last executing test programs: 16m0.675718372s ago: executing program 0 (id=1249): epoll_create(0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000680)={0x0, 0x0, 0xb, 0x2, 0x4, 0x100}) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000740)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019800)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) listen(r4, 0x5) 15m59.0832459s ago: executing program 0 (id=1251): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r3, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe, 0xe, 0x5, [@datasec={0x3, 0x0, 0x0, 0xf, 0x2, [], "34aa"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x2d, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, 0x0) io_setup(0x4, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) dup(r4) 15m56.690970497s ago: executing program 0 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15m56.243932917s ago: executing program 0 (id=1255): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x281c2, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000480)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0xc8b573f2c15a223a) getdents64(r0, 0x0, 0x0) 15m55.793837058s ago: executing program 0 (id=1258): epoll_create(0x9) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000740)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019800)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) listen(r4, 0x5) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x40, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa80044, 0x1c6) 15m53.365937945s ago: executing program 0 (id=1260): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(r0, 0x2, &(0x7f0000000140)=0x8000000000009) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000200)={0x8000000, 0x200, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getsig(0x4202, r0, 0x5, &(0x7f0000000900)) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000840), 0x0) listen(0xffffffffffffffff, 0x28) poll(&(0x7f0000000640)=[{0xffffffffffffffff, 0x8100}], 0x1, 0x8001) mount(&(0x7f0000000680)=@loop={'/dev/loop', 0x0}, &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700)='ntfs3\x00', 0x0, &(0x7f0000000740)='discard') 15m37.843724733s ago: executing program 32 (id=1260): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(r0, 0x2, &(0x7f0000000140)=0x8000000000009) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000200)={0x8000000, 0x200, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getsig(0x4202, r0, 0x5, &(0x7f0000000900)) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000840), 0x0) listen(0xffffffffffffffff, 0x28) poll(&(0x7f0000000640)=[{0xffffffffffffffff, 0x8100}], 0x1, 0x8001) mount(&(0x7f0000000680)=@loop={'/dev/loop', 0x0}, &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700)='ntfs3\x00', 0x0, &(0x7f0000000740)='discard') 14m38.948015526s ago: executing program 1 (id=1388): r0 = fsopen(&(0x7f0000000740)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) getdents64(0xffffffffffffffff, &(0x7f0000001d40)=""/4128, 0x1020) 14m37.809050094s ago: executing program 1 (id=1391): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file3\x00', 0x0, &(0x7f0000000e80)={[{@errors_remount_ro}, {@order_relaxed}, {@nodiscard}, {@norecovery}, {@errors_remount_ro}, {@discard}, {@nobarrier}, {@nobarrier}, {@errors_remount_ro}, {@errors_continue}]}, 0x1, 0xa88, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='.\x00', 0x0, 0x80) ioctl$FS_IOC_SETFSLABEL(r0, 0x80086e8a, 0x0) 14m36.682912891s ago: executing program 1 (id=1394): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000500)) close_range(r0, 0xffffffffffffffff, 0x0) 14m35.097939029s ago: executing program 1 (id=1402): syz_mount_image$exfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x200800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRES16, @ANYRES16], 0x9, 0x155d, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) pipe2$9p(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000002140)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000002180)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000021c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240), 0x4, &(0x7f0000002280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@noextend}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', 0x109000, 0x93) 14m33.358627381s ago: executing program 1 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 14m32.007996184s ago: executing program 1 (id=1414): dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000800)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) unshare(0x22020600) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x1000000}) recvmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14m31.387467239s ago: executing program 33 (id=1414): dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000800)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) unshare(0x22020600) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x1000000}) recvmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 7m12.635996048s ago: executing program 2 (id=2418): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fffe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x400000000000041, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0) 7m11.346027769s ago: executing program 2 (id=2424): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000bc0)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000c80)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000cc0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000dc0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000e00), 0x10106, 0x2, 0x0) inotify_init1(0x0) r2 = open(&(0x7f0000000e80)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 7m6.003969529s ago: executing program 2 (id=2436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800500030017d400000c0001800800014000000000080006400000000405000500020000000500010006"], 0x6c}}, 0x40000) 7m5.667929037s ago: executing program 2 (id=2437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000f00)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000f40)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000f80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001140)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d4", 0xd4, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000001300), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 7m3.599250127s ago: executing program 2 (id=2441): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m3.107796579s ago: executing program 2 (id=2445): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fffe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x2) recvmmsg(r2, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r4, 0x400, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x82200, 0x102) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) sendto$inet(r0, &(0x7f0000000040)='$', 0x1, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1, 0x0, 0x0) unshare(0x6020400) socket$key(0xf, 0x3, 0x2) 6m47.255780062s ago: executing program 34 (id=2445): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fffe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x2) recvmmsg(r2, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r4, 0x400, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x82200, 0x102) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) sendto$inet(r0, &(0x7f0000000040)='$', 0x1, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1, 0x0, 0x0) unshare(0x6020400) socket$key(0xf, 0x3, 0x2) 7.555619098s ago: executing program 6 (id=4140): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) 7.41714687s ago: executing program 6 (id=4141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) 6.722074378s ago: executing program 6 (id=4142): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) 5.716252282s ago: executing program 6 (id=4148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="8155", 0x2}], 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x60cd894) 5.475746458s ago: executing program 6 (id=4152): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000100)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e1}, 0x0, &(0x7f0000000040), 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0xe, &(0x7f0000000280)="02", 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) fsopen(&(0x7f0000000140)='hfs\x00', 0x0) 5.249137793s ago: executing program 4 (id=4154): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x14, r4, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) 3.887971656s ago: executing program 4 (id=4156): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000100)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x4004) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x14a0, &(0x7f0000000500)=ANY=[], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x143042, 0x80) pwritev2(r5, &(0x7f0000000580)=[{&(0x7f00000005c0)}], 0x1, 0x5405, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e1}, 0x0, &(0x7f0000000040), 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.267719311s ago: executing program 3 (id=4160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="8155", 0x2}], 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x60cd894) 3.057902476s ago: executing program 3 (id=4161): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,timeo=1']) nanosleep(&(0x7f0000000a00)={0x0, 0x2faf080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) read(r3, 0x0, 0x0) write(r3, &(0x7f0000000900)="000000000000000001000000000000002400000001000000ffffff7f00000000000000001100"/52, 0x34) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000280)={0xfffffffd, 0xb, 0xa4b3, 0x3ff, 0x109000000, 0x48, 0xffffffffffffc474, 0x9, 0x12, 0x7, 0xfffffff8, 0x2}) syz_open_dev$loop(0x0, 0x5, 0x101000) pipe2$9p(0x0, 0x880) 2.015957431s ago: executing program 5 (id=4163): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc\x00', 0x2) mount(0x0, &(0x7f00000009c0)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000a80)='9', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x8, 0x10, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.991232782s ago: executing program 5 (id=4164): unshare(0x20000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000100)='7', 0x1) unshare(0x2a020400) 1.991021202s ago: executing program 3 (id=4165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x101020, 0x0) 1.838794825s ago: executing program 5 (id=4166): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) 1.627321081s ago: executing program 3 (id=4167): setns(0xc9, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000740)={{0x0, 0x7f}, 0x2c}, 0x10) 1.227319811s ago: executing program 5 (id=4168): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000b00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "823d"}]}}}}}}}}, 0x0) 1.037638795s ago: executing program 4 (id=4169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="8155", 0x2}], 0x1) sendmmsg$inet(r0, &(0x7f0000007080), 0x0, 0x60cd894) 1.029193755s ago: executing program 5 (id=4170): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,timeo=1']) nanosleep(&(0x7f0000000a00)={0x0, 0x2faf080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) read(r2, 0x0, 0x0) write(r2, &(0x7f0000000900)="000000000000000001000000000000002400000001000000ffffff7f00000000000000001100"/52, 0x34) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000280)={0xfffffffd, 0xb, 0xa4b3, 0x3ff, 0x109000000, 0x48, 0xffffffffffffc474, 0x9, 0x12, 0x7, 0xfffffff8, 0x2}) pipe2$9p(0x0, 0x880) 768.095361ms ago: executing program 3 (id=4171): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0xffffffffffffffff, 0x0) 619.797495ms ago: executing program 3 (id=4172): r0 = fsopen(&(0x7f0000000300)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008975) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 538.854287ms ago: executing program 4 (id=4173): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000100), 0x800000000000072, 0x10040) 219.950665ms ago: executing program 4 (id=4174): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000280)={0xa00000, 0x1, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9909c8, 0x0, '\x00', @string=0x0}}) 180.099506ms ago: executing program 6 (id=4175): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x101020, 0x0) 60.181459ms ago: executing program 5 (id=4176): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d28616573"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) 0s ago: executing program 4 (id=4177): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x41) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200700, &(0x7f00000000c0)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f0000000380)="$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") syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x88}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000016c0), 0x8, 0x10, &(0x7f0000001700), 0x10}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000900)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) connect$unix(r4, &(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000000000c02000000000000000100000d00000000000000000000000000005f00"], 0x0, 0x3c}, 0x28) lsetxattr$security_ima(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000200)={0x6, 0x8001, 0x79, 0x80000000, 0x1}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000340)=0x1) kernel console output (not intermixed with test programs): ave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.478247][T13878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.503559][T13878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.520932][T13878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.593457][T13878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.763160][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1011.984410][T13878] hsr_slave_0: entered promiscuous mode [ 1012.172069][T13878] hsr_slave_1: entered promiscuous mode [ 1012.202362][T13878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1012.210073][T13878] Cannot create hsr debugfs directory [ 1012.731843][T13878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.914132][T13878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.039413][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1013.064663][T13878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.190602][T10180] Bluetooth: hci2: command tx timeout [ 1013.606045][T13878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.831714][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1013.877803][T13878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1013.901824][T13878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1014.007135][T13878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1014.020399][T13878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1014.818878][T13878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.852012][T13878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.875045][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.882321][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.927526][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.935044][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.319511][T13878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.342669][T10180] Bluetooth: hci2: command tx timeout [ 1015.415295][T13878] veth0_vlan: entered promiscuous mode [ 1015.439040][T13878] veth1_vlan: entered promiscuous mode [ 1015.507028][T13878] veth0_macvtap: entered promiscuous mode [ 1015.527851][T13878] veth1_macvtap: entered promiscuous mode [ 1015.558439][T13878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.570691][T13878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.586411][T13878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.607158][T13878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.625129][T13878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.637967][T13878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.654024][T13878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.667246][T13878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.686879][T13878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.726126][T13878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.740984][T13878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.775047][T13878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.789797][T13878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.804205][T13878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.827987][T13878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.842913][T13878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.858957][T13878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.873105][T13878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.897898][T13878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.910024][T13878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.919130][T13878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.928166][T13878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.211543][T13959] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1016.567742][ T2884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.765610][ T2884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.791631][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1017.845979][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.876458][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.159370][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1018.702265][T13980] tipc: Started in network mode [ 1018.707310][T13980] tipc: Node identity 4, cluster identity 4711 [ 1018.713766][T13980] tipc: Node number set to 4 [ 1018.803798][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1019.997236][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1020.793926][T13985] loop2: detected capacity change from 0 to 32768 [ 1020.847653][T13985] (syz.2.2157,13985,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1020.941657][T13985] (syz.2.2157,13985,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1021.105609][T13985] JBD2: Ignoring recovery information on journal [ 1021.236855][T13985] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1022.455909][T14010] (syz.2.2157,14010,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1023.355314][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1023.527362][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1023.912879][T12894] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1024.869732][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1026.130202][T14028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1026.922205][T14038] loop2: detected capacity change from 0 to 32768 [ 1027.153992][T14038] (syz.2.2170,14038,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1027.221366][T14038] (syz.2.2170,14038,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1027.368849][T14038] JBD2: Ignoring recovery information on journal [ 1027.569721][T14038] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1028.884034][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1029.034064][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1029.680176][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1030.571486][T14084] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2179'. [ 1031.050037][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1031.282282][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1036.086790][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1036.379926][T14138] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2196'. [ 1037.099384][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1037.110718][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1041.204480][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1042.301104][T14176] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2207'. [ 1042.493413][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1042.505352][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1046.314795][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1047.249230][T14222] IPv6: NLM_F_CREATE should be specified when creating new route [ 1047.257677][T14222] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2222'. [ 1048.081318][ T5856] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1048.262882][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1048.272776][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1048.366563][ T5856] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1048.376175][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1048.384886][ T5856] usb 3-1: Product: syz [ 1048.392214][ T5856] usb 3-1: SerialNumber: syz [ 1048.411973][ T5856] usb 3-1: config 0 descriptor?? [ 1050.537102][ T9519] usb 3-1: USB disconnect, device number 11 [ 1051.351915][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1051.489158][T14261] loop2: detected capacity change from 0 to 32768 [ 1051.535474][T14261] (syz.2.2235,14261,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1051.555509][T14261] (syz.2.2235,14261,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1051.582676][T14261] JBD2: Ignoring recovery information on journal [ 1051.692096][T14261] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1052.227438][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1052.510092][T14280] (syz.2.2235,14280,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1052.523850][T14281] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #16 has bitmap size 448 but physical max of 256 [ 1052.544562][T14281] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1052.554589][T14281] OCFS2: Returning error to the calling process. [ 1052.560940][T14281] (syz.2.2235,14281,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 16 failed -5 [ 1052.570319][T14281] (syz.2.2235,14281,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -5 [ 1052.578671][T14281] (syz.2.2235,14281,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -5 [ 1052.588184][T14281] (syz.2.2235,14281,0):ocfs2_test_inode_bit:2896 ERROR: status = -5 [ 1052.596341][T14281] (syz.2.2235,14281,0):ocfs2_get_parent:166 ERROR: test inode bit failed -5 [ 1052.849468][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1053.359954][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1053.394937][T14296] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2243'. [ 1053.681374][T13960] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1053.893060][T13960] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1053.997131][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1054.049581][T13960] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1054.083870][T13960] usb 3-1: Product: syz [ 1054.101332][T13960] usb 3-1: SerialNumber: syz [ 1054.130392][T13960] usb 3-1: config 0 descriptor?? [ 1054.668631][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.675148][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.304577][ T6195] usb 3-1: USB disconnect, device number 12 [ 1056.830044][T14315] syz.2.2250 (14315): drop_caches: 0 [ 1057.194387][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.833005][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.935414][T14339] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2258'. [ 1058.712752][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1059.005990][T14337] loop2: detected capacity change from 0 to 32768 [ 1059.023698][T14337] (syz.2.2259,14337,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1059.044144][T14337] (syz.2.2259,14337,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1059.101612][T14337] JBD2: Ignoring recovery information on journal [ 1059.252326][T14337] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1059.762244][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1059.902986][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1061.099857][T10180] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1063.022321][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1063.752535][T14378] loop2: detected capacity change from 0 to 4096 [ 1063.974373][T14387] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2274'. [ 1063.998234][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1064.233354][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1064.253943][T14389] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1064.774973][T10180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1064.786761][T10180] CPU: 1 PID: 10180 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1064.794456][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1064.804538][T10180] Workqueue: hci2 hci_rx_work [ 1064.809276][T10180] Call Trace: [ 1064.812569][T10180] [ 1064.815517][T10180] dump_stack_lvl+0x18c/0x250 [ 1064.820216][T10180] ? show_regs_print_info+0x20/0x20 [ 1064.825435][T10180] ? load_image+0x420/0x420 [ 1064.829998][T10180] sysfs_create_dir_ns+0x26e/0x2a0 [ 1064.835152][T10180] ? __lock_acquire+0x7eb0/0x7eb0 [ 1064.840226][T10180] ? sysfs_warn_dup+0xa0/0xa0 [ 1064.844944][T10180] ? do_raw_spin_unlock+0x121/0x230 [ 1064.850191][T10180] kobject_add_internal+0x617/0xc90 [ 1064.855440][T10180] kobject_add+0x164/0x240 [ 1064.859911][T10180] ? kobject_init+0x1d0/0x1d0 [ 1064.864631][T10180] ? get_device_parent+0x366/0x390 [ 1064.869795][T10180] device_add+0x3fa/0xc40 [ 1064.874168][T10180] hci_conn_add_sysfs+0xd5/0x1e0 [ 1064.879141][T10180] le_conn_complete_evt+0xe9a/0x1480 [ 1064.884480][T10180] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1064.890781][T10180] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1064.896459][T10180] ? mutex_unlock+0x10/0x10 [ 1064.900995][T10180] ? skb_pull_data+0xf0/0x1f0 [ 1064.905723][T10180] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1064.911756][T10180] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1064.918216][T10180] ? hci_remote_host_features_evt+0x150/0x150 [ 1064.924327][T10180] hci_event_packet+0x7b4/0x1280 [ 1064.929302][T10180] ? __lock_acquire+0x7eb0/0x7eb0 [ 1064.934367][T10180] ? lock_chain_count+0x20/0x20 [ 1064.939269][T10180] ? bis_list+0x290/0x290 [ 1064.943638][T10180] ? kcov_remote_start+0x513/0x810 [ 1064.948879][T10180] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.954150][T10180] ? hci_send_to_monitor+0xd7/0x4f0 [ 1064.959506][T10180] hci_rx_work+0x43a/0xd60 [ 1064.963970][T10180] ? process_scheduled_works+0x975/0x1600 [ 1064.969730][T10180] process_scheduled_works+0xa60/0x1600 [ 1064.975350][T10180] ? worker_attach_to_pool+0x370/0x370 [ 1064.980862][T10180] ? assign_work+0x3cc/0x5d0 [ 1064.985511][T10180] worker_thread+0xa5e/0xfe0 [ 1064.990161][T10180] ? _raw_spin_unlock+0x40/0x40 [ 1064.995137][T10180] ? __kthread_parkme+0x71/0x1c0 [ 1065.000125][T10180] kthread+0x2fa/0x390 [ 1065.004232][T10180] ? pr_cont_work+0x550/0x550 [ 1065.008935][T10180] ? kthread_blkcg+0xd0/0xd0 [ 1065.013552][T10180] ret_from_fork+0x48/0x80 [ 1065.017998][T10180] ? kthread_blkcg+0xd0/0xd0 [ 1065.022615][T10180] ret_from_fork_asm+0x11/0x20 [ 1065.027433][T10180] [ 1065.032296][T10180] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1065.046956][T10180] Bluetooth: hci2: failed to register connection device [ 1065.079405][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1068.179626][T14429] loop2: detected capacity change from 0 to 4096 [ 1068.324592][T14427] fuse: Bad value for 'fd' [ 1068.429565][T13220] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1068.440853][T13220] CPU: 1 PID: 13220 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1068.448545][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1068.458642][T13220] Workqueue: hci1 hci_rx_work [ 1068.463373][T13220] Call Trace: [ 1068.466670][T13220] [ 1068.469625][T13220] dump_stack_lvl+0x18c/0x250 [ 1068.474342][T13220] ? show_regs_print_info+0x20/0x20 [ 1068.479572][T13220] ? load_image+0x420/0x420 [ 1068.484132][T13220] sysfs_create_dir_ns+0x26e/0x2a0 [ 1068.489276][T13220] ? __lock_acquire+0x7eb0/0x7eb0 [ 1068.494332][T13220] ? sysfs_warn_dup+0xa0/0xa0 [ 1068.499051][T13220] ? do_raw_spin_unlock+0x121/0x230 [ 1068.504301][T13220] kobject_add_internal+0x617/0xc90 [ 1068.509547][T13220] kobject_add+0x164/0x240 [ 1068.514020][T13220] ? kobject_init+0x1d0/0x1d0 [ 1068.518747][T13220] ? get_device_parent+0x366/0x390 [ 1068.523897][T13220] device_add+0x3fa/0xc40 [ 1068.528241][T13220] hci_conn_add_sysfs+0xd5/0x1e0 [ 1068.533287][T13220] le_conn_complete_evt+0xe9a/0x1480 [ 1068.538594][T13220] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1068.544862][T13220] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1068.550601][T13220] ? mutex_unlock+0x10/0x10 [ 1068.555123][T13220] ? skb_pull_data+0xf0/0x1f0 [ 1068.559812][T13220] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1068.565719][T13220] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1068.572142][T13220] ? hci_remote_host_features_evt+0x150/0x150 [ 1068.578231][T13220] hci_event_packet+0x7b4/0x1280 [ 1068.583202][T13220] ? __lock_acquire+0x7eb0/0x7eb0 [ 1068.588233][T13220] ? lock_chain_count+0x20/0x20 [ 1068.593106][T13220] ? bis_list+0x290/0x290 [ 1068.597442][T13220] ? kcov_remote_start+0x513/0x810 [ 1068.602563][T13220] ? lockdep_hardirqs_on+0x98/0x150 [ 1068.607772][T13220] ? hci_send_to_monitor+0xd7/0x4f0 [ 1068.612985][T13220] hci_rx_work+0x43a/0xd60 [ 1068.617422][T13220] ? process_scheduled_works+0x975/0x1600 [ 1068.623156][T13220] process_scheduled_works+0xa60/0x1600 [ 1068.628733][T13220] ? worker_attach_to_pool+0x370/0x370 [ 1068.634222][T13220] ? assign_work+0x3cc/0x5d0 [ 1068.638826][T13220] worker_thread+0xa5e/0xfe0 [ 1068.643440][T13220] ? _raw_spin_unlock+0x40/0x40 [ 1068.648295][T13220] ? __kthread_parkme+0x71/0x1c0 [ 1068.653260][T13220] kthread+0x2fa/0x390 [ 1068.657337][T13220] ? pr_cont_work+0x550/0x550 [ 1068.662018][T13220] ? kthread_blkcg+0xd0/0xd0 [ 1068.666611][T13220] ret_from_fork+0x48/0x80 [ 1068.671040][T13220] ? kthread_blkcg+0xd0/0xd0 [ 1068.675644][T13220] ret_from_fork_asm+0x11/0x20 [ 1068.680449][T13220] [ 1068.688716][T13220] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1068.702913][T13220] Bluetooth: hci1: failed to register connection device [ 1068.713532][ T3499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1069.019390][T14440] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2290'. [ 1069.247484][T14444] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2291'. [ 1069.353225][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1070.039284][T14435] loop2: detected capacity change from 0 to 32768 [ 1070.060982][T14435] (syz.2.2288,14435,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1070.096702][T14435] (syz.2.2288,14435,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1070.143547][T14435] JBD2: Ignoring recovery information on journal [ 1070.201236][T14435] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1070.642673][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1070.751944][T14460] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #16 has bitmap size 448 but physical max of 256 [ 1070.772845][T14460] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1070.782793][T14460] OCFS2: Returning error to the calling process. [ 1070.789136][T14460] (syz.2.2288,14460,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 16 failed -5 [ 1070.798558][T14460] (syz.2.2288,14460,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -5 [ 1070.806894][T14460] (syz.2.2288,14460,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -5 [ 1070.816484][T14460] (syz.2.2288,14460,0):ocfs2_test_inode_bit:2896 ERROR: status = -5 [ 1070.824539][T14460] (syz.2.2288,14460,0):ocfs2_get_parent:166 ERROR: test inode bit failed -5 [ 1070.884913][T14459] (syz.2.2288,14459,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1071.165777][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1072.943654][T10180] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1073.855769][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1073.892602][T14472] fuse: Bad value for 'fd' [ 1074.020036][T14476] loop2: detected capacity change from 0 to 32768 [ 1074.058225][T14476] (syz.2.2300,14476,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1074.090967][T14476] (syz.2.2300,14476,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1074.162932][T14476] JBD2: Ignoring recovery information on journal [ 1074.323707][T14476] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1074.399786][T14501] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2306'. [ 1075.731702][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.765425][ T3499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.975126][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1076.397581][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1077.732150][T13220] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1078.953601][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1080.492758][T14548] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2319'. [ 1081.284440][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1081.565551][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1081.693912][ T6195] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1082.330480][ T6195] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1082.346700][T14570] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2325'. [ 1082.356200][ T6195] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1082.371314][ T6195] usb 3-1: Product: syz [ 1082.375559][ T6195] usb 3-1: SerialNumber: syz [ 1082.393861][ T6195] usb 3-1: config 0 descriptor?? [ 1082.797961][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1084.240278][ T5907] usb 3-1: USB disconnect, device number 13 [ 1084.711667][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1085.746440][T14604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2334'. [ 1085.801816][T10180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1085.815954][T10180] CPU: 0 PID: 10180 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1085.823704][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1085.833798][T10180] Workqueue: hci0 hci_rx_work [ 1085.838521][T10180] Call Trace: [ 1085.841817][T10180] [ 1085.844764][T10180] dump_stack_lvl+0x18c/0x250 [ 1085.849477][T10180] ? show_regs_print_info+0x20/0x20 [ 1085.854706][T10180] ? load_image+0x420/0x420 [ 1085.859258][T10180] sysfs_create_dir_ns+0x26e/0x2a0 [ 1085.864404][T10180] ? __lock_acquire+0x7eb0/0x7eb0 [ 1085.869461][T10180] ? sysfs_warn_dup+0xa0/0xa0 [ 1085.874176][T10180] ? do_raw_spin_unlock+0x121/0x230 [ 1085.879411][T10180] kobject_add_internal+0x617/0xc90 [ 1085.884737][T10180] kobject_add+0x164/0x240 [ 1085.889185][T10180] ? kobject_init+0x1d0/0x1d0 [ 1085.893892][T10180] ? get_device_parent+0x366/0x390 [ 1085.899136][T10180] device_add+0x3fa/0xc40 [ 1085.903516][T10180] hci_conn_add_sysfs+0xd5/0x1e0 [ 1085.908511][T10180] le_conn_complete_evt+0xe9a/0x1480 [ 1085.913873][T10180] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1085.920171][T10180] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1085.925856][T10180] ? mutex_unlock+0x10/0x10 [ 1085.930411][T10180] ? skb_pull_data+0xf0/0x1f0 [ 1085.935145][T10180] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1085.941090][T10180] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1085.947546][T10180] ? hci_remote_host_features_evt+0x150/0x150 [ 1085.953746][T10180] hci_event_packet+0x7b4/0x1280 [ 1085.958738][T10180] ? __lock_acquire+0x7eb0/0x7eb0 [ 1085.963808][T10180] ? lock_chain_count+0x20/0x20 [ 1085.968702][T10180] ? bis_list+0x290/0x290 [ 1085.973069][T10180] ? kcov_remote_start+0x513/0x810 [ 1085.978221][T10180] ? lockdep_hardirqs_on+0x98/0x150 [ 1085.983473][T10180] ? hci_send_to_monitor+0xd7/0x4f0 [ 1085.988714][T10180] hci_rx_work+0x43a/0xd60 [ 1085.993187][T10180] ? process_scheduled_works+0x975/0x1600 [ 1085.998995][T10180] process_scheduled_works+0xa60/0x1600 [ 1086.004662][T10180] ? worker_attach_to_pool+0x370/0x370 [ 1086.010169][T10180] ? assign_work+0x3cc/0x5d0 [ 1086.014806][T10180] worker_thread+0xa5e/0xfe0 [ 1086.019460][T10180] ? _raw_spin_unlock+0x40/0x40 [ 1086.024340][T10180] ? __kthread_parkme+0x71/0x1c0 [ 1086.029321][T10180] kthread+0x2fa/0x390 [ 1086.033443][T10180] ? pr_cont_work+0x550/0x550 [ 1086.038160][T10180] ? kthread_blkcg+0xd0/0xd0 [ 1086.042762][T10180] ret_from_fork+0x48/0x80 [ 1086.047218][T10180] ? kthread_blkcg+0xd0/0xd0 [ 1086.051816][T10180] ret_from_fork_asm+0x11/0x20 [ 1086.056598][T10180] [ 1086.069319][T10180] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1086.083961][T10180] Bluetooth: hci0: failed to register connection device [ 1086.224310][T14613] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2337'. [ 1086.521381][ T5762] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1086.819909][ T5762] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1086.931316][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1086.950779][ T5762] usb 3-1: Product: syz [ 1087.073574][ T5762] usb 3-1: SerialNumber: syz [ 1087.315811][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1087.328424][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1087.499341][ T5762] usb 3-1: config 0 descriptor?? [ 1087.798756][ T5762] hso 3-1:0.0: Failed to find BULK IN ep [ 1087.913578][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1089.661040][ T6195] usb 3-1: USB disconnect, device number 14 [ 1090.048806][T10180] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1090.476572][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1091.384515][T14658] loop2: detected capacity change from 0 to 32768 [ 1091.397177][T14658] (syz.2.2348,14658,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1091.458015][T14658] (syz.2.2348,14658,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1091.610612][T14658] JBD2: Ignoring recovery information on journal [ 1091.963434][T14658] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1093.047239][T14683] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2353'. [ 1093.778566][T14028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1093.802095][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1093.814431][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1094.090353][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1094.664157][T10180] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1095.750190][T14698] syz.2.2359 (14698): drop_caches: 0 [ 1096.235308][T14028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1098.102253][T10180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1098.115627][T10180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1098.124231][T10180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1098.133548][T10180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1098.143560][T10180] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1098.151849][T10180] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1098.311040][T14719] rxe_eth0 speed is unknown, defaulting to 1000 [ 1098.370075][T14722] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2366'. [ 1098.731278][T10180] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1098.876142][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1099.325445][T14734] syz.2.2369 (14734): drop_caches: 0 [ 1099.922415][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1100.088230][T14028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1100.273785][T13220] Bluetooth: hci1: command tx timeout [ 1100.284100][T14740] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2370'. [ 1100.591454][ T5762] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1100.901824][ T5762] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1100.919885][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1100.929309][ T5762] usb 3-1: Product: syz [ 1100.941548][ T5762] usb 3-1: SerialNumber: syz [ 1100.957217][ T5762] usb 3-1: config 0 descriptor?? [ 1100.991811][ T42] tipc: Left network mode [ 1101.054347][T14719] chnl_net:caif_netlink_parms(): no params data found [ 1101.206011][ T5762] hso 3-1:0.0: Failed to find BULK IN ep [ 1101.849768][T14719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.875633][T14719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.900656][T14719] bridge_slave_0: entered allmulticast mode [ 1101.927338][T14719] bridge_slave_0: entered promiscuous mode [ 1101.977110][T14719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.994310][T14719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.009836][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1102.025741][T14719] bridge_slave_1: entered allmulticast mode [ 1102.037420][T14719] bridge_slave_1: entered promiscuous mode [ 1102.322130][T13220] Bluetooth: hci1: command tx timeout [ 1102.855140][T14719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.917780][T14719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.181734][ T5907] usb 3-1: USB disconnect, device number 15 [ 1103.240112][T14719] team0: Port device team_slave_0 added [ 1103.255986][T14719] team0: Port device team_slave_1 added [ 1103.364418][T14719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.387868][T14719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.444696][T14719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.505780][T14719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.521985][T14719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.580126][T14719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.778765][T14719] hsr_slave_0: entered promiscuous mode [ 1103.796991][T14763] loop2: detected capacity change from 0 to 32768 [ 1103.804603][T14719] hsr_slave_1: entered promiscuous mode [ 1103.814092][T14763] (syz.2.2376,14763,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1103.828128][T14719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1103.828385][T14763] (syz.2.2376,14763,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1103.837897][T14719] Cannot create hsr debugfs directory [ 1103.968567][T14763] JBD2: Ignoring recovery information on journal [ 1104.020418][T14763] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1104.441254][T13220] Bluetooth: hci1: command tx timeout [ 1104.883657][T13220] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1104.990934][ T42] hsr_slave_0: left promiscuous mode [ 1105.005868][ T42] hsr_slave_1: left promiscuous mode [ 1105.017295][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.062475][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.079292][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.094985][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.110377][ T42] bridge_slave_1: left allmulticast mode [ 1105.120125][ T42] bridge_slave_1: left promiscuous mode [ 1105.148214][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.159609][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1105.176823][ T42] bridge_slave_0: left allmulticast mode [ 1105.193604][ T42] bridge_slave_0: left promiscuous mode [ 1105.199400][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.300700][ T42] veth1_macvtap: left promiscuous mode [ 1105.432422][ T42] veth0_macvtap: left promiscuous mode [ 1105.521560][ T42] veth1_vlan: left promiscuous mode [ 1105.596790][ T42] veth0_vlan: left promiscuous mode [ 1105.840368][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1106.789552][T10180] Bluetooth: hci1: command tx timeout [ 1107.771408][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1108.619265][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1108.677379][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1108.732938][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.815920][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.092768][ T42] bond0 (unregistering): Released all slaves [ 1110.160804][T14808] loop2: detected capacity change from 0 to 32768 [ 1110.180719][T14808] (syz.2.2389,14808,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1110.205042][T14808] (syz.2.2389,14808,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1110.240071][T14808] JBD2: Ignoring recovery information on journal [ 1110.249390][T14791] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2383'. [ 1110.370172][T14808] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1110.409619][T10180] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1110.423956][T14719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.560616][T14719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.667264][T14719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.511070][T13878] ocfs2: Unmounting device (7,2) on (node local) [ 1111.569498][T14719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.591884][T14028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1111.728317][ T42] IPVS: stop unused estimator thread 0... [ 1112.098055][T14719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1112.129667][T14719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1112.156437][T14719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1112.180297][T14719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1112.394375][T14719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.465864][T14842] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2398'. [ 1112.826974][T14719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.055995][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.063273][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.203328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.210574][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.512909][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1113.738774][T14719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.853911][T14719] veth0_vlan: entered promiscuous mode [ 1113.880154][T14719] veth1_vlan: entered promiscuous mode [ 1113.958898][T14719] veth0_macvtap: entered promiscuous mode [ 1113.980184][T14719] veth1_macvtap: entered promiscuous mode [ 1114.014268][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.041280][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.059362][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.074056][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.087729][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.098570][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.108891][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.119813][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.135602][T14719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.172554][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.191150][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.221277][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.233353][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.243572][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.258125][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.269416][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.280595][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.292804][T14719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.303105][T10180] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1114.314934][T14719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.324192][T14719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.333198][T14719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.341986][T14719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.433547][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.447855][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.476167][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.485552][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.080853][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.088577][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.161801][T13220] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1117.173675][T13220] CPU: 1 PID: 13220 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1117.181409][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1117.191501][T13220] Workqueue: hci1 hci_rx_work [ 1117.196233][T13220] Call Trace: [ 1117.199538][T13220] [ 1117.202490][T13220] dump_stack_lvl+0x18c/0x250 [ 1117.207217][T13220] ? show_regs_print_info+0x20/0x20 [ 1117.212448][T13220] ? load_image+0x420/0x420 [ 1117.217019][T13220] sysfs_create_dir_ns+0x26e/0x2a0 [ 1117.222253][T13220] ? __lock_acquire+0x7eb0/0x7eb0 [ 1117.227315][T13220] ? sysfs_warn_dup+0xa0/0xa0 [ 1117.232113][T13220] ? do_raw_spin_unlock+0x121/0x230 [ 1117.237355][T13220] kobject_add_internal+0x617/0xc90 [ 1117.242596][T13220] kobject_add+0x164/0x240 [ 1117.247056][T13220] ? kobject_init+0x1d0/0x1d0 [ 1117.251776][T13220] ? get_device_parent+0x366/0x390 [ 1117.256935][T13220] device_add+0x3fa/0xc40 [ 1117.261311][T13220] hci_conn_add_sysfs+0xd5/0x1e0 [ 1117.266292][T13220] le_conn_complete_evt+0xe9a/0x1480 [ 1117.271627][T13220] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1117.277920][T13220] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1117.283597][T13220] ? mutex_unlock+0x10/0x10 [ 1117.288136][T13220] ? skb_pull_data+0xf0/0x1f0 [ 1117.292874][T13220] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1117.299026][T13220] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1117.305492][T13220] ? hci_remote_host_features_evt+0x150/0x150 [ 1117.311646][T13220] hci_event_packet+0x7b4/0x1280 [ 1117.316624][T13220] ? __lock_acquire+0x7eb0/0x7eb0 [ 1117.321689][T13220] ? lock_chain_count+0x20/0x20 [ 1117.326577][T13220] ? bis_list+0x290/0x290 [ 1117.330968][T13220] ? kcov_remote_start+0x513/0x810 [ 1117.336119][T13220] ? lockdep_hardirqs_on+0x98/0x150 [ 1117.341359][T13220] ? hci_send_to_monitor+0xd7/0x4f0 [ 1117.346598][T13220] hci_rx_work+0x43a/0xd60 [ 1117.351115][T13220] ? process_scheduled_works+0x975/0x1600 [ 1117.356877][T13220] process_scheduled_works+0xa60/0x1600 [ 1117.361693][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1117.362469][T13220] ? worker_attach_to_pool+0x370/0x370 [ 1117.378463][T13220] ? assign_work+0x3cc/0x5d0 [ 1117.383112][T13220] worker_thread+0xa5e/0xfe0 [ 1117.387764][T13220] ? _raw_spin_unlock+0x40/0x40 [ 1117.392667][T13220] ? __kthread_parkme+0x71/0x1c0 [ 1117.397653][T13220] kthread+0x2fa/0x390 [ 1117.401759][T13220] ? pr_cont_work+0x550/0x550 [ 1117.406525][T13220] ? kthread_blkcg+0xd0/0xd0 [ 1117.411146][T13220] ret_from_fork+0x48/0x80 [ 1117.415590][T13220] ? kthread_blkcg+0xd0/0xd0 [ 1117.420218][T13220] ret_from_fork_asm+0x11/0x20 [ 1117.425037][T13220] [ 1117.433956][T13220] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1117.448261][T13220] Bluetooth: hci1: failed to register connection device [ 1117.680830][T14894] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2416'. [ 1118.631860][ T1137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1119.200894][T14911] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1120.372782][T14918] loop3: detected capacity change from 0 to 4096 [ 1120.967541][T14927] syz.2.2424 (14927): drop_caches: 0 [ 1121.862031][T13220] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1122.077573][T14939] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2430'. [ 1123.133580][T14028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1123.466265][T14956] IPv6: NLM_F_CREATE should be specified when creating new route [ 1123.474742][T14956] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2433'. [ 1125.257064][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1125.511195][ T23] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1125.738114][ T23] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1126.113763][ T23] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1126.398641][ T23] usb 4-1: Product: syz [ 1126.403756][ T23] usb 4-1: SerialNumber: syz [ 1126.413615][ T23] usb 4-1: config 0 descriptor?? [ 1126.420065][ T23] usb 4-1: can't set config #0, error -71 [ 1126.428306][ T23] usb 4-1: USB disconnect, device number 42 [ 1128.006636][T14985] vhci_hcd vhci_hcd.0: failed to lookup sock [ 1128.674715][T13220] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.746197][T14990] syz.3.2444 (14990): drop_caches: 0 [ 1128.878987][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1129.481366][T15005] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2446'. [ 1130.172564][T15007] loop3: detected capacity change from 0 to 4096 [ 1131.537334][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.686508][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1135.088535][T15046] loop3: detected capacity change from 0 to 4096 [ 1135.581279][T15047] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1135.969148][T15049] loop3: detected capacity change from 0 to 64 [ 1136.103131][T15049] Trying to free block not in datazone [ 1136.781397][T15054] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2459'. [ 1137.193747][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.411194][ T9519] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1137.625433][ T9519] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1137.671230][ T9519] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1137.711266][ T9519] usb 4-1: Product: syz [ 1137.715520][ T9519] usb 4-1: SerialNumber: syz [ 1137.778663][ T9519] usb 4-1: config 0 descriptor?? [ 1138.007166][ T9519] hso 4-1:0.0: Failed to find BULK IN ep [ 1140.014940][ T173] usb 4-1: USB disconnect, device number 43 [ 1140.225608][T15081] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2468'. [ 1140.600998][T15085] loop3: detected capacity change from 0 to 4096 [ 1140.696569][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1142.186401][T15091] loop3: detected capacity change from 0 to 8192 [ 1142.232468][T15091] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1142.255450][T15091] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1142.268867][T15091] REISERFS (device loop3): using ordered data mode [ 1142.279945][T15091] reiserfs: using flush barriers [ 1142.287050][T15091] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1142.308909][T15091] REISERFS (device loop3): checking transaction log (loop3) [ 1142.460407][T15103] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2474'. [ 1142.906001][T15091] REISERFS (device loop3): Using tea hash to sort names [ 1142.951726][ T2891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1143.051141][T15091] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1144.300646][ T28] audit: type=1326 audit(1792120858.922:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.4.2477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee6ad9e559 code=0x0 [ 1144.578913][T15117] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1144.620285][T10180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1144.636159][T10180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1144.654268][T10180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1144.666207][T10180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1144.675438][T10180] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1144.688439][T10180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1144.793421][T15118] rxe_eth0 speed is unknown, defaulting to 1000 [ 1145.442222][T15126] loop3: detected capacity change from 0 to 4096 [ 1145.978516][T12894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.208135][ T2884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1146.982663][T10180] Bluetooth: hci3: command tx timeout [ 1147.090378][T12894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.674668][T12894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.279564][T15127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1148.375765][T12894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.703374][T15118] chnl_net:caif_netlink_parms(): no params data found [ 1148.841228][T12894] tipc: Left network mode [ 1149.032395][T10180] Bluetooth: hci3: command tx timeout [ 1150.027130][T15118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.081268][T15118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.177782][T15118] bridge_slave_0: entered allmulticast mode [ 1150.192752][T15118] bridge_slave_0: entered promiscuous mode [ 1150.222717][T15118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.230642][T15118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.256222][T15118] bridge_slave_1: entered allmulticast mode [ 1150.293013][T15118] bridge_slave_1: entered promiscuous mode [ 1151.044979][T15118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.131321][T10180] Bluetooth: hci3: command tx timeout [ 1151.211010][T15190] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2490'. [ 1151.223462][T15118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.259453][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2491'. [ 1152.365313][T15118] team0: Port device team_slave_0 added [ 1152.438425][T15118] team0: Port device team_slave_1 added [ 1152.561877][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1152.590515][T15118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.606103][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.659442][T15118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.742110][T15118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.749898][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.776529][T15118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.216471][T10180] Bluetooth: hci3: command tx timeout [ 1153.833267][T15118] hsr_slave_0: entered promiscuous mode [ 1153.841307][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1153.872245][T15118] hsr_slave_1: entered promiscuous mode [ 1154.236680][T12894] hsr_slave_0: left promiscuous mode [ 1154.247710][T12894] hsr_slave_1: left promiscuous mode [ 1154.285014][T12894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.298557][T12894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.308681][T12894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.323519][T12894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.343038][T12894] bridge_slave_1: left allmulticast mode [ 1154.355616][T12894] bridge_slave_1: left promiscuous mode [ 1154.363879][T12894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.148915][T12894] bridge_slave_0: left allmulticast mode [ 1155.180816][T12894] bridge_slave_0: left promiscuous mode [ 1155.210607][T12894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.369972][T12894] veth1_macvtap: left promiscuous mode [ 1155.380338][T12894] veth0_macvtap: left promiscuous mode [ 1155.392310][T12894] veth1_vlan: left promiscuous mode [ 1155.398329][T12894] veth0_vlan: left promiscuous mode [ 1157.204308][T12894] team0 (unregistering): Port device team_slave_1 removed [ 1157.254075][T12894] team0 (unregistering): Port device team_slave_0 removed [ 1157.307336][T12894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.360087][T12894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.726800][T12894] bond0 (unregistering): Released all slaves [ 1157.818963][T15272] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2508'. [ 1159.120543][T15289] loop3: detected capacity change from 0 to 32768 [ 1159.197155][T15288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1159.204335][T15288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1159.214455][T15288] vhci_hcd vhci_hcd.0: Device attached [ 1159.338583][T14028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1159.593701][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1160.635774][T15290] vhci_hcd: connection closed [ 1160.654735][ T2891] vhci_hcd: stop threads [ 1160.703446][ T173] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1160.922941][ T2891] vhci_hcd: release socket [ 1160.935086][ T2891] vhci_hcd: disconnect device [ 1161.300293][T15118] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1161.411271][T15118] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1161.720408][T15118] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1161.814018][T15118] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1162.129517][T15118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.201487][T15118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.244607][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.251805][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.316428][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.323671][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.887868][T15118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.149063][T15330] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1164.358688][T15118] veth0_vlan: entered promiscuous mode [ 1164.388319][T15118] veth1_vlan: entered promiscuous mode [ 1164.479982][T15118] veth0_macvtap: entered promiscuous mode [ 1164.504242][T15118] veth1_macvtap: entered promiscuous mode [ 1164.548224][T15118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.572221][T15118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.593925][T15118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.606315][T15118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.616728][T15118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.629834][T15118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.644428][T15118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.655436][T15118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.668229][T15118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.705728][T15118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.735015][T15118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.749919][T15118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.761030][T15118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.772177][T15118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.783443][T15118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.793945][T15118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.805164][T15118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.821796][T15118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.833591][T15118] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.842583][T15118] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.853000][T15118] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.869328][T15118] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.114317][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.142045][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.218232][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.237523][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.668451][T15378] loop6: detected capacity change from 0 to 32768 [ 1166.780683][T15376] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1166.787257][T15376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1166.795099][T15376] vhci_hcd vhci_hcd.0: Device attached [ 1166.811727][ T173] vhci_hcd: vhci_device speed not set [ 1167.028022][ T139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.840191][T15379] vhci_hcd: connection closed [ 1167.856348][T15361] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1167.900290][ T42] vhci_hcd: stop threads [ 1168.021286][ T42] vhci_hcd: release socket [ 1168.025839][ T42] vhci_hcd: disconnect device [ 1168.096628][T15361] usb 45-1: enqueue for inactive port 0 [ 1168.333324][T15361] vhci_hcd: vhci_device speed not set [ 1168.697222][ T2884] tipc: Left network mode [ 1169.428711][T15394] loop3: detected capacity change from 0 to 8192 [ 1169.538482][T15394] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1169.551743][T15394] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1169.562224][T15394] REISERFS (device loop3): using ordered data mode [ 1169.568847][T15394] reiserfs: using flush barriers [ 1169.576246][T15394] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1169.629839][T15402] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15402] [ 1169.983404][T15394] REISERFS (device loop3): checking transaction log (loop3) [ 1170.549805][T15394] REISERFS (device loop3): Using tea hash to sort names [ 1170.579541][T15394] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1170.864200][T15410] loop6: detected capacity change from 0 to 2048 [ 1171.549941][T15410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.187683][T15428] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2536'. [ 1173.628443][ T2884] hsr_slave_0: left promiscuous mode [ 1173.639099][ T2884] hsr_slave_1: left promiscuous mode [ 1173.654851][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.675511][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.693979][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.701780][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.709777][ T2884] bridge_slave_1: left allmulticast mode [ 1173.716190][ T2884] bridge_slave_1: left promiscuous mode [ 1173.722398][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.732772][ T2884] bridge_slave_0: left allmulticast mode [ 1173.738605][ T2884] bridge_slave_0: left promiscuous mode [ 1173.745298][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.922518][ T2884] veth1_macvtap: left promiscuous mode [ 1173.946407][ T2884] veth1_vlan: left promiscuous mode [ 1173.962168][ T2884] veth0_vlan: left promiscuous mode [ 1174.364535][T15469] loop3: detected capacity change from 0 to 4096 [ 1174.584719][T15469] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1174.609679][T15118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.651911][T15469] ntfs3: loop3: ino=1a, mi_enum_attr [ 1174.657398][T15469] ntfs3: loop3: ino=1a, mi_enum_attr [ 1174.665004][T15469] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1175.071037][T15479] CIFS: Attempting to mount //127.0.0.1/share [ 1175.145924][T15480] CIFS: VFS: Received Request not response [ 1175.155843][T15480] CIFS: VFS: Bad SMB detected. The Mid=0 [ 1175.169375][T15479] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1176.919783][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 1177.018329][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 1177.088701][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.195807][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.523288][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.529653][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.874883][T15494] loop3: detected capacity change from 0 to 40427 [ 1177.893909][T15494] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1177.901812][T15494] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1177.914300][T15494] F2FS-fs (loop3): invalid crc value [ 1177.916975][ T2884] bond0 (unregistering): Released all slaves [ 1177.943290][T15494] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1178.051228][T15494] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1178.058339][T15494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1178.076331][T15474] netlink: 'syz.4.2545': attribute type 10 has an invalid length. [ 1178.138685][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.146830][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.183059][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.190622][T15474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.199649][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.207921][T15474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.232519][T15474] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1178.768677][ T2884] IPVS: stop unused estimator thread 0... [ 1179.227570][T15503] loop6: detected capacity change from 0 to 32768 [ 1179.259370][T15503] (syz.6.2552,15503,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1179.296162][T15503] (syz.6.2552,15503,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1179.360606][T15503] JBD2: Ignoring recovery information on journal [ 1179.514400][T15503] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1180.348646][T15527] (syz.6.2552,15527,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1180.360051][T15527] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #16 has bitmap size 448 but physical max of 256 [ 1180.380078][T15527] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1180.390014][T15527] OCFS2: Returning error to the calling process. [ 1180.396716][T15527] (syz.6.2552,15527,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 16 failed -5 [ 1180.406655][T15527] (syz.6.2552,15527,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -5 [ 1180.415576][T15527] (syz.6.2552,15527,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -5 [ 1180.425156][T15527] (syz.6.2552,15527,1):ocfs2_test_inode_bit:2896 ERROR: status = -5 [ 1180.434659][T15527] (syz.6.2552,15527,1):ocfs2_get_parent:166 ERROR: test inode bit failed -5 [ 1180.700270][T15118] ocfs2: Unmounting device (7,6) on (node local) [ 1182.985879][T15582] loop3: detected capacity change from 0 to 512 [ 1183.086161][T15582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.298435][T14719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.440009][T15591] loop6: detected capacity change from 0 to 2048 [ 1183.701113][T15591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1184.407027][T15611] ip_tables: iptables: counters copy to user failed while replacing table [ 1184.497159][T15613] loop3: detected capacity change from 0 to 512 [ 1184.543215][T15613] EXT4-fs: Ignoring removed nobh option [ 1184.603621][T15613] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1184.860201][T15613] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 1185.975496][T10180] Bluetooth: hci3: hcon ffff88802f22c000 sent 1 < count 15 [ 1185.983247][T10180] Bluetooth: hci3: hcon ffff88806a9f0000 sent 1 < count 6 [ 1185.990469][T10180] Bluetooth: hci3: hcon ffff88806a9f0000 sent 0 < count 4 [ 1186.037136][T15613] loop3: detected capacity change from 0 to 40427 [ 1186.051427][T15613] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1186.061327][T15613] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1186.101195][T15613] F2FS-fs (loop3): invalid crc value [ 1186.129793][T15613] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1186.257503][T15613] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 1186.264897][T15613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1186.877098][T15665] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1189.812020][T15717] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2592'. [ 1191.477828][ T9519] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1191.882116][T15361] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1192.239054][T15746] ceph: No mds server is up or the cluster is laggy [ 1192.578388][T15742] loop6: detected capacity change from 0 to 32768 [ 1192.657960][T15778] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15778] [ 1192.836106][T15742] (syz.6.2600,15742,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1193.175550][T15742] (syz.6.2600,15742,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1193.393325][T15742] JBD2: Ignoring recovery information on journal [ 1193.555457][T15742] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1194.880574][T15793] (syz.6.2600,15793,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1196.023650][T15118] ocfs2: Unmounting device (7,6) on (node local) [ 1197.021441][T15819] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15819] [ 1199.211598][T15850] ip_tables: iptables: counters copy to user failed while replacing table [ 1199.776145][T15864] loop6: detected capacity change from 0 to 1024 [ 1199.803168][T15864] EXT4-fs: inline encryption not supported [ 1199.836780][T15864] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1199.907222][T15864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.073799][T15118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.259948][T15873] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15873] [ 1201.691370][T15882] syz.4.2631 (15882) used greatest stack depth: 19272 bytes left [ 1201.751266][T15888] ip_tables: iptables: counters copy to user failed while replacing table [ 1203.051793][T15900] loop6: detected capacity change from 0 to 32768 [ 1203.250664][T15900] (syz.6.2636,15900,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1203.481518][T15900] (syz.6.2636,15900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1203.578310][T15900] JBD2: Ignoring recovery information on journal [ 1203.681237][T15900] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1204.652579][T15940] ip_tables: iptables: counters copy to user failed while replacing table [ 1204.662339][T15118] ocfs2: Unmounting device (7,6) on (node local) [ 1205.731622][T15966] loop6: detected capacity change from 0 to 32768 [ 1205.787943][T15966] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1205.885227][T15966] XFS (loop6): Ending clean mount [ 1206.062089][T15118] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1206.280066][T15985] ip_tables: iptables: counters copy to user failed while replacing table [ 1207.998011][T16006] loop6: detected capacity change from 0 to 4096 [ 1213.909453][T16098] fuse: Bad value for 'fd' [ 1217.393920][T16193] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16193] [ 1219.835943][T13220] Bluetooth: hci1: command 0x0406 tx timeout [ 1221.911968][T13220] Bluetooth: hci1: command 0x0406 tx timeout [ 1227.047089][T16289] rxe_eth0 speed is unknown, defaulting to 1000 [ 1229.154248][ T5762] libceph: connect (1)[c::]:6789 error -22 [ 1229.160838][ T5762] libceph: mon0 (1)[c::]:6789 connect error [ 1229.199946][T16315] ceph: No mds server is up or the cluster is laggy [ 1230.554259][T16343] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16343] [ 1231.170269][T16347] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2748'. [ 1231.947848][ T28] audit: type=1326 audit(1231.909:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16345 comm="syz.6.2748" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f727f19e559 code=0x0 [ 1233.666041][ T28] audit: type=1326 audit(1233.629:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16373 comm="syz.3.2757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2c819e559 code=0x0 [ 1236.430086][T16413] rxe_eth0 speed is unknown, defaulting to 1000 [ 1238.526740][T16450] 8021q: VLANs not supported on gre0 [ 1238.956606][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.976746][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.798194][T16472] rxe_eth0 speed is unknown, defaulting to 1000 [ 1241.441192][T16488] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16488] [ 1244.880988][T16533] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16533] [ 1245.320246][T16535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2808'. [ 1245.950845][T16538] ip_tables: iptables: counters copy to user failed while replacing table [ 1247.983165][T16561] ip_tables: iptables: counters copy to user failed while replacing table [ 1248.071825][T16565] netlink: 'syz.4.2819': attribute type 4 has an invalid length. [ 1250.661008][T16594] ip_tables: iptables: counters copy to user failed while replacing table [ 1254.202157][T16628] ip_tables: iptables: counters copy to user failed while replacing table [ 1254.252833][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2843'. [ 1255.726067][T16646] syz.3.2847 (16646) used greatest stack depth: 16936 bytes left [ 1257.601697][T16679] ip_tables: iptables: counters copy to user failed while replacing table [ 1259.134550][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2867'. [ 1259.987286][T16717] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16717] [ 1260.305785][T16718] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16718] [ 1263.461843][T16755] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16755] [ 1265.361244][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2897'. [ 1266.003434][T16791] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16791] [ 1267.063326][ T28] audit: type=1326 audit(1266.558:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.547219][ T28] audit: type=1326 audit(1266.568:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.741341][ T28] audit: type=1326 audit(1266.568:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.768433][ T28] audit: type=1326 audit(1266.568:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.811532][ T28] audit: type=1326 audit(1266.568:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.837904][ T28] audit: type=1326 audit(1266.568:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.865598][ T28] audit: type=1326 audit(1266.568:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.891711][T16817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1267.931178][ T28] audit: type=1326 audit(1266.568:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.956471][ T28] audit: type=1326 audit(1266.568:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1267.985635][ T28] audit: type=1326 audit(1266.568:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16803 comm="syz.4.2903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6ad9e559 code=0x7ffc0000 [ 1269.222928][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1271.461778][T16876] tipc: Enabling of bearer rejected, failed to enable media [ 1271.693139][T16880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2929'. [ 1271.991468][T16858] Bluetooth: hci3: command 0x0406 tx timeout [ 1277.704068][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2945'. [ 1279.395680][T16956] ip_tables: iptables: counters copy to user failed while replacing table [ 1280.051749][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2957'. [ 1282.213692][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2968'. [ 1285.193590][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2978'. [ 1285.876238][T17044] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17044] [ 1287.602351][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1289.140843][T17089] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2992'. [ 1289.151678][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2992'. [ 1289.161130][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2992'. [ 1296.872113][T17146] overlayfs: missing 'lowerdir' [ 1297.181642][T17154] warning: `syz.3.3013' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1299.609304][T17172] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17172] [ 1300.022555][T17181] ip_tables: iptables: counters copy to user failed while replacing table [ 1300.396509][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.402997][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.389397][T17215] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17215] [ 1303.518662][T17224] ip_tables: iptables: counters copy to user failed while replacing table [ 1304.604485][T17241] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17241] [ 1306.830321][T17280] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17280] [ 1309.386951][T17302] rxe_eth0 speed is unknown, defaulting to 1000 [ 1311.023584][T17316] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17316] [ 1311.966490][T17322] netlink: 'syz.3.3075': attribute type 4 has an invalid length. [ 1314.695397][T17349] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17349] [ 1320.721324][T17420] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3112'. [ 1323.248843][T17455] netlink: 'syz.4.3128': attribute type 20 has an invalid length. [ 1323.257470][T17455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3128'. [ 1324.333558][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3133'. [ 1326.192190][T17486] netlink: 'syz.6.3137': attribute type 20 has an invalid length. [ 1326.200161][T17486] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3137'. [ 1328.954236][T17521] netlink: 'syz.6.3148': attribute type 20 has an invalid length. [ 1328.981347][T17521] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3148'. [ 1330.342428][T17536] futex_wake_op: syz.4.3153 tries to shift op by 144; fix this program [ 1331.859350][T17547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3157'. [ 1338.577944][T17670] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17670] [ 1343.882810][T17716] rxe_eth0 speed is unknown, defaulting to 1000 [ 1344.089201][T17727] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1344.370840][T17729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.418850][T17729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.481500][T17729] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1344.575771][T17729] bond0 (unregistering): Released all slaves [ 1353.273856][T17841] overlayfs: failed to clone upperpath [ 1357.190243][T17911] capability: warning: `syz.4.3267' uses deprecated v2 capabilities in a way that may be insecure [ 1361.730774][T17979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1361.738150][T17979] IPv6: NLM_F_CREATE should be set when creating new route [ 1361.745628][T17979] IPv6: NLM_F_CREATE should be set when creating new route [ 1361.837453][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.843939][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.240907][T18000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1363.798753][T18032] rxe_eth0 speed is unknown, defaulting to 1000 [ 1364.936788][T18042] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1364.984371][T18042] overlayfs: failed to set xattr on upper [ 1364.990325][T18042] overlayfs: ...falling back to redirect_dir=nofollow. [ 1364.992679][T18048] __vm_enough_memory: pid: 18048, comm: syz.5.3320, not enough memory for the allocation [ 1364.998815][T18042] overlayfs: ...falling back to index=off. [ 1365.013443][T18042] overlayfs: ...falling back to uuid=null. [ 1366.801957][T18081] overlayfs: failed to clone lowerpath [ 1367.513387][T18093] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18093] [ 1369.566959][T18144] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18144] [ 1370.467611][T18168] overlayfs: failed to clone upperpath [ 1372.002489][T18194] overlayfs: failed to clone upperpath [ 1372.010483][T18194] overlayfs: failed to clone upperpath [ 1373.237511][T18211] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18211] [ 1374.844098][T18241] overlayfs: failed to clone upperpath [ 1374.860214][T18241] overlayfs: failed to clone upperpath [ 1376.819273][T18280] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18280] [ 1376.878818][T18282] X.509: signatureAlgorithm (15) differs from tbsCertificate.signature (16) [ 1377.323343][T18299] tipc: Started in network mode [ 1377.328299][T18299] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1377.381487][T18299] tipc: Enabling of bearer rejected, failed to enable media [ 1380.393959][T18350] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18350] [ 1382.586885][T18381] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18381] [ 1385.315220][T18411] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18411] [ 1387.205697][T18446] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18446] [ 1388.607559][T18473] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18473] [ 1390.489481][T18498] ip_tables: iptables: counters copy to user failed while replacing table [ 1390.981096][T18510] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18510] [ 1393.274926][T18540] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18540] [ 1395.449129][T18571] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18571] [ 1397.997155][T18599] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18599] [ 1399.864051][T18633] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18633] [ 1418.356498][T16858] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1419.193831][T18899] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3635'. [ 1422.089958][T18943] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18943] [ 1423.299815][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.306951][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.186646][T18969] overlayfs: failed to clone upperpath [ 1425.258742][T10180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1425.271145][T10180] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1425.281112][T10180] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1425.303768][T10180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1425.312755][T10180] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1425.320703][T10180] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1425.449439][T18968] rxe_eth0 speed is unknown, defaulting to 1000 [ 1425.628937][T15127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.813474][T15127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.935913][T15127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.055901][T15127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.259741][T18985] netlink: 'syz.3.3662': attribute type 16 has an invalid length. [ 1426.380697][T18968] chnl_net:caif_netlink_parms(): no params data found [ 1426.764693][T18990] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18990] [ 1426.798526][T15127] tipc: Left network mode [ 1427.226803][T18968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.248256][T18968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.281401][T18968] bridge_slave_0: entered allmulticast mode [ 1427.289479][T18968] bridge_slave_0: entered promiscuous mode [ 1427.387971][T18968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.405623][T18968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.431311][T10180] Bluetooth: hci2: command tx timeout [ 1427.431348][T18968] bridge_slave_1: entered allmulticast mode [ 1427.441191][T18968] bridge_slave_1: entered promiscuous mode [ 1427.884448][T18968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.911552][T18968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.990546][T18968] team0: Port device team_slave_0 added [ 1428.014303][T18968] team0: Port device team_slave_1 added [ 1428.134624][T18968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.151545][T18968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.178023][T18968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.255715][T18968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.271094][T18968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.316288][T18968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.406607][T18968] hsr_slave_0: entered promiscuous mode [ 1428.415334][T18968] hsr_slave_1: entered promiscuous mode [ 1428.425168][T18968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1428.453072][T18968] Cannot create hsr debugfs directory [ 1429.512399][T10180] Bluetooth: hci2: command tx timeout [ 1429.544158][T15127] hsr_slave_0: left promiscuous mode [ 1429.564295][T15127] hsr_slave_1: left promiscuous mode [ 1429.672969][T15127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.699687][T15127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.712442][T15127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.719896][T15127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.782282][T15127] bridge_slave_1: left allmulticast mode [ 1429.788000][T15127] bridge_slave_1: left promiscuous mode [ 1429.811378][T15127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.852782][T15127] bridge_slave_0: left allmulticast mode [ 1429.858497][T15127] bridge_slave_0: left promiscuous mode [ 1429.891358][T15127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.161596][T15127] veth1_macvtap: left promiscuous mode [ 1430.167388][T15127] veth0_macvtap: left promiscuous mode [ 1430.181196][T15127] veth1_vlan: left promiscuous mode [ 1430.186577][T15127] veth0_vlan: left promiscuous mode [ 1431.594662][T10180] Bluetooth: hci2: command tx timeout [ 1431.750589][T15127] team0 (unregistering): Port device team_slave_1 removed [ 1431.925179][T15127] team0 (unregistering): Port device team_slave_0 removed [ 1432.113581][T15127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.206318][T15127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.222629][T15127] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1433.233801][T15127] bond0 (unregistering): Released all slaves [ 1433.389740][T19080] mmap: syz.3.3684 (19080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1433.674216][T10180] Bluetooth: hci2: command tx timeout [ 1434.415663][T18968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1434.449851][T18968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1434.466980][T18968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1434.492505][T18968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1434.738073][T18968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.804061][T18968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.857163][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.864422][T17632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.897379][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.904624][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.995910][T18968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1435.294834][T19109] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19109] [ 1435.864824][T18968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.641190][T18968] veth0_vlan: entered promiscuous mode [ 1436.706318][T18968] veth1_vlan: entered promiscuous mode [ 1436.795599][T18968] veth0_macvtap: entered promiscuous mode [ 1436.832835][T18968] veth1_macvtap: entered promiscuous mode [ 1436.863046][T18968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.886963][T18968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.910722][T18968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.943216][T18968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.968774][T18968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.007999][T18968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.020233][T18968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.041920][T18968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.066447][T18968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.397262][T18968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.597065][T18968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.703841][T18968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.761082][T18968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.832718][T18968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.883852][T18968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.909662][T18968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.920880][T18968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.929785][T18968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.103673][T17624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.126867][T17624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.192665][T17624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.212547][T17624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.555844][T19179] tipc: Started in network mode [ 1438.560795][T19179] tipc: Node identity 4246, cluster identity 4711 [ 1438.567826][T19179] tipc: Node number set to 16966 [ 1438.635138][T19182] overlayfs: failed to clone upperpath [ 1438.741473][ T5856] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1439.052221][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 1439.080906][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1439.092268][ T5856] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1439.109183][T19191] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19191] [ 1439.154313][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.198646][ T5856] usb 5-1: config 0 descriptor?? [ 1439.458824][ T5856] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1439.675154][ T173] usb 5-1: USB disconnect, device number 14 [ 1440.444501][T19206] tipc: Cannot configure node identity twice [ 1440.528142][ T173] IPVS: starting estimator thread 0... [ 1440.634724][T19214] IPVS: using max 19 ests per chain, 45600 per kthread [ 1440.661124][T10180] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1442.049957][T19240] tipc: Started in network mode [ 1442.063099][T19240] tipc: Node identity 4246, cluster identity 4711 [ 1442.087422][T19240] tipc: Node number set to 16966 [ 1442.100389][ T28] kauditd_printk_skb: 223 callbacks suppressed [ 1442.100402][ T28] audit: type=1326 audit(1442.062:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.5.3725" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f055b79e559 code=0x0 [ 1442.461213][T19259] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3723'. [ 1442.470233][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3723'. [ 1442.480322][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3723'. [ 1443.271077][T10180] Bluetooth: hci2: command tx timeout [ 1443.391579][ T9519] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1443.598695][ T9519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1443.610849][ T9519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.625952][ T9519] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1443.641996][ T9519] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1443.651487][ T9519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.683482][ T9519] usb 5-1: config 0 descriptor?? [ 1444.229000][ T9519] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1444.246791][ T9519] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1445.016220][T19300] tipc: Cannot configure node identity twice [ 1445.627666][T19317] netlink: 'syz.5.3751': attribute type 4 has an invalid length. [ 1445.643196][T19317] netlink: 'syz.5.3751': attribute type 5 has an invalid length. [ 1445.654759][T19317] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3751'. [ 1445.799985][T19318] rxe_eth0 speed is unknown, defaulting to 1000 [ 1446.256326][ T5856] usb 5-1: USB disconnect, device number 15 [ 1448.014567][T19354] loop4: detected capacity change from 0 to 32768 [ 1448.041555][T19354] (syz.4.3765,19354,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1448.077368][T19354] (syz.4.3765,19354,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1448.137883][T19354] JBD2: Ignoring recovery information on journal [ 1448.299132][T19354] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1448.627804][T19354] (syz.4.3765,19354,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1448.804376][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1450.757594][T19407] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[18968] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19407] [ 1451.649325][T19417] cgroup2: Unknown parameter 'pids_l' [ 1451.867799][ T28] audit: type=1326 audit(1451.822:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.4.3788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef2f79e559 code=0x0 [ 1459.349479][T19533] overlayfs: failed to clone upperpath [ 1459.874752][T10180] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1460.532731][T10180] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1461.401192][T10180] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1464.080219][T19625] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19625] [ 1464.554290][T16858] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1464.565170][T16858] Bluetooth: hci3: Injecting HCI hardware error event [ 1464.575580][T16858] Bluetooth: hci3: hardware error 0x00 [ 1466.956319][T16858] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1467.257846][T19666] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19666] [ 1467.334393][T10180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1467.351451][T19668] loop4: detected capacity change from 0 to 512 [ 1467.351969][T10180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1467.400840][T10180] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1467.416979][T19668] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.3869: inode has both inline data and extents flags [ 1467.418980][T10180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1467.433528][T19668] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.3869: couldn't read orphan inode 15 (err -117) [ 1467.441982][T10180] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1467.460217][T10180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1467.460214][T19668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1467.605863][T18968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.819362][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.945992][T19664] rxe_eth0 speed is unknown, defaulting to 1000 [ 1468.293541][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.405089][T19677] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 1468.655472][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.415247][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.671199][T16858] Bluetooth: hci4: command tx timeout [ 1469.749809][T19699] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19699] [ 1470.021176][ T11] tipc: Left network mode [ 1470.043229][T19664] chnl_net:caif_netlink_parms(): no params data found [ 1471.772575][T16858] Bluetooth: hci4: command tx timeout [ 1472.023317][T19664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.037173][T19664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.074628][T19664] bridge_slave_0: entered allmulticast mode [ 1472.092477][T19664] bridge_slave_0: entered promiscuous mode [ 1472.203074][T19664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.224766][T19664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.251294][T19664] bridge_slave_1: entered allmulticast mode [ 1472.268894][T19664] bridge_slave_1: entered promiscuous mode [ 1473.240103][T19664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.663485][T19664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.878030][T16858] Bluetooth: hci4: command tx timeout [ 1473.928286][T19768] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19768] [ 1474.431361][T19664] team0: Port device team_slave_0 added [ 1474.464469][T19664] team0: Port device team_slave_1 added [ 1474.874484][T19664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.929256][T19664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.051169][T19664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.892938][T19664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.899953][T19664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1476.040757][T16858] Bluetooth: hci4: command tx timeout [ 1476.151055][T19664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.990677][T19664] hsr_slave_0: entered promiscuous mode [ 1477.008482][T19664] hsr_slave_1: entered promiscuous mode [ 1477.028618][T19664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1477.051793][T19664] Cannot create hsr debugfs directory [ 1477.269251][ T11] hsr_slave_0: left promiscuous mode [ 1477.299248][ T11] hsr_slave_1: left promiscuous mode [ 1477.347627][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.361013][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.379131][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.398185][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.432080][ T11] bridge_slave_1: left allmulticast mode [ 1477.448014][ T11] bridge_slave_1: left promiscuous mode [ 1477.461601][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.503184][ T11] bridge_slave_0: left allmulticast mode [ 1477.509027][ T11] bridge_slave_0: left promiscuous mode [ 1477.518234][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.651415][ T11] veth1_macvtap: left promiscuous mode [ 1477.673152][ T11] veth0_macvtap: left promiscuous mode [ 1477.698174][ T11] veth1_vlan: left promiscuous mode [ 1477.728600][ T11] veth0_vlan: left promiscuous mode [ 1478.071332][T16858] Bluetooth: hci4: command tx timeout [ 1478.675207][T19816] loop4: detected capacity change from 0 to 32768 [ 1478.713052][T19816] (syz.4.3904,19816,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1478.738435][T19816] (syz.4.3904,19816,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1478.880259][T19816] JBD2: Ignoring recovery information on journal [ 1479.027985][T19816] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1479.465828][T19816] (syz.4.3904,19816,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1479.702504][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1481.314455][T19866] loop4: detected capacity change from 0 to 512 [ 1481.405876][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1481.561095][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1482.154956][T19870] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁЍãÂÉ<' to dns_resolver key: bad/missing value [ 1482.486003][T19874] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3914'. [ 1482.495271][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3914'. [ 1482.504308][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3914'. [ 1483.976678][T19877] loop4: detected capacity change from 0 to 32768 [ 1483.989348][T19877] (syz.4.3915,19877,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1484.004177][T19877] (syz.4.3915,19877,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1484.387847][T19877] JBD2: Ignoring recovery information on journal [ 1484.672358][T19877] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1484.733803][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.745422][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.290348][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1485.717775][T19664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1485.747443][T19664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1485.774757][T19664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1485.806042][T19664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1485.867193][T19911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 1486.049838][T19664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.109088][T19664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.140516][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.147739][T17632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.198203][T17632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.205417][T17632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.793034][T19664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.175311][T19664] veth0_vlan: entered promiscuous mode [ 1488.198785][T19664] veth1_vlan: entered promiscuous mode [ 1488.298843][T19664] veth0_macvtap: entered promiscuous mode [ 1488.337248][T19664] veth1_macvtap: entered promiscuous mode [ 1488.402954][T19664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.432506][T19664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.466746][T19664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.499817][T19664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.520269][T19664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.546385][T19664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.579304][T19664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1488.613688][T19664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.644367][T19965] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1488.678964][T19664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.689191][T19664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.700175][T19664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.717922][T19664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.728602][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1488.737863][T19664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.771165][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1488.782638][T19664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1488.817106][T19664] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.828654][T19664] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.837485][T19664] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.852059][T19664] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.962657][T19968] overlayfs: failed to clone upperpath [ 1489.042362][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.050242][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.095802][T19957] loop4: detected capacity change from 0 to 32768 [ 1489.131443][T17632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.156187][T19957] (syz.4.3927,19957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1489.170397][T17632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.219212][T19957] (syz.4.3927,19957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1489.305645][T19957] JBD2: Ignoring recovery information on journal [ 1489.414035][T19957] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1490.006082][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1492.350142][T20044] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3939'. [ 1492.465169][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3939'. [ 1493.077412][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3939'. [ 1493.804375][T20064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 1496.886848][T20122] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3960'. [ 1496.930482][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'. [ 1497.028773][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'. [ 1498.483145][T20149] UBIFS error (pid: 20149): cannot open "ubi:0", error -19 [ 1500.402189][T20156] loop4: detected capacity change from 0 to 32768 [ 1500.462878][T20156] (syz.4.3975,20156,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1500.539709][T20176] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1500.548952][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1500.557991][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1500.704623][T20156] (syz.4.3975,20156,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1501.099544][T20156] JBD2: Ignoring recovery information on journal [ 1501.208672][T20156] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1501.556210][T20156] (syz.4.3975,20156,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1501.987308][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1502.985297][T20200] overlayfs: failed to clone upperpath [ 1503.201344][T20207] loop4: detected capacity change from 0 to 512 [ 1503.216950][T20207] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.3988: inode has both inline data and extents flags [ 1503.231540][T20207] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.3988: couldn't read orphan inode 15 (err -117) [ 1503.246087][T20207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1503.413027][T18968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.908823][T20214] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3993'. [ 1503.918230][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 1503.928041][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 1505.120023][T20234] loop4: detected capacity change from 0 to 512 [ 1505.197734][T20234] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.4001: inode has both inline data and extents flags [ 1505.213160][T20234] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.4001: couldn't read orphan inode 15 (err -117) [ 1505.235252][T20234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1505.433163][T18968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.086533][T20264] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4009'. [ 1508.095788][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4009'. [ 1508.104783][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4009'. [ 1508.884035][T20269] tipc: Enabled bearer , priority 10 [ 1508.970883][T20268] tipc: Resetting bearer [ 1509.187126][T20268] tipc: Disabling bearer [ 1511.514061][T20299] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4022'. [ 1511.523381][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4022'. [ 1511.532458][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4022'. [ 1513.975715][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4026'. [ 1516.655778][T20341] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4034'. [ 1519.243568][T20384] loop5: detected capacity change from 0 to 512 [ 1519.731189][T20384] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1519.739990][T20384] FAT-fs (loop5): Filesystem has been set read-only [ 1519.749469][T20384] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 1519.758783][T20384] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 1520.091616][T20384] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1520.756869][T20387] udevd[20387]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 1520.866476][T20387] udevd[20387]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 1520.981177][T20387] udevd[20387]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 1521.063346][T20387] udevd[20387]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 1522.435084][T20402] @0Ù: renamed from dummy0 (while UP) [ 1525.277694][T20417] loop4: detected capacity change from 0 to 32768 [ 1525.338269][T20436] udevd[20436]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1525.347208][T20417] (syz.4.4057,20417,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1525.380743][T20436] udevd[20436]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1525.389768][T20417] (syz.4.4057,20417,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1525.443218][T20417] JBD2: Ignoring recovery information on journal [ 1525.629372][T20417] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1527.631668][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1527.682454][T20436] udevd[20436]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1527.722549][T20436] udevd[20436]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1530.168783][T20492] overlayfs: failed to clone upperpath [ 1533.125785][T10180] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1533.136324][T10180] Bluetooth: hci2: Injecting HCI hardware error event [ 1533.154694][T10180] Bluetooth: hci2: hardware error 0x00 [ 1533.244570][T20525] bridge1: entered promiscuous mode [ 1533.251231][T20525] bridge1: entered allmulticast mode [ 1533.938683][T20537] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[19664] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20537] [ 1535.313729][T10180] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1536.987661][T20576] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20576] [ 1537.274978][T20578] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1537.284318][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1537.293438][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1539.090096][T20605] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20605] [ 1539.194512][T20585] loop4: detected capacity change from 0 to 32768 [ 1539.208769][T20585] (syz.4.4111,20585,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1539.233582][T20609] udevd[20609]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1539.238963][T20585] (syz.4.4111,20585,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1539.271406][T20585] JBD2: Ignoring recovery information on journal [ 1539.444133][T20585] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1540.550577][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1540.698140][T20609] udevd[20609]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1540.761074][T20641] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20641] [ 1541.026422][T20609] udevd[20609]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1543.013030][T20659] bond1: entered allmulticast mode [ 1543.039893][T20659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1543.107825][T20661] bond_slave_0: entered promiscuous mode [ 1543.115520][T20661] bond_slave_1: entered promiscuous mode [ 1543.133450][T20661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1543.157669][T20661] macvlan2: entered allmulticast mode [ 1543.173197][T20661] bond0: entered allmulticast mode [ 1543.183335][T20661] bond_slave_0: entered allmulticast mode [ 1543.219729][T20661] bond_slave_1: entered allmulticast mode [ 1543.253323][T20661] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1543.298636][T20659] ip6gretap1: entered allmulticast mode [ 1543.323939][T20659] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1543.895408][T20667] loop4: detected capacity change from 0 to 32768 [ 1543.907971][T20609] udevd[20609]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1543.926029][T20667] (syz.4.4135,20667,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1544.005905][T20682] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14719] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20682] [ 1544.118260][T20667] (syz.4.4135,20667,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1544.432106][T20684] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1544.489021][T20667] JBD2: Ignoring recovery information on journal [ 1544.653313][T20667] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1545.646914][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1545.737879][T20706] udevd[20706]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1545.789423][T20706] udevd[20706]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1546.211851][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.218431][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.522902][T20739] loop4: detected capacity change from 0 to 32768 [ 1548.558295][T20739] (syz.4.4156,20739,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1548.600570][T20739] (syz.4.4156,20739,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1548.650145][T20747] udevd[20747]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1549.215703][T20739] JBD2: Ignoring recovery information on journal [ 1549.425445][T20739] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1550.392032][T18968] ocfs2: Unmounting device (7,4) on (node local) [ 1550.474463][T20747] udevd[20747]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1550.534073][T20747] udevd[20747]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1550.934949][T20787] input: syz0 as /devices/virtual/input/input6 [ 1551.353842][T20794] loop4: detected capacity change from 0 to 512 [ 1551.381603][T20747] udevd[20747]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1551.404527][T20794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a026c018, mo2=0002] [ 1551.421277][T20794] System zones: 1-12 [ 1551.440757][T20794] ------------[ cut here ]------------ [ 1551.446930][T20794] EA inode 11 i_nlink=0 [ 1551.450521][T20794] WARNING: CPU: 1 PID: 20794 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1551.465446][T20794] Modules linked in: [ 1551.469464][T20794] CPU: 1 PID: 20794 Comm: syz.4.4177 Not tainted syzkaller #0 [ 1551.477260][T20794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1551.488231][T20794] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1551.495022][T20794] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 20 ef de 8a 44 89 fa e8 6e cb 09 ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 18 86 4b 08 [ 1551.515132][T20794] RSP: 0000:ffffc9000e377360 EFLAGS: 00010246 [ 1551.521339][T20794] RAX: 079591affa6a8e00 RBX: ffff88805ad168a8 RCX: 0000000000080000 [ 1551.529356][T20794] RDX: ffffc9000cab1000 RSI: 0000000000024156 RDI: 0000000000024157 [ 1551.538002][T20794] RBP: ffffc9000e377450 R08: ffffc9000e376f67 R09: 1ffff92001c6edec [ 1551.546183][T20794] R10: dffffc0000000000 R11: fffff52001c6eded R12: ffff88805ad16700 [ 1551.554337][T20794] R13: ffffc9000e3773c0 R14: dffffc0000000000 R15: 0000000000000000 [ 1551.562404][T20794] FS: 00007fef306ce6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1551.571466][T20794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1551.578082][T20794] CR2: 00002000000000c0 CR3: 0000000036b19000 CR4: 00000000003506e0 [ 1551.586148][T20794] Call Trace: [ 1551.590069][T20794] [ 1551.593236][T20794] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1551.598927][T20794] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1551.605120][T20794] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 1551.611223][T20794] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 1551.616911][T20794] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1551.623190][T20794] ext4_xattr_delete_inode+0xb3b/0xd00 [ 1551.628708][T20794] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 1551.634936][T20794] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 1551.641221][T20794] ext4_evict_inode+0xa88/0xe70 [ 1551.646129][T20794] ? evict+0x482/0x8a0 [ 1551.650255][T20794] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1551.656408][T20794] ? do_raw_spin_unlock+0x121/0x230 [ 1551.661722][T20794] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1551.667664][T20794] evict+0x4b7/0x8a0 [ 1551.671697][T20794] ? __lock_acquire+0x7eb0/0x7eb0 [ 1551.676763][T20794] ? proc_nr_inodes+0x230/0x230 [ 1551.681722][T20794] ? do_raw_spin_unlock+0x121/0x230 [ 1551.686964][T20794] ? _raw_spin_unlock+0x28/0x40 [ 1551.692555][T20794] ext4_orphan_cleanup+0xdff/0x1650 [ 1551.697812][T20794] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 1551.704300][T20794] ? ext4_orphan_del+0xc90/0xc90 [ 1551.709285][T20794] ? ext4_register_li_request+0x182/0x930 [ 1551.715144][T20794] ? errseq_check_and_advance+0x66/0x120 [ 1551.720829][T20794] ext4_fill_super+0x5fb5/0x6870 [ 1551.725949][T20794] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1551.732310][T20794] ? __might_sleep+0xe0/0xe0 [ 1551.737032][T20794] ? read_lock_is_recursive+0x20/0x20 [ 1551.743098][T20794] ? snprintf+0xe9/0x140 [ 1551.747574][T20794] ? down_read_killable+0x340/0x340 [ 1551.753024][T20794] ? setup_bdev_super+0x56b/0x660 [ 1551.758093][T20794] get_tree_bdev+0x3e5/0x520 [ 1551.762832][T20794] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1551.769114][T20794] ? setup_bdev_super+0x660/0x660 [ 1551.774241][T20794] ? apparmor_capable+0x137/0x1a0 [ 1551.779310][T20794] ? bpf_lsm_capable+0x9/0x10 [ 1551.784098][T20794] ? security_capable+0x89/0xb0 [ 1551.788991][T20794] vfs_get_tree+0x8c/0x280 [ 1551.794133][T20794] do_new_mount+0x24a/0xa40 [ 1551.798688][T20794] __se_sys_mount+0x2e7/0x3d0 [ 1551.803569][T20794] ? __x64_sys_mount+0xc0/0xc0 [ 1551.808377][T20794] ? lockdep_hardirqs_on+0x98/0x150 [ 1551.813836][T20794] ? __x64_sys_mount+0x20/0xc0 [ 1551.818649][T20794] do_syscall_64+0x55/0xb0 [ 1551.823153][T20794] ? clear_bhb_loop+0x40/0x90 [ 1551.827861][T20794] ? clear_bhb_loop+0x40/0x90 [ 1551.832847][T20794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1551.838796][T20794] RIP: 0033:0x7fef2f79f7ca [ 1551.844021][T20794] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.863969][T20794] RSP: 002b:00007fef306cde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1551.872548][T20794] RAX: ffffffffffffffda RBX: 00007fef306cdee0 RCX: 00007fef2f79f7ca [ 1551.880568][T20794] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 00007fef306cdea0 [ 1551.888639][T20794] RBP: 0000200000000040 R08: 00007fef306cdee0 R09: 0000000000200700 [ 1551.897311][T20794] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000080 [ 1551.905645][T20794] R13: 00007fef306cdea0 R14: 0000000000000488 R15: 00002000000000c0 [ 1551.914228][T20794] [ 1551.917286][T20794] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1551.924621][T20794] CPU: 1 PID: 20794 Comm: syz.4.4177 Not tainted syzkaller #0 [ 1551.932106][T20794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1551.942188][T20794] Call Trace: [ 1551.945489][T20794] [ 1551.948441][T20794] dump_stack_lvl+0x18c/0x250 [ 1551.953151][T20794] ? show_regs_print_info+0x20/0x20 [ 1551.958381][T20794] ? load_image+0x420/0x420 [ 1551.962945][T20794] panic+0x2ca/0x720 [ 1551.966887][T20794] ? bpf_jit_dump+0xd0/0xd0 [ 1551.971450][T20794] __warn+0x2e0/0x470 [ 1551.975457][T20794] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1551.981450][T20794] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1551.987438][T20794] report_bug+0x2be/0x4f0 [ 1551.991780][T20794] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1551.997765][T20794] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1552.003749][T20794] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 1552.009815][T20794] handle_bug+0xcf/0x120 [ 1552.014064][T20794] exc_invalid_op+0x1a/0x50 [ 1552.018570][T20794] asm_exc_invalid_op+0x1a/0x20 [ 1552.023426][T20794] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1552.030020][T20794] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 20 ef de 8a 44 89 fa e8 6e cb 09 ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 18 86 4b 08 [ 1552.049630][T20794] RSP: 0000:ffffc9000e377360 EFLAGS: 00010246 [ 1552.055698][T20794] RAX: 079591affa6a8e00 RBX: ffff88805ad168a8 RCX: 0000000000080000 [ 1552.063669][T20794] RDX: ffffc9000cab1000 RSI: 0000000000024156 RDI: 0000000000024157 [ 1552.071640][T20794] RBP: ffffc9000e377450 R08: ffffc9000e376f67 R09: 1ffff92001c6edec [ 1552.079610][T20794] R10: dffffc0000000000 R11: fffff52001c6eded R12: ffff88805ad16700 [ 1552.087687][T20794] R13: ffffc9000e3773c0 R14: dffffc0000000000 R15: 0000000000000000 [ 1552.095681][T20794] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1552.101330][T20794] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1552.107421][T20794] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 1552.113417][T20794] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 1552.119056][T20794] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1552.125216][T20794] ext4_xattr_delete_inode+0xb3b/0xd00 [ 1552.130685][T20794] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 1552.136758][T20794] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 1552.142403][T20794] ext4_evict_inode+0xa88/0xe70 [ 1552.147256][T20794] ? evict+0x482/0x8a0 [ 1552.151334][T20794] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1552.157267][T20794] ? do_raw_spin_unlock+0x121/0x230 [ 1552.162486][T20794] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1552.168390][T20794] evict+0x4b7/0x8a0 [ 1552.172297][T20794] ? __lock_acquire+0x7eb0/0x7eb0 [ 1552.177328][T20794] ? proc_nr_inodes+0x230/0x230 [ 1552.182185][T20794] ? do_raw_spin_unlock+0x121/0x230 [ 1552.187395][T20794] ? _raw_spin_unlock+0x28/0x40 [ 1552.192257][T20794] ext4_orphan_cleanup+0xdff/0x1650 [ 1552.197461][T20794] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 1552.203821][T20794] ? ext4_orphan_del+0xc90/0xc90 [ 1552.208757][T20794] ? ext4_register_li_request+0x182/0x930 [ 1552.214476][T20794] ? errseq_check_and_advance+0x66/0x120 [ 1552.220133][T20794] ext4_fill_super+0x5fb5/0x6870 [ 1552.225160][T20794] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1552.231411][T20794] ? __might_sleep+0xe0/0xe0 [ 1552.236098][T20794] ? read_lock_is_recursive+0x20/0x20 [ 1552.241510][T20794] ? snprintf+0xe9/0x140 [ 1552.245774][T20794] ? down_read_killable+0x340/0x340 [ 1552.250984][T20794] ? setup_bdev_super+0x56b/0x660 [ 1552.256014][T20794] get_tree_bdev+0x3e5/0x520 [ 1552.260605][T20794] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1552.266850][T20794] ? setup_bdev_super+0x660/0x660 [ 1552.271884][T20794] ? apparmor_capable+0x137/0x1a0 [ 1552.276906][T20794] ? bpf_lsm_capable+0x9/0x10 [ 1552.281588][T20794] ? security_capable+0x89/0xb0 [ 1552.286442][T20794] vfs_get_tree+0x8c/0x280 [ 1552.290865][T20794] do_new_mount+0x24a/0xa40 [ 1552.295378][T20794] __se_sys_mount+0x2e7/0x3d0 [ 1552.300055][T20794] ? __x64_sys_mount+0xc0/0xc0 [ 1552.304909][T20794] ? lockdep_hardirqs_on+0x98/0x150 [ 1552.310109][T20794] ? __x64_sys_mount+0x20/0xc0 [ 1552.314880][T20794] do_syscall_64+0x55/0xb0 [ 1552.319292][T20794] ? clear_bhb_loop+0x40/0x90 [ 1552.323964][T20794] ? clear_bhb_loop+0x40/0x90 [ 1552.328660][T20794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1552.334560][T20794] RIP: 0033:0x7fef2f79f7ca [ 1552.338973][T20794] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.358591][T20794] RSP: 002b:00007fef306cde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1552.367025][T20794] RAX: ffffffffffffffda RBX: 00007fef306cdee0 RCX: 00007fef2f79f7ca [ 1552.375003][T20794] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 00007fef306cdea0 [ 1552.382989][T20794] RBP: 0000200000000040 R08: 00007fef306cdee0 R09: 0000000000200700 [ 1552.390969][T20794] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000080 [ 1552.398940][T20794] R13: 00007fef306cdea0 R14: 0000000000000488 R15: 00002000000000c0 [ 1552.406930][T20794] [ 1552.410309][T20794] Kernel Offset: disabled [ 1552.414703][T20794] Rebooting in 86400 seconds..