last executing test programs: 3m46.696545778s ago: executing program 3 (id=86): unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 3m44.743650123s ago: executing program 3 (id=96): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 3m44.358156542s ago: executing program 3 (id=100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 3m43.937997231s ago: executing program 3 (id=104): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000009c0)='./bus\x00', 0x1081e, &(0x7f0000000140), 0xff, 0x44f, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 3m43.202972059s ago: executing program 3 (id=110): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 3m40.579358119s ago: executing program 3 (id=125): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 3m39.928111754s ago: executing program 32 (id=125): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m56.10114664s ago: executing program 4 (id=797): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) 1m55.834246626s ago: executing program 4 (id=799): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") chown(&(0x7f0000000000)='./file0\x00', r1, 0xee00) 1m55.307110318s ago: executing program 4 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 1m54.888918627s ago: executing program 4 (id=809): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 1m53.795028203s ago: executing program 4 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x3) 1m52.383471566s ago: executing program 4 (id=825): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0x564) 1m51.612982444s ago: executing program 33 (id=825): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0x564) 1m18.486931941s ago: executing program 1 (id=976): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 1m18.202610968s ago: executing program 1 (id=979): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070003004001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1m17.847339756s ago: executing program 1 (id=982): unshare(0x22020600) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x1000800, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f00000108c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8a343, 0x12b) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) 1m13.639617813s ago: executing program 1 (id=1005): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) 1m13.37081864s ago: executing program 1 (id=1007): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) acct(&(0x7f0000000180)='./file1\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) 1m12.867232561s ago: executing program 1 (id=1010): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000001000a18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000080007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000001400000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="f8e10d00000000000000a56a88ca", 0x0, 0x9943, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m11.983642282s ago: executing program 34 (id=1010): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000001000a18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000080007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000001400000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="f8e10d00000000000000a56a88ca", 0x0, 0x9943, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.276481484s ago: executing program 2 (id=1364): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x6b41}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "f7035d375d8fc60442c0f971735dfdf80b56268d3c091f94623e295da05f905b", "9c6678f73c345eefb7f931b599c1e29f", {"3d8e2f225f0cea1826cad2f9859481bd", "b1d153babbaea523879df90e149d604a"}}}}}}}}, 0x0) 3.244079374s ago: executing program 6 (id=1365): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1) clock_adjtime(0x200000000000000, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x9, 0x2, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0xe3, 0x18, 0x41000, 0x8, 0x2, 0x0, 0x0, 0x3}) 2.923624092s ago: executing program 2 (id=1367): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x32ac, &(0x7f00000003c0)={0x0, 0xc45a, 0x800, 0x1000000, 0x1bb}) close(r0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 2.864184753s ago: executing program 5 (id=1368): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) read(r0, &(0x7f0000000080)=""/221, 0xdd) 2.772534725s ago: executing program 0 (id=1369): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x1}) ppoll(&(0x7f0000000040)=[{r1, 0x10f1}], 0x1, 0x0, 0x0, 0x0) 2.745127806s ago: executing program 6 (id=1370): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e"], 0x28}, 0x0) 2.459651712s ago: executing program 5 (id=1371): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021000cb", @ANYRES32=r1, @ANYBLOB="080004000a010102080001006401010108000200ac14143a08000300e00000010800080020000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x24040840) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.413701023s ago: executing program 6 (id=1372): r0 = socket$inet6(0xa, 0x3, 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 2.355361765s ago: executing program 2 (id=1373): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x42000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 2.333868755s ago: executing program 0 (id=1374): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=+x2222222222222222', 0x2f) 2.086006761s ago: executing program 2 (id=1375): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 2.028697662s ago: executing program 5 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/re', 0x15) 1.903388125s ago: executing program 0 (id=1377): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 1.821087257s ago: executing program 2 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfffffffffffffca2, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x100000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x4, 0xfff, 0x9, 0x1, 0x2, 0xe47}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xfa9, 0xd0, 0x5, 0x4, 0x6}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x100, 0x487, 0x10001, 0x0, 0x7}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) 1.759712299s ago: executing program 5 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x40, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "67322bae67c209749a9a1039414a07298b628220fb267be1"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x40}}, 0x4000) 1.596241602s ago: executing program 0 (id=1380): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x493, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffc01, 0x7ff}}, 0x28) 1.471976985s ago: executing program 6 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.468916955s ago: executing program 5 (id=1382): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000200)='dir .', 0x5) write(r0, &(0x7f0000000300)='bind', 0x4) 1.446901246s ago: executing program 2 (id=1383): unshare(0x22020600) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200012, &(0x7f0000000000)=ANY=[], 0x1, 0x61cd, &(0x7f000000c780)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fdatasync(r0) 1.198017002s ago: executing program 0 (id=1384): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0xd02) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file1\x00') 1.147847322s ago: executing program 6 (id=1385): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) 458.543209ms ago: executing program 6 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x19}, 0x94) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)={[{}, {}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@namecase}, {@gid}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0xfd, 0x154a, &(0x7f0000000400)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) 210.149µs ago: executing program 5 (id=1387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 0s ago: executing program 0 (id=1388): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "3d30dc60f0c772e43969dacc039b6a39bb853c7e0ab36810145039d459146a84", "c0b606184f242d0fcb3b515c79f361f6afdebfabced7a733c035850e12aec4b6aae9f30c02fbbb17e017a8277f6cdee0", "d6dc0f01692c93ec05625d451f5c1172167ba0b2087715a3d17664af", {"31d59cf70a88a35960c34f50263bfe89", "fbadec2e7a619a6f36cfcf7e23d8abd9"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): c45, idProduct=1010, bcdDevice=e6.fc [ 130.848936][ T6439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.861129][ T6439] usb 3-1: Product: syz [ 130.870284][ T6439] usb 3-1: Manufacturer: syz [ 130.881053][ T6439] usb 3-1: SerialNumber: syz [ 130.892374][ T6439] usb 3-1: config 0 descriptor?? [ 130.926247][ T6439] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 131.135647][ T6439] usb 3-1: USB disconnect, device number 5 [ 131.163832][ T6439] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 131.216989][ T968] gspca_cpia1: usb_control_msg 02, error -71 [ 131.227011][ T968] gspca_cpia1: usb_control_msg 05, error -71 [ 131.243364][ T968] cpia1 2-1:0.0: unexpected systemstate: 00 [ 131.262073][ T968] usb 2-1: USB disconnect, device number 5 [ 131.465688][ T6547] loop4: detected capacity change from 0 to 32768 [ 131.500394][ T6547] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.704409][ T6547] XFS (loop4): Ending clean mount [ 131.744301][ T6547] XFS (loop4): Quotacheck needed: Please wait. [ 131.839514][ T6547] XFS (loop4): Quotacheck: Done. [ 132.262614][ T6199] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.685898][ T6588] input: syz1 as /devices/virtual/input/input12 [ 133.198237][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207861][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.251194][ T6578] loop2: detected capacity change from 0 to 40427 [ 133.323618][ T6578] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 133.330669][ T6578] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 133.395805][ T6578] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 133.433273][ T6578] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 133.484345][ T6578] F2FS-fs (loop2): invalid crc value [ 133.573700][ T6578] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.890614][ T6578] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 133.897996][ T6578] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.969366][ T6578] syz.2.223: attempt to access beyond end of device [ 133.969366][ T6578] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.007524][ T6578] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 134.147200][ T6603] loop0: detected capacity change from 0 to 32768 [ 134.177698][ T6603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.230 (6603) [ 134.258764][ T6603] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.303790][ T6603] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 134.329708][ T6603] BTRFS info (device loop0): using free space tree [ 134.483616][ T6603] BTRFS info (device loop0): enabling ssd optimizations [ 134.538136][ T6603] BTRFS info (device loop0): auto enabling async discard [ 134.720413][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.440710][ T6624] loop1: detected capacity change from 0 to 32768 [ 135.702354][ T6624] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 135.812776][ T6624] XFS (loop1): Ending clean mount [ 136.107705][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.844249][ T6690] loop1: detected capacity change from 0 to 1024 [ 137.113285][ T6439] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.337760][ T6439] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 137.383393][ T6439] usb 5-1: config 0 has no interface number 0 [ 137.390053][ T6439] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 137.428635][ T6439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.468756][ T6439] usb 5-1: config 0 descriptor?? [ 137.491809][ T6439] ums-realtek 5-1:0.5: USB Mass Storage device detected [ 137.709583][ T6439] usb 5-1: USB disconnect, device number 2 [ 138.274961][ T6706] loop1: detected capacity change from 0 to 32768 [ 138.339091][ T6706] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.414445][ T6706] XFS (loop1): Ending clean mount [ 138.596370][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.398374][ T6764] loop4: detected capacity change from 0 to 4096 [ 139.478583][ T6764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.521866][ T6769] loop2: detected capacity change from 0 to 512 [ 139.626553][ T6769] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.274: iget: bad extended attribute block 134217728 [ 139.653655][ T6769] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.274: couldn't read orphan inode 15 (err -117) [ 139.728467][ T6769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.775913][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.949975][ T6777] loop4: detected capacity change from 0 to 512 [ 139.996888][ T6777] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.020270][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.025964][ T6777] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 140.101811][ T6777] EXT4-fs (loop4): orphan cleanup on readonly fs [ 140.160585][ T6777] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.276: bad orphan inode 15 [ 140.244336][ T6777] ext4_test_bit(bit=14, block=18) = 1 [ 140.249807][ T6777] is_bad_inode(inode)=0 [ 140.254183][ T6777] NEXT_ORPHAN(inode)=1023 [ 140.258556][ T6777] max_ino=32 [ 140.261784][ T6777] i_nlink=0 [ 140.269561][ T6777] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2974: inode #15: comm syz.4.276: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 140.289906][ T6777] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 140.303315][ T6777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.375046][ T6777] EXT4-fs (loop4): shut down requested (0) [ 140.483274][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.079256][ T6795] loop4: detected capacity change from 0 to 16 [ 141.122433][ T6795] erofs: (device loop4): mounted with root inode @ nid 36. [ 141.176535][ T6795] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 141.199352][ T6795] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 141.210090][ T6795] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 141.221522][ T6795] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 141.232747][ T6795] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 141.471086][ T6802] binder: 6801:6802 ioctl 4018620d 0 returned -22 [ 141.627058][ T6808] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.653270][ T6439] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.853089][ T6439] usb 2-1: Using ep0 maxpacket: 32 [ 141.881185][ T6439] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 141.897000][ T6439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.920156][ T6439] usb 2-1: config 0 descriptor?? [ 142.180304][ T6439] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 142.212818][ T6439] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.240445][ T6439] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 142.260964][ T6439] usb 2-1: media controller created [ 142.266983][ T6820] syz.0.295 (6820) used greatest stack depth: 20112 bytes left [ 142.338237][ T6439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.424725][ T6825] overlayfs: upper fs does not support file handles, falling back to index=off. [ 142.439730][ T6439] az6027: usb out operation failed. (-71) [ 142.453597][ T6825] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 142.489044][ T6439] az6027: usb out operation failed. (-71) [ 142.509227][ T6439] stb0899_attach: Driver disabled by Kconfig [ 142.523505][ T6439] az6027: no front-end attached [ 142.523505][ T6439] [ 142.540004][ T6439] az6027: usb out operation failed. (-71) [ 142.551306][ T6439] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 142.571536][ T6439] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 142.618869][ T6439] dvb-usb: schedule remote query interval to 400 msecs. [ 142.627712][ T6439] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 142.643868][ T6439] usb 2-1: USB disconnect, device number 6 [ 142.832966][ T6835] loop0: detected capacity change from 0 to 256 [ 142.890632][ T6833] loop4: detected capacity change from 0 to 1024 [ 142.900586][ T6439] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 142.917578][ T6833] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.927642][ T6835] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 142.958524][ T6833] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 143.037350][ T6833] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.302: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.193758][ T6833] EXT4-fs (loop4): Remounting filesystem read-only [ 143.201104][ T6833] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 143.300527][ T6833] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 143.332857][ T6833] EXT4-fs (loop4): 1 orphan inode deleted [ 143.356535][ T6833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.405140][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 143.443790][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 143.471740][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 143.497460][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 143.543192][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 143.580506][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 143.597268][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.618429][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 143.651052][ T6846] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 144.729043][ T6851] loop1: detected capacity change from 0 to 32768 [ 144.758197][ T6881] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 144.807758][ T6881] CPU: 0 PID: 6881 Comm: syz.2.318 Not tainted syzkaller #0 [ 144.815142][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.825265][ T6881] Call Trace: [ 144.828596][ T6881] [ 144.831597][ T6881] dump_stack_lvl+0x18c/0x250 [ 144.836334][ T6881] ? show_regs_print_info+0x20/0x20 [ 144.841596][ T6881] ? load_image+0x420/0x420 [ 144.846169][ T6881] sysfs_create_dir_ns+0x26e/0x2a0 [ 144.851338][ T6881] ? __lock_acquire+0x7d80/0x7d80 [ 144.856424][ T6881] ? sysfs_warn_dup+0xa0/0xa0 [ 144.861149][ T6881] ? rcu_is_watching+0x15/0xb0 [ 144.866066][ T6881] ? do_raw_spin_unlock+0x121/0x230 [ 144.871306][ T6881] kobject_add_internal+0x617/0xc90 [ 144.876563][ T6881] kobject_add+0x164/0x240 [ 144.881111][ T6881] ? kobject_init+0x1d0/0x1d0 [ 144.885914][ T6881] ? get_device_parent+0x366/0x390 [ 144.891080][ T6881] device_add+0x3fa/0xc40 [ 144.895447][ T6881] tty_register_device_attr+0x425/0x950 [ 144.901051][ T6881] ? tty_register_device+0x30/0x30 [ 144.906292][ T6881] ? tty_port_init+0x132/0x1a0 [ 144.911081][ T6881] ? gsm_dlci_alloc+0x32a/0x630 [ 144.915966][ T6881] ? __might_fault+0xaa/0x120 [ 144.920764][ T6881] gsm_activate_mux+0x110/0x2a0 [ 144.925663][ T6881] gsmld_ioctl+0x12ca/0x1900 [ 144.930295][ T6881] ? gsmld_write+0x120/0x120 [ 144.934929][ T6881] ? __init_ldsem+0x150/0x150 [ 144.939640][ T6881] ? __fget_files+0x28/0x460 [ 144.944314][ T6881] ? gsmld_write+0x120/0x120 [ 144.948942][ T6881] tty_ioctl+0x9b5/0xdc0 [ 144.953245][ T6881] ? tty_get_icount+0xb0/0xb0 [ 144.959015][ T6881] __se_sys_ioctl+0xfd/0x170 [ 144.963644][ T6881] do_syscall_64+0x55/0xb0 [ 144.968092][ T6881] ? clear_bhb_loop+0x40/0x90 [ 144.972911][ T6881] ? clear_bhb_loop+0x40/0x90 [ 144.977636][ T6881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.983678][ T6881] RIP: 0033:0x7f662e99e159 [ 144.988135][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.007790][ T6881] RSP: 002b:00007f662f8b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.016258][ T6881] RAX: ffffffffffffffda RBX: 00007f662ec26090 RCX: 00007f662e99e159 [ 145.024263][ T6881] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 145.032289][ T6881] RBP: 00007f662ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 145.040313][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.048328][ T6881] R13: 00007f662ec26128 R14: 00007f662ec26090 R15: 00007ffefb557858 [ 145.056363][ T6881] [ 145.084409][ T6881] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.126278][ T6851] JBD2: Ignoring recovery information on journal [ 145.256216][ T6892] loop4: detected capacity change from 0 to 512 [ 145.285886][ T6892] EXT4-fs: Ignoring removed nobh option [ 145.313451][ T6892] EXT4-fs (loop4): Test dummy encryption mode enabled [ 145.329723][ T6892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.413228][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.422585][ T6892] EXT4-fs (loop4): 1 truncate cleaned up [ 145.461868][ T6892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.475988][ T6851] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 145.626475][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 145.663542][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 145.692450][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.736969][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.781850][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.798872][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.816786][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.872128][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.917165][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.136925][ T6851] syz.1.309 (6851) used greatest stack depth: 18840 bytes left [ 146.205019][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 146.219461][ T6902] zero sized request [ 146.229026][ T9] usbtmc 1-1:16.0: can't read capabilities [ 146.377424][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 146.520840][ T968] usb 1-1: USB disconnect, device number 3 [ 146.697451][ T6910] C: renamed from team_slave_0 (while UP) [ 146.725413][ T6910] netlink: 'syz.4.325': attribute type 2 has an invalid length. [ 146.745318][ T6910] netlink: 116 bytes leftover after parsing attributes in process `syz.4.325'. [ 146.782733][ T6910] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 147.036977][ T6920] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 147.138545][ T6924] Attempt to restore checkpoint with obsolete wellknown handles [ 147.470147][ T6931] loop2: detected capacity change from 0 to 4096 [ 147.555437][ T6931] EXT4-fs (loop2): Test dummy encryption mode enabled [ 147.661490][ T6940] loop4: detected capacity change from 0 to 128 [ 147.674584][ T6931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.780102][ T6940] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 147.839529][ T6940] hpfs: filesystem error: improperly stopped [ 147.877623][ T6940] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 147.919969][ T6940] hpfs: You really don't want any checks? You are crazy... [ 147.952480][ T6931] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 147.963098][ T6940] hpfs: Code page index out of array [ 147.968457][ T6940] hpfs: code page support is disabled [ 147.983958][ T6931] EXT4-fs: Cannot change quota options when quota turned on [ 148.015804][ T6940] hpfs: hpfs_map_4sectors(): unaligned read [ 148.044590][ T6940] hpfs: hpfs_map_4sectors(): unaligned read [ 148.063101][ T6940] hpfs: filesystem error: unable to find root dir [ 148.218050][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.424403][ T6961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 148.587980][ T6961] netlink: 10 bytes leftover after parsing attributes in process `syz.0.342'. [ 148.631840][ T6970] loop1: detected capacity change from 0 to 24 [ 148.673729][ T6970] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 148.691591][ T6893] block nbd64: NBD_DISCONNECT [ 148.730378][ T6970] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 149.176836][ T6893] udevd[6893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 149.402087][ T6989] loop0: detected capacity change from 0 to 16 [ 149.454952][ T6990] loop1: detected capacity change from 0 to 512 [ 149.464842][ T6989] erofs: (device loop0): mounted with root inode @ nid 36. [ 149.513777][ T6990] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 149.533783][ T6989] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 149.578902][ T6990] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.579688][ T6989] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 149.597771][ T6990] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.350: bad orphan inode 15 [ 149.655438][ T6990] ext4_test_bit(bit=14, block=18) = 1 [ 149.660913][ T6990] is_bad_inode(inode)=0 [ 149.696152][ T6989] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 149.707203][ T6990] NEXT_ORPHAN(inode)=1023 [ 149.711600][ T6990] max_ino=32 [ 149.720127][ T6993] loop2: detected capacity change from 0 to 1024 [ 149.743247][ T6989] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 149.771227][ T6990] i_nlink=0 [ 149.783287][ T6989] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 149.838857][ T6990] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2974: inode #15: comm syz.1.350: corrupted xattr block 19: e_value size too large [ 149.878047][ T6993] gfs2: path_lookup on c::: returned error -2 [ 149.940284][ T6990] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 149.978909][ T6990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.153489][ T6990] warning: `syz.1.350' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.370042][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.649021][ T7012] loop0: detected capacity change from 0 to 1024 [ 150.737022][ T6985] loop4: detected capacity change from 0 to 32768 [ 150.793488][ T7012] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 150.843284][ T7012] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 150.854067][ T7012] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.356: Failed to acquire dquot type 0 [ 150.879913][ T7012] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 150.947159][ T7012] EXT4-fs (loop0): 1 truncate cleaned up [ 150.992502][ T7012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.110475][ T7012] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 151.130028][ T7012] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 151.141395][ T7012] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.356: Failed to acquire dquot type 0 [ 151.167840][ T28] IPVS: starting estimator thread 0... [ 151.272474][ T7021] IPVS: using max 19 ests per chain, 45600 per kthread [ 151.357711][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.446937][ T27] audit: type=1400 audit(1789044496.715:9): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7024 comm="syz.1.358" name="p" offset=58 [ 152.279658][ T7056] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.322851][ T7054] tap0: tun_chr_ioctl cmd 2148553947 [ 152.628935][ T7068] loop4: detected capacity change from 0 to 512 [ 152.658836][ T7068] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.372: iget: bad i_size value: 38620345925642 [ 152.677590][ T7068] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.372: couldn't read orphan inode 15 (err -117) [ 152.698191][ T7068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.797702][ T7068] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.372: bg 0: block 5: invalid block bitmap [ 152.872772][ T7068] EXT4-fs error (device loop4) in ext4_setattr:5683: error 28 [ 153.048897][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.109227][ T7080] loop0: detected capacity change from 0 to 256 [ 153.471163][ T7088] loop2: detected capacity change from 0 to 4096 [ 153.618788][ T7096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.627439][ T7095] tap0: tun_chr_ioctl cmd 1074025677 [ 153.668447][ T7095] tap0: linktype set to 780 [ 153.786142][ T7088] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 154.025373][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.383'. [ 154.179995][ T7104] netlink: 10 bytes leftover after parsing attributes in process `syz.1.383'. [ 154.343717][ T7117] netlink: 72 bytes leftover after parsing attributes in process `syz.2.388'. [ 154.756497][ T7128] team_slave_0: entered allmulticast mode [ 154.825367][ T6510] udevd[6510]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 154.878783][ T7129] team_slave_0: entered promiscuous mode [ 154.888584][ T6893] udevd[6893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 155.066306][ T7100] loop0: detected capacity change from 0 to 32768 [ 155.195803][ T7100] jfs_mkdir: dtInsert returned -EIO [ 155.224908][ T7100] ERROR: (device loop0): jfs_mkdir: [ 155.224908][ T7100] [ 155.247941][ T7100] ERROR: (device loop0): remounting filesystem as read-only [ 155.320235][ T7100] ERROR: (device loop0): dbDiscardAG: -EIO [ 155.320235][ T7100] [ 156.386185][ T7171] program syz.0.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.709389][ T7181] capability: warning: `syz.4.407' uses deprecated v2 capabilities in a way that may be insecure [ 156.810102][ T7184] loop0: detected capacity change from 0 to 128 [ 156.847923][ T7184] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 156.906104][ T7184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.046552][ T7184] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 157.092168][ T7184] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 157.738502][ T7214] loop1: detected capacity change from 0 to 64 [ 157.859982][ T968] IPVS: starting estimator thread 0... [ 157.953183][ T7217] IPVS: using max 19 ests per chain, 45600 per kthread [ 158.138947][ T7226] loop1: detected capacity change from 0 to 1024 [ 158.439509][ T9] smpboot: CPU 1 is now offline [ 159.205641][ T7251] loop2: detected capacity change from 0 to 128 [ 160.347626][ T7243] loop4: detected capacity change from 0 to 32768 [ 160.570261][ T7243] jfs_mkdir: dtInsert returned -EIO [ 160.611985][ T7243] ERROR: (device loop4): jfs_mkdir: [ 160.611985][ T7243] [ 160.668773][ T7243] ERROR: (device loop4): remounting filesystem as read-only [ 160.742334][ T7243] ERROR: (device loop4): dbDiscardAG: -EIO [ 160.742334][ T7243] [ 160.823471][ T7272] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.562524][ T7287] 9pnet_fd: Insufficient options for proto=fd [ 162.541429][ T7276] loop0: detected capacity change from 0 to 32768 [ 163.007080][ T7309] tap0: tun_chr_ioctl cmd 1074025677 [ 163.032022][ T7309] tap0: linktype set to 823 [ 163.158972][ T7296] loop4: detected capacity change from 0 to 32768 [ 163.223821][ T7296] JBD2: Ignoring recovery information on journal [ 163.379769][ T7296] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 163.797027][ T7319] loop0: detected capacity change from 0 to 256 [ 163.998882][ T6199] ocfs2: Unmounting device (7,4) on (node local) [ 165.094625][ T7348] loop1: detected capacity change from 0 to 8 [ 165.312402][ T7352] loop0: detected capacity change from 0 to 128 [ 165.431177][ T7352] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.582287][ T7352] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.619154][ T7359] loop1: detected capacity change from 0 to 8 [ 165.772350][ T7352] syz.0.479 (pid 7352) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 166.067486][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.102199][ T7366] loop1: detected capacity change from 0 to 256 [ 167.289643][ T7386] raw_sendmsg: syz.2.494 forgot to set AF_INET. Fix it! [ 167.528677][ T7377] loop1: detected capacity change from 0 to 32768 [ 167.635541][ T7377] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.751281][ T7377] (syz.1.490,7377,0):ocfs2_reflink_ioctl:4427 ERROR: status = -2 [ 168.027878][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 168.628637][ T7408] loop1: detected capacity change from 0 to 512 [ 168.644703][ T7406] loop0: detected capacity change from 0 to 1764 [ 168.707342][ T7408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.783613][ T7408] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 168.917760][ T7408] EXT4-fs (loop1): 1 truncate cleaned up [ 168.964394][ T7408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.040994][ T7414] syz_tun: entered allmulticast mode [ 169.111095][ T7413] syz_tun: left allmulticast mode [ 169.129826][ T27] audit: type=1800 audit(1789044514.395:10): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.504" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 169.338819][ T7419] netlink: 'syz.0.508': attribute type 39 has an invalid length. [ 169.349446][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.641310][ T7445] process 'syz.4.519' launched '/dev/fd/3' with NULL argv: empty string added [ 170.995394][ T7450] loop4: detected capacity change from 0 to 128 [ 171.084937][ T7450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.175362][ T7450] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.505311][ T6199] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.598469][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 172.186047][ T9] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.0005/input/input16 [ 172.321166][ T9] hid-generic 0005:057B:030A.0005: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 172.463794][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.471565][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 172.522383][ T7476] tap0: tun_chr_ioctl cmd 1074025672 [ 172.561804][ T7476] tap0: ignored: set checksum disabled [ 172.693240][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 172.710732][ T787] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 172.751760][ T787] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 172.771717][ T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 172.794600][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.814628][ T787] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 172.846664][ T8] usb 2-1: Product: syz [ 172.865891][ T787] usb 5-1: config 220 has no interface number 2 [ 172.872396][ T8] usb 2-1: Manufacturer: syz [ 172.892035][ T8] usb 2-1: SerialNumber: syz [ 172.898957][ T787] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 172.960922][ T787] usb 5-1: config 220 interface 0 has no altsetting 0 [ 172.992696][ T787] usb 5-1: config 220 interface 76 has no altsetting 0 [ 173.019634][ T787] usb 5-1: config 220 interface 1 has no altsetting 0 [ 173.058777][ T787] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 173.095103][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.118829][ T7464] loop0: detected capacity change from 0 to 32768 [ 173.127653][ T787] usb 5-1: Product: syz [ 173.131995][ T787] usb 5-1: Manufacturer: syz [ 173.182124][ T7471] hid-generic 0005:057B:030A.0005: Event data for report 0 was too short (2 vs 1) [ 173.213275][ T787] usb 5-1: SerialNumber: syz [ 173.259884][ T7464] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 173.324517][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 173.400144][ T8] usb 2-1: MIDIStreaming interface descriptor not found [ 173.484858][ T7464] XFS (loop0): Ending clean mount [ 173.573667][ T787] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 173.640481][ T787] usb 5-1: No valid video chain found. [ 173.651008][ T8] usb 2-1: USB disconnect, device number 7 [ 173.683249][ T787] usb 5-1: selecting invalid altsetting 0 [ 173.815603][ T787] usb 5-1: selecting invalid altsetting 0 [ 173.887476][ T787] usbtest: probe of 5-1:220.1 failed with error -22 [ 174.020543][ T787] usb 5-1: USB disconnect, device number 3 [ 174.061382][ T6887] udevd[6887]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.226065][ T5785] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.096407][ T7506] loop0: detected capacity change from 0 to 4096 [ 175.127340][ T7506] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.206325][ T7506] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.268237][ T7506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.395426][ T7506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.439502][ T7506] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 175.587546][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.597723][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 177.653545][ T7548] netlink: 60 bytes leftover after parsing attributes in process `syz.4.560'. [ 177.723248][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.560'. [ 178.878087][ T7544] loop0: detected capacity change from 0 to 32768 [ 179.013426][ T787] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 179.023318][ T7544] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.160557][ T7544] XFS (loop0): Ending clean mount [ 179.233907][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 179.288104][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 179.364794][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.456675][ T787] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 179.500979][ T5785] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.527283][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.569851][ T787] usb 3-1: config 0 descriptor?? [ 179.813164][ T7587] program syz.4.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.080084][ T7589] loop1: detected capacity change from 0 to 2048 [ 180.179025][ T787] input: HID 28bd:0905 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0905.0006/input/input17 [ 180.245060][ T7589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.373681][ T787] uclogic 0003:28BD:0905.0006: input,hidraw0: USB HID v0.08 Mouse [HID 28bd:0905] on usb-dummy_hcd.2-1/input0 [ 180.552765][ T787] usb 3-1: USB disconnect, device number 6 [ 180.878912][ T7594] fido_id[7594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 182.185291][ T7623] rnbd_client L127: Can't parse path ip: -93 [ 182.414339][ T7625] genirq: Flags mismatch irq 1. 00000000 (pc212e) vs. 00000080 (i8042) [ 182.477149][ T7625] comedi comedi1: warning! irq 1 unavailable! [ 183.151542][ T7621] loop1: detected capacity change from 0 to 32768 [ 183.257858][ T7621] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 183.605608][ T7621] overlayfs: upper fs does not support tmpfile. [ 183.680094][ T7621] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 183.839221][ T7621] overlayfs: upper fs missing required features. [ 184.012065][ T27] audit: type=1400 audit(1789044529.275:11): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7650 comm="syz.4.600" [ 184.199704][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 184.569514][ T7641] loop2: detected capacity change from 0 to 32768 [ 184.725925][ T7641] JBD2: Ignoring recovery information on journal [ 184.931710][ T7641] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 185.000850][ T7666] program syz.1.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.366662][ T7674] loop4: detected capacity change from 0 to 512 [ 185.419549][ T7674] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.552613][ T7674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.630394][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 185.642284][ T7674] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.960164][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.377091][ T7692] loop0: detected capacity change from 0 to 1024 [ 186.478300][ T7692] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.576696][ T7692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.664940][ T7692] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 186.697891][ T7699] loop2: detected capacity change from 0 to 128 [ 186.740207][ T7692] System zones: 0-1, 3-36 [ 186.797999][ T7699] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.845072][ T7692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.895306][ T7699] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.075171][ T7699] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x15) [ 187.225334][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.248304][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.626558][ T7713] loop2: detected capacity change from 0 to 512 [ 187.721502][ T7713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.837684][ T7713] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.044747][ T7721] loop1: detected capacity change from 0 to 4096 [ 188.128930][ T7721] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 188.219017][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.441609][ T7721] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 188.582267][ T7721] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 188.796065][ T7733] loop4: detected capacity change from 0 to 512 [ 188.863182][ T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.105797][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 189.153470][ T787] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.228255][ T787] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.308897][ T787] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.339342][ T787] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 189.387719][ T787] usb 3-1: Product: syz [ 189.407972][ T787] usb 3-1: Manufacturer: syz [ 189.432748][ T787] hub 3-1:4.0: USB hub found [ 189.658745][ T787] hub 3-1:4.0: 5 ports detected [ 189.679313][ T787] hub 3-1:4.0: insufficient power available to use all downstream ports [ 189.867772][ T787] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 189.899126][ T787] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 190.008524][ T787] usb 3-1: USB disconnect, device number 7 [ 191.795186][ T7764] loop0: detected capacity change from 0 to 32768 [ 191.947720][ T27] audit: type=1800 audit(1789044537.215:12): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.641" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 192.764811][ T7778] loop1: detected capacity change from 0 to 32768 [ 194.197245][ T7811] loop4: detected capacity change from 0 to 2048 [ 194.313775][ T7811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.550059][ T7811] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 194.649336][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663109][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.809570][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.528966][ T7808] loop1: detected capacity change from 0 to 32768 [ 195.673831][ T7808] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 195.821717][ T7808] XFS (loop1): Ending clean mount [ 196.115127][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 197.147668][ T7873] program syz.1.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.192777][ T7876] loop2: detected capacity change from 0 to 512 [ 197.212545][ T7828] loop0: detected capacity change from 0 to 40427 [ 197.300607][ T7876] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.674: inode has both inline data and extents flags [ 197.333583][ T7828] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 197.425741][ T7828] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.444402][ T7876] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.674: couldn't read orphan inode 15 (err -117) [ 197.540761][ T7876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.603196][ T7828] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.905539][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.159017][ T7920] loop1: detected capacity change from 0 to 1024 [ 199.206455][ T7920] EXT4-fs: Ignoring removed orlov option [ 199.412167][ T7920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.506657][ T7927] zero sized request [ 199.706512][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.992291][ T7965] netlink: 'syz.0.703': attribute type 4 has an invalid length. [ 201.667423][ T7981] loop2: detected capacity change from 0 to 4096 [ 201.739362][ T7981] EXT4-fs: inline encryption not supported [ 201.783982][ T7981] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.792719][ T7981] EXT4-fs (loop2): Test dummy encryption mode enabled [ 201.930689][ T7981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 202.000624][ T7981] System zones: 0-5 [ 202.046233][ T7981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.503306][ T6439] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.753340][ T6439] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.793941][ T6439] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.847536][ T6439] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.884336][ T6439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.949549][ T6439] usb 3-1: SerialNumber: syz [ 203.230954][ T6439] usb 3-1: 0:2 : does not exist [ 203.334106][ T6439] usb 3-1: USB disconnect, device number 8 [ 204.095664][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.344837][ T8053] veth1_macvtap: left promiscuous mode [ 205.377860][ T8053] macsec0: entered allmulticast mode [ 205.450951][ T8054] veth1_macvtap: entered promiscuous mode [ 205.533587][ T8054] veth1_macvtap: entered allmulticast mode [ 205.562366][ T8054] macsec0: left allmulticast mode [ 205.592490][ T8054] veth1_macvtap: left allmulticast mode [ 206.742653][ T8068] loop4: detected capacity change from 0 to 32768 [ 206.769137][ T8068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.738 (8068) [ 206.846872][ T8068] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.886734][ T8068] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 206.943264][ T8068] BTRFS info (device loop4): setting nodatasum [ 206.965388][ T8068] BTRFS info (device loop4): force zlib compression, level 3 [ 206.972851][ T8068] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 207.022929][ T8068] BTRFS info (device loop4): use lzo compression, level 0 [ 207.051673][ T8068] BTRFS info (device loop4): turning on flush-on-commit [ 207.073111][ T8068] BTRFS info (device loop4): enabling auto defrag [ 207.079631][ T8068] BTRFS info (device loop4): max_inline at 4096 [ 207.121328][ T8068] BTRFS info (device loop4): using free space tree [ 207.244266][ T8068] BTRFS info (device loop4): enabling ssd optimizations [ 207.888247][ T8098] loop0: detected capacity change from 0 to 1024 [ 207.959033][ T8098] EXT4-fs: Ignoring removed bh option [ 208.016318][ T8098] EXT4-fs: Ignoring removed bh option [ 208.082096][ T8098] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 208.282571][ T8098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.336182][ T6199] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.526624][ T8110] EXT4-fs error (device loop0): empty_inline_dir:1875: inode #12: block 7: comm syz.0.744: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 208.779297][ T8110] EXT4-fs (loop0): Remounting filesystem read-only [ 208.846045][ T8110] EXT4-fs warning (device loop0): empty_inline_dir:1882: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 208.923475][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 209.092136][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.159393][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 209.185965][ T787] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.261611][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.319143][ T787] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 209.407846][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.464789][ T787] usb 2-1: config 0 descriptor?? [ 209.853382][ T6439] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 209.889168][ T8137] loop4: detected capacity change from 0 to 16 [ 209.899544][ T8137] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 209.921668][ T787] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 209.949407][ T787] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 209.975015][ T787] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 210.020328][ T787] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 210.043081][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.053789][ T6439] usb 3-1: Using ep0 maxpacket: 16 [ 210.070894][ T787] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 210.099560][ T6439] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.122834][ T787] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 210.156466][ T6439] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 210.192649][ C0] usb 2-1: input irq status -75 received [ 210.215807][ T6439] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 210.236735][ T8139] loop4: detected capacity change from 0 to 512 [ 210.253223][ T6439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.272752][ T8139] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.314799][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.324444][ T6439] usb 3-1: Product: syz [ 210.328629][ T6439] usb 3-1: Manufacturer: syz [ 210.346985][ T9] usb 1-1: config 0 has no interface number 0 [ 210.379151][ T8139] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 210.416809][ T6439] usb 3-1: SerialNumber: syz [ 210.439471][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.482729][ T787] usb 2-1: USB disconnect, device number 8 [ 210.505039][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.550748][ T8139] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.761: bg 0: block 248: padding at end of block bitmap is not set [ 210.593114][ T9] usb 1-1: Product: syz [ 210.618008][ T9] usb 1-1: Manufacturer: syz [ 210.622701][ T9] usb 1-1: SerialNumber: syz [ 210.680199][ T8139] Quota error (device loop4): write_blk: dquota write failed [ 210.714415][ T9] usb 1-1: config 0 descriptor?? [ 210.728421][ T6439] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 210.751866][ T8139] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 210.776504][ T6439] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 210.785304][ T8139] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.761: Failed to acquire dquot type 1 [ 210.840586][ T8139] EXT4-fs (loop4): 1 truncate cleaned up [ 210.861071][ T8139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 210.985703][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 211.037829][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.089612][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 211.142449][ T9] usb 1-1: media controller created [ 211.158130][ T6439] usb 3-1: 2:1 : can't get Cluster Descriptor [ 211.207447][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 211.262900][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.304158][ T56] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 211.384043][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 211.527211][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 211.590740][ T5825] usb 3-1: USB disconnect, device number 9 [ 211.770080][ T9] usb 1-1: USB disconnect, device number 4 [ 212.078540][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 212.085007][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.091155][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 212.167040][ T8149] loop4: detected capacity change from 0 to 512 [ 212.283177][ T8149] FAT-fs (loop4): Directory bread(block 199916) failed [ 212.346070][ T8149] FAT-fs (loop4): Directory bread(block 199917) failed [ 212.423132][ T8149] FAT-fs (loop4): Directory bread(block 199918) failed [ 212.430150][ T8149] FAT-fs (loop4): Directory bread(block 199919) failed [ 212.553281][ T8149] FAT-fs (loop4): Directory bread(block 199920) failed [ 212.560210][ T8149] FAT-fs (loop4): Directory bread(block 199921) failed [ 212.651149][ T8149] FAT-fs (loop4): Directory bread(block 199922) failed [ 212.698620][ T8149] FAT-fs (loop4): Directory bread(block 199923) failed [ 212.746389][ T8158] loop2: detected capacity change from 0 to 256 [ 212.933521][ T8149] FAT-fs (loop4): FAT read failed (blocknr 128) [ 214.817424][ T8170] loop4: detected capacity change from 0 to 40427 [ 214.867572][ T8170] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 214.923227][ T8170] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 214.931553][ T8170] F2FS-fs (loop4): Image doesn't support compression [ 215.043905][ T8170] F2FS-fs (loop4): Image doesn't support compression [ 215.092867][ T8170] F2FS-fs (loop4): invalid crc value [ 215.353399][ T5825] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 215.406821][ T8170] F2FS-fs (loop4): Start checkpoint disabled! [ 215.469340][ T8170] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 215.507308][ T8170] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 215.574825][ T5825] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 215.650690][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.720444][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.802014][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 215.875972][ T56] kworker/u4:4: attempt to access beyond end of device [ 215.875972][ T56] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.891235][ T5825] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 215.921596][ T5825] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 215.933559][ T56] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 215.942893][ T5825] usb 1-1: Manufacturer: syz [ 215.965989][ T5825] usb 1-1: config 0 descriptor?? [ 216.460051][ T5825] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 216.496318][ T5825] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 216.555232][ T5825] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 216.926615][ T9] usb 1-1: USB disconnect, device number 5 [ 217.413619][ T8220] Bluetooth: hci0: unsupported parameter 5161 [ 217.450395][ T8220] Bluetooth: hci0: unsupported parameter 8192 [ 217.497637][ T8220] Bluetooth: hci0: unsupported parameter 5161 [ 217.541539][ T8220] Bluetooth: hci0: unsupported parameter 8192 [ 217.581212][ T8225] loop4: detected capacity change from 0 to 256 [ 217.612564][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 217.689134][ T8225] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 218.487400][ T8241] loop4: detected capacity change from 0 to 512 [ 218.546342][ T8241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.618909][ T8241] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.696091][ T8241] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 218.768526][ T8241] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 218.837009][ T8241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 219.010564][ T8241] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 219.125812][ T8253] ima: Unable to open file: / (-22) [ 219.131864][ T8251] ima: policy update failed [ 219.156253][ T8241] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #13: comm syz.4.809: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 219.193896][ T27] audit: type=1802 audit(1789044564.455:13): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.812" res=0 errno=0 [ 219.320450][ T8241] overlayfs: failed to look up (file0) for ino (-117) [ 219.606839][ T8262] hsr0: entered promiscuous mode [ 219.810236][ T8264] loop0: detected capacity change from 0 to 512 [ 219.874702][ T8264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.961622][ T8264] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.260151][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.306587][ T8271] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19 [ 220.670989][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.726072][ T8275] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 220.823242][ T8275] netlink: 'syz.0.821': attribute type 2 has an invalid length. [ 221.123893][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.435261][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.600013][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.897518][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.068733][ T8288] loop2: detected capacity change from 0 to 8192 [ 223.033999][ T8300] bond1 (unregistering): Released all slaves [ 223.276656][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.293397][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.302209][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.310248][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.318100][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.325889][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.434000][ T5794] Bluetooth: hci2: command tx timeout [ 225.718878][ T8334] loop2: detected capacity change from 0 to 32768 [ 225.783314][ T8334] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.842 (8334) [ 225.876863][ T8334] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.926002][ T8334] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 225.966489][ T8305] chnl_net:caif_netlink_parms(): no params data found [ 225.993384][ T8334] BTRFS info (device loop2): setting nodatasum [ 225.999622][ T8334] BTRFS info (device loop2): force zlib compression, level 3 [ 226.131428][ T8334] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 226.188810][ T8334] BTRFS info (device loop2): use lzo compression, level 0 [ 226.253231][ T8334] BTRFS info (device loop2): turning on flush-on-commit [ 226.260235][ T8334] BTRFS info (device loop2): enabling auto defrag [ 226.339316][ T8334] BTRFS info (device loop2): max_inline at 4096 [ 226.370370][ T8353] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 226.413287][ T8334] BTRFS info (device loop2): using free space tree [ 226.487901][ T8353] overlayfs: overlapping lowerdir path [ 226.663506][ T11] hsr_slave_0: left promiscuous mode [ 226.677678][ T8334] BTRFS info (device loop2): enabling ssd optimizations [ 226.743652][ T11] hsr_slave_1: left promiscuous mode [ 226.841720][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.883046][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.954792][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.023264][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.084377][ T11] bridge_slave_1: left allmulticast mode [ 227.143611][ T11] bridge_slave_1: left promiscuous mode [ 227.149510][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.294253][ T6439] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 227.302552][ T11] bridge_slave_0: left allmulticast mode [ 227.344114][ T11] bridge_slave_0: left promiscuous mode [ 227.351118][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.513805][ T5794] Bluetooth: hci2: command tx timeout [ 227.557453][ T6439] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.609675][ T6439] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.653377][ T11] veth1_macvtap: left promiscuous mode [ 227.658963][ T11] veth0_macvtap: left promiscuous mode [ 227.668591][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.693265][ T6439] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 227.738449][ T11] veth1_vlan: left promiscuous mode [ 227.762301][ T6439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.773288][ T11] veth0_vlan: left promiscuous mode [ 228.327760][ T6439] wacom 0003:056A:033B.0009: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 228.402436][ T6439] wacom 0003:056A:033B.0009: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 228.528541][ T6439] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0009/input/input20 [ 228.605240][ T8376] loop1: detected capacity change from 0 to 32768 [ 228.772700][ T6439] usb 1-1: USB disconnect, device number 6 [ 228.872674][ T8376] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.888478][ T8392] fido_id[8392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0009/report_descriptor': No such file or directory [ 229.276339][ T8376] XFS (loop1): Ending clean mount [ 229.368175][ T8376] XFS (loop1): Quotacheck needed: Please wait. [ 229.505546][ T8376] XFS (loop1): Quotacheck: Done. [ 229.602182][ T5794] Bluetooth: hci2: command tx timeout [ 229.762188][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.450881][ T11] team0 (unregistering): Port device team_slave_1 removed [ 230.536146][ T11] team0 (unregistering): Port device C removed [ 230.601298][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.671051][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.569901][ T11] bond0 (unregistering): Released all slaves [ 231.674263][ T5794] Bluetooth: hci2: command tx timeout [ 231.725273][ T8411] netlink: 766 bytes leftover after parsing attributes in process `syz.2.858'. [ 231.764869][ T8415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.859'. [ 232.095267][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.102718][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.133923][ T8305] bridge_slave_0: entered allmulticast mode [ 232.215051][ T8305] bridge_slave_0: entered promiscuous mode [ 232.269172][ T8426] netlink: 36 bytes leftover after parsing attributes in process `syz.1.862'. [ 232.333613][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.340763][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.428530][ T8305] bridge_slave_1: entered allmulticast mode [ 232.481720][ T8305] bridge_slave_1: entered promiscuous mode [ 232.724426][ T8305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.818127][ T8305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.948305][ T8440] loop0: detected capacity change from 0 to 512 [ 233.128448][ T8305] team0: Port device team_slave_0 added [ 233.174455][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 233.190214][ T8440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.210695][ T8305] team0: Port device team_slave_1 added [ 233.288034][ T8440] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.342171][ T8305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.481210][ T8305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.693119][ T8305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.716249][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.745456][ T8305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.752459][ T8305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.961192][ T8305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.090739][ T8465] loop0: detected capacity change from 0 to 256 [ 234.122379][ T8461] loop1: detected capacity change from 0 to 4096 [ 234.296940][ T8305] hsr_slave_0: entered promiscuous mode [ 234.324331][ T8461] ntfs3: loop1: ino=b, Correct links count -> 1. [ 234.379784][ T8461] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 234.408394][ T8305] hsr_slave_1: entered promiscuous mode [ 234.478615][ T8305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.533142][ T8305] Cannot create hsr debugfs directory [ 235.803418][ T8488] program syz.1.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.910627][ T8305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.965560][ T8305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.087382][ T8305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.161046][ T8305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.198829][ T8495] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 236.399033][ T8487] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 236.608378][ T8501] loop1: detected capacity change from 0 to 1024 [ 236.679430][ T8305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.840132][ T8305] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.004365][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.011540][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.152240][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.159454][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.305768][ T8532] mmap: syz.0.894 (8532) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 238.406534][ T8305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.787609][ T8546] loop1: detected capacity change from 0 to 256 [ 238.870949][ T8546] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 239.014063][ T8549] loop0: detected capacity change from 0 to 2048 [ 239.170305][ T8557] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.958451][ T8305] veth0_vlan: entered promiscuous mode [ 239.985417][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.902'. [ 240.179220][ T8305] veth1_vlan: entered promiscuous mode [ 240.362571][ T8305] veth0_macvtap: entered promiscuous mode [ 240.418369][ T8305] veth1_macvtap: entered promiscuous mode [ 240.543308][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.613130][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.687049][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.748672][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.814315][ T8562] loop1: detected capacity change from 0 to 32768 [ 240.820959][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.888090][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.934542][ T27] audit: type=1800 audit(1789044586.205:14): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.900" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 240.969535][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.084739][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.162939][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.201665][ T27] audit: type=1800 audit(1789044586.465:15): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.900" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 241.248656][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.302492][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.351846][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.392432][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.469051][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.575665][ T8305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.637658][ T8305] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.682617][ T8575] loop2: detected capacity change from 0 to 40427 [ 241.690530][ T8305] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.733453][ T8305] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.742294][ T8575] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 241.787993][ T8575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 241.863299][ T8575] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 241.871969][ T8575] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 242.005967][ T8575] F2FS-fs (loop2): invalid crc value [ 242.134656][ T8575] F2FS-fs (loop2): Found nat_bits in checkpoint [ 242.243776][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.251699][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.463135][ T8575] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 242.470244][ T8575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 242.529999][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.612042][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.825603][ T8575] syz.2.904: attempt to access beyond end of device [ 242.825603][ T8575] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 243.108922][ T5779] syz-executor: attempt to access beyond end of device [ 243.108922][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.153587][ T6439] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 243.169319][ T8611] loop5: detected capacity change from 0 to 2048 [ 243.230366][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 243.378411][ T6439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.446700][ T6439] usb 2-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 243.507658][ T6439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 243.567600][ T6439] usb 2-1: Product: syz [ 243.596428][ T6439] usb 2-1: Manufacturer: syz [ 243.637503][ T6439] navman 2-1:1.0: navman converter detected [ 243.691146][ T6439] usb 2-1: navman converter now attached to ttyUSB0 [ 243.713402][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 243.970198][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.980802][ T787] usb 2-1: USB disconnect, device number 9 [ 244.013842][ T8] usb 6-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 244.032308][ T787] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 244.093251][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.118545][ T787] navman 2-1:1.0: device disconnected [ 244.193790][ T8] usb 6-1: New USB device found, idVendor=1235, idProduct=0401, bcdDevice= 0.40 [ 244.243528][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.303207][ T8] usb 6-1: Product: syz [ 244.307420][ T8] usb 6-1: Manufacturer: syz [ 244.312018][ T8] usb 6-1: SerialNumber: syz [ 244.772596][ T8] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 244.818509][ T8] usb 6-1: MIDIStreaming interface descriptor not found [ 244.866148][ T8633] loop1: detected capacity change from 0 to 16 [ 244.920454][ T8633] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 244.997478][ T8] usb 6-1: USB disconnect, device number 2 [ 245.872269][ T8652] loop5: detected capacity change from 0 to 1024 [ 245.947652][ T8652] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.079335][ T8652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.206929][ T8653] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 246.479221][ T8667] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 246.590290][ T8305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.937405][ T8676] loop2: detected capacity change from 0 to 256 [ 248.289632][ T8707] loop5: detected capacity change from 0 to 1024 [ 248.468383][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 248.500377][ T8707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.585988][ T8707] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.781141][ T8707] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.942: lblock 0 mapped to illegal pblock 0 (length 6) [ 248.903146][ T8707] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 249.005687][ T8707] EXT4-fs (loop5): This should not happen!! Data will be lost [ 249.005687][ T8707] [ 249.117446][ T8721] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.942: lblock 0 mapped to illegal pblock 0 (length 4) [ 249.433403][ T8716] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 249.553830][ T2965] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 249.603421][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 249.667074][ T2965] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 249.689232][ T8736] loop1: detected capacity change from 0 to 512 [ 249.755723][ T2965] EXT4-fs (loop5): This should not happen!! Data will be lost [ 249.755723][ T2965] [ 249.808753][ T8736] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.951: corrupted in-inode xattr: invalid ea_ino [ 249.826486][ T8715] loop2: detected capacity change from 0 to 32768 [ 249.875899][ T8305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.939264][ T8736] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.951: couldn't read orphan inode 15 (err -117) [ 249.985034][ T8715] JBD2: Ignoring recovery information on journal [ 250.085890][ T8736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.216040][ T8715] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 250.365406][ T8746] loop5: detected capacity change from 0 to 128 [ 250.509652][ T8746] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.606562][ T27] audit: type=1800 audit(1789044595.875:16): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.944" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 250.650187][ T8746] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.681644][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.767340][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.032190][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 251.108293][ T8746] overlayfs: upper fs needs to support d_type. [ 251.480130][ T8305] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.867671][ T8769] loop5: detected capacity change from 0 to 512 [ 252.115418][ T8769] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 252.226055][ T8776] loop1: detected capacity change from 0 to 256 [ 252.507596][ T8776] FAT-fs (loop1): Directory bread(block 64) failed [ 252.570704][ T8776] FAT-fs (loop1): Directory bread(block 65) failed [ 252.593582][ T8776] FAT-fs (loop1): Directory bread(block 66) failed [ 252.600155][ T8776] FAT-fs (loop1): Directory bread(block 67) failed [ 252.742110][ T8776] FAT-fs (loop1): Directory bread(block 68) failed [ 252.812730][ T8776] FAT-fs (loop1): Directory bread(block 69) failed [ 252.856108][ T8776] FAT-fs (loop1): Directory bread(block 70) failed [ 252.862723][ T8776] FAT-fs (loop1): Directory bread(block 71) failed [ 252.960316][ T8776] FAT-fs (loop1): Directory bread(block 72) failed [ 253.003257][ T8776] FAT-fs (loop1): Directory bread(block 73) failed [ 253.345788][ T27] audit: type=1800 audit(1789044598.615:17): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.962" name="bus" dev="loop1" ino=1048627 res=0 errno=0 [ 253.476363][ T8776] syz.1.962: attempt to access beyond end of device [ 253.476363][ T8776] loop1: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 253.548500][ T8799] loop5: detected capacity change from 0 to 128 [ 253.562558][ T8773] loop2: detected capacity change from 0 to 32768 [ 253.690444][ T8799] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.780181][ T8773] JBD2: Ignoring recovery information on journal [ 253.819933][ T8799] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.027199][ T8773] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 254.059750][ T8799] fscrypt (loop5, inode 12): Unsupported encryption flags (0x7b) [ 254.332806][ T8773] (syz.2.955,8773,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 254.388999][ T8305] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.706431][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 255.699223][ T8841] loop2: detected capacity change from 0 to 16 [ 255.834448][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.985'. [ 256.083478][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.093074][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.191017][ T8845] netlink: 'syz.2.986': attribute type 25 has an invalid length. [ 256.219916][ T8845] netlink: 'syz.2.986': attribute type 28 has an invalid length. [ 256.849951][ T8835] loop1: detected capacity change from 0 to 40427 [ 256.930712][ T8835] F2FS-fs (loop1): invalid crc value [ 257.020833][ T8835] F2FS-fs (loop1): Found nat_bits in checkpoint [ 257.052375][ T8867] loop2: detected capacity change from 0 to 512 [ 257.059613][ T8866] netlink: 40 bytes leftover after parsing attributes in process `syz.5.994'. [ 257.206438][ T8867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.349830][ T8867] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.373714][ T8835] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 257.519714][ T8867] EXT4-fs (loop2): shut down requested (2) [ 257.560829][ T8878] loop5: detected capacity change from 0 to 1024 [ 257.731130][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.752632][ T8835] syz.1.982: attempt to access beyond end of device [ 257.752632][ T8835] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.812731][ T8878] hfsplus: request for non-existent node 33423360 in B*Tree [ 257.902660][ T8878] hfsplus: request for non-existent node 33423360 in B*Tree [ 257.912709][ T8835] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 257.985381][ T8882] hfsplus: catalog searching failed [ 258.411998][ T8890] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(6) [ 260.057445][ T8909] loop2: detected capacity change from 0 to 1024 [ 260.135469][ T8909] EXT4-fs: Ignoring removed bh option [ 260.188682][ T8909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.364964][ T8909] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.1008: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 260.472014][ T2920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.621213][ T8902] loop5: detected capacity change from 0 to 32768 [ 260.660549][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.690911][ T8902] XFS: attr2 mount option is deprecated. [ 260.779063][ T2920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.829003][ T8902] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 260.887229][ T8902] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 261.054889][ T2920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.110459][ T8902] XFS (loop5): Ending clean mount [ 261.137865][ T9] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 261.202136][ T9] XFS (loop5): Unmount and run xfs_repair [ 261.218290][ T9] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 261.248658][ T9] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 261.332685][ T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 261.382596][ T9] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 261.426230][ T2920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.437132][ T9] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 261.500930][ T9] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 261.547573][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 261.575788][ T8926] loop2: detected capacity change from 0 to 2048 [ 261.631665][ T9] 00000060: 00 00 00 00 00 00 30 77 00 00 00 00 00 00 00 00 ......0w........ [ 261.681927][ T8926] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #2: comm syz.2.1013: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 261.733021][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 261.742929][ T8902] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 261.834407][ T8902] XFS (loop5): Failed to initialize disk quotas. [ 261.854923][ T8926] EXT4-fs (loop2): get root inode failed [ 261.860615][ T8926] EXT4-fs (loop2): mount failed [ 262.193590][ T8305] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 262.933918][ T27] audit: type=1400 audit(1789044608.205:18): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=8944 comm="syz.0.1018" name="p" offset=64 [ 263.090689][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.106353][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.117302][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.127207][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.136966][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 263.144613][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.515737][ T8958] loop2: detected capacity change from 0 to 1024 [ 263.701621][ T8958] hfsplus: bad catalog entry type [ 263.928852][ T11] hfsplus: b-tree write err: -5, ino 25 [ 263.956707][ T11] hfsplus: b-tree write err: -5, ino 4 [ 264.006832][ T11] hfsplus: b-tree write err: -5, ino 2 [ 264.857721][ T8954] loop5: detected capacity change from 0 to 32768 [ 264.997434][ T8954] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 265.133275][ T8954] XFS (loop5): Ending clean mount [ 265.199723][ T5791] Bluetooth: hci0: command tx timeout [ 265.816692][ T8305] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 265.967591][ T8949] chnl_net:caif_netlink_parms(): no params data found [ 266.404295][ T2920] hsr_slave_0: left promiscuous mode [ 266.433566][ T2920] hsr_slave_1: left promiscuous mode [ 266.457300][ T8990] loop2: detected capacity change from 0 to 32768 [ 266.465926][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.518688][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.599652][ T27] audit: type=1800 audit(1789044611.865:19): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1026" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 266.623775][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.631219][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.764669][ T2920] bridge_slave_1: left allmulticast mode [ 266.770365][ T2920] bridge_slave_1: left promiscuous mode [ 266.824155][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.848556][ T2920] bridge_slave_0: left allmulticast mode [ 266.878754][ T2920] bridge_slave_0: left promiscuous mode [ 266.928746][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.018710][ T9011] loop0: detected capacity change from 0 to 128 [ 267.098125][ T9011] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.224227][ T9011] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.263273][ T2920] veth1_macvtap: left promiscuous mode [ 267.268837][ T2920] veth0_macvtap: left promiscuous mode [ 267.274997][ T5791] Bluetooth: hci0: command tx timeout [ 267.328627][ T2920] veth1_vlan: left promiscuous mode [ 267.388105][ T2920] veth0_vlan: left promiscuous mode [ 267.762155][ T9013] loop5: detected capacity change from 0 to 164 [ 267.882582][ T9013] rock: directory entry would overflow storage [ 267.921667][ T9013] rock: sig=0x66, size=4, remaining=3 [ 267.998298][ T9013] rock: directory entry would overflow storage [ 268.067945][ T9013] rock: sig=0x66, size=4, remaining=3 [ 268.119965][ T9013] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 269.354084][ T5791] Bluetooth: hci0: command tx timeout [ 270.147663][ T9044] loop5: detected capacity change from 0 to 16 [ 270.194804][ T9044] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 270.320329][ T9046] loop2: detected capacity change from 0 to 512 [ 270.381160][ T9046] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1046: iget: bad extended attribute block 134217728 [ 270.477210][ T9046] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1046: couldn't read orphan inode 15 (err -117) [ 270.557266][ T9046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.710375][ T27] audit: type=1800 audit(1789044615.975:20): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1046" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 270.838849][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.146077][ T9057] loop5: detected capacity change from 0 to 512 [ 271.161160][ T9057] EXT4-fs: inline encryption not supported [ 271.181109][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 271.199754][ T9057] ext3: Unknown parameter 'subj_user' [ 271.241617][ T9057] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 271.427430][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 271.435432][ T5791] Bluetooth: hci0: command tx timeout [ 271.655675][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.013631][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.462115][ T9083] loop5: detected capacity change from 0 to 2048 [ 273.522037][ T9083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.581119][ T2920] bond0 (unregistering): Released all slaves [ 273.781569][ T9085] loop5: detected capacity change from 0 to 64 [ 274.360493][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.420663][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.459529][ T8949] bridge_slave_0: entered allmulticast mode [ 274.526400][ T8949] bridge_slave_0: entered promiscuous mode [ 274.584692][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.658574][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.734172][ T8949] bridge_slave_1: entered allmulticast mode [ 274.741212][ T8949] bridge_slave_1: entered promiscuous mode [ 274.944014][ T9104] loop5: detected capacity change from 0 to 256 [ 275.001489][ T9104] exfat: Bad value for 'errors' [ 275.026120][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.100060][ T9104] netlink: 341 bytes leftover after parsing attributes in process `syz.5.1067'. [ 275.110537][ T6439] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 275.140557][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.224384][ T2920] IPVS: stop unused estimator thread 0... [ 275.347484][ T6439] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.406662][ T6439] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.461281][ T6439] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 275.518851][ T8949] team0: Port device team_slave_0 added [ 275.583795][ T6439] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 275.601093][ T8949] team0: Port device team_slave_1 added [ 275.641157][ T6439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.702332][ T6439] usb 1-1: Product: syz [ 275.729683][ T6439] usb 1-1: Manufacturer: syz [ 275.760601][ T6439] usb 1-1: SerialNumber: syz [ 275.775727][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.864161][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.006448][ T8949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.106640][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.137148][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.302360][ C0] usb 1-1: received EP1 urb->status = -2 [ 276.310574][ T6439] usb 1-1: unable to init card! (ret=-110) [ 276.320894][ T8949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.332287][ T6439] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 276.607119][ T6439] usb 1-1: USB disconnect, device number 7 [ 276.617852][ T8949] hsr_slave_0: entered promiscuous mode [ 276.680966][ T8949] hsr_slave_1: entered promiscuous mode [ 276.838655][ T9130] loop2: detected capacity change from 0 to 512 [ 276.918325][ T9130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.008867][ T9130] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.352442][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.385572][ T9117] loop5: detected capacity change from 0 to 40427 [ 277.483462][ T9117] F2FS-fs (loop5): invalid crc value [ 277.551267][ T9117] F2FS-fs (loop5): Found nat_bits in checkpoint [ 277.840053][ T8949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.905329][ T8949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.943387][ T9117] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 277.995469][ T8949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.075205][ T8949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.257025][ T988] kworker/u4:5: attempt to access beyond end of device [ 278.257025][ T988] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.385830][ T988] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 278.604579][ T8949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.643416][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 278.701083][ T8949] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.781932][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.789163][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.875049][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.882278][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.900935][ T9] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 278.941145][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 279.008436][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 279.080650][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.149784][ T8949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.163078][ T9] usb 1-1: Product: syz [ 279.167342][ T9] usb 1-1: Manufacturer: syz [ 279.171985][ T9] usb 1-1: SerialNumber: syz [ 279.247070][ T9] usb 1-1: config 0 descriptor?? [ 279.314204][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 279.669320][ T9174] loop2: detected capacity change from 0 to 512 [ 280.104698][ T9] gspca_sunplus: reg_r err -71 [ 280.134107][ T9] sunplus: probe of 1-1:0.0 failed with error -71 [ 280.199626][ T9] usb 1-1: USB disconnect, device number 8 [ 280.280407][ T8949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.730790][ T9212] loop5: detected capacity change from 0 to 1024 [ 281.773639][ T8949] veth0_vlan: entered promiscuous mode [ 281.844534][ T9212] hfsplus: invalid length 32517 has been corrected to 255 [ 281.891791][ T27] audit: type=1326 audit(1789044627.155:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 281.917606][ T8949] veth1_vlan: entered promiscuous mode [ 282.059139][ T9212] hfsplus: invalid length 32517 has been corrected to 255 [ 282.089487][ T8949] veth0_macvtap: entered promiscuous mode [ 282.125371][ T27] audit: type=1326 audit(1789044627.155:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 282.153739][ T9212] hfsplus: invalid length 32517 has been corrected to 255 [ 282.267557][ T9220] hfsplus: invalid length 32517 has been corrected to 255 [ 282.301381][ T9221] loop2: detected capacity change from 0 to 512 [ 282.308532][ T8949] veth1_macvtap: entered promiscuous mode [ 282.362135][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.376548][ T27] audit: type=1326 audit(1789044627.155:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 282.461387][ T9220] hfsplus: invalid length 32517 has been corrected to 255 [ 282.505140][ T9221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.525196][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.571644][ T27] audit: type=1326 audit(1789044627.155:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 282.604227][ T9220] hfsplus: b-tree write err: -5, ino 2 [ 282.631108][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.653200][ T9221] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.693479][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.776603][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.795510][ T27] audit: type=1326 audit(1789044627.155:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 282.870551][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.896116][ T9228] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.1096: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 282.936770][ T8949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.945159][ T11] hfsplus: b-tree write err: -5, ino 25 [ 282.950946][ T11] hfsplus: b-tree write err: -5, ino 4 [ 282.969771][ T27] audit: type=1326 audit(1789044627.195:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 283.015588][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.034361][ T11] hfsplus: b-tree write err: -5, ino 2 [ 283.104351][ T9221] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 283.114672][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.186090][ T27] audit: type=1326 audit(1789044627.195:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 283.235640][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.304726][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.370376][ T27] audit: type=1326 audit(1789044627.195:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 283.395330][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.444222][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.501520][ T8949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.534381][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.556102][ T27] audit: type=1326 audit(1789044627.205:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 283.660373][ T8949] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.762414][ T8949] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.772473][ T27] audit: type=1326 audit(1789044627.205:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.2.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662e99e159 code=0x7ffc0000 [ 283.828224][ T8949] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.883894][ T8949] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.938698][ T9239] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 283.995141][ T9238] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 284.017645][ T9216] loop0: detected capacity change from 0 to 32768 [ 284.148675][ T9216] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 284.356605][ T9216] XFS (loop0): Ending clean mount [ 284.386395][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.455369][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.593943][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.657177][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.745861][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1101'. [ 284.776832][ T5785] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 285.125550][ T5845] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 285.280522][ T9262] loop6: detected capacity change from 0 to 4096 [ 285.336106][ T9262] EXT4-fs: inline encryption not supported [ 285.363123][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 285.408850][ T5845] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.464114][ T9262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 285.497355][ T5845] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.525207][ T9262] EXT4-fs (loop6): Test dummy encryption mode enabled [ 285.588883][ T5845] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 285.653022][ T9262] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 285.688788][ T5845] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.726445][ T9262] System zones: 0-5 [ 285.733460][ T5845] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 285.770290][ T9262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.839896][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.934705][ T5845] usb 6-1: config 0 descriptor?? [ 286.150109][ T8949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.374615][ T5845] hid (null): nested delimiters [ 286.414884][ T5845] hid (null): report_id 24797 is invalid [ 286.422676][ T9278] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 286.465701][ T5845] hid (null): bogus close delimiter [ 286.579395][ T5845] usb 6-1: USB disconnect, device number 3 [ 286.920458][ T9289] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1111'. [ 288.025079][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1120'. [ 288.392695][ T9326] loop6: detected capacity change from 0 to 256 [ 288.482731][ T9326] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.590411][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 288.590423][ T27] audit: type=1800 audit(1789044633.855:35): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1123" name="file1" dev="loop6" ino=1048634 res=0 errno=0 [ 288.781011][ T9333] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 8200) [ 288.831698][ T27] audit: type=1800 audit(1789044633.915:36): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1123" name="file1" dev="loop6" ino=1048634 res=0 errno=0 [ 288.903930][ T9333] FAT-fs (loop6): Filesystem has been set read-only [ 289.116775][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 289.341252][ T9300] loop5: detected capacity change from 0 to 40427 [ 289.429784][ T9300] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 289.499164][ T9300] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 289.512092][ T9346] loop6: detected capacity change from 0 to 256 [ 289.569683][ T9300] F2FS-fs (loop5): Image doesn't support compression [ 289.592481][ T9346] exfat: Deprecated parameter 'namecase' [ 289.620281][ T9300] F2FS-fs (loop5): invalid crc value [ 289.633985][ T9346] exfat: Deprecated parameter 'namecase' [ 289.711247][ T9346] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 290.181898][ T9300] F2FS-fs (loop5): Start checkpoint disabled! [ 290.323221][ T9300] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 290.368147][ T9300] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 290.943924][ T9372] loop2: detected capacity change from 0 to 128 [ 291.016414][ T9372] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 291.094135][ T9372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.557118][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1144'. [ 292.755933][ T9411] loop5: detected capacity change from 0 to 256 [ 292.793899][ T9411] exfat: Deprecated parameter 'utf8' [ 292.799355][ T9411] exfat: Deprecated parameter 'utf8' [ 292.949495][ T9411] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 293.978301][ T9434] loop6: detected capacity change from 0 to 512 [ 294.054420][ T9434] EXT4-fs: Ignoring removed nobh option [ 294.211671][ T9434] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.1152: corrupted inode contents [ 294.351318][ T9434] EXT4-fs error (device loop6): ext4_dirty_inode:6144: inode #3: comm syz.6.1152: mark_inode_dirty error [ 294.462399][ T9434] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.1152: corrupted inode contents [ 294.498526][ T9445] loop2: detected capacity change from 0 to 2048 [ 294.534179][ T9447] loop5: detected capacity change from 0 to 512 [ 294.565847][ T9434] EXT4-fs error (device loop6): __ext4_ext_dirty:208: inode #3: comm syz.6.1152: mark_inode_dirty error [ 294.590152][ T9445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.661121][ T9434] Quota error (device loop6): write_blk: dquota write failed [ 294.732692][ T9434] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 294.828111][ T9434] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1152: Failed to acquire dquot type 0 [ 294.967489][ T9434] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.1152: corrupted inode contents [ 295.092661][ T9434] EXT4-fs error (device loop6): ext4_dirty_inode:6144: inode #16: comm syz.6.1152: mark_inode_dirty error [ 295.204346][ T9434] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.1152: corrupted inode contents [ 295.235827][ T9458] loop2: detected capacity change from 0 to 1024 [ 295.276641][ T9434] EXT4-fs error (device loop6): __ext4_ext_dirty:208: inode #16: comm syz.6.1152: mark_inode_dirty error [ 295.367300][ T9458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.413644][ T9434] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.1152: corrupted inode contents [ 295.526836][ T9434] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 295.598059][ T9434] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.1152: corrupted inode contents [ 295.688646][ T9434] EXT4-fs error (device loop6): ext4_truncate:4302: inode #16: comm syz.6.1152: mark_inode_dirty error [ 295.776177][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.805740][ T9434] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 295.902837][ T9434] EXT4-fs (loop6): 1 truncate cleaned up [ 295.954189][ T9434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.983096][ T9470] IPVS: persistence engine module ip_vs_pe_ not found [ 296.077899][ T9434] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.621406][ T8949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.104307][ T9489] gadgetfs: bound to dummy_udc driver [ 297.584165][ T9477] loop2: detected capacity change from 0 to 32768 [ 297.708994][ T9477] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 297.952751][ T9477] (syz.2.1164,9477,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 298.014949][ T9477] (syz.2.1164,9477,0):ocfs2_rename:1299 ERROR: status = -2 [ 298.092432][ T9477] (syz.2.1164,9477,0):ocfs2_rename:1690 ERROR: status = -2 [ 298.409489][ T9512] program syz.6.1174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.440925][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 299.110576][ T9525] loop6: detected capacity change from 0 to 512 [ 299.180124][ T9525] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.248747][ T9525] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.370932][ T9525] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 299.471381][ T9525] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 299.550523][ T9525] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1180: Failed to acquire dquot type 0 [ 299.653972][ T9525] EXT4-fs (loop6): Remounting filesystem read-only [ 299.701025][ T9525] EXT4-fs (loop6): 1 orphan inode deleted [ 299.752560][ T9525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.816375][ T9525] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.206118][ T8949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.363226][ T9552] block2mtd: device name too long [ 300.536321][ T9557] input: syz0 as /devices/virtual/input/input25 [ 301.745743][ T9587] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 301.795018][ T9587] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 301.846171][ T9590] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.865958][ T9587] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 301.893205][ T9590] IPv6: Can't replace route, no match found [ 301.899974][ T9587] lpc_ich 0000:00:00.0: No MFD cells added [ 301.917133][ T9587] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 301.983180][ T9587] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 302.010725][ T9587] lpc_ich 0000:00:01.0: I/O space for GPIO uninitialized [ 302.059831][ T9587] lpc_ich 0000:00:01.0: No MFD cells added [ 302.100791][ T9587] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled [ 302.148619][ T9587] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized [ 302.192226][ T9587] lpc_ich 0000:00:01.3: No MFD cells added [ 302.231548][ T9587] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 302.278262][ T9587] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 302.339870][ T9587] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized [ 302.396968][ T9587] lpc_ich 0000:00:05.0: No MFD cells added [ 303.670503][ T9627] loop2: detected capacity change from 0 to 1024 [ 303.757826][ T9627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 303.847983][ T9627] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.265599][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 304.825376][ T9614] loop6: detected capacity change from 0 to 40427 [ 304.882749][ T9614] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x7ffff [ 304.946667][ T9614] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x30e4 [ 305.021244][ T9614] F2FS-fs (loop6): invalid crc value [ 305.085527][ T9614] F2FS-fs (loop6): Found nat_bits in checkpoint [ 305.275926][ T9614] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 305.500523][ T9614] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 305.744087][ T9614] F2FS-fs (loop6): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 305.888545][ T9614] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x634/0x7f0 [ 306.108279][ T8949] syz-executor: attempt to access beyond end of device [ 306.108279][ T8949] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.208743][ T8949] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 306.343087][ T5825] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 306.563475][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 306.613386][ T5825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 306.689108][ T5825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 306.760935][ T5825] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 306.843664][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.935041][ T5825] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 307.030980][ T5825] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 307.596454][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.803743][ T6439] usb 1-1: USB disconnect, device number 10 [ 307.876029][ T6439] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 307.971524][ T6439] kobil_sct 1-1:1.0: device disconnected [ 309.201703][ T9708] loop2: detected capacity change from 0 to 131072 [ 309.248351][ T9708] F2FS-fs (loop2): invalid crc value [ 309.291991][ T9708] F2FS-fs (loop2): Found nat_bits in checkpoint [ 309.353262][ T9708] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 309.520464][ T9708] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 310.101919][ T9723] loop6: detected capacity change from 0 to 4096 [ 310.175072][ T9726] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 310.199570][ T9723] EXT4-fs: inline encryption not supported [ 310.307121][ T9723] EXT4-fs (loop6): Test dummy encryption mode enabled [ 310.423089][ T9723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.539239][ T9729] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 310.828641][ T9735] loop0: detected capacity change from 0 to 256 [ 310.874484][ T8949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.725984][ T9747] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1244'. [ 312.284021][ T9757] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 312.291111][ T9757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 312.433220][ T9757] vhci_hcd vhci_hcd.0: Device attached [ 312.489426][ T9764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1249'. [ 312.623159][ T6439] vhci_hcd: vhci_device speed not set [ 312.683129][ T5845] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 312.723646][ T6439] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 312.907163][ T9767] loop0: detected capacity change from 0 to 1024 [ 312.934282][ T5845] usb 7-1: config 0 has no interfaces? [ 312.939871][ T5845] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.022482][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.139569][ T5845] usb 7-1: config 0 descriptor?? [ 313.361206][ T9771] hfsplus: xattr search failed [ 313.479670][ T9758] usbip_core: unknown command [ 313.497324][ T5845] usb 7-1: USB disconnect, device number 2 [ 313.531784][ T9758] vhci_hcd: unknown pdu 0 [ 313.552340][ T9758] usbip_core: unknown command [ 313.583592][ T6439] vhci_hcd: vhci_device speed not set [ 313.619000][ T988] vhci_hcd: stop threads [ 313.668152][ T988] vhci_hcd: release socket [ 313.689104][ T6439] usb 45-1: device descriptor read/64, error -71 [ 313.709276][ T988] vhci_hcd: disconnect device [ 313.927149][ T6439] vhci_hcd: vhci_device speed not set [ 315.298041][ T9809] rt1711h 0-0004: check vid/pid fail [ 315.347849][ T9809] rt1711h: probe of 0-0004 failed with error -5 [ 315.410224][ T9809] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 315.515982][ T9812] loop2: detected capacity change from 0 to 256 [ 315.562652][ T9812] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.748536][ T9812] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.529341][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.387984][ T9865] loop0: detected capacity change from 0 to 24 [ 318.467598][ T9865] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 318.586478][ T9865] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 319.560302][ T9889] loop5: detected capacity change from 0 to 128 [ 319.619852][ T9889] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 319.705212][ T9889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.827324][ T27] audit: type=1800 audit(1789044665.095:37): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1292" name="file1" dev="loop5" ino=104 res=0 errno=0 [ 319.847883][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.281451][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1308'. [ 322.665949][ T9919] loop2: detected capacity change from 0 to 32768 [ 322.918607][ T9919] UFO tlock:0xffffc9000285a120 [ 322.973940][ T9940] MetaData crosses page boundary!! [ 323.088531][ T9940] lblock = 610061, size = 269537280 [ 323.125675][ T9940] CPU: 0 PID: 9940 Comm: syz.2.1304 Not tainted syzkaller #0 [ 323.133117][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.143196][ T9940] Call Trace: [ 323.146485][ T9940] [ 323.149430][ T9940] dump_stack_lvl+0x18c/0x250 [ 323.154129][ T9940] ? show_regs_print_info+0x20/0x20 [ 323.159371][ T9940] ? load_image+0x420/0x420 [ 323.163892][ T9940] ? folio_unlock+0x118/0x2f0 [ 323.168689][ T9940] __get_metapage+0xaac/0xfa0 [ 323.173384][ T9940] dtSearch+0x58d/0x21a0 [ 323.177648][ T9940] ? rcu_is_watching+0x15/0xb0 [ 323.182443][ T9940] jfs_lookup+0x1b1/0x420 [ 323.186801][ T9940] ? jfs_get_parent+0xb0/0xb0 [ 323.191501][ T9940] ? __asan_memset+0x22/0x40 [ 323.196118][ T9940] ? __lock_acquire+0x7d80/0x7d80 [ 323.201158][ T9940] ? __rwlock_init+0x150/0x150 [ 323.205954][ T9940] ? d_set_d_op+0x25f/0x370 [ 323.210486][ T9940] ? do_raw_spin_unlock+0x121/0x230 [ 323.215891][ T9940] ? _raw_spin_unlock+0x28/0x40 [ 323.220755][ T9940] ? d_alloc+0x1eb/0x250 [ 323.225093][ T9940] lookup_one_qstr_excl+0x112/0x250 [ 323.230308][ T9940] filename_create+0x246/0x450 [ 323.235101][ T9940] ? kern_path_create+0x50/0x50 [ 323.239956][ T9940] ? __virt_addr_valid+0x10c/0x380 [ 323.245081][ T9940] ? __virt_addr_valid+0x10c/0x380 [ 323.250210][ T9940] do_mkdirat+0xa9/0x450 [ 323.254480][ T9940] ? vfs_mkdir+0x470/0x470 [ 323.258904][ T9940] ? getname_flags+0x20a/0x500 [ 323.263688][ T9940] __x64_sys_mkdir+0x6e/0x80 [ 323.268289][ T9940] do_syscall_64+0x55/0xb0 [ 323.272736][ T9940] ? clear_bhb_loop+0x40/0x90 [ 323.277426][ T9940] ? clear_bhb_loop+0x40/0x90 [ 323.282137][ T9940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.288063][ T9940] RIP: 0033:0x7f662e99e159 [ 323.292491][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.312112][ T9940] RSP: 002b:00007f662f8b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 323.320536][ T9940] RAX: ffffffffffffffda RBX: 00007f662ec26090 RCX: 00007f662e99e159 [ 323.328518][ T9940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 323.336500][ T9940] RBP: 00007f662ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 323.344480][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.352462][ T9940] R13: 00007f662ec26128 R14: 00007f662ec26090 R15: 00007ffefb557858 [ 323.360542][ T9940] [ 323.540911][ T9943] loop0: detected capacity change from 0 to 4096 [ 323.881744][ T9955] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.452040][ T9940] bread failed! [ 324.487334][ T9940] jfs_lookup: dtSearch returned -5 [ 324.686971][ T9967] netlink: 'syz.6.1319': attribute type 8 has an invalid length. [ 324.755761][ T9967] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1319'. [ 324.810341][ T9967] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1319'. [ 326.035966][ T9994] loop0: detected capacity change from 0 to 256 [ 326.148179][ T9994] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 326.468871][T10000] loop6: detected capacity change from 0 to 4096 [ 326.527885][T10004] loop2: detected capacity change from 0 to 128 [ 326.574279][T10004] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 326.651181][T10000] ntfs: volume version 3.1. [ 326.674816][T10004] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 326.825325][T10008] loop0: detected capacity change from 0 to 512 [ 326.983178][T10008] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.1336: corrupted in-inode xattr: invalid ea_ino [ 327.054926][ T2954] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.128566][T10008] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1336: couldn't read orphan inode 15 (err -117) [ 327.287000][T10008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.540865][T10015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.589602][T10015] bond0: (slave bond1): Enslaving as an active interface with an up link [ 327.747716][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.163421][T10028] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1344'. [ 329.001769][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 330.069708][T10077] loop5: detected capacity change from 0 to 128 [ 330.979971][T10101] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1371'. [ 331.997042][T10129] loop5: detected capacity change from 0 to 512 [ 332.115737][T10129] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 332.181510][T10129] EXT4-fs (loop5): orphan cleanup on readonly fs [ 332.270576][T10129] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 332.339422][T10136] loop6: detected capacity change from 0 to 16 [ 332.355003][T10129] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 332.428865][T10136] erofs: (device loop6): mounted with root inode @ nid 36. [ 332.470209][T10129] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 332.487893][T10138] loop0: detected capacity change from 0 to 1024 [ 332.554658][T10129] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #16: comm syz.5.1382: inode has both inline data and extents flags [ 332.578035][T10138] EXT4-fs: Ignoring removed orlov option [ 332.687458][T10129] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1382: couldn't read orphan inode 16 (err -117) [ 332.716675][T10138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.792866][T10129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.003462][T10129] CacheFiles: Failed to register: -30 [ 333.120871][T10145] loop6: detected capacity change from 0 to 256 [ 333.200028][T10145] exfat: Deprecated parameter 'namecase' [ 333.237626][ T8305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.282604][T10145] exfat: Deprecated parameter 'namecase' [ 333.298430][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.388355][T10145] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 333.612491][ T11] ------------[ cut here ]------------ [ 333.618662][ T11] WARNING: CPU: 0 PID: 11 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.629618][ T11] Modules linked in: [ 333.633626][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 333.641050][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.651345][ T11] Workqueue: phy17 ieee80211_csa_finalize_work [ 333.657748][ T11] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.665694][ T11] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 333.686537][ C0] ------------[ cut here ]------------ [ 333.686582][ C0] WARNING: CPU: 0 PID: 11 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 333.686624][ C0] Modules linked in: [ 333.686636][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 333.686651][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.686663][ C0] Workqueue: phy17 ieee80211_csa_finalize_work [ 333.686690][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 333.686715][ C0] Code: f7 4c 89 ef e8 b0 9f b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 6b ba 79 f7 0f 0b e9 61 f8 ff ff e8 5f ba 79 f7 <0f> 0b e9 85 fb ff ff e8 53 ba 79 f7 48 c7 c7 e0 cc 65 8e 4c 89 e6 [ 333.686729][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 333.686744][ C0] RAX: ffffffff8a0dc811 RBX: dffffc0000000000 RCX: ffff88801ba73c00 [ 333.686757][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.686768][ C0] RBP: 0000000000000000 R08: ffff88801ba73c00 R09: 0000000000000003 [ 333.686779][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888061732440 [ 333.686808][ C0] R13: ffff888026976824 R14: ffff888061732930 R15: ffff888026976800 [ 333.686821][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 333.686835][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.686847][ C0] CR2: 00007fc615e99000 CR3: 0000000068b94000 CR4: 00000000003506f0 [ 333.686861][ C0] Call Trace: [ 333.686869][ C0] [ 333.686877][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 333.686930][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 333.686957][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 333.686990][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 333.687017][ C0] __iterate_interfaces+0x225/0x4c0 [ 333.687036][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 333.687056][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 333.687077][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 333.687097][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 333.687120][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 333.687138][ C0] ? hw_scan_work+0xf10/0xf10 [ 333.687155][ C0] __hrtimer_run_queues+0x525/0xc10 [ 333.687189][ C0] ? hrtimer_interrupt+0x980/0x980 [ 333.687205][ C0] ? read_tsc+0x9/0x20 [ 333.687231][ C0] hrtimer_run_softirq+0x177/0x290 [ 333.687253][ C0] handle_softirqs+0x27d/0x820 [ 333.687269][ C0] ? read_tsc+0x9/0x20 [ 333.687286][ C0] ? ktime_get+0x24b/0x280 [ 333.687307][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 333.687327][ C0] ? do_softirq+0x1a0/0x1a0 [ 333.687346][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 333.687371][ C0] __irq_exit_rcu+0xd3/0x190 [ 333.687388][ C0] ? irq_exit_rcu+0x20/0x20 [ 333.687410][ C0] irq_exit_rcu+0x9/0x20 [ 333.687425][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 333.687450][ C0] [ 333.687461][ C0] [ 333.687468][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.687488][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 333.687510][ C0] Code: ed 01 00 00 e8 2e 7f 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 1f 7f 1b 00 eb 06 e8 18 7f 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 333.687523][ C0] RSP: 0018:ffffc900001072c0 EFLAGS: 00000293 [ 333.687538][ C0] RAX: ffffffff816c0358 RBX: ffffc9000010743f RCX: ffff88801ba73c00 [ 333.687550][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.687560][ C0] RBP: ffffc90000107410 R08: ffffffff911ef507 R09: 1ffffffff223dea0 [ 333.687572][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: ffffffff8d8cdc20 [ 333.687585][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8cdc78 R15: dffffc0000000000 [ 333.687602][ C0] ? console_flush_all+0x878/0xcf0 [ 333.687631][ C0] ? console_flush_all+0x10b/0xcf0 [ 333.687658][ C0] ? is_console_locked+0x20/0x20 [ 333.687679][ C0] ? lock_chain_count+0x20/0x20 [ 333.687695][ C0] ? mark_lock+0x94/0x320 [ 333.687716][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 333.687740][ C0] console_unlock+0xad/0x350 [ 333.687761][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 333.687801][ C0] ? console_unlock+0x2ff/0x350 [ 333.687826][ C0] vprintk_emit+0x497/0x610 [ 333.687848][ C0] ? printk_sprint+0x460/0x460 [ 333.687868][ C0] ? __wake_up_klogd+0xd9/0x100 [ 333.687888][ C0] ? vprintk_emit+0x53d/0x610 [ 333.687915][ C0] _printk+0xde/0x130 [ 333.687930][ C0] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 333.687957][ C0] ? load_image+0x420/0x420 [ 333.687973][ C0] ? _printk+0xde/0x130 [ 333.687987][ C0] ? set_worker_desc+0x1f0/0x1f0 [ 333.688005][ C0] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 333.688029][ C0] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 333.688052][ C0] ? copy_from_kernel_nofault+0x194/0x2f0 [ 333.688076][ C0] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 333.688099][ C0] show_opcodes+0x146/0x170 [ 333.688127][ C0] show_iret_regs+0x1d/0x50 [ 333.688150][ C0] __show_regs+0x34/0x600 [ 333.688174][ C0] ? dump_stack_print_info+0xf5/0x150 [ 333.688195][ C0] show_regs+0x44/0x90 [ 333.688215][ C0] __warn+0x160/0x470 [ 333.688236][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.688261][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.688284][ C0] report_bug+0x2be/0x4f0 [ 333.688303][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.688327][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.688350][ C0] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 333.688372][ C0] handle_bug+0xcf/0x120 [ 333.688392][ C0] exc_invalid_op+0x1a/0x50 [ 333.688411][ C0] asm_exc_invalid_op+0x1a/0x20 [ 333.688428][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.688452][ C0] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 333.688470][ C0] RSP: 0018:ffffc900001079c0 EFLAGS: 00010293 [ 333.688485][ C0] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff88801ba73c00 [ 333.688496][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 333.688506][ C0] RBP: dffffc0000000000 R08: ffff88806173162f R09: 1ffff1100c2e62c5 [ 333.688518][ C0] R10: dffffc0000000000 R11: ffffed100c2e62c6 R12: 0000000000000001 [ 333.688530][ C0] R13: ffff888061732659 R14: ffff88807836ad48 R15: ffff888066a2e700 [ 333.688548][ C0] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 333.688585][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 333.688612][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 333.688636][ C0] ? mutex_lock_nested+0x20/0x20 [ 333.688660][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 333.688679][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 333.688704][ C0] ? read_lock_is_recursive+0x20/0x20 [ 333.688729][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 333.688752][ C0] ? process_scheduled_works+0x975/0x1600 [ 333.688775][ C0] process_scheduled_works+0xa60/0x1600 [ 333.688839][ C0] ? worker_attach_to_pool+0x370/0x370 [ 333.688865][ C0] ? assign_work+0x3cc/0x5d0 [ 333.688889][ C0] worker_thread+0xa5e/0xfe0 [ 333.688929][ C0] kthread+0x2fa/0x390 [ 333.688945][ C0] ? pr_cont_work+0x550/0x550 [ 333.688965][ C0] ? kthread_blkcg+0xd0/0xd0 [ 333.688981][ C0] ret_from_fork+0x48/0x80 [ 333.689000][ C0] ? kthread_blkcg+0xd0/0xd0 [ 333.689016][ C0] ret_from_fork_asm+0x11/0x20 [ 333.689049][ C0] [ 333.689057][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.689064][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 333.689077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.689087][ C0] Workqueue: phy17 ieee80211_csa_finalize_work [ 333.689109][ C0] Call Trace: [ 333.689115][ C0] [ 333.689119][ C0] dump_stack_lvl+0x18c/0x250 [ 333.689139][ C0] ? show_regs_print_info+0x20/0x20 [ 333.689157][ C0] ? load_image+0x420/0x420 [ 333.689180][ C0] panic+0x2ca/0x720 [ 333.689206][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 333.689233][ C0] ? ret_from_fork_asm+0x11/0x20 [ 333.689257][ C0] __warn+0x2e0/0x470 [ 333.689277][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 333.689301][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 333.689323][ C0] report_bug+0x2be/0x4f0 [ 333.689341][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 333.689364][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 333.689386][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 333.689408][ C0] handle_bug+0xcf/0x120 [ 333.689426][ C0] exc_invalid_op+0x1a/0x50 [ 333.689444][ C0] asm_exc_invalid_op+0x1a/0x20 [ 333.689466][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 333.689488][ C0] Code: f7 4c 89 ef e8 b0 9f b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 6b ba 79 f7 0f 0b e9 61 f8 ff ff e8 5f ba 79 f7 <0f> 0b e9 85 fb ff ff e8 53 ba 79 f7 48 c7 c7 e0 cc 65 8e 4c 89 e6 [ 333.689505][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 333.689517][ C0] RAX: ffffffff8a0dc811 RBX: dffffc0000000000 RCX: ffff88801ba73c00 [ 333.689528][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.689537][ C0] RBP: 0000000000000000 R08: ffff88801ba73c00 R09: 0000000000000003 [ 333.689547][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888061732440 [ 333.689556][ C0] R13: ffff888026976824 R14: ffff888061732930 R15: ffff888026976800 [ 333.689573][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 333.689600][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 333.689622][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 333.689651][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 333.689677][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 333.689708][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 333.689732][ C0] __iterate_interfaces+0x225/0x4c0 [ 333.689749][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 333.689768][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 333.689790][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 333.689809][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 333.689830][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 333.689846][ C0] ? hw_scan_work+0xf10/0xf10 [ 333.689862][ C0] __hrtimer_run_queues+0x525/0xc10 [ 333.689893][ C0] ? hrtimer_interrupt+0x980/0x980 [ 333.689908][ C0] ? read_tsc+0x9/0x20 [ 333.689931][ C0] hrtimer_run_softirq+0x177/0x290 [ 333.689952][ C0] handle_softirqs+0x27d/0x820 [ 333.689966][ C0] ? read_tsc+0x9/0x20 [ 333.689981][ C0] ? ktime_get+0x24b/0x280 [ 333.690000][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 333.690019][ C0] ? do_softirq+0x1a0/0x1a0 [ 333.690037][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 333.690059][ C0] __irq_exit_rcu+0xd3/0x190 [ 333.690074][ C0] ? irq_exit_rcu+0x20/0x20 [ 333.690096][ C0] irq_exit_rcu+0x9/0x20 [ 333.690109][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 333.690130][ C0] [ 333.690134][ C0] [ 333.690139][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.690157][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 333.690176][ C0] Code: ed 01 00 00 e8 2e 7f 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 1f 7f 1b 00 eb 06 e8 18 7f 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 333.690188][ C0] RSP: 0018:ffffc900001072c0 EFLAGS: 00000293 [ 333.690200][ C0] RAX: ffffffff816c0358 RBX: ffffc9000010743f RCX: ffff88801ba73c00 [ 333.690211][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.690219][ C0] RBP: ffffc90000107410 R08: ffffffff911ef507 R09: 1ffffffff223dea0 [ 333.690230][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: ffffffff8d8cdc20 [ 333.690241][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8cdc78 R15: dffffc0000000000 [ 333.690257][ C0] ? console_flush_all+0x878/0xcf0 [ 333.690284][ C0] ? console_flush_all+0x10b/0xcf0 [ 333.690309][ C0] ? is_console_locked+0x20/0x20 [ 333.690328][ C0] ? lock_chain_count+0x20/0x20 [ 333.690344][ C0] ? mark_lock+0x94/0x320 [ 333.690363][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 333.690385][ C0] console_unlock+0xad/0x350 [ 333.690406][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 333.690427][ C0] ? console_unlock+0x2ff/0x350 [ 333.690449][ C0] vprintk_emit+0x497/0x610 [ 333.690476][ C0] ? printk_sprint+0x460/0x460 [ 333.690496][ C0] ? __wake_up_klogd+0xd9/0x100 [ 333.690514][ C0] ? vprintk_emit+0x53d/0x610 [ 333.690539][ C0] _printk+0xde/0x130 [ 333.690552][ C0] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 333.690576][ C0] ? load_image+0x420/0x420 [ 333.690591][ C0] ? _printk+0xde/0x130 [ 333.690603][ C0] ? set_worker_desc+0x1f0/0x1f0 [ 333.690619][ C0] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 333.690641][ C0] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 333.690662][ C0] ? copy_from_kernel_nofault+0x194/0x2f0 [ 333.690685][ C0] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 333.690707][ C0] show_opcodes+0x146/0x170 [ 333.690733][ C0] show_iret_regs+0x1d/0x50 [ 333.690753][ C0] __show_regs+0x34/0x600 [ 333.690775][ C0] ? dump_stack_print_info+0xf5/0x150 [ 333.690795][ C0] show_regs+0x44/0x90 [ 333.690814][ C0] __warn+0x160/0x470 [ 333.690833][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.690857][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.690878][ C0] report_bug+0x2be/0x4f0 [ 333.690896][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.690918][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.690940][ C0] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 333.690961][ C0] handle_bug+0xcf/0x120 [ 333.690979][ C0] exc_invalid_op+0x1a/0x50 [ 333.690997][ C0] asm_exc_invalid_op+0x1a/0x20 [ 333.691012][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 333.691034][ C0] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 333.691045][ C0] RSP: 0018:ffffc900001079c0 EFLAGS: 00010293 [ 333.691057][ C0] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff88801ba73c00 [ 333.691077][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 333.691085][ C0] RBP: dffffc0000000000 R08: ffff88806173162f R09: 1ffff1100c2e62c5 [ 333.691096][ C0] R10: dffffc0000000000 R11: ffffed100c2e62c6 R12: 0000000000000001 [ 333.691106][ C0] R13: ffff888061732659 R14: ffff88807836ad48 R15: ffff888066a2e700 [ 333.691123][ C0] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 333.691159][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 333.691184][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 333.691207][ C0] ? mutex_lock_nested+0x20/0x20 [ 333.691229][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 333.691247][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 333.691271][ C0] ? read_lock_is_recursive+0x20/0x20 [ 333.691294][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 333.691317][ C0] ? process_scheduled_works+0x975/0x1600 [ 333.691338][ C0] process_scheduled_works+0xa60/0x1600 [ 333.691377][ C0] ? worker_attach_to_pool+0x370/0x370 [ 333.691401][ C0] ? assign_work+0x3cc/0x5d0 [ 333.691424][ C0] worker_thread+0xa5e/0xfe0 [ 333.691466][ C0] kthread+0x2fa/0x390 [ 333.691480][ C0] ? pr_cont_work+0x550/0x550 [ 333.691499][ C0] ? kthread_blkcg+0xd0/0xd0 [ 333.691514][ C0] ret_from_fork+0x48/0x80 [ 333.691531][ C0] ? kthread_blkcg+0xd0/0xd0 [ 333.691547][ C0] ret_from_fork_asm+0x11/0x20 [ 333.691577][ C0] [ 333.691657][ C0] Kernel Offset: disabled