] f2fs_sync_dirty_inodes+0x30e/0x830 [ 436.450503][ T8481] f2fs_write_checkpoint+0x9df/0x26a0 [ 436.450530][ T8481] ? __lock_acquire+0x6b5/0x2cf0 [ 436.450624][ T8481] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 436.450742][ T8481] kill_f2fs_super+0x314/0x730 [ 436.450790][ T8481] ? __pfx_kill_f2fs_super+0x10/0x10 [ 436.450831][ T8481] ? lockdep_hardirqs_on+0x7a/0x110 [ 436.450872][ T8481] deactivate_locked_super+0xbc/0x130 [ 436.450905][ T8481] cleanup_mnt+0x437/0x4d0 [ 436.450937][ T8481] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.450970][ T8481] task_work_run+0x1d9/0x270 [ 436.451005][ T8481] ? __pfx_task_work_run+0x10/0x10 [ 436.451043][ T8481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.451301][ T8481] exit_to_user_mode_loop+0xed/0x480 [ 436.451340][ T8481] ? rcu_is_watching+0x15/0xb0 [ 436.451371][ T8481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.451409][ T8481] do_syscall_64+0x33e/0xf80 [ 436.451436][ T8481] ? trace_irq_disable+0x3b/0x140 [ 436.451463][ T8481] ? clear_bhb_loop+0x40/0x90 [ 436.451492][ T8481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.451515][ T8481] RIP: 0033:0x7f9c0163da57 [ 436.451537][ T8481] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 436.451556][ T8481] RSP: 002b:00007ffe170fb2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 436.451581][ T8481] RAX: 0000000000000000 RBX: 00007f9c016d2048 RCX: 00007f9c0163da57 [ 436.451608][ T8481] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe170fb3b0 [ 436.451622][ T8481] RBP: 00007ffe170fb3b0 R08: 00007ffe170fc3b0 R09: 00000000ffffffff [ 436.451635][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe170fc440 [ 436.451671][ T8481] R13: 00007f9c016d2048 R14: 000000000006a68d R15: 00007ffe170fc480 [ 436.451732][ T8481] [ 436.453475][ T8481] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 437.167873][ T5835] Bluetooth: hci4: command tx timeout [ 437.233008][ T8878] loop9: detected capacity change from 0 to 256 [ 437.479772][ T8878] FAT-fs (loop9): Directory bread(block 64) failed [ 437.479810][ T8878] FAT-fs (loop9): Directory bread(block 65) failed [ 437.479902][ T8878] FAT-fs (loop9): Directory bread(block 66) failed [ 437.479924][ T8878] FAT-fs (loop9): Directory bread(block 67) failed [ 437.480022][ T8878] FAT-fs (loop9): Directory bread(block 68) failed [ 437.480044][ T8878] FAT-fs (loop9): Directory bread(block 69) failed [ 437.480151][ T8878] FAT-fs (loop9): Directory bread(block 70) failed [ 437.480170][ T8878] FAT-fs (loop9): Directory bread(block 71) failed [ 437.480269][ T8878] FAT-fs (loop9): Directory bread(block 72) failed [ 437.480292][ T8878] FAT-fs (loop9): Directory bread(block 73) failed [ 437.941290][ T37] audit: type=1800 audit(1776917161.294:17): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.784" name="bus" dev="loop9" ino=1048656 res=0 errno=0 [ 438.339206][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 438.616721][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.039461][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.039813][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.040178][ T8855] bridge_slave_0: entered allmulticast mode [ 439.074144][ T8855] bridge_slave_0: entered promiscuous mode [ 439.102274][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.102638][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.104612][ T8855] bridge_slave_1: entered allmulticast mode [ 439.136075][ T8855] bridge_slave_1: entered promiscuous mode [ 439.250304][ T5835] Bluetooth: hci4: command tx timeout [ 439.325604][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.471817][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.445273][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.445394][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.327966][ T5835] Bluetooth: hci4: command tx timeout [ 441.886566][ T2254] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.427730][ T8918] kvm: pic: single mode not supported [ 443.436440][ T8918] kvm: pic: non byte write [ 443.451160][ T8918] kvm: pic: non byte write [ 443.451670][ T8918] kvm: pic: non byte write [ 443.509974][ T8855] team0: Port device team_slave_0 added [ 443.740124][ T2254] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.815850][ T8855] team0: Port device team_slave_1 added [ 443.996173][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.996192][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.996221][ T8855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.043670][ T8928] loop8: detected capacity change from 0 to 256 [ 444.366660][ T8928] FAT-fs (loop8): Directory bread(block 64) failed [ 444.366700][ T8928] FAT-fs (loop8): Directory bread(block 65) failed [ 444.366825][ T8928] FAT-fs (loop8): Directory bread(block 66) failed [ 444.366848][ T8928] FAT-fs (loop8): Directory bread(block 67) failed [ 444.366962][ T8928] FAT-fs (loop8): Directory bread(block 68) failed [ 444.366987][ T8928] FAT-fs (loop8): Directory bread(block 69) failed [ 444.367103][ T8928] FAT-fs (loop8): Directory bread(block 70) failed [ 444.367127][ T8928] FAT-fs (loop8): Directory bread(block 71) failed [ 444.367238][ T8928] FAT-fs (loop8): Directory bread(block 72) failed [ 444.367262][ T8928] FAT-fs (loop8): Directory bread(block 73) failed [ 444.792293][ T37] audit: type=1800 audit(1776917168.154:18): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.813" name="bus" dev="loop8" ino=1048657 res=0 errno=0 [ 445.307043][ T2254] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.471521][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.471540][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.471570][ T8855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.710524][ T8951] loop8: detected capacity change from 0 to 512 [ 445.721612][ T8951] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 445.777103][ T8951] EXT4-fs (loop8): 1 truncate cleaned up [ 445.791104][ T8951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.809516][ T8951] syz.8.816 (pid 8951) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 445.932398][ T8481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.191799][ T2254] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.492828][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.685249][ T8855] hsr_slave_0: entered promiscuous mode [ 446.693875][ T8855] hsr_slave_1: entered promiscuous mode [ 446.804123][ T8960] loop8: detected capacity change from 0 to 512 [ 447.180074][ T8977] loop9: detected capacity change from 0 to 256 [ 447.211751][ T8960] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 447.211786][ T8960] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 447.211800][ T8960] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 447.211813][ T8960] EXT4-fs (loop8): The Hurd can't support 64-bit file systems [ 447.659713][ T8977] FAT-fs (loop9): Directory bread(block 64) failed [ 447.659754][ T8977] FAT-fs (loop9): Directory bread(block 65) failed [ 447.659940][ T8977] FAT-fs (loop9): Directory bread(block 66) failed [ 447.659966][ T8977] FAT-fs (loop9): Directory bread(block 67) failed [ 447.660075][ T8977] FAT-fs (loop9): Directory bread(block 68) failed [ 447.660110][ T8977] FAT-fs (loop9): Directory bread(block 69) failed [ 447.660214][ T8977] FAT-fs (loop9): Directory bread(block 70) failed [ 447.660236][ T8977] FAT-fs (loop9): Directory bread(block 71) failed [ 447.660336][ T8977] FAT-fs (loop9): Directory bread(block 72) failed [ 447.660358][ T8977] FAT-fs (loop9): Directory bread(block 73) failed [ 447.886316][ T8743] veth0_vlan: entered promiscuous mode [ 448.695208][ T8743] veth1_vlan: entered promiscuous mode [ 448.740946][ T8994] loop8: detected capacity change from 0 to 256 [ 448.849101][ T8994] FAT-fs (loop8): Directory bread(block 64) failed [ 448.849141][ T8994] FAT-fs (loop8): Directory bread(block 65) failed [ 448.849252][ T8994] FAT-fs (loop8): Directory bread(block 66) failed [ 448.849275][ T8994] FAT-fs (loop8): Directory bread(block 67) failed [ 448.849382][ T8994] FAT-fs (loop8): Directory bread(block 68) failed [ 448.849406][ T8994] FAT-fs (loop8): Directory bread(block 69) failed [ 448.849521][ T8994] FAT-fs (loop8): Directory bread(block 70) failed [ 448.849545][ T8994] FAT-fs (loop8): Directory bread(block 71) failed [ 448.849651][ T8994] FAT-fs (loop8): Directory bread(block 72) failed [ 448.849674][ T8994] FAT-fs (loop8): Directory bread(block 73) failed [ 449.300140][ T37] audit: type=1800 audit(1776917172.654:19): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.821" name="bus" dev="loop8" ino=1048658 res=0 errno=0 [ 450.236592][ T9005] kvm: user requested TSC rate below hardware speed [ 450.304522][ T9007] loop9: detected capacity change from 0 to 512 [ 450.370141][ T9007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.370342][ T9007] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.384058][ T9007] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #2: comm syz.9.826: corrupted inode contents [ 450.414244][ T2254] bridge_slave_1: left allmulticast mode [ 450.414271][ T2254] bridge_slave_1: left promiscuous mode [ 450.414474][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.442257][ T9005] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 450.442457][ T9005] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 450.551538][ T9007] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #2: comm syz.9.826: mark_inode_dirty error [ 450.574810][ T2254] bridge_slave_0: left allmulticast mode [ 450.574837][ T2254] bridge_slave_0: left promiscuous mode [ 450.575025][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.637744][ T9007] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #2: comm syz.9.826: corrupted inode contents [ 450.669093][ T9007] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.826: mark_inode_dirty error [ 450.774790][ T9010] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.826: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 450.774790][ T9010] [ 450.775389][ T9010] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #2: comm syz.9.826: corrupted inode contents [ 450.789470][ T9010] EXT4-fs error (device loop9): ext4_append:88: inode #2: comm syz.9.826: mark_inode_dirty error [ 450.790398][ T9010] EXT4-fs error (device loop9) in ext4_append:100: Corrupt filesystem [ 450.793403][ T9007] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #2: comm syz.9.826: corrupted inode contents [ 450.794017][ T9007] EXT4-fs error (device loop9): add_dirent_to_buf:2151: inode #2: comm syz.9.826: mark_inode_dirty error [ 450.959985][ T8670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.797127][ T9023] loop8: detected capacity change from 0 to 256 [ 452.864739][ T9025] loop9: detected capacity change from 0 to 256 [ 452.884060][ T9025] vfat: Unknown parameter 'smackfsdef' [ 452.894857][ T9023] FAT-fs (loop8): Directory bread(block 64) failed [ 452.896097][ T9023] FAT-fs (loop8): Directory bread(block 65) failed [ 452.896311][ T9023] FAT-fs (loop8): Directory bread(block 66) failed [ 452.896336][ T9023] FAT-fs (loop8): Directory bread(block 67) failed [ 452.896444][ T9023] FAT-fs (loop8): Directory bread(block 68) failed [ 452.896465][ T9023] FAT-fs (loop8): Directory bread(block 69) failed [ 452.896561][ T9023] FAT-fs (loop8): Directory bread(block 70) failed [ 452.896582][ T9023] FAT-fs (loop8): Directory bread(block 71) failed [ 452.896677][ T9023] FAT-fs (loop8): Directory bread(block 72) failed [ 452.896697][ T9023] FAT-fs (loop8): Directory bread(block 73) failed [ 453.265261][ T37] audit: type=1800 audit(1776917176.624:20): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.829" name="bus" dev="loop8" ino=1048659 res=0 errno=0 [ 453.490333][ T9028] netlink: 56 bytes leftover after parsing attributes in process `syz.9.832'. [ 453.633293][ T9032] loop8: detected capacity change from 0 to 256 [ 453.693418][ T9032] FAT-fs (loop8): Directory bread(block 64) failed [ 453.693454][ T9032] FAT-fs (loop8): Directory bread(block 65) failed [ 453.693575][ T9032] FAT-fs (loop8): Directory bread(block 66) failed [ 453.693600][ T9032] FAT-fs (loop8): Directory bread(block 67) failed [ 453.693705][ T9032] FAT-fs (loop8): Directory bread(block 68) failed [ 453.693729][ T9032] FAT-fs (loop8): Directory bread(block 69) failed [ 453.693845][ T9032] FAT-fs (loop8): Directory bread(block 70) failed [ 453.693871][ T9032] FAT-fs (loop8): Directory bread(block 71) failed [ 453.693983][ T9032] FAT-fs (loop8): Directory bread(block 72) failed [ 453.694006][ T9032] FAT-fs (loop8): Directory bread(block 73) failed [ 453.958500][ T2254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.019537][ T2254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.039625][ T2254] bond0 (unregistering): Released all slaves [ 455.242759][ T8746] veth0_vlan: entered promiscuous mode [ 455.481616][ T9046] loop9: detected capacity change from 0 to 8192 [ 455.534159][ T9046] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 455.555608][ T37] audit: type=1800 audit(1776917178.914:21): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.837" name="file2" dev="loop9" ino=1048660 res=0 errno=0 [ 455.778784][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.778817][ T9045] FAT-fs (loop9): Filesystem has been set read-only [ 455.806794][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.806833][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.806859][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.806882][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.806906][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.806930][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.806952][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.806975][ T9045] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 456.086001][ T9046] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 456.159911][ T8743] veth0_macvtap: entered promiscuous mode [ 456.681330][ T2254] hsr_slave_0: left promiscuous mode [ 456.811008][ T2254] hsr_slave_1: left promiscuous mode [ 456.812362][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.812390][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.954643][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.954701][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.191626][ T2254] veth1_macvtap: left promiscuous mode [ 457.191699][ T2254] veth0_macvtap: left promiscuous mode [ 457.191859][ T2254] veth1_vlan: left promiscuous mode [ 457.191973][ T2254] veth0_vlan: left promiscuous mode [ 457.369177][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 457.565842][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 457.573214][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.573273][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.573300][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 457.573316][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 457.573329][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.574427][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 457.574454][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 457.574472][ T9] usb 9-1: Manufacturer: syz [ 457.582454][ T9] usb 9-1: config 0 descriptor?? [ 457.867679][ T9] rc_core: IR keymap rc-hauppauge not found [ 457.867696][ T9] Registered IR keymap rc-empty [ 457.870080][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 457.889140][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 457.921650][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 457.935201][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input7 [ 458.018232][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.049628][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.070011][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.087755][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.107800][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.128370][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.147716][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.167755][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.187819][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.207886][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.305672][ T2254] team0 (unregistering): Port device team_slave_1 removed [ 458.330813][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 458.330832][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 458.395786][ T2254] team0 (unregistering): Port device team_slave_0 removed [ 458.420895][ T9] usb 9-1: USB disconnect, device number 4 [ 458.968859][ T8743] veth1_macvtap: entered promiscuous mode [ 458.985454][ T8746] veth1_vlan: entered promiscuous mode [ 459.421699][ T9066] loop9: detected capacity change from 0 to 256 [ 459.467078][ T9068] loop8: detected capacity change from 0 to 16 [ 459.570228][ T9066] FAT-fs (loop9): Directory bread(block 64) failed [ 459.570273][ T9066] FAT-fs (loop9): Directory bread(block 65) failed [ 459.570370][ T9066] FAT-fs (loop9): Directory bread(block 66) failed [ 459.570392][ T9066] FAT-fs (loop9): Directory bread(block 67) failed [ 459.570490][ T9066] FAT-fs (loop9): Directory bread(block 68) failed [ 459.570510][ T9066] FAT-fs (loop9): Directory bread(block 69) failed [ 459.570613][ T9066] FAT-fs (loop9): Directory bread(block 70) failed [ 459.570635][ T9066] FAT-fs (loop9): Directory bread(block 71) failed [ 459.570725][ T9066] FAT-fs (loop9): Directory bread(block 72) failed [ 459.570746][ T9066] FAT-fs (loop9): Directory bread(block 73) failed [ 459.597770][ T9068] erofs (device loop8): invalid ishare xattr prefix id 0 [ 459.652803][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.356996][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 461.406255][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.411496][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 461.420904][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 461.424388][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.139805][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 463.155121][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 463.219163][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 463.224704][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 463.244453][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 463.647605][ T5835] Bluetooth: hci5: command tx timeout [ 463.774709][ T9093] loop8: detected capacity change from 0 to 512 [ 463.786361][ T9093] EXT4-fs (loop8): Test dummy encryption mode enabled [ 463.786385][ T9093] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 463.826807][ T9093] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.848: bad orphan inode 131083 [ 463.826840][ T9093] loop8: lost filesystem error report for type 5 error -117 [ 463.837366][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 463.837392][ C0] EXT4-fs (loop8): initial error at time 1776917187: ext4_orphan_get:1423 [ 463.837416][ C0] EXT4-fs (loop8): last error at time 1776917187: ext4_orphan_get:1423 [ 464.020614][ T9093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.170873][ T9099] overlayfs: upper fs needs to support d_type. [ 465.407977][ T5835] Bluetooth: hci6: command tx timeout [ 465.745346][ T5835] Bluetooth: hci5: command tx timeout [ 465.815615][ T8481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.908163][ T5489] 8021q: adding VLAN 0 to HW filter on device eth17 [ 467.502451][ T5835] Bluetooth: hci6: command tx timeout [ 468.045327][ T5835] Bluetooth: hci5: command tx timeout [ 468.079383][ T5489] 8021q: adding VLAN 0 to HW filter on device eth18 [ 468.264286][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.394483][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.412561][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.414278][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.415247][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.568131][ T5835] Bluetooth: hci6: command tx timeout [ 469.938120][ T8855] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.051594][ T5835] Bluetooth: hci5: command tx timeout [ 470.083609][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.086087][ T5489] 8021q: adding VLAN 0 to HW filter on device eth19 [ 470.144820][ T8855] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 470.185294][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.335160][ T8855] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 470.368242][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.527643][ T5835] Bluetooth: hci0: command tx timeout [ 470.924966][ T8855] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.994600][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.535431][ T5489] 8021q: adding VLAN 0 to HW filter on device eth20 [ 471.649662][ T5835] Bluetooth: hci6: command tx timeout [ 471.732804][ T9074] chnl_net:caif_netlink_parms(): no params data found [ 472.609968][ T5835] Bluetooth: hci0: command tx timeout [ 472.774719][ T9215] loop9: detected capacity change from 0 to 8192 [ 472.842164][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.845423][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.845757][ T9074] bridge_slave_0: entered allmulticast mode [ 472.882786][ T9074] bridge_slave_0: entered promiscuous mode [ 472.914477][ T9085] chnl_net:caif_netlink_parms(): no params data found [ 472.955877][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.956284][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.956646][ T9074] bridge_slave_1: entered allmulticast mode [ 472.964017][ T9074] bridge_slave_1: entered promiscuous mode [ 473.011549][ T9215] loop9: p1[EZD] p2 p3 p4 [ 473.011591][ T9215] loop9: partition table partially beyond EOD, truncated [ 473.021315][ T9215] loop9: p1 size 32768 extends beyond EOD, truncated [ 473.079213][ T9215] loop9: p2 start 930308 is beyond EOD, truncated [ 473.079246][ T9215] loop9: p3 start 117772289 is beyond EOD, truncated [ 473.079263][ T9215] loop9: p4 size 262144 extends beyond EOD, truncated [ 473.341757][ T8862] udevd[8862]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 473.344082][ T8854] udevd[8854]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 473.445212][ T9074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.488925][ T9074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.811596][ T9074] team0: Port device team_slave_0 added [ 474.467685][ T9074] team0: Port device team_slave_1 added [ 474.468465][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.468989][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.469311][ T9085] bridge_slave_0: entered allmulticast mode [ 474.473788][ T9085] bridge_slave_0: entered promiscuous mode [ 474.697430][ T5835] Bluetooth: hci0: command tx timeout [ 474.873559][ T9085] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.873930][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.875475][ T9085] bridge_slave_1: entered allmulticast mode [ 474.904370][ T9085] bridge_slave_1: entered promiscuous mode [ 474.956966][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 474.993732][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.993744][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.993760][ T9074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.572658][ T9243] loop9: detected capacity change from 0 to 4096 [ 476.218882][ T9243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.423808][ T9243] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.868: corrupted inode contents [ 476.956958][ T5835] Bluetooth: hci0: command tx timeout [ 476.976573][ T9243] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #15: comm syz.9.868: mark_inode_dirty error [ 476.998373][ T9243] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.868: corrupted inode contents [ 477.021825][ T9243] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.868: mark_inode_dirty error [ 477.034358][ T9243] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.868: corrupted inode contents [ 477.052093][ T9243] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.868: mark_inode_dirty error [ 477.064441][ T9243] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.868: corrupted inode contents [ 477.080789][ T9243] EXT4-fs error (device loop9): ext4_truncate:4690: inode #15: comm syz.9.868: mark_inode_dirty error [ 477.092949][ T9243] EXT4-fs error (device loop9) in ext4_setattr:6120: Corrupt filesystem [ 478.072658][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.072671][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.072687][ T9074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.130276][ T8670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.141315][ T9085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.332900][ T9085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.785212][ T9085] team0: Port device team_slave_0 added [ 478.879414][ T9256] loop9: detected capacity change from 0 to 256 [ 478.883210][ T9256] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 478.883230][ T9256] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 478.922228][ T9085] team0: Port device team_slave_1 added [ 478.959134][ T9256] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 478.964287][ T9074] hsr_slave_0: entered promiscuous mode [ 478.966071][ T9256] exFAT-fs (loop9): failed to load alloc-bitmap [ 478.966082][ T9256] exFAT-fs (loop9): failed to recognize exfat type [ 478.977707][ T9074] hsr_slave_1: entered promiscuous mode [ 478.987235][ T9074] debugfs: 'hsr0' already exists in 'hsr' [ 478.987260][ T9074] Cannot create hsr debugfs directory [ 479.114796][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.114990][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.115231][ T9138] bridge_slave_0: entered allmulticast mode [ 479.132082][ T9138] bridge_slave_0: entered promiscuous mode [ 479.298783][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.299266][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.299655][ T9138] bridge_slave_1: entered allmulticast mode [ 479.304667][ T9138] bridge_slave_1: entered promiscuous mode [ 479.611028][ T9260] loop9: detected capacity change from 0 to 512 [ 479.816951][ T9260] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 481.690020][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.690033][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.690049][ T9085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.773966][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.773984][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.774010][ T9085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.940333][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.002751][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.464320][ T9138] team0: Port device team_slave_0 added [ 482.578445][ T9085] hsr_slave_0: entered promiscuous mode [ 482.579990][ T9085] hsr_slave_1: entered promiscuous mode [ 482.581100][ T9085] debugfs: 'hsr0' already exists in 'hsr' [ 482.581123][ T9085] Cannot create hsr debugfs directory [ 482.604422][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.614569][ T9138] team0: Port device team_slave_1 added [ 482.841007][ T9266] netlink: 108 bytes leftover after parsing attributes in process `syz.9.874'. [ 482.953613][ T9268] loop9: detected capacity change from 0 to 4096 [ 482.986276][ T9268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.174927][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.174945][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.174970][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.258234][ T8670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.284979][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.284993][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.285010][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.617728][ T2254] bridge_slave_1: left allmulticast mode [ 483.617755][ T2254] bridge_slave_1: left promiscuous mode [ 483.618062][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.678724][ T2254] bridge_slave_0: left allmulticast mode [ 483.678753][ T2254] bridge_slave_0: left promiscuous mode [ 483.678975][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.817687][ T2254] bridge_slave_1: left allmulticast mode [ 483.817716][ T2254] bridge_slave_1: left promiscuous mode [ 483.817962][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.880616][ T2254] bridge_slave_0: left allmulticast mode [ 483.880670][ T2254] bridge_slave_0: left promiscuous mode [ 483.880880][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.639633][ T2254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.718781][ T2254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.759844][ T2254] bond0 (unregistering): Released all slaves [ 485.218096][ T2254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.278233][ T2254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.321436][ T2254] bond0 (unregistering): Released all slaves [ 485.989758][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.069094][ T9138] hsr_slave_0: entered promiscuous mode [ 486.071589][ T9138] hsr_slave_1: entered promiscuous mode [ 486.075263][ T9138] debugfs: 'hsr0' already exists in 'hsr' [ 486.075288][ T9138] Cannot create hsr debugfs directory [ 488.786104][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.786283][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.897476][ T2254] hsr_slave_0: left promiscuous mode [ 488.921451][ T2254] hsr_slave_1: left promiscuous mode [ 488.922800][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.922819][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.958477][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.117639][ T2254] hsr_slave_0: left promiscuous mode [ 489.137688][ T2254] hsr_slave_1: left promiscuous mode [ 489.139199][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.178420][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.239304][ T2254] veth1_macvtap: left promiscuous mode [ 489.239352][ T2254] veth0_macvtap: left promiscuous mode [ 489.239478][ T2254] veth1_vlan: left promiscuous mode [ 489.239567][ T2254] veth0_vlan: left promiscuous mode [ 489.263733][ T2254] veth1_vlan: left promiscuous mode [ 489.263931][ T2254] veth0_vlan: left promiscuous mode [ 489.988068][ T2254] team0 (unregistering): Port device team_slave_1 removed [ 490.049604][ T2254] team0 (unregistering): Port device team_slave_0 removed [ 490.588684][ T2254] team0 (unregistering): Port device team_slave_1 removed [ 490.645954][ T2254] team0 (unregistering): Port device team_slave_0 removed [ 490.888165][ T9282] netlink: 'syz.9.879': attribute type 1 has an invalid length. [ 491.163702][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.164009][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.815803][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.891569][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.517065][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.764727][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.765905][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.050512][ T9312] loop9: detected capacity change from 0 to 512 [ 496.133717][ T9312] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.883: inode has both inline data and extents flags [ 496.133758][ T9312] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 496.134402][ T9312] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.883: couldn't read orphan inode 15 (err -117) [ 496.134438][ T9312] loop9: lost filesystem error report for type 5 error -117 [ 496.147443][ T9312] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.586341][ T5489] 8021q: adding VLAN 0 to HW filter on device eth13 [ 497.193006][ T8670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.052479][ T5835] Bluetooth: hci1: command tx timeout [ 498.123027][ T9295] chnl_net:caif_netlink_parms(): no params data found [ 498.340712][ T9074] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.382485][ T9074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.406921][ T9074] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.443089][ T9074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.840887][ T9074] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.872206][ T9074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.873545][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.874330][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.874585][ T9295] bridge_slave_0: entered allmulticast mode [ 498.876850][ T9295] bridge_slave_0: entered promiscuous mode [ 498.940353][ T9074] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.974184][ T9074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.974996][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.975512][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.975819][ T9295] bridge_slave_1: entered allmulticast mode [ 498.982849][ T9295] bridge_slave_1: entered promiscuous mode [ 499.675412][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.945825][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.160412][ T5835] Bluetooth: hci1: command tx timeout [ 500.297009][ T9295] team0: Port device team_slave_0 added [ 500.512234][ T9295] team0: Port device team_slave_1 added [ 501.441007][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.441028][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.441057][ T9295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.604639][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.604652][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.604669][ T9295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.661712][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.661820][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.078952][ T9295] hsr_slave_0: entered promiscuous mode [ 502.081171][ T9295] hsr_slave_1: entered promiscuous mode [ 502.083113][ T9295] debugfs: 'hsr0' already exists in 'hsr' [ 502.083141][ T9295] Cannot create hsr debugfs directory [ 502.209184][ T5835] Bluetooth: hci1: command tx timeout [ 502.378093][ T32] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 502.572548][ T32] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 502.572611][ T32] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.572641][ T32] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.572665][ T32] usb 10-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 502.572711][ T32] usb 10-1: New USB device found, idVendor=0fef, idProduct=72c4, bcdDevice= 0.00 [ 502.572736][ T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.806073][ T32] usbhid 10-1:2.0: can't add hid device: -71 [ 502.806212][ T32] usbhid 10-1:2.0: probe with driver usbhid failed with error -71 [ 502.830304][ T32] usb 10-1: USB disconnect, device number 2 [ 503.292467][ T2254] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.376479][ T9085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 503.406223][ T9085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.455419][ T9085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 503.561311][ T9085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.605647][ T9085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 503.651044][ T9085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.701688][ T9354] tipc: Failed to remove unknown binding: 66,0,0/0:1691773709/1691773711 [ 503.701728][ T9354] tipc: Failed to remove unknown binding: 66,0,0/0:1691773709/1691773710 [ 503.704853][ T9354] tipc: Failed to remove unknown binding: 66,0,0/0:1691773709/1691773711 [ 503.704878][ T9354] tipc: Failed to remove unknown binding: 66,0,0/0:1691773709/1691773710 [ 503.940027][ T2254] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.031365][ T9085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 504.064160][ T9085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.240503][ T9360] loop9: detected capacity change from 0 to 4096 [ 504.241682][ T9360] ext4: Unknown parameter 'dont_measure' [ 504.287755][ T5835] Bluetooth: hci1: command tx timeout [ 504.474714][ T2254] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.716243][ T9074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.902651][ T9360] loop9: detected capacity change from 0 to 256 [ 504.930817][ T9360] exfat: Deprecated parameter 'utf8' [ 504.930943][ T9360] exfat: Deprecated parameter 'utf8' [ 505.067835][ T9360] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 505.335222][ T2254] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.649546][ T9138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 505.671650][ T9138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.916314][ T9138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 506.997254][ T9138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.258552][ T9138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.322517][ T9138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.346449][ T9074] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.363046][ T9138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 507.434886][ T9138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.795424][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.795688][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.012734][ T9375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.373853][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.375610][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.487987][ T9383] loop9: detected capacity change from 0 to 128 [ 509.037666][ T2254] bridge_slave_1: left allmulticast mode [ 509.037708][ T2254] bridge_slave_1: left promiscuous mode [ 509.038073][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.099524][ T2254] bridge_slave_0: left allmulticast mode [ 509.099566][ T2254] bridge_slave_0: left promiscuous mode [ 509.099936][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.508173][ T2254] bridge_slave_1: left allmulticast mode [ 509.508209][ T2254] bridge_slave_1: left promiscuous mode [ 509.508437][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.589345][ T2254] bridge_slave_0: left allmulticast mode [ 509.589387][ T2254] bridge_slave_0: left promiscuous mode [ 509.589679][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.808031][ T2254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.912985][ T2254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.945581][ T2254] bond0 (unregistering): Released all slaves [ 511.068419][ T9393] loop6: detected capacity change from 0 to 8 [ 511.153191][ T9393] [ 511.153201][ T9393] ====================================================== [ 511.153206][ T9393] WARNING: possible circular locking dependency detected [ 511.153212][ T9393] syzkaller #0 Not tainted [ 511.153219][ T9393] ------------------------------------------------------ [ 511.153223][ T9393] syz.9.899/9393 is trying to acquire lock: [ 511.153231][ T9393] ffff88801bad32c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 511.153270][ T9393] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 511.153270][ T9393] but task is already holding lock: [ 511.153274][ T9393] ffff888026fa0a78 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 511.153309][ T9393] [ 511.153309][ T9393] which lock already depends on the new lock. [ 511.153309][ T9393] [ 511.153314][ T9393] [ 511.153314][ T9393] the existing dependency chain (in reverse order) is: [ 511.153318][ T9393] [ 511.153318][ T9393] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 511.153338][ T9393] blk_alloc_queue+0x54e/0x690 [ 511.153355][ T9393] __blk_mq_alloc_disk+0x197/0x390 [ 511.153366][ T9393] loop_add+0x482/0xb50 [ 511.153381][ T9393] loop_init+0xd9/0x170 [ 511.153392][ T9393] do_one_initcall+0x250/0x870 [ 511.153404][ T9393] do_initcall_level+0x104/0x190 [ 511.153414][ T9393] do_initcalls+0x59/0xa0 [ 511.153423][ T9393] kernel_init_freeable+0x2a6/0x3e0 [ 511.153433][ T9393] kernel_init+0x1d/0x1d0 [ 511.153443][ T9393] ret_from_fork+0x514/0xb70 [ 511.153454][ T9393] ret_from_fork_asm+0x1a/0x30 [ 511.153467][ T9393] [ 511.153467][ T9393] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 511.153483][ T9393] fs_reclaim_acquire+0x71/0x100 [ 511.153500][ T9393] kmem_cache_alloc_noprof+0x44/0x680 [ 511.153515][ T9393] __kernfs_iattrs+0xdf/0x320 [ 511.153527][ T9393] kernfs_iop_setattr+0xea/0x3f0 [ 511.153539][ T9393] notify_change+0xc18/0xf60 [ 511.153549][ T9393] do_truncate+0x1c2/0x250 [ 511.153565][ T9393] path_openat+0x2fc4/0x38a0 [ 511.153580][ T9393] do_file_open+0x23e/0x4a0 [ 511.153596][ T9393] do_sys_openat2+0x113/0x200 [ 511.153608][ T9393] __x64_sys_openat+0x138/0x170 [ 511.153620][ T9393] do_syscall_64+0x15f/0xf80 [ 511.153634][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.153645][ T9393] [ 511.153645][ T9393] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 511.153660][ T9393] __lock_acquire+0x15a5/0x2cf0 [ 511.153674][ T9393] lock_acquire+0x106/0x350 [ 511.153687][ T9393] down_read+0x97/0x200 [ 511.153700][ T9393] kernfs_iop_getattr+0x9e/0x450 [ 511.153713][ T9393] vfs_getattr_nosec+0x2e1/0x430 [ 511.153724][ T9393] loop_assign_backing_file+0x286/0x4c0 [ 511.153735][ T9393] lo_ioctl+0x1ae6/0x1fc0 [ 511.153750][ T9393] blkdev_ioctl+0x5e6/0x750 [ 511.153761][ T9393] __se_sys_ioctl+0xff/0x170 [ 511.153777][ T9393] do_syscall_64+0x15f/0xf80 [ 511.153790][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.153800][ T9393] [ 511.153800][ T9393] other info that might help us debug this: [ 511.153800][ T9393] [ 511.153804][ T9393] Chain exists of: [ 511.153804][ T9393] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 511.153804][ T9393] [ 511.153825][ T9393] Possible unsafe locking scenario: [ 511.153825][ T9393] [ 511.153828][ T9393] CPU0 CPU1 [ 511.153832][ T9393] ---- ---- [ 511.153835][ T9393] lock(&q->q_usage_counter(io)#23); [ 511.153845][ T9393] lock(fs_reclaim); [ 511.153853][ T9393] lock(&q->q_usage_counter(io)#23); [ 511.153865][ T9393] rlock(&root->kernfs_iattr_rwsem); [ 511.153872][ T9393] [ 511.153872][ T9393] *** DEADLOCK *** [ 511.153872][ T9393] [ 511.153875][ T9393] 3 locks held by syz.9.899/9393: [ 511.153882][ T9393] #0: ffff888027104498 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14d8/0x1fc0 [ 511.153915][ T9393] #1: ffff888026fa0a78 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 511.153950][ T9393] #2: ffff888026fa0ab0 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 511.153984][ T9393] [ 511.153984][ T9393] stack backtrace: [ 511.153992][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.9.899 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 511.154012][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.154019][ T9393] Call Trace: [ 511.154024][ T9393] [ 511.154029][ T9393] dump_stack_lvl+0xe8/0x150 [ 511.154042][ T9393] print_circular_bug+0x2e1/0x300 [ 511.154061][ T9393] check_noncircular+0x12e/0x150 [ 511.154081][ T9393] __lock_acquire+0x15a5/0x2cf0 [ 511.154110][ T9393] ? kernfs_iop_getattr+0x9e/0x450 [ 511.154123][ T9393] lock_acquire+0x106/0x350 [ 511.154137][ T9393] ? kernfs_iop_getattr+0x9e/0x450 [ 511.154154][ T9393] down_read+0x97/0x200 [ 511.154169][ T9393] ? kernfs_iop_getattr+0x9e/0x450 [ 511.154183][ T9393] ? __pfx_down_read+0x10/0x10 [ 511.154199][ T9393] ? kernfs_root+0x1c/0x230 [ 511.154211][ T9393] ? kernfs_root+0x1c/0x230 [ 511.154225][ T9393] kernfs_iop_getattr+0x9e/0x450 [ 511.154241][ T9393] vfs_getattr_nosec+0x2e1/0x430 [ 511.154256][ T9393] loop_assign_backing_file+0x286/0x4c0 [ 511.154268][ T9393] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 511.154287][ T9393] lo_ioctl+0x1ae6/0x1fc0 [ 511.154308][ T9393] ? __pfx_lo_ioctl+0x10/0x10 [ 511.154325][ T9393] ? finish_task_switch+0x4de/0xbe0 [ 511.154344][ T9393] ? rcu_is_watching+0x15/0xb0 [ 511.154361][ T9393] ? trace_sched_exit_tp+0x3a/0x130 [ 511.154380][ T9393] ? __lock_acquire+0x6b5/0x2cf0 [ 511.154395][ T9393] ? __lock_acquire+0x6b5/0x2cf0 [ 511.154411][ T9393] ? __lock_acquire+0x6b5/0x2cf0 [ 511.154425][ T9393] ? __lock_acquire+0x6b5/0x2cf0 [ 511.154441][ T9393] ? __lock_acquire+0x6b5/0x2cf0 [ 511.154456][ T9393] ? __lock_acquire+0x6b5/0x2cf0 [ 511.154472][ T9393] ? unwind_next_frame+0xa6/0x2550 [ 511.154489][ T9393] ? unwind_next_frame+0xa6/0x2550 [ 511.154503][ T9393] ? is_bpf_text_address+0x26/0x2b0 [ 511.154521][ T9393] ? is_bpf_text_address+0x26/0x2b0 [ 511.154537][ T9393] ? is_bpf_text_address+0x292/0x2b0 [ 511.154552][ T9393] ? is_bpf_text_address+0x26/0x2b0 [ 511.154567][ T9393] ? kernel_text_address+0xa5/0xe0 [ 511.154584][ T9393] ? __kernel_text_address+0xd/0x30 [ 511.154609][ T9393] ? unwind_get_return_address+0x4d/0x90 [ 511.154623][ T9393] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 511.154637][ T9393] ? arch_stack_walk+0xfb/0x150 [ 511.154654][ T9393] ? stack_trace_save+0xa9/0x100 [ 511.154667][ T9393] ? __pfx_stack_trace_save+0x10/0x10 [ 511.154679][ T9393] ? kasan_save_free_info+0x46/0x50 [ 511.154693][ T9393] ? stack_depot_save_flags+0x33/0x810 [ 511.154708][ T9393] ? kasan_save_track+0x4f/0x80 [ 511.154722][ T9393] ? kasan_save_track+0x3e/0x80 [ 511.154736][ T9393] ? kasan_save_free_info+0x46/0x50 [ 511.154748][ T9393] ? __kasan_slab_free+0x5c/0x80 [ 511.154764][ T9393] ? kfree+0x1c5/0x6c0 [ 511.154777][ T9393] ? tomoyo_path_number_perm+0x501/0x630 [ 511.154791][ T9393] ? security_file_ioctl+0xc3/0x2a0 [ 511.154803][ T9393] ? __se_sys_ioctl+0x47/0x170 [ 511.154820][ T9393] ? do_syscall_64+0x15f/0xf80 [ 511.154834][ T9393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.154847][ T9393] ? __asan_memset+0x22/0x50 [ 511.154860][ T9393] ? blk_get_meta_cap+0x16d/0x7a0 [ 511.154879][ T9393] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 511.154899][ T9393] ? blkdev_common_ioctl+0x14b7/0x3240 [ 511.154913][ T9393] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 511.154925][ T9393] ? kasan_quarantine_put+0xbb/0x1f0 [ 511.154942][ T9393] ? tomoyo_path_number_perm+0x219/0x630 [ 511.154956][ T9393] ? tomoyo_path_number_perm+0x219/0x630 [ 511.154971][ T9393] ? do_vfs_ioctl+0x117b/0x1540 [ 511.154989][ T9393] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 511.155009][ T9393] ? do_futex+0x395/0x420 [ 511.155029][ T9393] ? __pfx_lo_ioctl+0x10/0x10 [ 511.155046][ T9393] blkdev_ioctl+0x5e6/0x750 [ 511.155059][ T9393] ? __pfx_blkdev_ioctl+0x10/0x10 [ 511.155070][ T9393] ? __fget_files+0x2a/0x420 [ 511.155084][ T9393] ? bpf_lsm_file_ioctl+0x9/0x20 [ 511.155105][ T9393] ? __pfx_blkdev_ioctl+0x10/0x10 [ 511.155116][ T9393] __se_sys_ioctl+0xff/0x170 [ 511.155133][ T9393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.155144][ T9393] do_syscall_64+0x15f/0xf80 [ 511.155159][ T9393] ? trace_irq_disable+0x3b/0x140 [ 511.155172][ T9393] ? clear_bhb_loop+0x40/0x90 [ 511.155185][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.155196][ T9393] RIP: 0033:0x7f633cb9c819 [ 511.155208][ T9393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.155219][ T9393] RSP: 002b:00007f633adee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.155233][ T9393] RAX: ffffffffffffffda RBX: 00007f633ce15fa0 RCX: 00007f633cb9c819 [ 511.155242][ T9393] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 511.155249][ T9393] RBP: 00007f633cc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 511.155256][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.155263][ T9393] R13: 00007f633ce16038 R14: 00007f633ce15fa0 R15: 00007ffcf7e03eb8 [ 511.155275][ T9393] [ 512.168819][ T2254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.265934][ T2254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.299854][ T2254] bond0 (unregistering): Released all slaves [ 514.697436][ T2254] hsr_slave_0: left promiscuous mode [ 514.737475][ T2254] hsr_slave_1: left promiscuous mode [ 514.738269][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.760386][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.917475][ T2254] hsr_slave_0: left promiscuous mode [ 514.957486][ T2254] hsr_slave_1: left promiscuous mode [ 514.958099][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.958115][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.982041][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.982063][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.058215][ T2254] veth1_macvtap: left promiscuous mode [ 515.058253][ T2254] veth0_macvtap: left promiscuous mode [ 515.058344][ T2254] veth1_vlan: left promiscuous mode [ 515.058403][ T2254] veth0_vlan: left promiscuous mode [ 515.517820][ T2254] team0 (unregistering): Port device team_slave_1 removed [ 515.557843][ T2254] team0 (unregistering): Port device team_slave_0 removed [ 515.927945][ T2254] team0 (unregistering): Port device team_slave_1 removed [ 515.968194][ T2254] team0 (unregistering): Port device team_slave_0 removed [ 517.332425][ T5489] 8021q: adding VLAN 0 to HW filter on device eth14 [ 520.088935][ T5489] 8021q: adding VLAN 0 to HW filter on device eth15 [ 520.328871][ T5489] 8021q: adding VLAN 0 to HW filter on device eth16