last executing test programs: 10.538460896s ago: executing program 0 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) 10.347182799s ago: executing program 2 (id=1033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x88, 0xfffffffa, 0x0, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0x8000a3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10001, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x100001}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0x101, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0xd831fc23, 0x81, 0x8, 0x6, 0xffff, 0x5b}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7ffb, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x5, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x4, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0xc, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1836, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x80000008, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0xa, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x400001ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x5}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0x4, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0xe7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xf, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x9}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2eb, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x8}, {0xffffffff, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x8}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x7f, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x6}, {0xe, 0x6, 0x0, 0x6, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x7, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x9, 0x5}, {0x6, 0xfffffff7, 0x5, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbd, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x0, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7fb, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x1, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x9}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x40005) 9.61047771s ago: executing program 1 (id=1038): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 9.316431974s ago: executing program 0 (id=1039): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e782700107"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = fsopen(&(0x7f0000000280)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 9.131240626s ago: executing program 1 (id=1040): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 8.297528709s ago: executing program 2 (id=1042): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000080)=':$/\x00', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x27], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_vhci(0x0, 0x20) 8.259183809s ago: executing program 1 (id=1043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="070000000000000000000500000018000180140002007663616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000003c0)='./file1/file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 6.315977268s ago: executing program 2 (id=1045): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="070000000000000000000500000018000180140002007663616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000003c0)='./file1/file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6.259257189s ago: executing program 4 (id=1046): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) ioctl$TIOCSTI(r1, 0x5412, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000380)=""/224, 0xf9, 0xd) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000080100008800c005c7b88125ebfed0ab10280080001000000baafa73351fed90833ce8ab2000b"], 0x38}}, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000600)="10250b6c22", 0x5}], 0x1, 0x80002, 0x7f) 5.415926091s ago: executing program 3 (id=1047): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000001c0)={r1, 0x3}) r3 = open(0x0, 0x142442, 0x197) pwritev2(r3, 0x0, 0x0, 0x7000, 0x0, 0x3) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f00000000c0)={0xd, 0x10}) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x19, 0x1a, 0xb, 0x1b, 0x3, 0x6, 0x3, 0x9d, 0xffffffffffffffff}) 5.211837844s ago: executing program 2 (id=1048): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) 5.187956895s ago: executing program 2 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) 5.156753855s ago: executing program 1 (id=1050): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 5.041301057s ago: executing program 1 (id=1051): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r1, 0x0, 0x0, 0x8040, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x5, 0x0, 0x3}, {0x10020002, 0x2, 0x2, 0x2}], 0x10, 0x200}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000340)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.871302009s ago: executing program 4 (id=1052): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r8 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) sendfile(r8, r7, 0x0, 0x2000000000006) 4.862279229s ago: executing program 3 (id=1053): ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000080)={0x2, "fe9dbfa8d6493ee02eeb4c2696f22d88cad3e670d26f4ddf3d9de4df724a1b744062b1634aafb5da15a80fc3a2b4917c868bf9a7d46a01388fcb0892251f2652"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000500), 0xf0000000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) r0 = fsopen(&(0x7f0000000100)='9p\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x5, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="d8", 0x1, 0x20000040, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="140000000000000029000000340000000400bf0000000000140000000000000029000000340000000000000000000000600000000000000029000000360000005e08000000000000ff1d50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e120001000001"], 0x90}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000600)="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", 0x101}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x4d7}], 0x1, 0x1, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETS(r5, 0xc0384707, &(0x7f0000000040)={0x32e3, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) 3.509297829s ago: executing program 1 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x200}, 0x1c) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 3.395842491s ago: executing program 4 (id=1055): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.38858013s ago: executing program 3 (id=1056): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x0) sendfile(r1, r1, 0x0, 0x1002000ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x8080) 2.653937041s ago: executing program 2 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) 2.488740344s ago: executing program 0 (id=1058): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="070000000000000000000500000018000180140002007663616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000003c0)='./file1/file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 1.514917668s ago: executing program 4 (id=1059): get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 1.441804339s ago: executing program 3 (id=1060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="070000000000000000000500000018000180140002007663616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000003c0)='./file1/file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 1.441287939s ago: executing program 0 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.39633785s ago: executing program 4 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 1.221123832s ago: executing program 0 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2000c004) r3 = open(0x0, 0x142442, 0x197) pwritev2(r3, 0x0, 0x0, 0x7000, 0x0, 0x3) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f00000000c0)={0xd, 0x10}) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x19, 0x1a, 0xb, 0x1b, 0x3, 0x6, 0x3, 0x9d, 0xffffffffffffffff}) 184.125417ms ago: executing program 4 (id=1064): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x25, 0x358, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './bus\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xc579, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r3, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r9, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4100}, 0x4000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 109.624969ms ago: executing program 0 (id=1065): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) 90.949129ms ago: executing program 3 (id=1066): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) 0s ago: executing program 3 (id=1067): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) kernel console output (not intermixed with test programs): ][ T4734] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 122.838475][ T4734] ntfs3: loop1: Failed to load $Extend. [ 122.929853][ T4757] netlink: 160 bytes leftover after parsing attributes in process `syz.3.110'. [ 122.977351][ T4759] bond1: (slave bridge1): making interface the new active one [ 123.008073][ T4759] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 123.178661][ T4743] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 123.230548][ T4763] device team0 entered promiscuous mode [ 123.236376][ T4763] device team_slave_0 entered promiscuous mode [ 123.256233][ T4763] device team_slave_1 entered promiscuous mode [ 123.294066][ T4763] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.341218][ T4763] bond1: (slave team0): Enslaving as an active interface with a down link [ 125.300641][ T4803] netlink: 'syz.2.118': attribute type 12 has an invalid length. [ 125.497372][ T4807] kcapi: manufacturer command 4294967295 unknown. [ 125.663747][ T4814] loop2: detected capacity change from 0 to 512 [ 125.682622][ T4810] device syzkaller0 entered promiscuous mode [ 125.851785][ T4814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 125.964331][ T4814] System zones: 1-12 [ 126.166645][ T4814] EXT4-fs (loop2): 1 truncate cleaned up [ 126.287878][ T4814] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nodiscard,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,barrier=0x0000000000000006,data_err=ignore,debug,,errors=continue. Quota mode: none. [ 128.670924][ T4835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 130.336827][ T4846] loop1: detected capacity change from 0 to 4096 [ 130.386669][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 130.689528][ T4857] trusted_key: encrypted_key: keylen parameter is missing [ 130.701566][ T4846] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 130.869106][ T7] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.908841][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.931090][ T4846] EXT4-fs (loop1): Test dummy encryption mode enabled [ 130.938861][ T7] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 130.966627][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.988573][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 131.120546][ T7] usb 5-1: config 0 descriptor?? [ 131.455249][ T25] audit: type=1800 audit(1782503161.999:8): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.131" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.857889][ T4871] loop2: detected capacity change from 0 to 2048 [ 132.057181][ T7] waltop 0003:172F:0037.0001: unknown main item tag 0x2 [ 132.128829][ T4832] udc-core: couldn't find an available UDC or it's busy [ 132.135889][ T4832] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.281425][ T7] waltop 0003:172F:0037.0001: unexpected long global item [ 132.424589][ T7] waltop: probe of 0003:172F:0037.0001 failed with error -22 [ 132.452093][ T4871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.522622][ T7] usb 5-1: USB disconnect, device number 2 [ 132.610828][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.617421][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.920351][ T4877] loop2: detected capacity change from 0 to 1024 [ 133.615223][ T4886] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 133.629047][ T4886] Error parsing options; rc = [-22] [ 134.437948][ T4892] loop3: detected capacity change from 0 to 256 [ 134.550623][ T4892] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 135.046819][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.230559][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 135.270483][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 135.282836][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 135.295007][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 135.305964][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 136.128060][ T4921] device syzkaller0 entered promiscuous mode [ 136.198765][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 136.489515][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.764985][ T4932] Zero length message leads to an empty skb [ 136.926867][ T21] usb 5-1: config 0 has no interfaces? [ 136.933100][ T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 136.942278][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.971185][ T21] usb 5-1: config 0 descriptor?? [ 137.057922][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 137.075089][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 137.252091][ T4940] device syzkaller0 entered promiscuous mode [ 137.264440][ T4940] simple: basic_1 [ 137.378305][ T4934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.149'. [ 137.393611][ T4895] loop4: detected capacity change from 0 to 4096 [ 137.509904][ T4895] ntfs3: loop4: failed to convert "0000" to iso8859-6 [ 137.537242][ T4895] ntfs3: loop4: failed to convert "0030" to iso8859-6 [ 137.564604][ T4895] ntfs3: loop4: failed to convert name for inode 1e. [ 137.587962][ T4895] ntfs3: loop4: failed to convert "0032" to iso8859-6 [ 137.645841][ T4298] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.655073][ T4895] ntfs3: loop4: failed to convert "0033" to iso8859-6 [ 138.549167][ T4298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.567013][ T4298] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 138.577769][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.605094][ T4298] usb 1-1: config 0 descriptor?? [ 138.700547][ T4298] pwc: Askey VC010 type 2 USB webcam detected. [ 138.909205][ T4298] pwc: send_video_command error -71 [ 138.915301][ T4298] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 139.000446][ T4298] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 139.692480][ T4298] usb 1-1: USB disconnect, device number 2 [ 140.142211][ T26] usb 5-1: USB disconnect, device number 3 [ 140.478931][ T4298] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.810334][ T4983] loop0: detected capacity change from 0 to 2048 [ 143.296428][ T4983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.828631][ T5011] loop2: detected capacity change from 0 to 512 [ 146.085271][ T5011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.804146][ T5011] EXT4-fs warning (device loop2): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 146.983700][ T5026] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 147.432888][ T5031] process 'syz.0.178' launched '/dev/fd/6' with NULL argv: empty string added [ 148.481826][ T5011] loop2: detected capacity change from 0 to 512 [ 150.426817][ T5048] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.452787][ T5053] loop0: detected capacity change from 0 to 764 [ 155.574737][ T5067] netlink: 'syz.3.187': attribute type 12 has an invalid length. [ 156.008229][ T5083] loop0: detected capacity change from 0 to 512 [ 156.177025][ T5084] loop2: detected capacity change from 0 to 512 [ 157.347089][ T5086] loop3: detected capacity change from 0 to 2048 [ 157.854631][ T5086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.874564][ T5083] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.928660][ T5084] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.190: inode has both inline data and extents flags [ 157.942690][ T5084] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.190: couldn't read orphan inode 15 (err -117) [ 157.954335][ T5083] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 157.965561][ T5084] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 161.136111][ T5121] device syzkaller0 entered promiscuous mode [ 161.403925][ T5129] netlink: 'syz.0.202': attribute type 12 has an invalid length. [ 161.800008][ T5135] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 163.439260][ T5157] IPVS: lc: FWM 3 0x00000003 - no destination available [ 163.964681][ T5161] loop0: detected capacity change from 0 to 40427 [ 164.863730][ T5161] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 164.871570][ T5161] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 164.921251][ T5161] F2FS-fs (loop0): invalid crc value [ 164.980713][ T5161] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.041432][ T5161] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 165.048546][ T5161] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.388914][ T5183] device syzkaller0 entered promiscuous mode [ 166.460948][ T5188] xt_SECMARK: invalid mode: 2 [ 166.474081][ T4678] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 166.778850][ T4678] usb 2-1: Using ep0 maxpacket: 16 [ 167.189111][ T4678] usb 2-1: device descriptor read/all, error -71 [ 169.362214][ T5196] loop3: detected capacity change from 0 to 32768 [ 169.418281][ T5196] (syz.3.218,5196,0):ocfs2_read_virt_blocks:999 ERROR: Inode #66 contains a hole at offset 0 [ 169.428810][ T5196] (syz.3.218,5196,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 169.437004][ T5196] (syz.3.218,5196,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 169.446024][ T5196] (syz.3.218,5196,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 169.446042][ T5196] (syz.3.218,5196,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 169.466979][ T5196] (syz.3.218,5196,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 169.475075][ T5196] (syz.3.218,5196,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 170.530608][ T5213] IPVS: sh: FWM 3 0x00000003 - no destination available [ 171.461110][ T5208] loop1: detected capacity change from 0 to 2048 [ 171.537190][ T5220] loop4: detected capacity change from 0 to 764 [ 171.807859][ T4234] Bluetooth: hci0: command 0x080f tx timeout [ 171.900713][ T5221] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 171.916927][ T5208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.930704][ T5222] dlm: dev_write: no op 0 74000000000000 [ 172.028410][ T5221] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.062291][ T5220] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 176.006396][ T5252] netlink: 'syz.3.229': attribute type 3 has an invalid length. [ 176.015310][ T5252] netlink: 'syz.3.229': attribute type 3 has an invalid length. [ 176.809761][ T5260] device syzkaller0 entered promiscuous mode [ 180.365294][ T5269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.540806][ T5280] loop0: detected capacity change from 0 to 764 [ 180.584434][ T5280] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 180.762143][ T5286] device syzkaller0 entered promiscuous mode [ 180.916863][ T5288] loop3: detected capacity change from 0 to 2048 [ 181.551331][ T5288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.422592][ T5300] loop0: detected capacity change from 0 to 40427 [ 182.431827][ T26] Bluetooth: hci2: command 0x0406 tx timeout [ 182.717088][ T26] Bluetooth: hci3: command 0x0406 tx timeout [ 182.778405][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 182.790852][ T5300] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 182.799231][ T5300] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.822793][ T5300] F2FS-fs (loop0): invalid crc value [ 182.868863][ T5299] loop2: detected capacity change from 0 to 256 [ 182.940476][ T5300] F2FS-fs (loop0): Found nat_bits in checkpoint [ 183.009254][ T26] Bluetooth: hci4: command 0x0406 tx timeout [ 183.196294][ T5300] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 183.203424][ T5300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.294257][ T5299] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 183.363549][ T26] Bluetooth: hci1: command 0x0406 tx timeout [ 183.931058][ T5299] attempt to access beyond end of device [ 183.931058][ T5299] loop2: rw=524288, want=408, limit=256 [ 183.968189][ T5299] attempt to access beyond end of device [ 183.968189][ T5299] loop2: rw=524288, want=664, limit=256 [ 183.982746][ T5315] netlink: 112 bytes leftover after parsing attributes in process `syz.3.244'. [ 184.011650][ T5299] attempt to access beyond end of device [ 184.011650][ T5299] loop2: rw=0, want=288, limit=256 [ 184.289488][ T25] audit: type=1800 audit(1782503214.779:9): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.242" name="file1" dev="loop2" ino=1048592 res=0 errno=0 [ 184.924788][ T5328] device syzkaller0 entered promiscuous mode [ 185.275218][ T5333] loop2: detected capacity change from 0 to 764 [ 185.317177][ T5333] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 187.071739][ T5329] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 189.238564][ T5357] device syzkaller0 entered promiscuous mode [ 190.423730][ T5361] loop2: detected capacity change from 0 to 40427 [ 190.481226][ T5367] loop4: detected capacity change from 0 to 64 [ 190.495041][ T5361] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 190.502823][ T5361] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 190.513434][ T5361] F2FS-fs (loop2): invalid crc value [ 190.661910][ T5367] hfs: file_umask requires a value [ 190.667632][ T5367] hfs: unable to parse mount options [ 190.700835][ T5361] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.761054][ T5361] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 190.768161][ T5361] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 191.363359][ T5379] loop0: detected capacity change from 0 to 512 [ 191.585930][ T5379] EXT4-fs (loop0): orphan cleanup on readonly fs [ 191.604099][ T5379] EXT4-fs error (device loop0): ext4_find_extent:893: inode #4: comm syz.0.260: inode has invalid extent depth: 7 [ 191.676557][ T5379] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 191.845356][ T5384] device syzkaller0 entered promiscuous mode [ 191.853982][ T5379] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 192.070133][ T5379] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 192.129744][ T5379] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 192.649730][ T5388] loop4: detected capacity change from 0 to 764 [ 193.377281][ T5397] loop3: detected capacity change from 0 to 512 [ 193.401930][ T5399] loop2: detected capacity change from 0 to 256 [ 193.435660][ T5397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 193.435855][ T5388] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 193.444438][ T5397] System zones: 1-12 [ 193.728912][ T5399] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 194.196042][ T5399] attempt to access beyond end of device [ 194.196042][ T5399] loop2: rw=524288, want=408, limit=256 [ 194.209671][ T5399] attempt to access beyond end of device [ 194.209671][ T5399] loop2: rw=524288, want=664, limit=256 [ 194.215047][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.221595][ T5399] attempt to access beyond end of device [ 194.221595][ T5399] loop2: rw=0, want=288, limit=256 [ 194.229883][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.238624][ T25] audit: type=1800 audit(1782503224.779:10): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="file1" dev="loop2" ino=1048593 res=0 errno=0 [ 194.265958][ T5397] EXT4-fs (loop3): 1 truncate cleaned up [ 194.272141][ T5397] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nodiscard,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,barrier=0x0000000000000006,data_err=ignore,debug,,errors=continue. Quota mode: none. [ 194.286269][ T5399] attempt to access beyond end of device [ 194.286269][ T5399] loop2: rw=0, want=288, limit=256 [ 194.719584][ T5412] xt_SECMARK: invalid mode: 2 [ 195.547753][ T25] audit: type=1804 audit(1782503224.819:11): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.259" name="/newroot/55/file2/file1" dev="loop2" ino=1048593 res=1 errno=0 [ 195.606401][ T25] audit: type=1800 audit(1782503225.159:12): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="file1" dev="loop2" ino=1048593 res=0 errno=0 [ 197.239431][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.261362][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.269781][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.292132][ T5420] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 198.118834][ T5423] device syzkaller0 entered promiscuous mode [ 198.489690][ T5431] loop3: detected capacity change from 0 to 40427 [ 198.501157][ T5425] netlink: 112 bytes leftover after parsing attributes in process `syz.2.270'. [ 198.520055][ T5431] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 198.527842][ T5431] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 198.543371][ T5431] F2FS-fs (loop3): invalid crc value [ 198.629143][ T5431] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.670415][ T5431] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 198.677494][ T5431] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 200.222089][ T5448] siw: device registration error -23 [ 200.237185][ T5448] dlm: dev_write: no op 0 74000000000000 [ 200.739002][ T5450] loop2: detected capacity change from 0 to 764 [ 200.858769][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 200.990849][ T5450] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 201.314736][ T5458] loop4: detected capacity change from 0 to 764 [ 202.590779][ T5458] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 202.806312][ T5471] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 203.839145][ T5477] loop0: detected capacity change from 0 to 512 [ 204.134691][ T5477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 204.160765][ T5481] loop3: detected capacity change from 0 to 64 [ 204.177365][ T5477] System zones: 1-12 [ 204.430310][ T5486] loop1: detected capacity change from 0 to 40427 [ 204.484142][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.538138][ T5481] hfs: file_umask requires a value [ 204.587927][ T5486] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 204.595838][ T5486] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 204.624515][ T5486] F2FS-fs (loop1): invalid crc value [ 204.664000][ T5477] EXT4-fs (loop0): 1 truncate cleaned up [ 204.705697][ T5481] hfs: unable to parse mount options [ 204.762675][ T5486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 204.841151][ T5477] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nodiscard,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,barrier=0x0000000000000006,data_err=ignore,debug,,errors=continue. Quota mode: none. [ 205.449516][ T5486] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 205.456609][ T5486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 205.742157][ T5491] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 207.916625][ T5518] loop2: detected capacity change from 0 to 764 [ 208.219564][ T5521] netlink: 112 bytes leftover after parsing attributes in process `syz.1.288'. [ 208.321772][ T5518] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 208.492946][ T5519] loop0: detected capacity change from 0 to 8192 [ 210.991605][ T5537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'. [ 211.044767][ T5539] loop3: detected capacity change from 0 to 764 [ 211.168175][ T5539] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 211.220991][ T5544] loop1: detected capacity change from 0 to 128 [ 213.338829][ T5544] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.380437][ T5544] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.600101][ T5559] loop2: detected capacity change from 0 to 40427 [ 213.668776][ T5559] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 213.676540][ T5559] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 213.695464][ T5559] F2FS-fs (loop2): invalid crc value [ 213.997061][ T5559] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.061269][ T5559] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 214.068339][ T5559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 214.539122][ T5569] loop3: detected capacity change from 0 to 512 [ 214.670029][ T5578] loop0: detected capacity change from 0 to 64 [ 214.742844][ T5578] hfs: file_umask requires a value [ 214.792340][ T5578] hfs: unable to parse mount options [ 214.826324][ T5569] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.899034][ T5569] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.928249][ T5582] netlink: 112 bytes leftover after parsing attributes in process `syz.4.304'. [ 215.614058][ T5590] xt_HMARK: spi-set and port-set can't be combined [ 216.342298][ T5592] loop4: detected capacity change from 0 to 764 [ 216.391646][ T5592] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 216.632238][ T5594] loop0: detected capacity change from 0 to 512 [ 216.851378][ T5594] EXT4-fs (loop0): 1 orphan inode deleted [ 216.857243][ T5594] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 216.872039][ T5594] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.635888][ T5613] device syzkaller0 entered promiscuous mode [ 217.663383][ T5613] tipc: Enabled bearer , priority 0 [ 217.785681][ T5611] tipc: Resetting bearer [ 218.374737][ T5623] loop4: detected capacity change from 0 to 128 [ 218.522777][ T5611] tipc: Disabling bearer [ 218.536916][ T5623] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.792132][ T5626] loop3: detected capacity change from 0 to 40427 [ 219.082368][ T5626] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 219.090265][ T5626] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 219.103775][ T5626] F2FS-fs (loop3): invalid crc value [ 219.247496][ T5623] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.493981][ T5626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 219.588718][ T5626] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 219.595841][ T5626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 220.886705][ T5652] loop1: detected capacity change from 0 to 64 [ 221.148181][ T5652] hfs: file_umask requires a value [ 221.245467][ T5652] hfs: unable to parse mount options [ 222.576456][ T5667] loop2: detected capacity change from 0 to 764 [ 222.715823][ T5667] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 222.919638][ T5673] device syzkaller0 entered promiscuous mode [ 222.954428][ T5669] loop4: detected capacity change from 0 to 8192 [ 223.543578][ T5669] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 223.628468][ T5669] REISERFS (device loop4): using ordered data mode [ 223.635322][ T5669] reiserfs: using flush barriers [ 223.658248][ T5669] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.159494][ T5669] REISERFS (device loop4): checking transaction log (loop4) [ 225.217701][ T5669] REISERFS (device loop4): Using r5 hash to sort names [ 225.227404][ T5669] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 225.348405][ T5690] loop2: detected capacity change from 0 to 40427 [ 225.357518][ T5684] netlink: 'syz.1.329': attribute type 8 has an invalid length. [ 225.601591][ T5690] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 225.609597][ T5690] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 225.621236][ T5690] F2FS-fs (loop2): invalid crc value [ 225.648757][ T4678] Bluetooth: hci3: command 0x0406 tx timeout [ 226.775395][ T5690] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.914750][ T5690] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 226.921943][ T5690] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 227.735592][ T5724] futex_wake_op: syz.3.337 tries to shift op by 144; fix this program [ 229.442881][ T5734] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 229.454838][ T5734] VFS: Can't find a romfs filesystem on dev nullb0. [ 229.454838][ T5734] [ 230.161064][ T5748] loop2: detected capacity change from 0 to 64 [ 230.182482][ T5748] hfs: file_umask requires a value [ 230.191822][ T5748] hfs: unable to parse mount options [ 230.199712][ T5747] loop3: detected capacity change from 0 to 764 [ 232.509739][ T5747] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 234.688805][ T1331] Bluetooth: hci2: command 0x0406 tx timeout [ 236.660596][ T5789] device syzkaller0 entered promiscuous mode [ 236.795258][ T5790] loop3: detected capacity change from 0 to 40427 [ 236.884915][ T5790] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 236.892998][ T5790] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 236.938516][ T5790] F2FS-fs (loop3): invalid crc value [ 238.150383][ T5799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.225740][ T5790] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.280669][ T5790] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 238.287789][ T5790] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 239.108627][ T5799] netlink: 'syz.1.353': attribute type 10 has an invalid length. [ 239.120175][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.127690][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.140443][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.147541][ T5799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.154991][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.162621][ T5799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.174725][ T5799] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 240.040671][ T5814] loop4: detected capacity change from 0 to 40427 [ 240.094914][ T5814] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 240.102762][ T5814] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 241.448499][ T5822] overlayfs: overlapping lowerdir path [ 241.959632][ T5814] F2FS-fs (loop4): invalid crc value [ 242.010401][ T5814] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.056485][ T5827] loop0: detected capacity change from 0 to 764 [ 242.064714][ T5814] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 242.071877][ T5814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.162045][ T5827] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 242.384652][ T5830] attempt to access beyond end of device [ 242.384652][ T5830] loop4: rw=2049, want=45128, limit=40427 [ 245.477178][ T5848] xt_SECMARK: invalid mode: 2 [ 247.564671][ T5863] device syzkaller0 entered promiscuous mode [ 248.063067][ T5874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.468787][ T5874] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 248.477675][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.485090][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.496513][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.503619][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.511076][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.518158][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.527279][ T5874] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 248.969959][ T5879] device syzkaller0 entered promiscuous mode [ 249.365669][ T5883] tipc: Started in network mode [ 249.371370][ T5883] tipc: Node identity 4, cluster identity 4711 [ 249.377576][ T5883] tipc: Node number set to 4 [ 250.542753][ T5897] device syzkaller0 entered promiscuous mode [ 253.090387][ T4205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 253.101383][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 253.108942][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.119003][ T4205] Workqueue: hci0 hci_rx_work [ 253.123710][ T4205] Call Trace: [ 253.126983][ T4205] [ 253.129909][ T4205] dump_stack_lvl+0x188/0x250 [ 253.134590][ T4205] ? show_regs_print_info+0x20/0x20 [ 253.139788][ T4205] ? load_image+0x410/0x410 [ 253.144304][ T4205] sysfs_create_dir_ns+0x26a/0x290 [ 253.149416][ T4205] ? sysfs_warn_dup+0xa0/0xa0 [ 253.154088][ T4205] ? kthread+0x42e/0x520 [ 253.158329][ T4205] ? do_raw_spin_unlock+0x11d/0x230 [ 253.163527][ T4205] kobject_add_internal+0x5ba/0xcd0 [ 253.168733][ T4205] kobject_add+0x160/0x230 [ 253.173154][ T4205] ? kobject_init+0x1c0/0x1c0 [ 253.177832][ T4205] ? __raw_spin_lock_init+0x41/0x100 [ 253.183115][ T4205] ? klist_children_get+0x50/0x50 [ 253.188136][ T4205] ? get_device_parent+0x121/0x3e0 [ 253.193249][ T4205] device_add+0x470/0x1050 [ 253.197662][ T4205] ? device_initialize+0x2a5/0x4d0 [ 253.202776][ T4205] hci_conn_add_sysfs+0xd1/0x1e0 [ 253.207806][ T4205] le_conn_complete_evt+0xc2e/0x14d0 [ 253.213101][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 253.218221][ T4205] ? __mutex_trylock_common+0x15c/0x260 [ 253.223776][ T4205] hci_le_meta_evt+0x285/0x3ca0 [ 253.228627][ T4205] ? hci_event_packet+0x363/0x1310 [ 253.233736][ T4205] ? __lock_acquire+0x7b50/0x7b50 [ 253.238763][ T4205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 253.244742][ T4205] ? lock_chain_count+0x20/0x20 [ 253.249593][ T4205] ? hci_remote_host_features_evt+0x240/0x240 [ 253.255661][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 253.261298][ T4205] ? mutex_unlock+0x10/0x10 [ 253.265804][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 253.271449][ T4205] hci_event_packet+0xe0b/0x1310 [ 253.276392][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 253.281238][ T4205] ? rcu_lock_release+0x20/0x20 [ 253.286083][ T4205] ? skb_dequeue+0x1d/0x150 [ 253.290600][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 253.295800][ T4205] hci_rx_work+0x255/0xa10 [ 253.300230][ T4205] process_one_work+0x867/0xff0 [ 253.305095][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 253.310726][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 253.316013][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.321035][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 253.326578][ T4205] ? wq_worker_running+0x97/0x170 [ 253.331602][ T4205] worker_thread+0xad7/0x12a0 [ 253.336289][ T4205] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 253.342183][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 253.348088][ T4205] kthread+0x42e/0x520 [ 253.352155][ T4205] ? rcu_lock_release+0x20/0x20 [ 253.357006][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 253.361596][ T4205] ret_from_fork+0x1f/0x30 [ 253.366026][ T4205] [ 253.380544][ T4205] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 253.393903][ T4205] Bluetooth: hci0: failed to register connection device [ 253.706313][ T5916] netlink: 112 bytes leftover after parsing attributes in process `syz.0.381'. [ 253.950056][ T5932] netlink: 112 bytes leftover after parsing attributes in process `syz.4.385'. [ 255.758889][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.765288][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.267611][ T5952] netlink: 56 bytes leftover after parsing attributes in process `syz.0.388'. [ 259.312717][ T5962] device syzkaller0 entered promiscuous mode [ 259.364367][ T5962] tipc: Started in network mode [ 259.374056][ T5962] tipc: Node identity 9a3f6c18100c, cluster identity 4711 [ 260.804898][ T5962] tipc: Enabled bearer , priority 0 [ 260.880423][ T5957] tipc: Resetting bearer [ 260.890804][ T5977] netlink: 112 bytes leftover after parsing attributes in process `syz.1.395'. [ 260.902096][ T5969] loop0: detected capacity change from 0 to 4096 [ 260.918027][ T5980] loop2: detected capacity change from 0 to 256 [ 260.930343][ T5957] tipc: Disabling bearer [ 260.960163][ T5980] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 261.928137][ T5969] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 261.937825][ T5969] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 262.627254][ T5969] EXT4-fs: error -4 creating inode table initialization thread [ 262.712629][ T5969] EXT4-fs (loop0): mount failed [ 264.329653][ T5994] netlink: 112 bytes leftover after parsing attributes in process `syz.4.399'. [ 265.980343][ T6016] loop2: detected capacity change from 0 to 512 [ 266.015168][ T6017] loop4: detected capacity change from 0 to 512 [ 266.260278][ T6016] EXT4-fs (loop2): orphan cleanup on readonly fs [ 266.268134][ T6016] EXT4-fs error (device loop2): ext4_find_extent:893: inode #4: comm syz.2.403: inode has invalid extent depth: 7 [ 266.529283][ T6017] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.709520][ T6016] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 266.818416][ T6017] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.896549][ T6016] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 266.917873][ T6016] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 266.972865][ T6016] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 267.457367][ T6027] netlink: 112 bytes leftover after parsing attributes in process `syz.3.408'. [ 267.851977][ T6035] xt_HMARK: spi-set and port-set can't be combined [ 268.869115][ T6043] device bridge1 entered promiscuous mode [ 269.207901][ T6044] loop2: detected capacity change from 0 to 256 [ 269.303901][ T6044] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 269.314934][ T6044] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 269.328053][ T6044] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 269.336327][ T6044] UDF-fs: Scanning with blocksize 512 failed [ 269.382161][ T6044] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 269.510009][ T6044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.530560][ T6048] loop4: detected capacity change from 0 to 256 [ 269.563298][ T6051] device syzkaller0 entered promiscuous mode [ 270.172683][ T6048] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 270.342812][ T6042] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 270.351249][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 270.599216][ T6059] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 272.046265][ T6055] netlink: 112 bytes leftover after parsing attributes in process `syz.0.414'. [ 273.342967][ T6082] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 276.212898][ T6090] netlink: 112 bytes leftover after parsing attributes in process `syz.1.423'. [ 276.257678][ T6092] device syzkaller0 entered promiscuous mode [ 276.637052][ T6092] tipc: Started in network mode [ 276.643262][ T6092] tipc: Node identity 66385de39399, cluster identity 4711 [ 276.650641][ T6092] tipc: Enabled bearer , priority 0 [ 276.665171][ T6101] loop0: detected capacity change from 0 to 64 [ 276.675536][ T6089] tipc: Resetting bearer [ 276.694589][ T6089] tipc: Disabling bearer [ 276.717018][ T6101] MINIX-fs: mounting file system with errors, running fsck is recommended [ 277.160763][ T6107] device syzkaller0 entered promiscuous mode [ 278.284927][ T6123] loop2: detected capacity change from 0 to 764 [ 278.378249][ T6123] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 278.954557][ T6128] loop1: detected capacity change from 0 to 4096 [ 278.977346][ T6128] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 279.123911][ T6128] ntfs3: loop1: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 279.150455][ T6140] loop0: detected capacity change from 0 to 512 [ 279.196081][ T6128] ntfs3: loop1: failed to read volume at offset 0x201800 [ 279.322591][ T6128] ntfs3: loop1: failed to read volume at offset 0x201800 [ 279.365143][ T6140] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.453875][ T6128] ntfs3: loop1: failed to read volume at offset 0x201800 [ 279.530742][ T6140] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.624160][ T6128] ntfs3: loop1: failed to read volume at offset 0x201800 [ 279.841361][ T6128] ntfs3: loop1: failed to read volume at offset 0x202800 [ 280.000796][ T6128] ntfs3: loop1: failed to read volume at offset 0x203800 [ 280.091915][ T6128] ntfs3: loop1: failed to read volume at offset 0x205800 [ 280.099414][ T6128] ntfs3: loop1: failed to read volume at offset 0x209800 [ 280.140205][ T6128] netlink: 'syz.1.433': attribute type 2 has an invalid length. [ 280.458906][ T4266] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 281.318855][ T6152] xt_HMARK: spi-set and port-set can't be combined [ 282.518765][ T4266] usb 2-1: unable to read config index 0 descriptor/all [ 282.538978][ T4266] usb 2-1: can't read configurations, error -71 [ 282.593395][ T6164] loop0: detected capacity change from 0 to 512 [ 283.005063][ T6164] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 283.176055][ T6164] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 283.439263][ T6164] EXT4-fs (loop0): 1 truncate cleaned up [ 283.445043][ T6164] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 283.539652][ T6179] loop1: detected capacity change from 0 to 764 [ 284.015028][ T6179] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 284.179112][ T6185] loop2: detected capacity change from 0 to 1024 [ 284.376075][ T6185] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 284.569111][ T6185] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.550981][ T6205] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 285.568185][ T6207] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.447: bg 0: block 112: padding at end of block bitmap is not set [ 285.942601][ T6207] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 285.955545][ T6207] EXT4-fs (loop2): This should not happen!! Data will be lost [ 285.955545][ T6207] [ 285.965284][ T6207] EXT4-fs (loop2): Total free blocks count 0 [ 285.971327][ T6207] EXT4-fs (loop2): Free/Dirty block details [ 285.977277][ T6207] EXT4-fs (loop2): free_blocks=0 [ 285.982325][ T6207] EXT4-fs (loop2): dirty_blocks=64 [ 285.987440][ T6207] EXT4-fs (loop2): Block reservation details [ 285.993459][ T6207] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 286.205638][ T6209] loop3: detected capacity change from 0 to 40427 [ 286.345428][ T6209] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 286.353272][ T6209] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 286.377354][ T6209] F2FS-fs (loop3): invalid crc value [ 286.727475][ T6209] F2FS-fs (loop3): Found nat_bits in checkpoint [ 286.861959][ T6209] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 286.869147][ T6209] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 287.892774][ T6232] loop0: detected capacity change from 0 to 764 [ 287.973349][ T6232] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 288.160740][ T6238] syz.4.453 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 288.173391][ T6238] ubi31: attaching mtd0 [ 288.180687][ T6238] ubi31: scanning is finished [ 288.185382][ T6238] ubi31: empty MTD device detected [ 289.225564][ T6238] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 289.888427][ T6246] loop4: detected capacity change from 0 to 764 [ 290.043691][ T6246] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 290.152622][ T6249] device syzkaller0 entered promiscuous mode [ 291.667004][ T6262] loop2: detected capacity change from 0 to 40427 [ 291.738676][ T6262] F2FS-fs (loop2): invalid crc value [ 291.776354][ T6262] F2FS-fs (loop2): Found nat_bits in checkpoint [ 291.817089][ T6262] F2FS-fs (loop2): Start checkpoint disabled! [ 291.850056][ T6262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 293.067687][ T6283] netlink: 112 bytes leftover after parsing attributes in process `syz.4.468'. [ 293.470402][ T4255] attempt to access beyond end of device [ 293.470402][ T4255] loop2: rw=2049, want=40976, limit=40427 [ 293.577550][ T6296] loop3: detected capacity change from 0 to 764 [ 293.585901][ T6297] loop4: detected capacity change from 0 to 764 [ 293.656425][ T6296] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 293.681662][ T6297] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 293.805606][ T6301] device syzkaller0 entered promiscuous mode [ 294.699208][ T6310] device syzkaller0 entered promiscuous mode [ 294.844647][ T6313] ipt_REJECT: ECHOREPLY no longer supported. [ 295.999681][ T6313] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.346738][ T6318] xt_connbytes: Forcing CT accounting to be enabled [ 296.353701][ T6318] Cannot find set identified by id 0 to match [ 296.730142][ T6330] loop1: detected capacity change from 0 to 512 [ 296.784313][ T6329] loop0: detected capacity change from 0 to 4096 [ 297.017677][ T6330] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 297.042462][ T6329] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 297.195737][ T6330] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 297.536027][ T6329] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 297.566161][ T6329] ntfs3: loop0: Failed to load $Extend. [ 297.578360][ T6330] EXT4-fs (loop1): 1 truncate cleaned up [ 297.587909][ T6336] netlink: 112 bytes leftover after parsing attributes in process `syz.3.481'. [ 297.609273][ T6330] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 303.227550][ T6367] loop2: detected capacity change from 0 to 512 [ 303.273516][ T6371] loop1: detected capacity change from 0 to 16 [ 303.306431][ T6369] loop0: detected capacity change from 0 to 256 [ 303.386531][ T6373] loop3: detected capacity change from 0 to 256 [ 303.413218][ T6371] erofs: (device loop1): mounted with root inode @ nid 36. [ 303.466253][ T6369] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 303.954691][ T6367] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.596305][ T6367] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.623700][ T6369] attempt to access beyond end of device [ 304.623700][ T6369] loop0: rw=524288, want=408, limit=256 [ 304.625238][ T6373] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 304.653429][ T6369] attempt to access beyond end of device [ 304.653429][ T6369] loop0: rw=524288, want=664, limit=256 [ 304.672584][ T6369] attempt to access beyond end of device [ 304.672584][ T6369] loop0: rw=0, want=288, limit=256 [ 304.686257][ T25] audit: type=1800 audit(1782503335.239:13): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 304.927947][ T6386] xt_HMARK: spi-set and port-set can't be combined [ 305.506199][ T25] audit: type=1804 audit(1782503336.049:14): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.489" name="/newroot/103/file2/file1" dev="loop0" ino=1048607 res=1 errno=0 [ 305.529175][ T6387] attempt to access beyond end of device [ 305.529175][ T6387] loop0: rw=0, want=288, limit=256 [ 305.596605][ T6388] netlink: 112 bytes leftover after parsing attributes in process `syz.4.495'. [ 305.736894][ T25] audit: type=1800 audit(1782503336.269:15): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 305.768923][ T6385] netlink: 112 bytes leftover after parsing attributes in process `syz.1.494'. [ 306.762846][ T6396] loop2: detected capacity change from 0 to 764 [ 306.839016][ T6396] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 308.445365][ T6400] loop4: detected capacity change from 0 to 4096 [ 308.604244][ T6408] netlink: 112 bytes leftover after parsing attributes in process `syz.0.508'. [ 308.620072][ T6400] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 310.927536][ T6414] loop2: detected capacity change from 0 to 512 [ 310.965590][ T6400] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 310.998845][ T6414] EXT4-fs (loop2): Ignoring removed nobh option [ 311.005177][ T6414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 311.019727][ T6414] EXT4-fs (loop2): 1 truncate cleaned up [ 311.025436][ T6414] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 311.054739][ T6400] ntfs3: loop4: Failed to load $Extend. [ 311.058515][ T6427] loop0: detected capacity change from 0 to 512 [ 312.130803][ T6427] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.143809][ T6434] loop3: detected capacity change from 0 to 128 [ 312.211357][ T6427] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.503: bad orphan inode 13 [ 312.533692][ T6446] loop4: detected capacity change from 0 to 40427 [ 312.564495][ T6446] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 312.572389][ T6446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 312.586614][ T6446] F2FS-fs (loop4): invalid crc value [ 312.611657][ T6427] ext4_test_bit(bit=12, block=18) = 1 [ 312.826578][ T25] audit: type=1804 audit(1782503343.359:16): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.505" name="/newroot/91/bus/file0" dev="loop3" ino=1048608 res=1 errno=0 [ 313.002670][ T6453] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 313.172867][ T6427] is_bad_inode(inode)=0 [ 313.177165][ T6427] NEXT_ORPHAN(inode)=0 [ 313.184012][ T6427] max_ino=32 [ 313.254225][ T6427] i_nlink=1 [ 313.475278][ T6427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 313.530249][ T6446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 314.689474][ T6464] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 315.185082][ T6464] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.503: bg 0: block 248: padding at end of block bitmap is not set [ 315.220199][ T6464] Quota error (device loop0): write_blk: dquota write failed [ 315.227694][ T6464] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 315.237712][ T6464] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.503: Failed to acquire dquot type 1 [ 315.249469][ T4205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 315.259485][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 315.267037][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.277095][ T4205] Workqueue: hci1 hci_rx_work [ 315.281781][ T4205] Call Trace: [ 315.285055][ T4205] [ 315.287983][ T4205] dump_stack_lvl+0x188/0x250 [ 315.292664][ T4205] ? show_regs_print_info+0x20/0x20 [ 315.297862][ T4205] ? load_image+0x410/0x410 [ 315.302379][ T4205] sysfs_create_dir_ns+0x26a/0x290 [ 315.307492][ T4205] ? sysfs_warn_dup+0xa0/0xa0 [ 315.312191][ T4205] ? kthread+0x42e/0x520 [ 315.316438][ T4205] ? do_raw_spin_unlock+0x11d/0x230 [ 315.321640][ T4205] kobject_add_internal+0x5ba/0xcd0 [ 315.326842][ T4205] kobject_add+0x160/0x230 [ 315.331269][ T4205] ? kobject_init+0x1c0/0x1c0 [ 315.335954][ T4205] ? __raw_spin_lock_init+0x41/0x100 [ 315.341239][ T4205] ? klist_children_get+0x50/0x50 [ 315.346265][ T4205] ? get_device_parent+0x121/0x3e0 [ 315.351384][ T4205] device_add+0x470/0x1050 [ 315.355799][ T4205] ? device_initialize+0x2a5/0x4d0 [ 315.360909][ T4205] hci_conn_add_sysfs+0xd1/0x1e0 [ 315.365852][ T4205] le_conn_complete_evt+0xc2e/0x14d0 [ 315.371157][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 315.376284][ T4205] ? __mutex_trylock_common+0x15c/0x260 [ 315.381850][ T4205] hci_le_meta_evt+0x285/0x3ca0 [ 315.386713][ T4205] ? hci_event_packet+0x363/0x1310 [ 315.391833][ T4205] ? __lock_acquire+0x7b50/0x7b50 [ 315.396877][ T4205] ? hci_remote_host_features_evt+0x240/0x240 [ 315.402954][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 315.408598][ T4205] ? mark_lock+0x94/0x320 [ 315.412939][ T4205] ? mutex_unlock+0x10/0x10 [ 315.417466][ T4205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 315.423456][ T4205] ? lock_chain_count+0x20/0x20 [ 315.428446][ T4205] ? __rwlock_init+0x140/0x140 [ 315.433211][ T4205] hci_event_packet+0xe0b/0x1310 [ 315.438147][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 315.442988][ T4205] ? rcu_lock_release+0x20/0x20 [ 315.447832][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 315.453059][ T4205] hci_rx_work+0x255/0xa10 [ 315.457478][ T4205] process_one_work+0x867/0xff0 [ 315.462323][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 315.467934][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 315.473203][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 315.478211][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 315.483745][ T4205] ? wq_worker_running+0x97/0x170 [ 315.488755][ T4205] worker_thread+0xad7/0x12a0 [ 315.493428][ T4205] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 315.499304][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 315.505186][ T4205] kthread+0x42e/0x520 [ 315.509236][ T4205] ? rcu_lock_release+0x20/0x20 [ 315.514068][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 315.518643][ T4205] ret_from_fork+0x1f/0x30 [ 315.523052][ T4205] [ 315.540666][ T4205] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 315.631539][ T4205] Bluetooth: hci1: failed to register connection device [ 315.676367][ T6469] netlink: 112 bytes leftover after parsing attributes in process `syz.3.510'. [ 316.387374][ T6483] netlink: 112 bytes leftover after parsing attributes in process `syz.3.514'. [ 317.626005][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.632360][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.019667][ T6492] autofs4:pid:6492:autofs_fill_super: called with bogus options [ 318.142720][ T6474] loop0: detected capacity change from 0 to 40427 [ 318.258165][ T6474] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 318.304427][ T6474] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 318.415299][ T6474] F2FS-fs (loop0): invalid crc value [ 318.461569][ T6474] F2FS-fs (loop0): Found nat_bits in checkpoint [ 318.559564][ T6474] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 318.567671][ T6474] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 318.813613][ T6474] attempt to access beyond end of device [ 318.813613][ T6474] loop0: rw=34817, want=77856, limit=40427 [ 320.672401][ T6516] loop4: detected capacity change from 0 to 40427 [ 320.738445][ T6516] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 320.746569][ T6516] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 320.824504][ T6516] F2FS-fs (loop4): invalid crc value [ 321.350951][ T6516] F2FS-fs (loop4): Found nat_bits in checkpoint [ 321.394648][ T6516] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 321.401784][ T6516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 321.808692][ T6532] attempt to access beyond end of device [ 321.808692][ T6532] loop4: rw=34817, want=77856, limit=40427 [ 322.401324][ T6534] netlink: 112 bytes leftover after parsing attributes in process `syz.2.525'. [ 322.608978][ T6541] loop1: detected capacity change from 0 to 1024 [ 322.732610][ T6543] loop2: detected capacity change from 0 to 764 [ 323.011961][ T6543] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 324.534431][ T6554] loop1: detected capacity change from 0 to 512 [ 324.745170][ T6557] loop3: detected capacity change from 0 to 40427 [ 325.172312][ T6564] netlink: 112 bytes leftover after parsing attributes in process `syz.4.526'. [ 325.204980][ T6557] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 325.212810][ T6557] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 325.227186][ T6557] F2FS-fs (loop3): invalid crc value [ 325.317625][ T6557] F2FS-fs (loop3): Found nat_bits in checkpoint [ 325.318112][ T6554] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.369362][ T6573] loop0: detected capacity change from 0 to 512 [ 325.376117][ T6554] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.438775][ T6557] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 325.446055][ T6557] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 326.239164][ T6576] loop4: detected capacity change from 0 to 40427 [ 326.388152][ T6582] attempt to access beyond end of device [ 326.388152][ T6582] loop3: rw=34817, want=77856, limit=40427 [ 326.592624][ T6576] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 326.600624][ T6576] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 326.611424][ T6576] F2FS-fs (loop4): invalid crc value [ 326.802529][ T6573] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.828960][ T6576] F2FS-fs (loop4): Found nat_bits in checkpoint [ 326.959377][ T6576] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 326.966448][ T6576] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 328.286730][ T6597] loop3: detected capacity change from 0 to 40427 [ 328.414866][ T6599] netlink: 112 bytes leftover after parsing attributes in process `syz.4.539'. [ 329.088515][ T6611] befs: (nullb0): invalid magic header [ 329.224205][ T6597] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 329.232233][ T6597] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 329.319450][ T6597] F2FS-fs (loop3): invalid crc value [ 329.549666][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 330.296420][ T6617] loop4: detected capacity change from 0 to 764 [ 330.392870][ T6617] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 330.757759][ T6597] F2FS-fs (loop3): Found nat_bits in checkpoint [ 330.808328][ T6597] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 330.815474][ T6597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 330.976287][ T6637] attempt to access beyond end of device [ 330.976287][ T6637] loop3: rw=34817, want=77856, limit=40427 [ 331.465337][ T6641] netlink: 112 bytes leftover after parsing attributes in process `syz.1.546'. [ 331.623988][ T6644] loop4: detected capacity change from 0 to 128 [ 331.738394][ T25] audit: type=1800 audit(1782503362.279:17): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.549" name="file2" dev="loop4" ino=1048609 res=0 errno=0 [ 331.940779][ T6650] loop1: detected capacity change from 0 to 512 [ 333.927536][ T6650] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 333.940242][ T6650] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.961956][ T6647] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #12: comm syz.1.551: corrupted xattr block 6 [ 333.982288][ T6647] EXT4-fs (loop1): Remounting filesystem read-only [ 334.238963][ T6649] syz.0.550 (6649) used greatest stack depth: 19600 bytes left [ 335.008346][ T6674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.555'. [ 335.018307][ T6674] netlink: 112 bytes leftover after parsing attributes in process `syz.1.555'. [ 336.160457][ T4205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 336.170844][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 336.178413][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 336.188468][ T4205] Workqueue: hci2 hci_rx_work [ 336.193155][ T4205] Call Trace: [ 336.196433][ T4205] [ 336.199367][ T4205] dump_stack_lvl+0x188/0x250 [ 336.204056][ T4205] ? show_regs_print_info+0x20/0x20 [ 336.209260][ T4205] ? load_image+0x410/0x410 [ 336.213780][ T4205] sysfs_create_dir_ns+0x26a/0x290 [ 336.218887][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 336.224522][ T4205] ? sysfs_warn_dup+0xa0/0xa0 [ 336.229196][ T4205] ? kobject_add_internal+0x598/0xcd0 [ 336.234573][ T4205] kobject_add_internal+0x5ba/0xcd0 [ 336.239778][ T4205] kobject_add+0x160/0x230 [ 336.244200][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 336.249841][ T4205] ? kobject_init+0x1c0/0x1c0 [ 336.254524][ T4205] ? device_add+0x2c5/0x1050 [ 336.259115][ T4205] ? get_device_parent+0x121/0x3e0 [ 336.264231][ T4205] device_add+0x470/0x1050 [ 336.268646][ T4205] ? device_initialize+0x2a5/0x4d0 [ 336.273758][ T4205] hci_conn_add_sysfs+0xd1/0x1e0 [ 336.278702][ T4205] le_conn_complete_evt+0xc2e/0x14d0 [ 336.283996][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 336.289130][ T4205] ? __mutex_trylock_common+0x15c/0x260 [ 336.294692][ T4205] hci_le_meta_evt+0x285/0x3ca0 [ 336.299542][ T4205] ? hci_event_packet+0x363/0x1310 [ 336.304655][ T4205] ? __lock_acquire+0x7b50/0x7b50 [ 336.309684][ T4205] ? mark_lock+0x94/0x320 [ 336.314010][ T4205] ? release_firmware_map_entry+0x190/0x190 [ 336.319918][ T4205] ? hci_remote_host_features_evt+0x240/0x240 [ 336.326507][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 336.332141][ T4205] ? mutex_unlock+0x10/0x10 [ 336.336644][ T4205] ? preempt_schedule+0xbc/0xd0 [ 336.341494][ T4205] ? schedule_preempt_disabled+0x20/0x20 [ 336.347125][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 336.352761][ T4205] hci_event_packet+0xe0b/0x1310 [ 336.357706][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 336.362553][ T4205] ? rcu_lock_release+0x20/0x20 [ 336.367518][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 336.372719][ T4205] hci_rx_work+0x255/0xa10 [ 336.377149][ T4205] process_one_work+0x867/0xff0 [ 336.382017][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 336.387647][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 336.392949][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 336.397987][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 336.403551][ T4205] ? wq_worker_running+0x97/0x170 [ 336.408611][ T4205] worker_thread+0xad7/0x12a0 [ 336.413317][ T4205] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 336.419221][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 336.425138][ T4205] kthread+0x42e/0x520 [ 336.429216][ T4205] ? rcu_lock_release+0x20/0x20 [ 336.434072][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 336.438676][ T4205] ret_from_fork+0x1f/0x30 [ 336.443113][ T4205] [ 336.475295][ T4205] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 336.488579][ T4205] Bluetooth: hci2: failed to register connection device [ 336.749941][ T6687] loop0: detected capacity change from 0 to 40427 [ 336.895365][ T6689] netlink: 112 bytes leftover after parsing attributes in process `syz.3.561'. [ 336.932433][ T6690] loop1: detected capacity change from 0 to 764 [ 337.435234][ T6687] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 337.443167][ T6687] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 337.463622][ T6690] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 337.492666][ T6687] F2FS-fs (loop0): invalid crc value [ 337.514988][ T6687] F2FS-fs (loop0): Found nat_bits in checkpoint [ 337.650934][ T6687] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 337.658089][ T6687] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 339.181587][ T6708] loop2: detected capacity change from 0 to 764 [ 341.926457][ T6718] loop1: detected capacity change from 0 to 40427 [ 342.002326][ T6725] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 342.332861][ T6718] F2FS-fs (loop1): invalid crc value [ 342.359953][ T6718] F2FS-fs (loop1): Found nat_bits in checkpoint [ 342.399581][ T6718] F2FS-fs (loop1): Start checkpoint disabled! [ 342.493297][ T6718] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 343.403010][ T6741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.570'. [ 343.412966][ T6741] netlink: 112 bytes leftover after parsing attributes in process `syz.4.570'. [ 343.960241][ T3854] device veth1_vlan left promiscuous mode [ 344.155499][ T6173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.230464][ T4205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 344.240464][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 344.248026][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.258084][ T4205] Workqueue: hci4 hci_rx_work [ 344.262770][ T4205] Call Trace: [ 344.266050][ T4205] [ 344.268981][ T4205] dump_stack_lvl+0x188/0x250 [ 344.273666][ T4205] ? show_regs_print_info+0x20/0x20 [ 344.278861][ T4205] ? load_image+0x410/0x410 [ 344.283373][ T4205] sysfs_create_dir_ns+0x26a/0x290 [ 344.288488][ T4205] ? sysfs_warn_dup+0xa0/0xa0 [ 344.293165][ T4205] ? do_raw_spin_unlock+0x11d/0x230 [ 344.298369][ T4205] kobject_add_internal+0x5ba/0xcd0 [ 344.303584][ T4205] kobject_add+0x160/0x230 [ 344.308006][ T4205] ? kobject_init+0x1c0/0x1c0 [ 344.312692][ T4205] ? __raw_spin_lock_init+0x41/0x100 [ 344.317975][ T4205] ? klist_children_get+0x50/0x50 [ 344.323000][ T4205] ? get_device_parent+0x121/0x3e0 [ 344.328111][ T4205] device_add+0x470/0x1050 [ 344.332528][ T4205] ? device_initialize+0x2a5/0x4d0 [ 344.337645][ T4205] hci_conn_add_sysfs+0xd1/0x1e0 [ 344.342596][ T4205] le_conn_complete_evt+0xc2e/0x14d0 [ 344.347889][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 344.352996][ T4205] ? __mutex_trylock_common+0x15c/0x260 [ 344.358544][ T4205] hci_le_meta_evt+0x285/0x3ca0 [ 344.363391][ T4205] ? hci_event_packet+0x363/0x1310 [ 344.368486][ T4205] ? __lock_acquire+0x7b50/0x7b50 [ 344.373496][ T4205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 344.379495][ T4205] ? lock_chain_count+0x20/0x20 [ 344.384329][ T4205] ? hci_remote_host_features_evt+0x240/0x240 [ 344.390385][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 344.396007][ T4205] ? mutex_unlock+0x10/0x10 [ 344.400508][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 344.406158][ T4205] hci_event_packet+0xe0b/0x1310 [ 344.411104][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 344.415945][ T4205] ? rcu_lock_release+0x20/0x20 [ 344.420786][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 344.425978][ T4205] hci_rx_work+0x255/0xa10 [ 344.430398][ T4205] process_one_work+0x867/0xff0 [ 344.435250][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 344.440865][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 344.446143][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 344.451159][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 344.456690][ T4205] ? wq_worker_running+0x97/0x170 [ 344.461702][ T4205] worker_thread+0xad7/0x12a0 [ 344.466373][ T4205] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 344.472254][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 344.478139][ T4205] kthread+0x42e/0x520 [ 344.482193][ T4205] ? rcu_lock_release+0x20/0x20 [ 344.487028][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 344.491603][ T4205] ret_from_fork+0x1f/0x30 [ 344.496015][ T4205] [ 344.989077][ T4205] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 345.002349][ T4205] Bluetooth: hci4: failed to register connection device [ 345.096499][ T6750] loop0: detected capacity change from 0 to 764 [ 345.154146][ T6750] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 348.638760][ T6766] loop4: detected capacity change from 0 to 2048 [ 349.581914][ T6768] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 349.591300][ T6768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 349.600843][ T6768] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 349.706165][ T25] audit: type=1800 audit(1782503380.129:18): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.575" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 349.797882][ T459] attempt to access beyond end of device [ 349.797882][ T459] loop1: rw=2049, want=40976, limit=40427 [ 350.135839][ T6784] Device name cannot be null; rc = [-22] [ 350.172238][ T6784] loop2: detected capacity change from 0 to 64 [ 350.746333][ T6777] loop4: detected capacity change from 0 to 764 [ 350.805549][ T6777] rock: directory entry would overflow storage [ 350.823162][ T6777] rock: sig=0x4654, size=5, remaining=4 [ 350.972102][ T6786] loop0: detected capacity change from 0 to 256 [ 351.930021][ T6786] exfat: Deprecated parameter 'utf8' [ 351.935389][ T6786] exfat: Deprecated parameter 'namecase' [ 351.941146][ T6786] exfat: Deprecated parameter 'namecase' [ 351.946768][ T6786] exfat: Deprecated parameter 'utf8' [ 352.093638][ T6786] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 352.155168][ T6789] netlink: 112 bytes leftover after parsing attributes in process `syz.1.573'. [ 352.267755][ T6794] device syzkaller0 entered promiscuous mode [ 352.506006][ T6797] loop2: detected capacity change from 0 to 764 [ 352.571937][ T6797] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 354.319045][ T6811] befs: (nullb0): invalid magic header [ 355.833452][ T6829] loop2: detected capacity change from 0 to 764 [ 356.311500][ T6829] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 356.323311][ T6831] loop4: detected capacity change from 0 to 764 [ 356.400482][ T6838] netlink: 112 bytes leftover after parsing attributes in process `syz.0.593'. [ 357.184799][ T6831] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 357.208840][ T6837] netlink: 112 bytes leftover after parsing attributes in process `syz.1.594'. [ 357.807806][ T6847] loop4: detected capacity change from 0 to 40427 [ 358.540568][ T6847] F2FS-fs (loop4): invalid crc value [ 358.569619][ T6847] F2FS-fs (loop4): Found nat_bits in checkpoint [ 358.594567][ T6847] F2FS-fs (loop4): Start checkpoint disabled! [ 358.615038][ T6847] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 358.818060][ T6857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.598'. [ 358.887972][ T6860] ubi0: attaching mtd0 [ 358.902393][ T6860] ubi0: scanning is finished [ 359.452340][ T6860] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 359.460093][ T6860] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 359.467335][ T6860] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 359.474372][ T6860] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 359.482032][ T6860] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 359.488851][ T6860] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 359.496837][ T6860] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3990954978 [ 359.506994][ T6860] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 359.519390][ T6861] ubi0: background thread "ubi_bgt0d" started, PID 6861 [ 359.754651][ T6866] loop1: detected capacity change from 0 to 764 [ 360.511454][ T6874] befs: (nullb0): invalid magic header [ 360.672670][ T6866] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 361.070314][ T4424] attempt to access beyond end of device [ 361.070314][ T4424] loop4: rw=2049, want=40976, limit=40427 [ 361.848916][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.856660][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.886423][ T6902] netlink: 112 bytes leftover after parsing attributes in process `syz.1.607'. [ 362.939629][ T6905] loop4: detected capacity change from 0 to 764 [ 363.013353][ T6905] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 363.084800][ T1111] Process accounting resumed [ 363.335086][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.415397][ T6913] netlink: 112 bytes leftover after parsing attributes in process `syz.4.610'. [ 363.620710][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.225298][ T6857] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.240285][ T6857] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.262709][ T6857] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.273406][ T6857] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.333401][ T6926] device syzkaller0 entered promiscuous mode [ 366.395431][ T6938] loop1: detected capacity change from 0 to 764 [ 366.418800][ T6931] autofs4:pid:6931:autofs_fill_super: called with bogus options [ 367.132748][ T6938] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 367.984265][ T6959] Cannot find set identified by id 3 to match [ 368.038432][ T6961] loop3: detected capacity change from 0 to 764 [ 368.087474][ T6959] tipc: Failed to remove unknown binding: 66,0,0/4:2383747688/2383747689 [ 368.248213][ T6965] netlink: 112 bytes leftover after parsing attributes in process `syz.1.619'. [ 368.265893][ T6959] tipc: Failed to remove unknown binding: 66,0,0/4:2383747688/2383747689 [ 368.320628][ T6961] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 368.640848][ T6981] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 368.647492][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.655346][ T6982] loop4: detected capacity change from 0 to 256 [ 368.681336][ T6981] vhci_hcd vhci_hcd.0: Device attached [ 368.771819][ T6982] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.810649][ T6988] netlink: 36 bytes leftover after parsing attributes in process `syz.3.625'. [ 368.962269][ T25] audit: type=1800 audit(1782503399.509:19): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.623" name="file1" dev="loop4" ino=1048613 res=0 errno=0 [ 369.018835][ T1111] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 369.026342][ T6983] vhci_hcd: connection closed [ 369.026522][ T144] vhci_hcd: stop threads [ 369.060024][ T144] vhci_hcd: release socket [ 369.085787][ T144] vhci_hcd: disconnect device [ 369.267225][ T6995] loop0: detected capacity change from 0 to 40427 [ 369.333714][ T6995] F2FS-fs (loop0): invalid crc value [ 369.345881][ T6995] F2FS-fs (loop0): Found nat_bits in checkpoint [ 369.389923][ T6995] F2FS-fs (loop0): Start checkpoint disabled! [ 369.410070][ T6995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 370.561830][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.569174][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.651979][ T7007] netlink: 112 bytes leftover after parsing attributes in process `syz.2.621'. [ 371.070527][ T4321] attempt to access beyond end of device [ 371.070527][ T4321] loop0: rw=2049, want=40976, limit=40427 [ 371.879946][ T7015] loop0: detected capacity change from 0 to 40427 [ 371.923459][ T7015] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 371.931394][ T7015] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 371.938023][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.942515][ T7015] F2FS-fs (loop0): invalid crc value [ 371.996555][ T7015] F2FS-fs (loop0): Found nat_bits in checkpoint [ 371.997023][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.057947][ T7015] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 372.065117][ T7015] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 372.290680][ T7022] attempt to access beyond end of device [ 372.290680][ T7022] loop0: rw=34817, want=77856, limit=40427 [ 372.388533][ T6988] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.397554][ T6988] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.407022][ T6988] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.415922][ T6988] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.745581][ T4233] bond0 speed is unknown, defaulting to 1000 [ 373.184484][ T7031] loop1: detected capacity change from 0 to 128 [ 373.435363][ T7028] netlink: 112 bytes leftover after parsing attributes in process `syz.4.633'. [ 373.638030][ T25] audit: type=1800 audit(1782503404.179:20): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.634" name="file2" dev="loop1" ino=1048615 res=0 errno=0 [ 374.128737][ T1111] vhci_hcd: vhci_device speed not set [ 375.300450][ T7056] loop3: detected capacity change from 0 to 512 [ 375.416717][ T7056] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 375.583576][ T7059] loop2: detected capacity change from 0 to 1024 [ 375.639830][ T7069] loop0: detected capacity change from 0 to 764 [ 375.740672][ T7071] loop4: detected capacity change from 0 to 736 [ 375.761195][ T7056] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 375.944937][ T7069] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 376.210492][ T7072] device batadv_slave_0 entered promiscuous mode [ 376.242417][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 376.506125][ T7056] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.641: corrupted inode contents [ 376.539674][ T7070] device batadv_slave_0 left promiscuous mode [ 376.557485][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 376.762177][ T7056] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #16: comm syz.3.641: mark_inode_dirty error [ 376.779208][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 377.301013][ T7093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.645'. [ 377.301749][ T7056] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.641: corrupted inode contents [ 377.323820][ T7095] loop0: detected capacity change from 0 to 256 [ 377.335250][ T7094] netlink: 112 bytes leftover after parsing attributes in process `syz.4.649'. [ 377.365863][ T7095] exfat: Deprecated parameter 'namecase' [ 377.376141][ T7095] exfat: Deprecated parameter 'utf8' [ 377.383977][ T7095] exfat: Deprecated parameter 'namecase' [ 377.393321][ T7095] exfat: Unknown parameter 'namecaõe' [ 377.401483][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 377.408025][ T7056] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.641: mark_inode_dirty error [ 377.483262][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 377.498688][ T7056] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.641: corrupted inode contents [ 377.579864][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 377.591412][ T7056] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.641: mark_inode_dirty error [ 377.637581][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 377.697048][ T7056] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.641: corrupted inode contents [ 377.714026][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.721319][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.341677][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 378.357585][ T7056] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 378.372077][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.381646][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.524723][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 378.569747][ T7056] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.641: corrupted inode contents [ 378.588670][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 378.605514][ T7056] EXT4-fs error (device loop3): ext4_truncate:4286: inode #16: comm syz.3.641: mark_inode_dirty error [ 378.634095][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 378.664051][ T7056] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 378.699282][ T7056] EXT4-fs (loop3): Remounting filesystem read-only [ 378.719752][ T7056] EXT4-fs (loop3): 1 truncate cleaned up [ 378.740846][ T7056] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 378.774234][ T7056] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.642393][ T7115] loop0: detected capacity change from 0 to 128 [ 379.667657][ T7115] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 379.959103][ T7093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.986249][ T7093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.158071][ T7120] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 380.281515][ T7120] loop3: detected capacity change from 0 to 8192 [ 380.416323][ T7093] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.430884][ T7093] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.443117][ T7093] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.458703][ T7093] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.819793][ T7128] device batadv_slave_0 entered promiscuous mode [ 380.895760][ T4294] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 381.772481][ T7124] device batadv_slave_0 left promiscuous mode [ 383.887947][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 384.480452][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 384.490062][ T7166] netlink: 112 bytes leftover after parsing attributes in process `syz.1.671'. [ 384.766133][ T7177] capability: warning: `syz.0.670' uses deprecated v2 capabilities in a way that may be insecure [ 385.509978][ T7189] loop3: detected capacity change from 0 to 764 [ 385.777127][ T7189] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 386.362281][ T7192] batman_adv: batadv0: Adding interface: macvtap1 [ 387.397117][ T7192] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.785342][ T7192] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 388.582068][ T7217] Device name cannot be null; rc = [-22] [ 388.592080][ T7217] loop1: detected capacity change from 0 to 64 [ 388.618153][ T7212] device batadv_slave_0 entered promiscuous mode [ 388.797893][ T7209] device batadv_slave_0 left promiscuous mode [ 389.014706][ T7230] loop2: detected capacity change from 0 to 764 [ 389.184304][ T7230] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 389.255814][ T7238] SET target dimension over the limit! [ 389.731111][ T7236] loop3: detected capacity change from 0 to 512 [ 390.626072][ T7244] loop1: detected capacity change from 0 to 4096 [ 390.729030][ T7236] EXT4-fs (loop3): 1 orphan inode deleted [ 390.774348][ T7236] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 390.789915][ T7244] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 390.892469][ T7236] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.227504][ T7254] fs-verity: sha512 using implementation "sha512-avx2" [ 391.656950][ T7245] loop2: detected capacity change from 0 to 1024 [ 392.004058][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 392.260282][ T7245] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 392.279727][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.624160][ T7245] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.978331][ T7264] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.690: bg 0: block 112: padding at end of block bitmap is not set [ 393.020421][ T7264] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 393.032926][ T7264] EXT4-fs (loop2): This should not happen!! Data will be lost [ 393.032926][ T7264] [ 393.042893][ T7264] EXT4-fs (loop2): Total free blocks count 0 [ 393.049037][ T7264] EXT4-fs (loop2): Free/Dirty block details [ 393.055007][ T7264] EXT4-fs (loop2): free_blocks=0 [ 393.060277][ T7264] EXT4-fs (loop2): dirty_blocks=64 [ 393.065459][ T7264] EXT4-fs (loop2): Block reservation details [ 393.071515][ T7264] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 393.615070][ T7272] loop3: detected capacity change from 0 to 2048 [ 393.737628][ T7277] Device name cannot be null; rc = [-22] [ 394.340822][ T7272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.350142][ T7277] loop4: detected capacity change from 0 to 64 [ 396.220110][ T7300] ubi: mtd0 is already attached to ubi0 [ 396.968555][ T7305] loop2: detected capacity change from 0 to 512 [ 397.824015][ T7305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 397.973972][ T7318] netlink: 112 bytes leftover after parsing attributes in process `syz.1.706'. [ 403.912912][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.913003][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.913656][ T7367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.914067][ T7367] device team0 left promiscuous mode [ 403.914077][ T7367] device team_slave_0 left promiscuous mode [ 403.914162][ T7367] device team_slave_1 left promiscuous mode [ 404.302584][ T7367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.376730][ T7370] loop1: detected capacity change from 0 to 764 [ 405.569094][ T7373] loop4: detected capacity change from 0 to 40427 [ 405.626338][ T7373] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 405.634415][ T7373] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 405.644078][ T7373] F2FS-fs (loop4): invalid crc value [ 405.694392][ T7378] netlink: 112 bytes leftover after parsing attributes in process `syz.3.721'. [ 405.712099][ T7373] F2FS-fs (loop4): Found nat_bits in checkpoint [ 405.756873][ T7373] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 405.764042][ T7373] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 409.267375][ T7390] netlink: 112 bytes leftover after parsing attributes in process `syz.1.734'. [ 409.740675][ T1331] Process accounting resumed [ 411.328389][ T7412] loop4: detected capacity change from 0 to 764 [ 411.383883][ T7416] loop0: detected capacity change from 0 to 512 [ 411.426932][ T7412] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 411.678357][ T7416] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 411.836454][ T7416] ext4 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.914197][ T7433] loop2: detected capacity change from 0 to 40427 [ 413.024247][ T7433] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 413.032257][ T7433] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 413.048657][ T7433] F2FS-fs (loop2): invalid crc value [ 413.135545][ T7433] F2FS-fs (loop2): Found nat_bits in checkpoint [ 413.511330][ T7433] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 413.518398][ T7433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 413.684523][ T7433] attempt to access beyond end of device [ 413.684523][ T7433] loop2: rw=34817, want=77856, limit=40427 [ 414.633986][ T7450] hub 8-0:1.0: USB hub found [ 414.642985][ T7450] hub 8-0:1.0: 1 port detected [ 417.203784][ T7462] netlink: 112 bytes leftover after parsing attributes in process `syz.2.739'. [ 417.720974][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 417.731670][ T7469] device bridge_slave_1 left promiscuous mode [ 417.744106][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.322939][ T7469] device bridge_slave_0 left promiscuous mode [ 418.336749][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.620145][ T7481] loop0: detected capacity change from 0 to 40427 [ 418.636878][ T7469] bond0: (slave bridge0): Releasing backup interface [ 418.654506][ T7481] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 418.662504][ T7481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 418.675815][ T7481] F2FS-fs (loop0): invalid crc value [ 418.715462][ T7481] F2FS-fs (loop0): Found nat_bits in checkpoint [ 418.748280][ T7481] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 418.755501][ T7481] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 418.772766][ T7489] netlink: 112 bytes leftover after parsing attributes in process `syz.4.752'. [ 418.789171][ T7482] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 42403 - 0 [ 418.811973][ T7482] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 42403 - 0 [ 418.821543][ T7482] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 42403 - 0 [ 418.830690][ T7482] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 42403 - 0 [ 418.875329][ T7482] device geneve2 entered promiscuous mode [ 418.926665][ T7483] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.953152][ T7483] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 42403 - 0 [ 420.139070][ T7512] netlink: 112 bytes leftover after parsing attributes in process `syz.4.761'. [ 420.164455][ T7516] loop2: detected capacity change from 0 to 764 [ 420.189743][ T7514] loop1: detected capacity change from 0 to 1024 [ 420.286024][ T7515] loop3: detected capacity change from 0 to 64 [ 421.114657][ T7516] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 421.138373][ T7515] hfs: found bad thread record in catalog [ 421.144559][ T7515] hfs: get root inode failed [ 421.240677][ T7515] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.250304][ T7515] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.259041][ T7515] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.267736][ T7515] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.814563][ T7529] netlink: 112 bytes leftover after parsing attributes in process `syz.4.764'. [ 421.828296][ T7515] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.837494][ T7515] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.846421][ T7515] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.855321][ T7515] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.278081][ T7533] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 422.284956][ T7533] hfsplus: xattr search failed [ 422.528524][ T4255] hfsplus: b-tree write err: -5, ino 25 [ 422.536011][ T4255] hfsplus: b-tree write err: -5, ino 4 [ 422.568106][ T4255] hfsplus: b-tree write err: -5, ino 2 [ 422.576860][ T4255] hfsplus: b-tree write err: -5, ino 28 [ 425.043640][ T7559] overlayfs: overlapping lowerdir path [ 426.361109][ T7571] loop3: detected capacity change from 0 to 128 [ 426.862473][ T7577] loop1: detected capacity change from 0 to 8192 [ 428.355947][ T7584] netlink: 112 bytes leftover after parsing attributes in process `syz.1.774'. [ 428.503407][ T7590] input: syz0 as /devices/virtual/input/input6 [ 429.056478][ T25] audit: type=1326 audit(1782503458.969:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 431.599030][ T25] audit: type=1326 audit(1782503458.969:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 431.648733][ T25] audit: type=1326 audit(1782503458.979:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 431.691268][ T25] audit: type=1326 audit(1782503458.979:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 431.723382][ T25] audit: type=1326 audit(1782503458.979:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 432.871622][ T7608] autofs4:pid:7608:autofs_fill_super: called with bogus options [ 433.642077][ T25] audit: type=1326 audit(1782503458.979:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 433.666277][ T25] audit: type=1326 audit(1782503458.979:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 433.763572][ T7620] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 433.776249][ T7620] VFS: Can't find a romfs filesystem on dev nullb0. [ 433.776249][ T7620] [ 434.771224][ T25] audit: type=1326 audit(1782503458.979:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 434.795253][ T25] audit: type=1326 audit(1782503458.979:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 434.839111][ T25] audit: type=1326 audit(1782503458.979:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 434.914391][ T25] audit: type=1326 audit(1782503458.979:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 435.729859][ T7636] tipc: Cannot configure node identity twice [ 436.599708][ T25] audit: type=1326 audit(1782503458.989:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 436.625839][ T25] audit: type=1326 audit(1782503458.989:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 436.650753][ T25] audit: type=1326 audit(1782503458.989:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 436.691310][ T25] audit: type=1326 audit(1782503458.989:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 436.756250][ T7638] netlink: 112 bytes leftover after parsing attributes in process `syz.2.788'. [ 436.766320][ T25] audit: type=1326 audit(1782503458.989:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 436.843704][ T7647] qrtr: Invalid version 0 [ 436.852354][ T25] audit: type=1326 audit(1782503458.989:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.3.773" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd403c5ae59 code=0x7ffc0000 [ 438.200919][ T7662] loop3: detected capacity change from 0 to 764 [ 439.259015][ T7662] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 439.940236][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.946562][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.965230][ T7683] loop1: detected capacity change from 0 to 764 [ 440.812174][ T7683] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 441.003825][ T7694] netlink: 112 bytes leftover after parsing attributes in process `syz.2.802'. [ 441.310296][ T7712] xt_NFQUEUE: number of queues (4096) out of range (got 67070) [ 441.595173][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.604700][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.618552][ T7715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.632658][ T7715] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.664119][ T7715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.981908][ T4683] bond0 speed is unknown, defaulting to 1000 [ 442.508753][ T7727] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 443.656355][ T7734] loop2: detected capacity change from 0 to 764 [ 443.659707][ T7735] loop3: detected capacity change from 0 to 512 [ 443.736510][ T7734] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 443.879654][ T7735] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 443.909292][ T7735] ext4 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.212553][ T7758] device syzkaller0 entered promiscuous mode [ 446.229497][ T4232] Process accounting resumed [ 446.257035][ T7761] netlink: 112 bytes leftover after parsing attributes in process `syz.2.815'. [ 446.842250][ T7773] loop4: detected capacity change from 0 to 128 [ 447.226979][ T7773] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 447.239620][ T7773] hpfs: filesystem error: improperly stopped [ 447.245671][ T7773] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 447.253554][ T7773] hpfs: You really don't want any checks? You are crazy... [ 447.261090][ T7773] hpfs: hpfs_map_sector(): read error [ 447.266496][ T7773] hpfs: code page support is disabled [ 447.429996][ T7776] loop1: detected capacity change from 0 to 40427 [ 447.641181][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 447.647484][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 447.653550][ T7773] hpfs: filesystem error: unable to find root dir [ 447.922129][ T7785] mmap: syz.3.822 (7785) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 447.946936][ T7776] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 447.954768][ T7776] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 448.001850][ T7776] F2FS-fs (loop1): invalid crc value [ 448.051912][ T7776] F2FS-fs (loop1): Found nat_bits in checkpoint [ 448.105725][ T7776] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 448.113225][ T7776] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 449.156676][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 449.491898][ T7812] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 449.523164][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 449.875511][ T7820] netlink: 112 bytes leftover after parsing attributes in process `syz.4.829'. [ 450.929364][ T7825] device syzkaller0 entered promiscuous mode [ 452.996646][ T7841] device syzkaller0 entered promiscuous mode [ 453.733727][ T7856] loop1: detected capacity change from 0 to 40427 [ 453.824320][ T7856] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 453.832312][ T7856] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 453.841952][ T7856] F2FS-fs (loop1): invalid crc value [ 453.981974][ T7856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 454.849417][ T7856] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 454.856536][ T7856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 455.534918][ T7872] attempt to access beyond end of device [ 455.534918][ T7872] loop1: rw=34817, want=77856, limit=40427 [ 455.981970][ T7879] lo speed is unknown, defaulting to 1000 [ 455.988034][ T7879] lo speed is unknown, defaulting to 1000 [ 455.997241][ T7879] lo speed is unknown, defaulting to 1000 [ 456.024685][ T7879] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 456.180021][ T7882] netlink: 112 bytes leftover after parsing attributes in process `syz.4.843'. [ 456.880547][ T7884] kernel profiling enabled (shift: 9) [ 457.671523][ T7879] lo speed is unknown, defaulting to 1000 [ 458.356396][ T7879] lo speed is unknown, defaulting to 1000 [ 458.375668][ T7879] lo speed is unknown, defaulting to 1000 [ 458.389278][ T7879] lo speed is unknown, defaulting to 1000 [ 458.470883][ T7879] lo speed is unknown, defaulting to 1000 [ 458.526056][ T7893] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 461.988342][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 462.352099][ T7924] device syzkaller0 entered promiscuous mode [ 465.757243][ T7962] loop4: detected capacity change from 0 to 4096 [ 466.982454][ T7962] ntfs3: Unknown parameter 'Ÿ6ä‡SËvj' [ 470.254164][ T7981] input: syz0 as /devices/virtual/input/input7 [ 470.263084][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 470.279630][ T25] audit: type=1326 audit(1782503500.789:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 473.116646][ T25] audit: type=1326 audit(1782503500.789:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 473.189759][ T25] audit: type=1326 audit(1782503500.799:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 473.221996][ T25] audit: type=1326 audit(1782503500.799:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 473.247255][ T25] audit: type=1326 audit(1782503500.799:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 473.326892][ T25] audit: type=1326 audit(1782503500.799:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 474.278015][ T7998] loop3: detected capacity change from 0 to 256 [ 474.291726][ T7999] loop1: detected capacity change from 0 to 16 [ 474.293460][ T25] audit: type=1326 audit(1782503500.799:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 474.326152][ T25] audit: type=1326 audit(1782503500.799:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 474.700844][ T8007] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 474.973971][ T8003] futex_wake_op: syz.2.868 tries to shift op by 144; fix this program [ 475.008763][ T25] audit: type=1326 audit(1782503500.799:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 475.012662][ T7999] erofs: (device loop1): mounted with root inode @ nid 36. [ 475.063305][ T7998] FAT-fs (loop3): Directory bread(block 64) failed [ 475.080666][ T7998] FAT-fs (loop3): Directory bread(block 65) failed [ 475.095229][ T7998] FAT-fs (loop3): Directory bread(block 66) failed [ 475.136372][ T25] audit: type=1326 audit(1782503500.799:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.4.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c736e0e59 code=0x7ffc0000 [ 475.194537][ T7998] FAT-fs (loop3): Directory bread(block 67) failed [ 475.227387][ T7998] FAT-fs (loop3): Directory bread(block 68) failed [ 475.246546][ T7998] FAT-fs (loop3): Directory bread(block 69) failed [ 475.254758][ T7998] FAT-fs (loop3): Directory bread(block 70) failed [ 475.266066][ T7998] FAT-fs (loop3): Directory bread(block 71) failed [ 475.274011][ T7998] FAT-fs (loop3): Directory bread(block 72) failed [ 475.285079][ T7998] FAT-fs (loop3): Directory bread(block 73) failed [ 475.610283][ T8017] attempt to access beyond end of device [ 475.610283][ T8017] loop1: rw=0, want=304, limit=16 [ 475.622188][ T8017] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 477.025658][ T4298] Process accounting resumed [ 478.933878][ T8038] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 479.137976][ T8047] xt_NFQUEUE: number of queues (4096) out of range (got 67070) [ 479.242343][ T8043] loop0: detected capacity change from 0 to 4096 [ 479.426031][ T8043] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 479.455132][ T8048] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.488233][ T8057] bond0: (slave bridge0): Releasing backup interface [ 480.515732][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.523037][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.601080][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 480.662668][ T8058] loop0: detected capacity change from 0 to 4096 [ 480.668140][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.680026][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.726060][ T8057] device bridge_slave_0 left promiscuous mode [ 480.787331][ T4232] Process accounting resumed [ 480.835842][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.879411][ T8068] loop4: detected capacity change from 0 to 1024 [ 481.125226][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.195650][ T8068] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 481.367687][ T8058] ntfs3: loop0: Failed to load $Extend. [ 481.469562][ T8057] bond0: (slave bond_slave_0): Releasing backup interface [ 481.800371][ T8057] bond0: (slave bond_slave_1): Releasing backup interface [ 482.479209][ T8075] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 483.775256][ T8075] ntfs3: loop0: ino=5, "/" directory corrupted [ 483.790403][ T8073] ntfs3: loop0: ino=5, "/" directory corrupted [ 483.798867][ T8073] ntfs3: loop0: ino=5, "/" directory corrupted [ 483.987868][ T8057] team0: Port device team_slave_0 removed [ 484.027471][ T8057] team0: Port device team_slave_1 removed [ 484.040332][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.155209][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.276980][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.352234][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.512718][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 484.617940][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 484.629005][ T8064] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.637694][ T8064] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.646416][ T8064] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.655103][ T8064] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.665073][ T8074] netlink: 'syz.4.889': attribute type 49 has an invalid length. [ 484.952473][ T8074] device ip6gretap0 entered promiscuous mode [ 485.635653][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 485.651876][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.660234][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.714190][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.342442][ T8104] loop0: detected capacity change from 0 to 40427 [ 489.587513][ T8117] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 489.660870][ T8104] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 489.668225][ T8104] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 489.682539][ T8104] F2FS-fs (loop0): invalid crc value [ 489.976312][ T8104] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 490.154290][ T8104] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 490.161479][ T8104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 491.212198][ T4196] attempt to access beyond end of device [ 491.212198][ T4196] loop0: rw=2049, want=45104, limit=40427 [ 494.783006][ T8173] loop0: detected capacity change from 0 to 40427 [ 495.068526][ T8173] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 495.076371][ T8173] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 495.120712][ T8173] F2FS-fs (loop0): invalid crc value [ 495.202420][ T8166] device syzkaller0 entered promiscuous mode [ 495.467302][ T8173] F2FS-fs (loop0): Found nat_bits in checkpoint [ 495.544047][ T8173] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 495.551158][ T8173] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 495.856710][ T8191] attempt to access beyond end of device [ 495.856710][ T8191] loop0: rw=34817, want=77856, limit=40427 [ 499.875898][ T8229] loop3: detected capacity change from 0 to 1024 [ 500.241586][ T8229] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 500.314977][ T8229] EXT4-fs (loop3): invalid journal inode [ 500.390145][ T8229] EXT4-fs (loop3): can't get journal size [ 500.440013][ T8229] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 501.261323][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.267683][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.797365][ T8264] netlink: 112 bytes leftover after parsing attributes in process `syz.1.944'. [ 506.040839][ T8298] netlink: 44 bytes leftover after parsing attributes in process `syz.2.942'. [ 506.951692][ T8301] input: syz1 as /devices/virtual/input/input8 [ 510.032838][ T8321] loop3: detected capacity change from 0 to 512 [ 510.105980][ T8325] netlink: 112 bytes leftover after parsing attributes in process `syz.4.948'. [ 511.280350][ T8333] loop4: detected capacity change from 0 to 40427 [ 511.326833][ T8333] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 511.334653][ T8333] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 511.371875][ T8333] F2FS-fs (loop4): invalid crc value [ 511.383684][ T8321] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 511.441598][ T8333] F2FS-fs (loop4): Found nat_bits in checkpoint [ 511.641890][ T8333] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 511.649992][ T8333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 512.402060][ T8359] attempt to access beyond end of device [ 512.402060][ T8359] loop4: rw=34817, want=77856, limit=40427 [ 512.532529][ T8363] netlink: 44 bytes leftover after parsing attributes in process `syz.0.955'. [ 513.855945][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 515.043715][ T8381] loop1: detected capacity change from 0 to 4096 [ 515.061232][ T8381] ntfs3: Unknown parameter 'Ÿ6ä‡SËvj' [ 516.107888][ T8397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.148508][ T8399] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 516.156718][ T8399] overlayfs: failed to set xattr on upper [ 516.162587][ T8399] overlayfs: ...falling back to index=off,metacopy=off. [ 516.202649][ T8391] netlink: 112 bytes leftover after parsing attributes in process `syz.1.961'. [ 517.997545][ T8422] netlink: 44 bytes leftover after parsing attributes in process `syz.3.968'. [ 518.840742][ T8420] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 518.851736][ T8420] VFS: Can't find a romfs filesystem on dev nullb0. [ 518.851736][ T8420] [ 519.293879][ T8438] SET target dimension over the limit! [ 519.785507][ T8441] loop2: detected capacity change from 0 to 4096 [ 519.830683][ T8441] ntfs3: Unknown parameter 'Ÿ6ä‡SËvj' [ 520.430966][ T8449] netlink: 112 bytes leftover after parsing attributes in process `syz.2.975'. [ 520.657506][ T8452] loop3: detected capacity change from 0 to 16 [ 520.901764][ T8452] erofs: (device loop3): mounted with root inode @ nid 36. [ 521.644883][ T8504] attempt to access beyond end of device [ 521.644883][ T8504] loop3: rw=0, want=304, limit=16 [ 521.656002][ T8504] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 523.258343][ T8509] loop1: detected capacity change from 0 to 131072 [ 523.433277][ T8509] F2FS-fs (loop1): invalid crc value [ 523.667200][ T8509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 523.709058][ T8509] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 523.759038][ T8509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 526.239993][ T8529] syz.0.980 (8529) used greatest stack depth: 18016 bytes left [ 526.634242][ T8535] loop2: detected capacity change from 0 to 40427 [ 527.353493][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 527.362511][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 527.525276][ T8540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.576772][ T8535] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 527.581949][ T8540] bond1: (slave team0): Releasing active interface [ 527.583239][ T8535] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 527.600433][ T8535] F2FS-fs (loop2): invalid crc value [ 527.622332][ T8535] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 527.680085][ T8540] device bridge_slave_0 left promiscuous mode [ 527.686421][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.697253][ T8535] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 527.704441][ T8535] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 527.932982][ T8540] device bridge_slave_1 left promiscuous mode [ 528.725417][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.778195][ T8552] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 528.792516][ T4189] attempt to access beyond end of device [ 528.792516][ T4189] loop2: rw=2049, want=45104, limit=40427 [ 528.835209][ T8552] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 528.875309][ T8540] bond0: (slave bond_slave_0): Releasing backup interface [ 528.963921][ T8540] bond0: (slave bond_slave_1): Releasing backup interface [ 528.996988][ T8540] team0: Port device team_slave_0 removed [ 529.116491][ T8562] loop2: detected capacity change from 0 to 16 [ 529.183676][ T8562] erofs: (device loop2): mounted with root inode @ nid 36. [ 529.351782][ T8561] loop3: detected capacity change from 0 to 40427 [ 529.423214][ T8540] team0: Port device team_slave_1 removed [ 529.429899][ T8540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.470079][ T8561] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 529.477874][ T8561] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 529.487990][ T8540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.504106][ T8561] F2FS-fs (loop3): invalid crc value [ 529.512923][ T8540] bond1: (slave bridge1): Releasing active interface [ 529.586626][ T8565] attempt to access beyond end of device [ 529.586626][ T8565] loop2: rw=0, want=304, limit=16 [ 529.597537][ T8565] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 530.219691][ T8540] bond1: (slave bridge1): the permanent HWaddr of slave - aa:e0:a9:95:a4:68 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 530.295918][ T8561] F2FS-fs (loop3): Found nat_bits in checkpoint [ 530.364680][ T8561] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 530.371896][ T8561] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 530.386033][ T8540] bond1: (slave gretap1): making interface the new active one [ 530.601955][ T8540] bond1: (slave gretap1): Releasing active interface [ 530.667381][ T8570] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 530.678266][ T8570] VFS: Can't find a romfs filesystem on dev nullb0. [ 530.678266][ T8570] [ 530.894345][ T8573] attempt to access beyond end of device [ 530.894345][ T8573] loop3: rw=34817, want=77856, limit=40427 [ 531.655471][ T8581] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 532.889797][ T8591] loop2: detected capacity change from 0 to 256 [ 533.720970][ T8597] netlink: 'syz.0.995': attribute type 24 has an invalid length. [ 533.974412][ T8601] loop2: detected capacity change from 0 to 1024 [ 534.332676][ T8601] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 535.173867][ T8607] netlink: 'syz.2.996': attribute type 49 has an invalid length. [ 535.989470][ T8611] loop4: detected capacity change from 0 to 40427 [ 536.045078][ T8611] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 536.051527][ T8611] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 536.062908][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 536.071879][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 536.084451][ T8611] F2FS-fs (loop4): invalid crc value [ 536.155651][ T8611] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 536.270959][ T8611] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 536.278044][ T8611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 537.480373][ T4193] attempt to access beyond end of device [ 537.480373][ T4193] loop4: rw=2049, want=45104, limit=40427 [ 537.601565][ T8629] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 537.612400][ T8629] VFS: Can't find a romfs filesystem on dev nullb0. [ 537.612400][ T8629] [ 539.008253][ T8633] loop0: detected capacity change from 0 to 40427 [ 539.057005][ T8633] F2FS-fs (loop0): invalid crc value [ 539.083782][ T8639] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 539.093543][ T8639] VFS: Can't find a romfs filesystem on dev nullb0. [ 539.093543][ T8639] [ 539.121178][ T8633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 539.386552][ T8633] F2FS-fs (loop0): Start checkpoint disabled! [ 539.573681][ T8638] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 539.808989][ T8633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 540.133949][ T8650] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 541.022327][ T8653] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 541.032741][ T8653] VFS: Can't find a romfs filesystem on dev nullb0. [ 541.032741][ T8653] [ 541.466648][ T8657] loop4: detected capacity change from 0 to 16 [ 541.496826][ T5869] attempt to access beyond end of device [ 541.496826][ T5869] loop0: rw=2049, want=40976, limit=40427 [ 541.541163][ T8657] erofs: (device loop4): mounted with root inode @ nid 36. [ 541.581820][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 541.591140][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 542.433627][ T8664] attempt to access beyond end of device [ 542.433627][ T8664] loop4: rw=0, want=304, limit=16 [ 542.444310][ T8664] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 543.212817][ T8660] loop2: detected capacity change from 0 to 4096 [ 543.311771][ T8669] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 543.322581][ T8669] VFS: Can't find a romfs filesystem on dev nullb0. [ 543.322581][ T8669] [ 544.174971][ T8660] ntfs3: loop2: Failed to load $Extend. [ 544.186536][ T8673] loop4: detected capacity change from 0 to 4096 [ 544.188414][ T8672] loop1: detected capacity change from 0 to 4096 [ 544.299977][ T8675] device syzkaller0 entered promiscuous mode [ 544.387114][ T8673] ntfs3: loop4: Failed to load $Extend. [ 544.627729][ T8679] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 545.584465][ T8682] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 545.641215][ T8679] ntfs3: loop2: ino=5, "/" directory corrupted [ 545.654284][ T8676] ntfs3: loop2: ino=5, "/" directory corrupted [ 545.883515][ T8672] ntfs3: loop1: Failed to load $Extend. [ 545.927969][ T8687] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 545.943559][ T8687] VFS: Can't find a romfs filesystem on dev nullb0. [ 545.943559][ T8687] [ 546.605946][ T8689] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 550.656628][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 551.013566][ T8722] loop0: detected capacity change from 0 to 40427 [ 551.061957][ T8722] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 551.069799][ T8722] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 551.082844][ T8722] F2FS-fs (loop0): invalid crc value [ 551.127825][ T8722] F2FS-fs (loop0): Found nat_bits in checkpoint [ 551.173710][ T8730] device syzkaller0 entered promiscuous mode [ 551.183251][ T8722] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 551.190386][ T8722] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 551.249700][ T8736] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 551.363399][ T8727] loop3: detected capacity change from 0 to 4096 [ 551.457721][ T8741] attempt to access beyond end of device [ 551.457721][ T8741] loop0: rw=34817, want=77856, limit=40427 [ 551.878155][ T8740] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 551.893426][ T8740] VFS: Can't find a romfs filesystem on dev nullb0. [ 551.893426][ T8740] [ 552.146857][ T8727] ntfs3: loop3: Failed to load $Extend. [ 552.401192][ T8750] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 553.050627][ T8750] ntfs3: loop3: ino=5, "/" directory corrupted [ 553.228810][ T8758] input: syz1 as /devices/virtual/input/input9 [ 554.574063][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 555.161569][ T8766] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 555.171779][ T8766] VFS: Can't find a romfs filesystem on dev nullb0. [ 555.171779][ T8766] [ 556.284727][ T8769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1046'. [ 556.458451][ T8777] loop2: detected capacity change from 0 to 40427 [ 556.564324][ T8777] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 556.572179][ T8777] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 556.582731][ T8777] F2FS-fs (loop2): invalid crc value [ 557.962023][ T8777] F2FS-fs (loop2): Found nat_bits in checkpoint [ 558.048361][ T8777] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 558.055519][ T8777] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 558.350683][ T8806] attempt to access beyond end of device [ 558.350683][ T8806] loop2: rw=34817, want=77856, limit=40427 [ 558.940037][ T8807] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 559.833370][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 561.248328][ T8827] loop4: detected capacity change from 0 to 256 [ 561.385597][ T8827] FAT-fs (loop4): Directory bread(block 64) failed [ 561.419821][ T4189] [ 561.422179][ T4189] ====================================================== [ 561.429189][ T4189] WARNING: possible circular locking dependency detected [ 561.436908][ T4189] syzkaller #0 Not tainted [ 561.441311][ T4189] ------------------------------------------------------ [ 561.448314][ T4189] syz-executor/4189 is trying to acquire lock: [ 561.454453][ T4189] ffff8880209a9938 ((wq_completion)loop2){+.+.}-{0:0}, at: flush_workqueue+0x14e/0x1390 [ 561.464196][ T4189] [ 561.464196][ T4189] but task is already holding lock: [ 561.471553][ T4189] ffff88802074f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 561.479093][ T8827] FAT-fs (loop4): Directory bread(block 65) failed [ 561.480392][ T4189] [ 561.480392][ T4189] which lock already depends on the new lock. [ 561.480392][ T4189] [ 561.480399][ T4189] [ 561.480399][ T4189] the existing dependency chain (in reverse order) is: [ 561.506259][ T4189] [ 561.506259][ T4189] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 561.507224][ T8827] FAT-fs (loop4): Directory bread(block 66) failed [ 561.513822][ T4189] __mutex_lock_common+0x1e5/0x2400 [ 561.513849][ T4189] mutex_lock_killable_nested+0x17/0x20 [ 561.513865][ T4189] lo_open+0x6a/0x100 [ 561.529197][ T8827] FAT-fs (loop4): Directory bread(block 67) failed [ 561.532080][ T4189] blkdev_get_whole+0x90/0x390 [ 561.532100][ T4189] blkdev_get_by_dev+0x2da/0xa50 [ 561.532114][ T4189] blkdev_open+0x128/0x2c0 [ 561.536749][ T8827] FAT-fs (loop4): Directory bread(block 68) failed [ 561.543073][ T4189] do_dentry_open+0x7f7/0xf90 [ 561.543093][ T4189] path_openat+0x2718/0x2fb0 [ 561.543106][ T4189] do_filp_open+0x1df/0x400 [ 561.543118][ T4189] do_sys_openat2+0x14b/0x500 [ 561.543129][ T4189] __x64_sys_openat+0x135/0x160 [ 561.543140][ T4189] do_syscall_64+0x4c/0xa0 [ 561.543154][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.543171][ T4189] [ 561.543171][ T4189] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 561.543195][ T4189] __mutex_lock_common+0x1e5/0x2400 [ 561.543212][ T4189] mutex_lock_nested+0x17/0x20 [ 561.543227][ T4189] blkdev_get_by_dev+0x162/0xa50 [ 561.543240][ T4189] swsusp_check+0xa1/0x2b0 [ 561.560702][ T8827] FAT-fs (loop4): Directory bread(block 69) failed [ 561.565320][ T4189] software_resume+0xc6/0x3b0 [ 561.581454][ T8827] FAT-fs (loop4): Directory bread(block 70) failed [ 561.585786][ T4189] resume_store+0xe4/0x130 [ 561.603000][ T8827] FAT-fs (loop4): Directory bread(block 71) failed [ 561.610249][ T4189] kernfs_fop_write_iter+0x3a8/0x500 [ 561.610273][ T4189] vfs_write+0x748/0xd70 [ 561.610285][ T4189] ksys_write+0x153/0x260 [ 561.610298][ T4189] do_syscall_64+0x4c/0xa0 [ 561.616506][ T8827] FAT-fs (loop4): Directory bread(block 72) failed [ 561.621253][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.621275][ T4189] [ 561.621275][ T4189] -> #5 (system_transition_mutex/1){+.+.}-{3:3} [ 561.626991][ T8827] FAT-fs (loop4): Directory bread(block 73) failed [ 561.631683][ T4189] : [ 561.631688][ T4189] __mutex_lock_common+0x1e5/0x2400 [ 561.631708][ T4189] mutex_lock_nested+0x17/0x20 [ 561.631723][ T4189] software_resume+0x7c/0x3b0 [ 561.631738][ T4189] resume_store+0xe4/0x130 [ 561.631750][ T4189] kernfs_fop_write_iter+0x3a8/0x500 [ 561.631767][ T4189] vfs_write+0x748/0xd70 [ 561.631780][ T4189] ksys_write+0x153/0x260 [ 561.631793][ T4189] do_syscall_64+0x4c/0xa0 [ 561.631807][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.631821][ T4189] [ 561.631821][ T4189] -> #4 (&of->mutex){+.+.}-{3:3}: [ 561.631843][ T4189] __mutex_lock_common+0x1e5/0x2400 [ 561.631858][ T4189] mutex_lock_nested+0x17/0x20 [ 561.631870][ T4189] kernfs_seq_start+0x55/0x3c0 [ 561.631884][ T4189] seq_read_iter+0x387/0xc50 [ 561.647164][ T8834] loop3: detected capacity change from 0 to 512 [ 561.650014][ T4189] vfs_read+0x75e/0xd50 [ 561.650035][ T4189] ksys_read+0x153/0x260 [ 561.650047][ T4189] do_syscall_64+0x4c/0xa0 [ 561.650062][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.814823][ T4189] [ 561.814823][ T4189] -> #3 (&p->lock){+.+.}-{3:3}: [ 561.821832][ T4189] __mutex_lock_common+0x1e5/0x2400 [ 561.827535][ T4189] mutex_lock_nested+0x17/0x20 [ 561.832817][ T4189] seq_read_iter+0x9d/0xc50 [ 561.837823][ T4189] generic_file_splice_read+0x3ed/0x5f0 [ 561.843869][ T4189] splice_direct_to_actor+0x41f/0xc00 [ 561.849742][ T4189] do_splice_direct+0x1d4/0x2f0 [ 561.855091][ T4189] do_sendfile+0x524/0xe30 [ 561.860005][ T4189] __se_sys_sendfile64+0x141/0x1a0 [ 561.865616][ T4189] do_syscall_64+0x4c/0xa0 [ 561.870533][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.876930][ T4189] [ 561.876930][ T4189] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 561.884290][ T4189] lo_write_bvec+0x194/0x780 [ 561.889385][ T4189] loop_process_work+0x1b66/0x24c0 [ 561.894997][ T4189] process_one_work+0x867/0xff0 [ 561.900351][ T4189] worker_thread+0xad7/0x12a0 [ 561.905532][ T4189] kthread+0x42e/0x520 [ 561.910098][ T4189] ret_from_fork+0x1f/0x30 [ 561.915015][ T4189] [ 561.915015][ T4189] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 561.924106][ T4189] process_one_work+0x7ba/0xff0 [ 561.929469][ T4189] worker_thread+0xad7/0x12a0 [ 561.934665][ T4189] kthread+0x42e/0x520 [ 561.939230][ T4189] ret_from_fork+0x1f/0x30 [ 561.944157][ T4189] [ 561.944157][ T4189] -> #0 ((wq_completion)loop2){+.+.}-{0:0}: [ 561.952308][ T4189] __lock_acquire+0x2c66/0x7b50 [ 561.957684][ T4189] lock_acquire+0x19e/0x400 [ 561.962734][ T4189] flush_workqueue+0x16a/0x1390 [ 561.968112][ T4189] drain_workqueue+0xca/0x370 [ 561.973324][ T4189] destroy_workqueue+0x7b/0xb20 [ 561.978682][ T4189] __loop_clr_fd+0x22f/0xb50 [ 561.983821][ T4189] blkdev_put+0x52b/0x780 [ 561.988655][ T4189] kill_f2fs_super+0x310/0x3d0 [ 561.993933][ T4189] deactivate_locked_super+0x93/0xf0 [ 561.999725][ T4189] cleanup_mnt+0x426/0x4d0 [ 562.004659][ T4189] task_work_run+0x125/0x1a0 [ 562.009758][ T4189] exit_to_user_mode_loop+0x10f/0x130 [ 562.015633][ T4189] exit_to_user_mode_prepare+0xee/0x180 [ 562.021678][ T4189] syscall_exit_to_user_mode+0x16/0x40 [ 562.027642][ T4189] do_syscall_64+0x58/0xa0 [ 562.032688][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 562.039091][ T4189] [ 562.039091][ T4189] other info that might help us debug this: [ 562.039091][ T4189] [ 562.049294][ T4189] Chain exists of: [ 562.049294][ T4189] (wq_completion)loop2 --> &disk->open_mutex --> &lo->lo_mutex [ 562.049294][ T4189] [ 562.062730][ T4189] Possible unsafe locking scenario: [ 562.062730][ T4189] [ 562.070167][ T4189] CPU0 CPU1 [ 562.075510][ T4189] ---- ---- [ 562.080853][ T4189] lock(&lo->lo_mutex); [ 562.085095][ T4189] lock(&disk->open_mutex); [ 562.092179][ T4189] lock(&lo->lo_mutex); [ 562.098933][ T4189] lock((wq_completion)loop2); [ 562.103762][ T4189] [ 562.103762][ T4189] *** DEADLOCK *** [ 562.103762][ T4189] [ 562.111878][ T4189] 2 locks held by syz-executor/4189: [ 562.117134][ T4189] #0: ffff888020619118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf1/0x780 [ 562.126416][ T4189] #1: ffff88802074f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 562.135626][ T4189] [ 562.135626][ T4189] stack backtrace: [ 562.141511][ T4189] CPU: 1 PID: 4189 Comm: syz-executor Not tainted syzkaller #0 [ 562.149030][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.159062][ T4189] Call Trace: [ 562.162321][ T4189] [ 562.165233][ T4189] dump_stack_lvl+0x188/0x250 [ 562.169891][ T4189] ? load_image+0x410/0x410 [ 562.174397][ T4189] ? show_regs_print_info+0x20/0x20 [ 562.179579][ T4189] ? print_circular_bug+0x12b/0x1a0 [ 562.184867][ T4189] check_noncircular+0x296/0x330 [ 562.189789][ T4189] ? add_chain_block+0x9b0/0x9b0 [ 562.194789][ T4189] ? lockdep_lock+0xf1/0x1f0 [ 562.199388][ T4189] ? mark_lock+0x94/0x320 [ 562.203694][ T4189] ? _find_first_zero_bit+0xd1/0xf0 [ 562.208960][ T4189] __lock_acquire+0x2c66/0x7b50 [ 562.213799][ T4189] ? verify_lock_unused+0x140/0x140 [ 562.218979][ T4189] ? verify_lock_unused+0x140/0x140 [ 562.224157][ T4189] ? verify_lock_unused+0x140/0x140 [ 562.229337][ T4189] ? memset+0x1e/0x40 [ 562.233314][ T4189] lock_acquire+0x19e/0x400 [ 562.237815][ T4189] ? flush_workqueue+0x14e/0x1390 [ 562.242825][ T4189] ? read_lock_is_recursive+0x10/0x10 [ 562.248179][ T4189] ? __init_swait_queue_head+0xa4/0x140 [ 562.253706][ T4189] flush_workqueue+0x16a/0x1390 [ 562.258545][ T4189] ? flush_workqueue+0x14e/0x1390 [ 562.263578][ T4189] ? lock_chain_count+0x20/0x20 [ 562.268448][ T4189] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 562.273937][ T4189] ? lockdep_hardirqs_off+0x70/0x100 [ 562.279206][ T4189] ? rcu_work_rcufn+0x120/0x120 [ 562.284040][ T4189] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 562.289660][ T4189] ? finish_wait+0xc3/0x1c0 [ 562.294144][ T4189] drain_workqueue+0xca/0x370 [ 562.298801][ T4189] destroy_workqueue+0x7b/0xb20 [ 562.303652][ T4189] __loop_clr_fd+0x22f/0xb50 [ 562.308223][ T4189] ? lo_release+0x15e/0x1f0 [ 562.312707][ T4189] ? lo_open+0x100/0x100 [ 562.316936][ T4189] blkdev_put+0x52b/0x780 [ 562.321265][ T4189] kill_f2fs_super+0x310/0x3d0 [ 562.326008][ T4189] ? unregister_shrinker+0x245/0x300 [ 562.331284][ T4189] ? f2fs_mount+0x40/0x40 [ 562.335605][ T4189] ? kfree+0x4a/0x2a0 [ 562.339570][ T4189] ? unregister_shrinker+0x245/0x300 [ 562.344832][ T4189] deactivate_locked_super+0x93/0xf0 [ 562.350095][ T4189] cleanup_mnt+0x426/0x4d0 [ 562.354501][ T4189] task_work_run+0x125/0x1a0 [ 562.359083][ T4189] exit_to_user_mode_loop+0x10f/0x130 [ 562.364449][ T4189] exit_to_user_mode_prepare+0xee/0x180 [ 562.370001][ T4189] syscall_exit_to_user_mode+0x16/0x40 [ 562.375457][ T4189] do_syscall_64+0x58/0xa0 [ 562.379859][ T4189] ? clear_bhb_loop+0x30/0x80 [ 562.384519][ T4189] ? clear_bhb_loop+0x30/0x80 [ 562.389200][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 562.395087][ T4189] RIP: 0033:0x7f6248c30097 [ 562.399484][ T4189] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 562.419075][ T4189] RSP: 002b:00007ffd90a1f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 562.427478][ T4189] RAX: 0000000000000000 RBX: 00007f6248cc42ca RCX: 00007f6248c30097 [ 562.435434][ T4189] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd90a1f2d0 [ 562.443388][ T4189] RBP: 00007ffd90a1f2d0 R08: 00007ffd90a202d0 R09: 00000000ffffffff [ 562.451340][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd90a20360 [ 562.459290][ T4189] R13: 00007f6248cc42ca R14: 00000000000885e5 R15: 00007ffd90a203a0 [ 562.467247][ T4189] [ 562.842988][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.937042][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.960210][ T8834] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 562.973069][ T8834] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff)