last executing test programs: 11m27.811714834s ago: executing program 2 (id=418): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 11m27.020858854s ago: executing program 2 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40880) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) 11m26.656086931s ago: executing program 2 (id=422): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019bc0)=""/102392, 0x18ff8) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0xfffffdf6, &(0x7f00000003c0)=[{&(0x7f0000000400)="a2", 0xfffffdef}], 0x1}, 0x20) 11m23.115434253s ago: executing program 2 (id=426): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000a80)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', &(0x7f00000010c0), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000001140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000001200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001280)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001300), 0x651, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x1001f0) recvmmsg(r2, &(0x7f0000001340), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x11d200, 0x200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}}, 0x38}}, 0x0) 11m21.645496493s ago: executing program 2 (id=429): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 11m18.05206912s ago: executing program 2 (id=432): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000000)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 11m16.290875719s ago: executing program 32 (id=432): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000000)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 8m42.05300105s ago: executing program 3 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1ff) chdir(&(0x7f0000000580)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) 8m41.419570675s ago: executing program 3 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000240)=""/106, &(0x7f00000002c0), &(0x7f0000000300), 0x80, r1, 0x0, 0x7}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rxrpc/calls\x00', 0x0, 0x0) lseek(r4, 0x8f5, 0x0) 8m38.055499887s ago: executing program 3 (id=598): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) getpgid(r0) r3 = add_key$keyring(&(0x7f000001a6c0), &(0x7f000001a700)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f000001a740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x9f) r5 = add_key$user(&(0x7f000001a780), &(0x7f000001a7c0)={'syz', 0x1}, &(0x7f000001a800)="ae", 0x1, r3) r6 = add_key(&(0x7f000001a840)='keyring\x00', &(0x7f000001a880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r5, r3, r6, 0x1) 8m32.805629461s ago: executing program 3 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000240)=""/106, &(0x7f00000002c0), &(0x7f0000000300), 0x80, r1, 0x0, 0x7}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rxrpc/calls\x00', 0x0, 0x0) lseek(r4, 0x8f5, 0x0) 8m31.010787553s ago: executing program 3 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80080100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) rt_sigprocmask(0x1, &(0x7f0000000300)={[0xffff]}, 0xfffffffffffffffd, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000019380)=0x80000000000003) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000193c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [0xffffffff], [], 'veth0_to_batadv\x00', 'vxcan1\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, '\x00', 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) openat(0xffffffffffffff9c, &(0x7f0000019740)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000019780)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000197c0)='./config\x00', &(0x7f0000019800)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019840)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000019900)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x0, 0x1c5) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f00000198c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) socket$packet(0x11, 0x3, 0x300) 8m29.305517587s ago: executing program 3 (id=610): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019bc0)=""/102392, 0x18ff8) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0xfffffdf6, &(0x7f00000003c0)=[{&(0x7f0000000400)="a2", 0xfffffdef}], 0x1}, 0x20) 8m13.886885404s ago: executing program 33 (id=610): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019bc0)=""/102392, 0x18ff8) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0xfffffdf6, &(0x7f00000003c0)=[{&(0x7f0000000400)="a2", 0xfffffdef}], 0x1}, 0x20) 8m12.75356188s ago: executing program 1 (id=625): socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/sda\x00', 0x101042, 0x5) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000380)) syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x2000040, &(0x7f0000000ac0)={[{@check_relaxed}, {@utf8}, {@hide}, {@map_normal}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@dmode={'dmode', 0x3d, 0x803}}, {@session={'session', 0x3d, 0x54}}, {@cruft}, {@utf8}, {@nojoliet}, {@check_strict}]}, 0x1, 0x580, &(0x7f0000000b80)="$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") getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0xf0, 0x1e0, 0xffffffff, 0x1e0, 0x1e0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv6=@local, @ipv4=@loopback, @port=0x4e21, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x40}, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id=0x67, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'wlan1\x00', {0xff}, {}, 0x84, 0xe, 0x2, 0x31}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x5}, {0x3, 0x2, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m59.882172608s ago: executing program 1 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a3200000000140000"], 0xa0}}, 0x40880) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) 7m58.222467157s ago: executing program 1 (id=636): mount(&(0x7f0000000180)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) fsopen(&(0x7f0000000580)='nfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}, 0x24008054) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000a80)=0x4) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000ac0)=0x4) sendmsg$tipc(r1, 0x0, 0x1) 7m56.983598933s ago: executing program 1 (id=637): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) getpgid(r0) add_key$keyring(&(0x7f000001a6c0), &(0x7f000001a700)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f000001a740), 0x80) 7m55.193312635s ago: executing program 1 (id=639): mkdirat(0xffffffffffffffff, 0x0, 0x1ed) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB="1f6f6ebc8ae4f9b936d1aa3bbd3c98d580d64ba42e2a98d3704eacf4ff1952356cd6733e118374e98686ff56877d1b0bcbee805977733e484baa3952e246b626fece9155c975f124177fe2d8f3a57c53d0a301ba9a2bf808ef27ad043c015e838de9d31b80e61bc3672c878a43658225920b1681a34a28b8d32a33ab41c3a7e0580675"]) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x80000000, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000280)={0x3, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) add_key(&(0x7f0000000040)='id_legacy\x00', 0x0, &(0x7f0000000580)="c5feb906e9af6c94e4bb228aa1ebeac34b1f1a0704e1e9914a58e6be2bdec72b4bdeba50b709343e747fab8612a3dd2d2468175a25ce9eded3302eac2cee5d0f54e9fca8f0f1d13aa17c0c6edaa877427ead9712a2a839e0af0b79d83eac8a9488b12a4473b9d520c3cb8e3d6ea9501eb40d5895208539158578b9c0b329a0ad1bbdfd4f6406c72399ad2b0fc3f7dabba66d0f9b0d5e4aa16a3ab7d5ebd12660260400000000000000000034ca1c3ee4144da116d35ef302b50f15495731a59376e1432c285c1b9d438a872c6927778835975589101b2ebd08fb43e7770efd6ec582ed174898125c9dae473d1fbe389707110f9335c00228a528d72f94721d7dcd7cf56213e4d2b21445c2e1c98f554feab4cc3fff9c04c8630d4f0644e4a0ed0962d62533a9d460751b7bc006eb9cf6241f89e428db18daa571e13dec4e1942b2549792dff1b3b68a418f9a6294c87df719fcb49a42569ac75ab585f9bbb6da73d4000000", 0x165, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000001100)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@crypt={0x0, 0x1000, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) ioctl$DM_TARGET_MSG(r2, 0xc138fd0e, &(0x7f0000000d00)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000fc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24200, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) 7m53.343026723s ago: executing program 1 (id=642): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000a80)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', &(0x7f00000010c0), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000001140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001280)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001300), 0x651, 0x0) socket$nl_audit(0x10, 0x3, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x1001f0) recvmmsg(r1, &(0x7f0000001340), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x11d200, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}}, 0x38}}, 0x0) 7m37.511705172s ago: executing program 34 (id=642): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000a80)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', &(0x7f00000010c0), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000001140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001280)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001300), 0x651, 0x0) socket$nl_audit(0x10, 0x3, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x1001f0) recvmmsg(r1, &(0x7f0000001340), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x11d200, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}}, 0x38}}, 0x0) 6m34.876496981s ago: executing program 6 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a3200000000140000001100"], 0xa0}}, 0x40880) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) 6m34.426834306s ago: executing program 6 (id=729): socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000000480)=""/102392, 0x18ff8) r1 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/state\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/224, 0xe0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0) epoll_create1(0x80000) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000002c0)={0xefa, 0x7, 0x80, 0x40e0, 0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) connect(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) write$nbd(r4, 0x0, 0x14) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000194c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 6m31.794398704s ago: executing program 6 (id=731): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000019380), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000019580)={{0x548, 0x0, 0x896a}, 'syz0\x00', 0x1c}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e22, @empty}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000019200)={0x0, 0x0, &(0x7f0000019280)={&(0x7f0000019340)=ANY=[@ANYBLOB="1c0000002600096b23bd4ceacf"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008000) 6m24.425029183s ago: executing program 6 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000240)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='test_dummy_encryption', &(0x7f00000002c0)='v\x00\x00\x00\x00\x00\x00\x00a8\xceoc', 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)="31303017", 0x4) write(0xffffffffffffffff, 0x0, 0x0) 6m24.026158324s ago: executing program 6 (id=739): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000a80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r4, &(0x7f0000000b40)=""/102392, 0x18ff8) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 6m18.773100928s ago: executing program 6 (id=743): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 6m3.483204853s ago: executing program 35 (id=743): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 5m55.511141773s ago: executing program 4 (id=769): socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000000480)=""/102392, 0x18ff8) r1 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/state\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/224, 0xe0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0) epoll_create1(0x80000) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000002c0)={0xefa, 0x7, 0x80, 0x40e0, 0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) connect(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) write$nbd(r4, 0x0, 0x14) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000194c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 5m47.110913277s ago: executing program 4 (id=779): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1490c2) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_sec\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f0000000280)=""/9, 0xfffffd87) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], 0xffe) 5m44.240878129s ago: executing program 4 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) syz_emit_ethernet(0x0, 0x0, 0x0) 5m42.232980063s ago: executing program 4 (id=788): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 5m39.40947324s ago: executing program 4 (id=792): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019540)=0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000019580)="01000000020001000003be8c5ee176", 0xf) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000030601010000000000000000070000000000000007000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="14010000"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0xc040) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 5m36.581950298s ago: executing program 4 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x58, r1, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7c19d52276"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5m21.419301769s ago: executing program 36 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x58, r1, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7c19d52276"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 3m26.042014501s ago: executing program 0 (id=947): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) getpgid(r0) r2 = add_key$keyring(&(0x7f000001a6c0), &(0x7f000001a700)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f000001a740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x9f) r4 = add_key$user(&(0x7f000001a780), &(0x7f000001a7c0)={'syz', 0x1}, &(0x7f000001a800)="ae", 0x1, r2) r5 = add_key(&(0x7f000001a840)='keyring\x00', &(0x7f000001a880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r5, 0x1) 3m21.914382301s ago: executing program 0 (id=953): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 3m19.830549903s ago: executing program 0 (id=956): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x28d, &(0x7f00000000c0)="$eJzs3c9qE1EUB+DT/7GbBHQlLgYE6So0fYMgFcSAEMmirhpsC9KEQgoBXdjufBdXgm/iY/gEWRQiTaLJ1CjUtt6YfB8Mc5jJD85kkZnAucn+o/bxwcnp0d79b7FVyGI14vzzRUTEcqxE3tJgW88dOw8A4H9TrzerqXvgbnU61eZaRGz8cqbxKUlDAAAAAAAAAAAA3Njk/H9hNP8fvYjSxPz/0mi/bP4fAOaC+f/51+lUm5uj57c88/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOr1+v9j/w5a6PwDg9rn/A8Diucb9/0vCNgGAW9TL3euXwvd/AJh/r/Zev6jWarv1LCtEtD92G93GcD88Xz2Kt9GKw9iOYlzE5fPByLB+9ry2u50NlGK/fTbKn3UbK/l8JYpRmp6vDPNZPr8Wm5P5nSjGg+n5nan59dh6PJEvRzG+vomTaMVBXGbH+Q+VLHv6snYlvzF4HQAAAAAAAAAAAAAAAAAAAPwL5eynqev3y+XfnR/mr/H7AFfW16/Gw9W01w4AAAAAAAAAAAAAAAAAAACz4vTd++Nmq3XYSV4sz0YbNyruzdy7qlD8XZH4gwkAAAAAAAAAAAAAAAAAABbQeNHvjyNP0jYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmM////7orU1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAshu8BAAD//4pD6Wo=") bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r3, 0x111, 0x2, 0x0, 0x0) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) io_submit(0x0, 0x0, 0x0) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 3m17.470672653s ago: executing program 0 (id=960): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x28d, &(0x7f00000000c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) getsockopt(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x0) r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) setxattr$incfs_id(0x0, 0x0, &(0x7f0000000900)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3m15.005427133s ago: executing program 0 (id=963): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000a80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r4, &(0x7f0000000b40)=""/102392, 0x18ff8) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 3m10.571558774s ago: executing program 0 (id=967): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000300)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f00000003c0)="$eJzs289vFFUcAPDvbFt+YyviDxC1ij8af7S0oHLwgtGEi4mJHvBYSyFIoYbWRAiR6gGPhpNH9WjiX+BJLkY9abzq3ZgQw0U0kYyZ3ZllaXeX7W63C+znk0x33uybed83M6998940gL41mv1IIrZFxG8RMRwRA8szjFY+rl09P/PP1fMzSaTpW38l2W7x99XzM0XWJP/cmifGStVNKyycPXdyem5u9kyenlg89f7EwtlzL5w4NX189vjs6amDBw/sn3z5pakX16Se27NYd380v2fX4XcuvTFz5NK7P36TBbct/762HhUjHZc5GqMNT8BTHR/99rI9/2x4wbktZW19MCKGyu1/OAbKqYrheP2TngYHdFWapunGFVurPYClFLiLJdHrCIDeKP7QZ8+/xbKO3Y+eu3Ko8gCU1ftavlS+GYxSnmeo5vl2rY1GxJGlf7/Ilqg7DgEAsLa+y/o/z9fr/5XigZp89+RzQyMRcW9E7IiI+yJiZ0TcH1HO+2BEPLTK8keXpW+Ufz0fhPplc/u1u7UrhyJ5JZ/burn/V/T+YmQgT20v138oOXZibnZffk7GYmhjlp5sUsbl1379rNF3tf2/bMnKL/qCeRx/Di4boDs6vTjdSZ1rXfm4PAZ4YWX9k+pMQBIRuyJidxvH3xQRJ579ek91w4aag+aa17+JwTYCWib9KuKZyvVfimX1j5pQm8xPTmyKudl9E8VdsdJPP198s1H5t77+3ZVd/y117/9q/UeS2vnahdWXcfH3Txs+07R7/29I3i6vF7fTh9OLi2cmIzYkSyu3T93Yt0gX+bP6j+2t3/53RFz/Mt/v4YjIbuJHIuLRiHgsj/3xiHgiIvY2qf8Prz75Xvv1766s/kdXdf1XvzJw8vtvG5Xf2vU/UF4by7e08vuv1QA7OXcAAABwpyiV34FPSuPV9VJpfLzyDv/O2FKam19YfO7Y/Aenj1belR+JoVIx0jVcMx46mY+5FOmpfKy4SO8vjxunaZpuLqfHZ+bnujWnDrRma4P2n/ljoNfRAV1Xnkc7+Hlrmf2HF9xVbppHH+pdHMD6W4P3aIA7lPYP/Uv7h/5Vr/1fiLjWg1CAdebvP/Qv7R/6l/YP/Uv7h77Uyf/1N1vZcbhbR74TVy5HRKM8A20feWNEdBrh01vb3T1KvT6rra8U77RVt5TqZP6vVxFm17HVzBdivQLr8S8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfJ/AAAA///tr+cS") syz_mount_image$udf(&(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x10048, &(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000002040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000020c0)=@abs, 0x6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) sendmmsg$unix(r3, &(0x7f0000002140), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002180), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x6) r4 = fsopen(&(0x7f0000002200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000900)={0x1, @pix={0xfffffffb, 0x3ff, 0x4f424752, 0x4, 0x3, 0xcfa, 0xa, 0xe86, 0x0, 0x0, 0x1, 0x3}}) 2m55.279604019s ago: executing program 37 (id=967): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000300)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f00000003c0)="$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") syz_mount_image$udf(&(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x10048, &(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000002040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000020c0)=@abs, 0x6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) sendmmsg$unix(r3, &(0x7f0000002140), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002180), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000021c0)=0x6) r4 = fsopen(&(0x7f0000002200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000900)={0x1, @pix={0xfffffffb, 0x3ff, 0x4f424752, 0x4, 0x3, 0xcfa, 0xa, 0xe86, 0x0, 0x0, 0x1, 0x3}}) 39.389995225s ago: executing program 9 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x4000087, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000480), 0x100c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000004c0)={0x5, 0x2, 0x8, "d52b3d000400fa44966262631e8ac11eff00000000000000000000000100", 0x50565559}) 36.217815238s ago: executing program 9 (id=1147): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x28d, &(0x7f00000000c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r3, 0x111, 0x2, 0x0, 0x0) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) io_submit(0x0, 0x0, 0x0) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 32.6540882s ago: executing program 9 (id=1152): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x28d, &(0x7f00000000c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) getsockopt(r7, 0x111, 0x2, 0x0, 0x0) r8 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) io_submit(0x0, 0x0, 0x0) shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r8, 0x0) setxattr$incfs_id(0x0, 0x0, &(0x7f0000000900)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 31.239435344s ago: executing program 9 (id=1155): mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x51) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x4) 29.837600756s ago: executing program 9 (id=1157): mount(&(0x7f0000000180)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) fsopen(&(0x7f0000000580)='nfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}, 0x24008054) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000800)={0x0, [[0xffffffff, 0xffffffff, 0x12e, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x1, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xfffffffc, 0xffffffff], [0xffffffff, 0x1, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x80, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000a80)=0x4) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000ac0)=0x4) sendmsg$tipc(r1, 0x0, 0x1) 28.052911358s ago: executing program 9 (id=1161): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000300)=0x2, 0xf6) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000006740)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) 27.497404165s ago: executing program 38 (id=1161): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000300)=0x2, 0xf6) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000006740)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) 15.407898243s ago: executing program 8 (id=1181): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0x8000001, 0xff92, &(0x7f0000000100), 0x2, 0x8}) syz_open_dev$video4linux(0x0, 0x1, 0x101000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f0000000380)) 15.14891667s ago: executing program 8 (id=1182): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/152, 0x98}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x802) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000004c0)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000", 0x52, 0xffffffffffffffff) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)}], 0x1) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000005c0)) 14.26523613s ago: executing program 8 (id=1183): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) getpgid(r0) r2 = add_key$keyring(&(0x7f000001a6c0), &(0x7f000001a700)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f000001a740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x9f) r4 = add_key$user(&(0x7f000001a780), &(0x7f000001a7c0)={'syz', 0x1}, &(0x7f000001a800)="ae", 0x1, r2) r5 = add_key(&(0x7f000001a840)='keyring\x00', &(0x7f000001a880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r5, 0x1) 10.110998232s ago: executing program 5 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/152, 0x98}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x802) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000004c0)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000", 0x52, 0xffffffffffffffff) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)}], 0x1) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000005c0)) 9.120902953s ago: executing program 7 (id=1191): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000f80), 0x2, 0x141102) writev(r1, &(0x7f0000000fc0)=[{&(0x7f0000001000)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2814000, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@noblock_validity}, {@nouid32}, {@dioread_nolock}, {@quota}, {@nomblk_io_submit}, {@delalloc}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003080)={0x11, 0xa, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], &(0x7f0000000780)='syzkaller\x00', 0x4}, 0x94) r2 = syz_open_dev$video(&(0x7f0000000bc0), 0xa3, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000c00)={0x1, @pix={0x0, 0x4, 0x47425247, 0x8, 0xfffffffd, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7, 0x1}}) mknod$loop(&(0x7f0000000d00)='./file0\x00', 0xfff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), &(0x7f0000000dc0), 0xfe1c, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./gadget\x00', &(0x7f0000000a80)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) write(0xffffffffffffffff, &(0x7f0000000b80)="0100000007058102400000", 0xb) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x15) fallocate(0xffffffffffffffff, 0x0, 0xfff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x101042, 0x1d8) 7.901079177s ago: executing program 7 (id=1192): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x6, 0x4, 0x4, 0x100}, 0x50) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0xf00, &(0x7f00000008c0)={0x0, 0xd4ad, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x80, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000840)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb87, 0x400, 0xfffffffd, 0x12b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r14, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x4}], 0x1, 0x40000002, 0x0) 7.889457078s ago: executing program 8 (id=1193): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xa04080, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC, @ANYBLOB="92dd9095f38745d15c06a1b24b60a90f61e0e292035c59fd7d58731a95793c4ed38b8146998fbf85ec961d3148e08bd54cd4bd105c1843fd863080704fbab4b36b6518e5e4683044a9dd7bfe1308339adf4f246d81081f664c", @ANYBLOB="e4313c6ffe3711cd8932be9273592b06e18ed777827dc810aa84a171e3c650e4786e1dcd3bb77fc11e2bd92a41cbd4f6c639a2414e8bd4c895cfeac249aeff7739fb349623e238e3e64971d097928c33aeb6b75e23e38c73beacf85c11a96193e08c938b17300d8f263c99cff7aef1407398387c2e5dc510887031062fd42b"], 0x2, 0x5524, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000480)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) 6.578853071s ago: executing program 5 (id=1194): r0 = syz_open_dev$video4linux(0x0, 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0xfffffffd, 0xb77, 0x101b, 0x7, 0xa, 0x2, 0x3, 0xa4de36948e08189f}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 6.336852676s ago: executing program 5 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/sda\x00', 0x101042, 0x5) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000380)) syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x2000040, &(0x7f0000000ac0)={[{@check_relaxed}, {@utf8}, {@hide}, {@map_normal}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@dmode={'dmode', 0x3d, 0x803}}, {@session={'session', 0x3d, 0x54}}, {@cruft}, {@utf8}, {@nojoliet}, {@check_strict}]}, 0x1, 0x580, &(0x7f0000000b80)="$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") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0xf0, 0x1e0, 0xffffffff, 0x1e0, 0x1e0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv6=@local, @ipv4=@loopback, @port=0x4e21, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x40}, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id=0x67, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'wlan1\x00', {0xff}, {}, 0x84, 0xe, 0x2, 0x31}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x5}, {0x3, 0x2, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.041969486s ago: executing program 7 (id=1196): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080)=ANY=[], 0x1, 0x184, &(0x7f0000000a00)="$eJzskL9OKkEUxr/ZXfbCLW4uya1oILlGsVCWRY2x0RJ7H0ACKxIX/7AkAqFYYgyFhbH0CXgNE19AC0Os6UwoqKwMZnbODsMzOL9iv51zvnPmnDkNroJfAL5m/SoOEGHiD14ZgwUgy0Rsagh9IH0jvReCF/IdUvyGNBN0e2cV3/daub0c0ovAnH3OBYD0BPsDA9Oo1XjWr/KfYwDcZQOoAR9pAKrHfLeii0QnIGMB/6Il5tLDHfywBqDQbl4Wgm5vo9Gs1L26d+66pR1ny3G23cJJw/cc8bVpL15Oq4DrOgD+XillhASAW/L8pnwMU0ajPFNrbeUN8/+xhIGU/I97MDzJ2vgeE8ARVpEEcB2yRXQsuliIViqDwaRD0VLmE65klNisXvi1IRhYXDaCJXsUJxhQge+5EyRkprQbxqMOSVdIy6Qj5Rk5WXs5YEUd7uiUD+MRW0Vu7CTj/p1Ku91ybfn3N4TSiN/6aCwv92xAo9FoNBqNRqPRaH463wEAAP//Mu15jw==") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0xe, &(0x7f0000003380)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f00000033c0)=0x5) syz_open_procfs$namespace(0x0, &(0x7f0000003400)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000003440), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000003480), 0x2, 0x141102) writev(r1, &(0x7f00000034c0)=[{&(0x7f0000003500)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x1c2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000003600)={0x3, 0x40, 0xfa00, {{0xa, 0x9, 0x0, @loopback, 0x20}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0xffffffffffffffff, 0x99d}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000003680)={0x10, 0x30, 0xfa00, {&(0x7f00000036c0), 0x0, {0xa, 0x4e23, 0x228, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x3}}}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000003740)='./binderfs/custom0\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000003780)={0x0, 0x80}, &(0x7f00000037c0)=0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) 5.261653505s ago: executing program 5 (id=1197): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$media(&(0x7f0000000980), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) 4.204933713s ago: executing program 7 (id=1198): ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, 0x0) 4.141717519s ago: executing program 5 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019380)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 4.105710933s ago: executing program 8 (id=1200): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000f80), 0x2, 0x141102) writev(r1, &(0x7f0000000fc0)=[{&(0x7f0000001000)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2814000, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@noblock_validity}, {@nouid32}, {@dioread_nolock}, {@quota}, {@nomblk_io_submit}, {@delalloc}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003080)={0x11, 0xa, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], &(0x7f0000000780)='syzkaller\x00', 0x4}, 0x94) r2 = syz_open_dev$video(&(0x7f0000000bc0), 0xa3, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000c00)={0x1, @pix={0x0, 0x4, 0x47425247, 0x8, 0xfffffffd, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7, 0x1}}) mknod$loop(&(0x7f0000000d00)='./file0\x00', 0xfff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), &(0x7f0000000dc0), 0xfe1c, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./gadget\x00', &(0x7f0000000a80)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) write(0xffffffffffffffff, &(0x7f0000000b80)="0100000007058102400000", 0xb) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x15) fallocate(0xffffffffffffffff, 0x0, 0xfff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x101042, 0x1d8) 2.318086904s ago: executing program 7 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x802) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000004c0)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000", 0x52, 0xffffffffffffffff) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)}], 0x1) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000005c0)) 2.315474415s ago: executing program 5 (id=1202): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 1.392973519s ago: executing program 7 (id=1203): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000180)=0x2, 0x8000000000000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffdffffffffff, 0xffffffffdbfffff9, 0x80000000000, 0x0, 0xfbfffffffffff30a, 0x3}, &(0x7f0000000140)={0x1d, 0x26d7, 0x80000007ff, 0x0, 0x80000001, 0x0, 0xffffffffff7ffffd, 0x8}, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x1c802, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5f85, &(0x7f0000001900)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4AlD6tIEArVzDl2TU2Pexx7urrn/H7SuOrr0zV9yv+pqe6pywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL733R+f7kXE5V+nBw5HfCYGEf2I5bo+FvXMxfz8YUQcic3meC4iBosR9fKb/zwTcS4iPjoUcW/j1mr98Jk99uP8qZvXP/n+d/7xuz/dOfLTN3/yQbv9R589++Hvb0cc/uFrH35y+8msOwAAAJSiqqqqlz7mH02f7/tddwoAmIq8/6+S/LharVarn2j9x/5s9UddaN1UjXe7WUTEenOZ+j2Dw/EAMGfW4+Ouu0CH5F+0YUQ81XUngJnW67oD7It7G7dWeynfXnN/cGyrPf+dclv+673713fsNp2kfY7JtH6+7sQgnt2lP8tT6sMsyfn32/lf3mofpeftd/7Tslv+o61Ln4qT8x+082/Zlv+fI2Ju8++Pzb9UOf/ho+S/Ppjj7V/+AAAAAAAcfPnv/4c7Pv67+PirsicPO/57bEp9AAAAAAAAAIAn7XHH/7vP+H8AAAAws+rP6rW/HHrw2G73Yqsfv9SLeLr1fKAw6WKZla77AQAAAAAAAAAAAAAlGW6dw3upF7EQEU+vrFRVVX81tetH9bjLz7vS1x9K1vUveQAA2PLRoda1/L2IpYi4lO71t7CyslJVS8sr1Uq1vJjfz44Wl6rlxufaPK0fWxzt4Q3xcFTV32ypsVzTpM/Lk9rb369+rVE12EPHpqPDwAEgIrb2RvfskQ6Yqnomun6Xw3yw/R88tn/2ouufUwAAAGD/VVVV9dLtvI+mY/79rjsFAEzDUt7/t48LqNVqtVqtPnh1UzXe7WYREevNZer3DIbjB4A5sx4fd90FOiT/og0j4kjXnQBmWq/rDrAv7m3cWu2lfHvN/UEa3z2fC7It//Xe5nJ5+XHTSdrnmEzr5+tODOLZXfrz3JT6MEty/v12/pe32kfpefud/7Tsln+9noc76E/Xcv6Ddv4tByf//tj8S5XzHz5S/gP5AwAAAADADMt//z9c/PFfdz0AAAAAAAAAYH7d27i1mq97zcf/Pz/meb3mnOs/D4ycf2/P+bv+9yDJ+ffb+bdOyBk05u++8SD/f2/cWv3g5r8+l6czn//CYFS/9kKvPxim05yqhbfialyLtTi14/nDbe2nd7QvbGs/M6H97I72Ud2+nNtPxGr8Iq7Fm/fbFyecGLU0ob2a0J7zH9j+i5TzHza+6vxXUnuvNa3dfb+/Y7tvTse9zsW//ffFnVvX9N2Jwf11a6rX73gH/dn8P3lqFL+6sXb9xG+u3Lx5/XSkybZHz0SaPGE5/4X0lfN/6YWt9vx7v7m93n1/9Mj5z4o7Mdw1/xca8/X6vjzlvnUh5z9KXzn/vAcav/3Pc/67b/+vdNAfAAAAAAAAAAAAAAAAeJiqqjYvEb0YERfS9T/uhA8ARfjDD9JMlYRarVar1eoDWzdV473eLGJp+zIXIuK3474ZADDL/hcR/+y6E3RG/gXL9/urp1/oujPAVN14972fXbl2be36ja57AgAAAAAAAAB8Wnn8z2ON8Z83zwNqjRu9bfzXN+LY3I7/2R8NNsc6Tyv0fDx8/O/j8fDxv4cTXm9hQvtoQvvihPalCe1jL/RoyPk/nzLO+R9NK1bS+K8vddCfruX8j6exnnP+X2o9r5l/9dd5zr+/Lf+TN9/55ckb77736tV3rry99vbaz0+funDu7PlzZ8+fP/nW1Wtrp7b+7bDH+yvnn8e+dh5oWXL+OXP5lyXn/8VUy78sOf8XUy3/suT88/s9+Zcl558/+8i/LDn/l1Mt/7Lk/L+cavmXJef/SqrlX5ac/1dSLf+y5PxfTbX8y5LzP5Fq+Zcl538y1fIvS84/H+GSf1ly/vnMBvmXJed/JtXyL0vO/2yq5V+WnP+5VMu/LDn/86mWf1ly/hdSLf+y5Py/mmr5lyXn/7VUy78sOf/XUi3/suT8v55q+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/q+nWv5leXD/fzNTnvnP3yNmoBtmzIyb6fo3EwAAAAAAAAAAAADQNo3TibteRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPfnptSHADIUAcWBsDBhbvrr/AIQaThJSSNqUkpE1Lahx7bTbxV73rBBAqS6EtUZCK1F7Qi6ZJlEaR2goURWoq0Qipkdq7cpWIm6iVuLBUqByUVEoV2OrMvO+7M7OzM7u21z5zzu+H8N87c2bmnTNnZvdZ65kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAabfzY1J/3ZVmW/1/7Y32WXZr/fW22N/9ybtfFXiEAAABwrt6p/fkPl6UT9i7jQg3b/Nu1//H9+fn5+ewLb59+9y/n59MZo1k2sCbLaudF//7LX8w3bhM8k4309Td83d/l5ge6nD/Y5fyhLucPdzl/TZfzR7qcv2gHLLK2/vuY2pVtrv11fX2XZldkQ7XzNre51DN9a/r74+9yavpql5kfOpRNZ0eyqWxi0WX6av9l2Ssb89u6L4u31d9wWxuyLDvzsycPxDX0hX28OWu6sZrGx+6te7LRt3/25IHvzL55dbvZdTcsWmmWbdmUr/PZLFv4dVXWl61J+ySus79hnRvarHOgaZ19tcvlf29d55llrjPe75Gwztc6rHNDOO2x67Msm8uW3KbVM1l/tq7lVtP+HqkfEfl15A/l+7LBFR0nG5dxnOSXeeP65uOk9ZiM+39j2CeDS6yh8eF46+nhRfv9bI+T/F4X4VjNr/uB/EZHRhp/tdp0rObbPHnD0sdA28euzTGQjuWGY2BTt2Ogf3igdgz0L6x5U9MxMLnoMv1ZX+22Tt/Q+RgYnz16Ynzm8Sdumz66//DU4aljkxO7dmzfuWP7zp3jh6aPTE3U/1zZLu0h67L+dAxuCq818Ri8qWXbxkNy/pvn73kwUpDnQX7fP3NjvqBL+7MljvF8m2e3nPvzIH3fb3geDDY8D9q+prZ5Hgwu43mQb3Nmy/K+Zw42/N9uDav1Wri+4Ri4mN8P89t8+OalXws3hHU9d8tKvx8OLDoG4t3qC8+9/JT0897IHWG/LD4ursnPuGQ4OzUzdXLrY/tnZ09OZmFcEJc3PFatx8u6hvuULTpe+ld8vOz9+1/deE2b09eHfTVya+fHKt9mx1jnx6r26t68P4ez+v5sOnVbFsZ5dqH3Z7vvZvn+TFmiw/7Mt3n2tnP/WTDlkobXv6Fur38DQ4P117+BtDeGml7/Fj80A7WVZdmZ25b3+jcU/r/Qr39XFOT1L99XD2/tfAzk2zw3vtJjYLDj69/1YfaF9dwcEsNIQ+5/t3b+XP0wbXgsux43g4ND4bgZjLfYfNxsX3SZ/Nry294ycXbHzZbrmx+rpp9bSnjc5PvqryY6Hzf5Nq9Onvtrx9r414bXjuFux8DQwHC+3qF0ENRf7+bXxmNga3YgO54dyQ6my+SPcn5bY9uWdwwMh/8v9GvHVQU5BvJ99eK2zsdAvs2Ptp/fn522hFPSNg0/O7X+fmGpzH/N4ML1te62853583V+/MefSqe1yxD5Nm/uWGnO6Lyfbg2nXNJmP7U+f5Y6pg9mF2Y/XRXWeWRn599N5dtcsWuZx9PeLMten3y99vuu8Pvd75368febfu/b7nfKr0++fv/4gz9ZyfoBADh779b+nBuu/6zZ8C/Wy/n3fwAAAKAnxNzfH2Yi/wMAAEBpxNw/EGYi/wMAAEBpxNw/GGZSkfz/6B27X3rnqSy9G+B8EM+Pu+GBu+rbxY73XPh6dH5BfvpHvz300lefWt5t92dZ9qv7P9h2+0fviuuqOxHX+eHm0xe56rpl3f4jDy1s1/j+CWd2168/3p/lHgaxq/zK+Lba9Y4+Plmbr96f1eaDc889U7/++tdx+9Pb69v/TXjTkr2H+pouvyWsZ3OYo+E9ZR7Yu7Af8hkv99KGa//18s8u3F68XN+m99bu5ot/XL/e+B5RL1xe3z7e76XW/y9f++5L+faP3dB+/U/1t1//6XC9b4T5yz317Rv3+Vcb1v+nYf3x9uLltn7rh23X//IH6tu/HI6Lb4TZuv57/uJD77R7vOLt7L2zfrl4+xP/u6N2uXh98fpb1z/y1GTT/mi9/lffrl/Pni//fKBx+3h6vJ3okTubj+++8Pg29cizLPvun2VN+zn7SP1y/9yy/nh9J+5sv/5bW9Z5ou+62uUX7s/6pvv19b/b1vb+xvXs/cf1TffnhXvD/nt7/Ef59Z5+MByP4fz/e61+fa3vZfryvc2vN3H7b6yvP2/j9Y23rP+FlvXPXZfvu+7rv+/t+vpfvntN0/r3fiIcT/fVZ7f1H/7by5ou/83v1B+Pk18ZO3Z85tT0wYa92vg8XjOydt0ll77nvZeF19LWr/cdn3106uToxOhElo324FsGrvb6vxXm/9TH3Pm/hbqf/Lx+3D3/yfr3rZt+Uf/6hXD6I+HxjN8fv/7XQ03Ha+vjPnd3fZ7r+m8J61iuD3ztv65b1oanP//KqX/6kzdbfy6I9+fE+0dq9+/FjVfWzut7tX5+6+tVN//5/ubn9U8HJ2rzB2G/zod3Zt50Zf32Wq8/vjfJ85+uP3/jT3Lx8lnL+4msH2i+H+e6/p+Gn2N+eFXz6188Pn7wVMu7Oa/P+vIlzIXXh2yufn7cKu7v589c2fb24vvwZHNXr2SZS5p5fGb8yPSxU4+Nz07NzI7PPP7EvqPHTx2b3Vd779J9X+x2+YXn97ra8/vg1K4dWe3Zfrw+VtnFXv+Jhw4cvH3ixoNTh/afOjT70Impk4cPzMwcmDo4c+P+Q4emvtLt8tMH90xu27399m1jh6cP7rlj9+7tu8emjx3Pl1FfVBe7Jr40duzkvtpFZvbs2D25c+eOibGjxw9O7bl9YmLsVLfL1743jeWX/vLYyakj+2enj06NzUw/MbVncveuXdu6vvvj0ROHZkbHT546Nn5qcOrkeP2+jM7WTs6/93W7PNUwczy83rXoCz+df+7WXen9cXPffnrJq6pv0vzjafZWeC+o+P2t29cx9w+FmVQk/wMAAEAVxNwf3vh/4Qz5HwAAAEoj5v41YSbyPwAAAJRGzP315D+SPv69Kvn/fPX/n9b/r9H/1//P9P8T/X/9/0z/X/+/C/1//f9eXr/+f+r/z+j/s5Si9f9D7s/WZpl//wcAAICSirl/XZiJ/A8AAAClEXP/JWEm8j8AAACURsz9l4aZVCT/+/x//X/9/079/7it/n+m/1+E/v/m/9b/X0T/X/8/0/8/axe7P9/r6y9g/3+t/j9FU7T+f8z97wkzqUj+BwAAgCqIuf+9YSbyPwAAAJRGzP2XhZnI/wAAAFAaMfevDzOpSP7X/9f/1//3+f/6/z3T//f5/23o/+v/Z/r/Z+1i9+d7ff0F7P/7/H8Kp2j9/5j7fy3MpCL5HwAAAKog5v73hZnI/wAAAFAaMfdfHmYi/wMAAEBpxNx/RZhJRfJ/Nfv/b2RZpv+f6f/r/7esU/9f/3816P/r/3ei/6//38vr1//X/6e7ovX/Y+5/f5hJRfI/AAAAVEHM/VeGmcj/AAAAUBox938gzET+BwAAgNKIuf+qMJOK5P9q9v99/r/+f53+f/M69f/1/1eD/r/+fyf6/8vo/w8u/FX/v1jr1//X/6e7ovX/Y+6/OsykIvkfAAAAqiDm/mvCTOR/AAAAKI2Y+z8YZiL/AwAAQGnE3L8hzKQi+V//X/9f/1//X/9f/3819Vb/v3/Jc/T/6/T/m52//v/cwgJ8/n/PrF//X/+f7orW/4+5/0NhJhXJ/wAAAFAFMfdfG2Yi/wMAAEBpxNx/XZiJ/A8AAAClEXP/aJhJRfK//r/+v/6//r/+v/7/auqt/v/S9P/r9P+bXZDP/2+g/1+s9ev/6//TXdH6/zH3bwwzqUj+BwAAgCqIuX9TmIn8DwAAAKURc//1YSbyPwAAAJRGzP2bw0wqkv/1//X/9f/1//X/9f9Xk/6//n8n+v/6/728fv1//X+6K1r/P+b+G8JMKpL/AQAAoApi7r8xzET+BwAAgNKIuf+mMBP5HwAAAEoj5v4tYSYVyf/6//r/+v893P8f0P/P9P8LT/9f/78T/X/9/15ev/6//j/dFa3/H3P/zWEmFcn/AAAAUAUx998SZiL/AwAAQGnE3H9rmIn8DwAAAKURc/9YmElF8v8K+/8vxtP1/5vp/7dfv/6/z//X/9f/1//X/+9E/1//v5fXr/+v/093Rev/x9x/W5hJRfI/AAAAVEHM/VvDTOR/AAAAKI2Y+8fDTOR/AAAAKI2Y+yfCTCqS/33+v/6//r/+v/6//v9q0v/X/+9E/1//v5fXr/+v/093Rev/x9w/GWZSkfwPAAAAVRBz/7YwE/kfAAAASiPm/u1hJvI/AAAAlEbM/TvCTCqS/3uk/781FaD0//X/9f/1//X/e4r+v/5/J/r/+v+9vH79f/1/mvW3Oa1o/f+Y+3eGmVQk/wMAAEAVxNy/K8xE/gcAAIDSiLn/9jAT+R8AAABKI+b+O8JMKpL/e6T/7/P/9f/1/xvo/+v/F9ra5i/1//X/O9H/1//v5fXr/+v/013R+v8x9+8OM6lI/gcAAIAqiLn/w2Em8j8AAACURsz9d4aZyP8AAADQU9p9DmEUc/9Hwkwqkv/1/8ve/59fo/+v/6//33n9+v+rS/9f/78T/X/9/15ef2H7/8P6/xRH0fr/MffvCTOpSP4HAACAKoi5/64wE/kfAAAASiPm/rvDTOR/AAAAKI2Y+/eGmVQk/+v/l73/7/P/9f/1/7utX/9/den/6/93ov/fm/3/8GOL/n+B+v/5MeTz/ymiovX/Y+6/J8ykIvkfAAAAqiDm/o+Gmcj/AAAAUBox938szET+BwAAgNKIuf/jYSYVyf/6//r/+v/6//r/+v+rSf9/1fr/tZfCIvf/1y7jZvT/e7P/H+n/F6f/3/T5//r/FEjR+v8x998bZlKR/A8AAABVEHP/J8JM5H8AAAAojZj7fz3MRP4HAACA0oi5/74wk4rkf/1//X/9f/1//X/9/9Wk/+/z/zvR/9f/7+X16//r/9Nd0fr/Mff/RphJRfI/AAAAVEHM/feHmcj/AAAAUBox938yzET+BwAAgB4zvOQ5Mff/ZphJRfJ/7/X/R3uy/9+frl//X/9f/1//X///fNL/1//P9P/P2sXuz/f6+vX/9f/prmj9/5j7fyvMpCL5HwAAAKog5v5PhZnI/wAAAFAaMff/dpiJ/A8AAAClEXP/A2EmFcn/57v/33r5Tnz+v/5/pv+v/6//r/9/jvT/9f8z/f+zdrH7872+fv1//X+6K1r/P+b+3wkzqUj+BwAAgCqIuf/BMBP5HwAAAArq0RVfIub+T4eZyP8AAABQGjH3fybMpCL5v/c+/1//X/9f/1//X/+/l+j/6/93ov+v/9/L69f/1/+nu6L1/2PufyjMpCL5HwAAAKog5v7PhpnI/wAAAFAaMff/bpiJ/A8AAAClEXP/74WZdMj/S1cSeo/+v/6//r/+/xL9/zn9f/3/lRhc4nT9/8X9/3xf6f/X6f/r//fy+vX/9f/prmj9/5j7Pxdm4t//AQAAoDRi7v/9MBP5HwAAAEoj5v4/CDOR/wEAAKA0Yu5/OMykIvlf/1//X/9f/9/n/+v/ryb9f5//34n+v/5/L69f/1//n+6K1v+Puf/zYSYVyf8AAABQBTH3/2GYifwPAAAApRFz/74wE/kfAAAASiPm/kfCTCqS//X/9f/1//X/9f/1/1eT/r/+fyf6//r/vbx+/X/9f7orWv8/5v79YSZ7m28GAAAA6F0x938hzKQi//4PAAAAVRBz/4EwE/kfAAAASiPm/oNhJhXJ//r/+v/6//r/+v/6/6tJ/1//vxP9f/3/Xl6//r/+P90Vrf8fc/9UmElF8j8AAABUQcz9h8JM5H8AAAAojZj7D4eZyP8AAABQGjH3PxpmUpH8r/+v/6//X9n+/2vfa1mn/r/+/2rQ/9f/70T/X/+/l9ev/6//T3dF6//H3D8dZlKR/A8AAABVEHP/F8NM5H8AAAAojZj7vxRmIv8DAABAacTcfyTMpCL5X/9f/1//v7L9/+V9/v/ahdvV/9f/Pxv6//r/nej/6//38vr1//X/6a5o/f+Y+4+GmVQk/wMAAEAVxNx/LMxE/gcAAIDSiLn/eJiJ/A8AAAClEXP/iTCTiuR//f8V9f+H+5boBur/t1+//n8J+v8N9P/1/8+G/r/+fyf6//r/vbx+/X/9f7orWv8/5v4/CjOpSP4HAACAKoi5/2SYifwPAAAApRFz/0yYifwPAAAApRFz/2yYSUXyv/6/z//X/9f/1//X/19N+v/6/53o/+v/9/L69f/1/+muaP3//2fvPpM1K6s+Dj9v8zZCWeoUcAg6AYfgGKxyCuYEZsyKOSfMCbNiFnPOOeeAYo4lFn3WWniO3Xufts/Tfe97XdcHlh4suSngw9/2Vzt3/33ilib7HwAAADrI3X/fuMX+BwAAgGnk7r9f3GL/AwAAwDRy998/bmmy//X/+n/9v/5f/6//3yf9v/5/if5f/7/l9+v/9f+sG63/z93/gLilyf4HAACADnL3PzBusf8BAABgGrn7HxS32P8AAAAwjdz9D45bmux//b/+X/+v/9f/6//3Sf+v/1+i/9f/b/n9+n/9P+tG6/9z9z8kbmmy/wEAAKCD3P0PjVvsfwAAAJhG7v6HxS32PwAAAEwjd//VcUuT/a//1//r/zfY//+//l//vx36f/3/Ev2//n/L79f/6/9ZN1r/n7v/mrilyf4HAACADnL3Pzxusf8BAABgGrn7HxG32P8AAAAwjdz9j4xbmux//b/+X/+/wf7f9//1/xui/9f/L9H/6/+3/H79v/6fdaP1/7n7HxW3NNn/AAAA0EHu/kfHLfY/AAAATCN3/2PiFvsfAAAAppG7/7FxS5P9r//X/+v/9f/6f/3/Pun/9f9L9P/6/y2/X/+v/2fd3vv/e1575h63/8/df23c0mT/AwAAQAe5+x8Xt9j/AAAAMI3c/Y+PW+x/AAAAmEbu/ifELU32v/5f/397/3/r/+n/9f/6/9t/rv8/Gfp//f8S/b/+f8vv1//r/1m39/5/pfc/+u9z9z8xbmmy/wEAAKCD3P1PilvsfwAAAJhG7v4nxy32PwAAAEwjd/9T4pYm+1//r//3/X/9v/5f/79P+v9h+/+j/+gdpv8/Fv2//v9c/f89jvF+/T8djNb/5+5/atzSZP8DAABAB7n7nxa3HN3//zrP/0EYAAAAGEbu/uviFr/+DwAAANPI3f/0uKXJ/tf/6//1//r/w/3/qZb9/20/0//vh/5/2P5/mf7/WPT/+n/f/9f/s2y0/j93/zPilib7HwAAADrI3f/MuMX+BwAAgGnk7n9W3GL/AwAAwDRy9z87bmmy//X/+n/9v/7/gr7/f9kc/b/v/++P/l//v0T/r//f8vv1//p/1o3W/+fuf07c0mT/AwAAwPRO7Wr3Pzdusf8BAABgGrn7nxe32P8AAAAwjdz9z49bmux//b/+X/+v/7+g/n+S7//r//dH/6//X3Lc/n+n/68/F/3/OO/X/+v/WTda/5+7/wVxS5P9DwAAAB3k7n9h3GL/AwAAwDRy978obrH/AQAAYBq5+18ctzTZ//p//b/+X//fpf+//Mh/X9L/75f+X/+/xPf/9f9bfr/+X//PutH6/9z9L4lbmux/AAAA6CB3/0vjFvsfAAAAppG7/2Vxi/0PAAAA08jd//K45ej+P3UxX3Xx6P/1//p//X+X/t/3/y8N/b/+f4n+/+z9/xXn+OPp/8d6v/5f/8+60fr/3P3Xxy1+/R8AAACmkbv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/VdzSZP+fq/+/5Y4Hv1//fzz6/7O/X/+v/9f/6//1//r/Jfp/3//f8vv1//p/1o3W/+fuf3Xc0mT/AwAAQAe5+18Tt9j/AAAAMI3c/a+NW+x/AAAAmEbu/tfFLU32/8l///8q/b/+X/8fV/+v/9f/6//1/8v0//r/Lb9f/6//Z91o/X/u/tfHLU32PwAAAHSQu/8NcYv9DwAAANPI3f/GuMX+BwAAgGnk7n9T3NJk/598/+/7//r/8+z/T+n/k/4//rpupP+Pf2z1/yv0//r/Jfp//f+W36//1/+zbrT+P3f/DWemXr/9DwAAAB3ccOa3V+zeHLfY/wAAADCN3P1viVvsfwAAAJhG7v63xi1N9r/+X/9/yft/3/8v+v/467qR/t/3/49H/6//X6L/1/9v+f36f/0/60br/3P3vy1uabL/AQAAoIPc/W+PW+x/AAAAmEbs/oP/87v9DwAAAFN6x5nfXrF7Z9zSZP837v+vutD+/8r/+Nf6/7O/X/9/Iv3/DUf/3juP/n+3292k/195v/5/v/T/+v8l+n/9/5bfP07/Hz+4Wv/PeEbr/3P3vytuabL/AQAAoIPc/e+OW+x/AAAAmEbu/hvjFvsfAAAAppG7/z1xS5P937j/n+T7//e6OV6g/5+3//f9/7j6f/3/2ej/9f87/f//7FL381t//zj9v+//M67R+v/c/e+NW5rsfwAAAOggd//74hb7HwAAAKaRu//9cYv9DwAAANPI3f+BuKXJ/tf/b73/9/1//b/+X/8/Nv2//n+J/l//v+X36//1/6wbrf/P3f/BuKXJ/gcAAIAOcvd/KG6x/wEAAGAaufs/HLfY/wAAADCN3P03xS1N9r/+X/+/r/7/tj+I/r9J/3+N/n+n/z8n/b/+f4n+X/+/5ffr//X/rBut/8/d/5G4pcn+BwAAgA5y9380brH/AQAAYBq5+z8Wt9j/AAAAMI3c/R+PG+52p0v3pJN1+hw/j95c/6//9/1//b/v/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/d/Im7x6/8AAAAwjdz9n4xb7H8AAACYRu7+T8Ut9j8AAABMI3f/p+OWJvtf/6//1/9vtv+/Uv9/+P36/zHp//X/S/T/+v8tv1//r/9n3Wj9f+7+z8QtTfY/AAAAdJC7/7Nxi/0PAAAA08jd/7m4xf4HAACAaeTu/3zc0mT/6//1//r/zfb/vv9/5P36/zHp//X/S/T/+v8tv1//r/9n3Wj9f+7+L8QtTfY/AAAAdJC7/4txi/0PAAAA08jd/6W4xf4HAACAaeTu/3Lc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/8rcUuT/Q8AAAAd5O7/atxi/wMAAMA0cvd/LW6x/wEAAGAaufu/Hrc02f8z9/9L/zH9/wH9v/5/p//X/++Z/l//v0T/r//f8vv1//p/1o3W/+fu/0bc0mT/AwAAQAe5+78Zt9j/AAAAMI3c/d+KW+x/AAAAmEbu/m/HLU32/8z9/xL9/wH9v/5/p//X/++Z/l//v0T/r//f8vv1//p/1l2i/v/07hz9f+7+78QtTfY/AAAAdJC7/7txi/0PAAAA08jd/724xf4HAACAaeTu/37cMs/+v/eNC79T/3/i/f+Zv4n0//r/3ZD9/+lD79T/H9D/75f+X/+/RP+v/9/y+/X/+n/Wjfb9/9z9P4hb5tn/AAAA0F7u/h/GLfY/AAAATCN3/4/iFvsfAAAAppG7/8dxS5P9r//3/X/9f6f+/+6X7Xz/X/9/ken/9f9L9P/6/y2/X/+v/2fdaP1/7v6fxC1N9j8AAAB0kLv/p3GL/Q8AAADTyN3/s7jF/gcAAIBp5O7/edzSZP/r//X/+v9W/f+h9+v/D+j/90v/r/9fov/X/2/5/dn/5993+n/9P/9ttP4/d/8v4pYm+x8AAAA6yN3/y7jF/gcAAIBp5O7/Vdxi/wMAAMA0cvf/Om5psv/1//p//X+b/v/Wu+x2+n/9/0U3UP9/+YX8cfT/B/T/h+n/9f++/6//Z9lo/X/u/pvjlib7HwAAADrI3f+buMX+BwAAgGnk7v9t3GL/AwAAwDRy998StzTZ//p//f+U/f8d9P++/6//H8VA/f8F0f8f0P8fpv/X/+v/9f8sG63/z93/u7ilyf4HAACADnL3/z5usf8BAABgGrn7/xC32P8AAAAwjdz9f4xbmux//b/+//z7/9P15z1s/+/7//p//f8w5u3/L9f/6/8vuP+/7vqDH+v/t/l+/b/+n3Wj9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAEwjd/9f4hb7HwAAAKaRu/+vcUuT/T9N/3/XOx9c/b/v/+v/9f/xc/3/GObt/33/X//v+//6f/2//p81o/X/ufv/Frc02f8AAADQQe7+v8ct9j8AAABMI3f/P+IW+x8AAACmkbv/n3FLk/0/Tf+f9P/6f/2//j9+rv8fg/5f/79E/6//3/L79f/6f9aN1v/n7v93AAAA//8T6C0M") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_mount_image$vfat(&(0x7f000002ec00), &(0x7f000002ec40)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f000002ec80)) 0s ago: executing program 8 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/sda\x00', 0x101042, 0x5) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000380)) syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x2000040, &(0x7f0000000ac0)={[{@check_relaxed}, {@utf8}, {@hide}, {@map_normal}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@dmode={'dmode', 0x3d, 0x803}}, {@session={'session', 0x3d, 0x54}}, {@cruft}, {@utf8}, {@nojoliet}, {@check_strict}]}, 0x1, 0x580, &(0x7f0000000b80)="$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") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0xf0, 0x1e0, 0xffffffff, 0x1e0, 0x1e0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv6=@local, @ipv4=@loopback, @port=0x4e21, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x40}, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id=0x67, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'wlan1\x00', {0xff}, {}, 0x84, 0xe, 0x2, 0x31}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x5}, {0x3, 0x2, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 595.513881][ T8535] rock: sig=0x5252, size=5, remaining=3 [ 595.519554][ T8535] isofs_fill_super: root inode is not a directory. Corrupted media? [ 596.255161][ T8532] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 599.415981][ T8562] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 600.411701][ T8564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.714847][ T28] audit: type=1800 audit(1793662419.376:5): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.613" name="attr_allow_any_host" dev="configfs" ino=16820 res=0 errno=0 [ 607.486250][ T8590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.651418][ T28] audit: type=1800 audit(1793662426.266:6): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.618" name="attr_allow_any_host" dev="configfs" ino=16854 res=0 errno=0 [ 611.978712][ T8607] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 613.542907][ T8376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.563780][ T8376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.576894][ T8376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.585722][ T8376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.773108][ T8376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 613.780534][ T8376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.813393][ T8612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.831519][ T28] audit: type=1800 audit(1793662432.486:7): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.622" name="attr_allow_any_host" dev="configfs" ino=16880 res=0 errno=0 [ 614.033270][ T8613] rxe_eth0 speed is unknown, defaulting to 1000 [ 614.385077][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.404656][ T8621] loop1: detected capacity change from 0 to 164 [ 614.472734][ T8621] rock: directory entry would overflow storage [ 614.478995][ T8621] rock: sig=0x5252, size=5, remaining=3 [ 614.484776][ T8621] isofs_fill_super: root inode is not a directory. Corrupted media? [ 614.972613][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.476504][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.892774][ T8376] Bluetooth: hci2: command tx timeout [ 616.655030][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.175106][ T8376] Bluetooth: hci2: command tx timeout [ 620.211458][ T8376] Bluetooth: hci2: command tx timeout [ 620.307218][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 622.291517][ T8376] Bluetooth: hci2: command tx timeout [ 623.296716][ T8653] device-mapper: table: 248:7: crypt: Error allocating crypto tfm (-ENOENT) [ 623.340741][ T8653] device-mapper: ioctl: error adding target to table [ 624.571658][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.578071][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.842927][ T8675] loop4: detected capacity change from 0 to 512 [ 624.939856][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.121661][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.128981][ T8613] bridge_slave_0: entered allmulticast mode [ 625.193178][ T8613] bridge_slave_0: entered promiscuous mode [ 625.267202][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 626.221761][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.230706][ T8688] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 626.243122][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.264491][ T8613] bridge_slave_1: entered allmulticast mode [ 626.283298][ T8613] bridge_slave_1: entered promiscuous mode [ 626.338622][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.352605][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.404587][ T8613] team0: Port device team_slave_0 added [ 626.418098][ T8613] team0: Port device team_slave_1 added [ 627.572211][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.579353][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.697848][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.757733][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.781478][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.888902][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.331820][ T8613] hsr_slave_0: entered promiscuous mode [ 629.427519][ T8613] hsr_slave_1: entered promiscuous mode [ 629.581475][ T8613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.589113][ T8613] Cannot create hsr debugfs directory [ 630.760033][ T8717] loop0: detected capacity change from 0 to 512 [ 630.836101][ T8717] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 631.191815][ T8717] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.640: invalid indirect mapped block 256 (level 1) [ 631.243379][ T8717] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.640: invalid indirect mapped block 2683928664 (level 1) [ 631.407765][ T8717] EXT4-fs (loop0): 1 truncate cleaned up [ 631.462888][ T8717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.716654][ T8727] loop4: detected capacity change from 0 to 164 [ 631.743586][ T8727] rock: directory entry would overflow storage [ 631.749875][ T8727] rock: sig=0x5252, size=5, remaining=3 [ 631.755686][ T8727] isofs_fill_super: root inode is not a directory. Corrupted media? [ 633.034011][ T8726] loop1: detected capacity change from 0 to 1024 [ 633.129012][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.381481][ T8726] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 633.515905][ T8726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 633.721531][ T8726] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 633.811676][ T8726] System zones: 0-1, 3-36 [ 634.034520][ T8726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.261835][ T8749] loop0: detected capacity change from 0 to 512 [ 634.295294][ T12] hsr_slave_0: left promiscuous mode [ 634.322965][ T12] hsr_slave_1: left promiscuous mode [ 634.821668][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.829174][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.902726][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'. [ 635.620544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.731974][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.802531][ T12] bridge_slave_1: left allmulticast mode [ 635.809044][ T12] bridge_slave_1: left promiscuous mode [ 635.842637][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.948113][ T12] bridge_slave_0: left allmulticast mode [ 635.961420][ T12] bridge_slave_0: left promiscuous mode [ 635.967253][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.446544][ T8756] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 637.551737][ T12] veth1_macvtap: left promiscuous mode [ 637.557381][ T12] veth0_macvtap: left promiscuous mode [ 637.614682][ T12] veth1_vlan: left promiscuous mode [ 637.642789][ T12] veth0_vlan: left promiscuous mode [ 642.730443][ T8785] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 643.493008][ T8789] loop4: detected capacity change from 0 to 164 [ 643.744646][ T8789] rock: directory entry would overflow storage [ 643.750887][ T8789] rock: sig=0x5252, size=5, remaining=3 [ 643.756575][ T8789] isofs_fill_super: root inode is not a directory. Corrupted media? [ 644.283286][ T12] team0 (unregistering): Port device team_slave_1 removed [ 644.450639][ T12] team0 (unregistering): Port device team_slave_0 removed [ 646.164053][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.246903][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.598554][ T8803] loop0: detected capacity change from 0 to 164 [ 646.713303][ T8803] rock: directory entry would overflow storage [ 646.719587][ T8803] rock: sig=0x5252, size=5, remaining=3 [ 646.726132][ T8803] isofs_fill_super: root inode is not a directory. Corrupted media? [ 647.514371][ T12] bond0 (unregistering): Released all slaves [ 647.538988][ T8808] loop0: detected capacity change from 0 to 512 [ 648.554475][ T8726] tipc: Started in network mode [ 648.559425][ T8726] tipc: Node identity , cluster identity 4711 [ 648.603654][ T8726] tipc: Failed to obtain node identity [ 648.643746][ T8726] tipc: Enabling of bearer rejected, failed to enable media [ 648.733771][ T8613] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.790755][ T8613] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.880184][ T8726] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.941667][ T8613] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.964414][ T8613] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 649.093080][ T8824] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 649.937946][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 649.952380][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 649.960706][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 649.970431][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 649.978651][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 649.986435][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.798399][ T8827] rxe_eth0 speed is unknown, defaulting to 1000 [ 650.923156][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.996317][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.030566][ T8836] loop4: detected capacity change from 0 to 164 [ 651.059588][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.066805][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.103150][ T8836] rock: directory entry would overflow storage [ 651.109404][ T8836] rock: sig=0x5252, size=5, remaining=3 [ 652.763638][ T5792] Bluetooth: hci4: command tx timeout [ 652.817231][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.824475][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.851877][ T8836] isofs_fill_super: root inode is not a directory. Corrupted media? [ 653.077707][ T8613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.918584][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.028325][ T8827] chnl_net:caif_netlink_parms(): no params data found [ 654.203049][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.328051][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.617723][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.813921][ T5792] Bluetooth: hci4: command tx timeout [ 655.247063][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.317990][ T8827] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.325854][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.333371][ T8827] bridge_slave_0: entered allmulticast mode [ 655.340987][ T8827] bridge_slave_0: entered promiscuous mode [ 655.353053][ T8827] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.360374][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.368054][ T8827] bridge_slave_1: entered allmulticast mode [ 655.383267][ T8827] bridge_slave_1: entered promiscuous mode [ 655.483137][ T8827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.515911][ T8827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.668495][ T8883] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 656.852344][ T5792] Bluetooth: hci4: command tx timeout [ 656.858059][ T8827] team0: Port device team_slave_0 added [ 658.116916][ T8827] team0: Port device team_slave_1 added [ 658.362351][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.369698][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.465608][ T8827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.536473][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.550476][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.577717][ T8827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.972998][ T5792] Bluetooth: hci4: command tx timeout [ 659.014139][ T8827] hsr_slave_0: entered promiscuous mode [ 659.039681][ T8827] hsr_slave_1: entered promiscuous mode [ 659.080766][ T8827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.121380][ T8827] Cannot create hsr debugfs directory [ 659.298529][ T8613] veth0_vlan: entered promiscuous mode [ 660.328981][ T8613] veth1_vlan: entered promiscuous mode [ 660.929993][ T8929] loop4: detected capacity change from 0 to 164 [ 660.949284][ T8613] veth0_macvtap: entered promiscuous mode [ 661.009179][ T8929] rock: directory entry would overflow storage [ 661.021358][ T8929] rock: sig=0x5252, size=5, remaining=3 [ 661.028860][ T8929] isofs_fill_super: root inode is not a directory. Corrupted media? [ 661.207309][ T8613] veth1_macvtap: entered promiscuous mode [ 661.394129][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.421554][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.548176][ T8932] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 661.598147][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.631461][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.698222][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.730469][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.743752][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.845113][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.104545][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.176540][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.191734][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.221455][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.234469][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.253214][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.285428][ T8613] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.309717][ T8613] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.336998][ T8613] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.362574][ T8613] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.085208][ T8827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 665.131156][ T8827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 665.172995][ T8827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 665.289271][ T8946] loop4: detected capacity change from 0 to 512 [ 665.303110][ T8827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 665.321487][ T7476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.329367][ T7476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.423162][ T8946] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 665.501951][ T8946] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.681: invalid indirect mapped block 256 (level 1) [ 665.601790][ T8946] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.681: invalid indirect mapped block 2683928664 (level 1) [ 665.697365][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.711616][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.722155][ T8946] EXT4-fs (loop4): 1 truncate cleaned up [ 665.730706][ T8946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.054892][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.261510][ T11] hsr_slave_0: left promiscuous mode [ 666.779641][ T11] hsr_slave_1: left promiscuous mode [ 666.788089][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.812914][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.835044][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.845020][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.864199][ T11] bridge_slave_1: left allmulticast mode [ 666.880135][ T11] bridge_slave_1: left promiscuous mode [ 666.888627][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.919649][ T11] bridge_slave_0: left allmulticast mode [ 666.929895][ T11] bridge_slave_0: left promiscuous mode [ 666.938804][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.978494][ T11] veth1_macvtap: left promiscuous mode [ 667.002871][ T11] veth0_macvtap: left promiscuous mode [ 667.008580][ T11] veth1_vlan: left promiscuous mode [ 667.014665][ T11] veth0_vlan: left promiscuous mode [ 667.024844][ T8950] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 667.106699][ T8950] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 670.435302][ T11] team0 (unregistering): Port device team_slave_1 removed [ 670.552033][ T11] team0 (unregistering): Port device team_slave_0 removed [ 670.673785][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.807004][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.102938][ T8978] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 673.936150][ T11] bond0 (unregistering): Released all slaves [ 674.082361][ T8376] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 674.094922][ T8376] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 674.103614][ T8376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 674.121823][ T8376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 674.132485][ T8376] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 674.141998][ T8376] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 674.312822][ T7606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.325270][ T8985] rxe_eth0 speed is unknown, defaulting to 1000 [ 674.403229][ T8827] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.465942][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.473149][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.613000][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.620213][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.522557][ T8376] Bluetooth: hci0: command tx timeout [ 676.546485][ T11] IPVS: stop unused estimator thread 0... [ 677.080048][ T8985] chnl_net:caif_netlink_parms(): no params data found [ 677.145840][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.235389][ T1084] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.346432][ T9026] loop0: detected capacity change from 0 to 164 [ 677.513200][ T9026] rock: directory entry would overflow storage [ 677.519430][ T9026] rock: sig=0x5252, size=5, remaining=3 [ 677.548511][ T1084] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.634202][ T9026] isofs_fill_super: root inode is not a directory. Corrupted media? [ 677.710454][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.719005][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.726379][ T8985] bridge_slave_0: entered allmulticast mode [ 677.743049][ T8985] bridge_slave_0: entered promiscuous mode [ 677.760605][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.788828][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.818321][ T8985] bridge_slave_1: entered allmulticast mode [ 677.856876][ T8985] bridge_slave_1: entered promiscuous mode [ 677.984973][ T1084] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.091622][ T5792] Bluetooth: hci0: command tx timeout [ 679.414080][ T1084] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.556949][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.606453][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.725375][ T8827] veth0_vlan: entered promiscuous mode [ 679.783053][ T8985] team0: Port device team_slave_0 added [ 679.846381][ T8985] team0: Port device team_slave_1 added [ 679.896999][ T8827] veth1_vlan: entered promiscuous mode [ 679.987943][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.001413][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.061495][ T8985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.093923][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.100921][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.171756][ T8985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.250229][ T8827] veth0_macvtap: entered promiscuous mode [ 680.647464][ T8827] veth1_macvtap: entered promiscuous mode [ 680.727406][ T8985] hsr_slave_0: entered promiscuous mode [ 681.772061][ T8985] hsr_slave_1: entered promiscuous mode [ 681.772562][ T5792] Bluetooth: hci0: command tx timeout [ 681.791407][ T8985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.799008][ T8985] Cannot create hsr debugfs directory [ 681.874070][ T9060] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 683.106787][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.151568][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.187078][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.216760][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.241392][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.279682][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.298188][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.407794][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.474761][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.505092][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.517881][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.529551][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.540350][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.555970][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.771739][ T8827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.780519][ T8827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.821654][ T5792] Bluetooth: hci0: command tx timeout [ 683.846785][ T8827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.877783][ T8827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.978366][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.985193][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.135617][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.171732][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.415340][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.442281][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.828769][ T8985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 686.911464][ T1084] hsr_slave_0: left promiscuous mode [ 686.957394][ T1084] hsr_slave_1: left promiscuous mode [ 686.988767][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.996539][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.022446][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.029916][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.082172][ T1084] bridge_slave_1: left allmulticast mode [ 687.087989][ T1084] bridge_slave_1: left promiscuous mode [ 687.121715][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.161722][ T1084] bridge_slave_0: left allmulticast mode [ 687.167400][ T1084] bridge_slave_0: left promiscuous mode [ 687.181475][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.294150][ T1084] veth1_macvtap: left promiscuous mode [ 687.299794][ T1084] veth0_macvtap: left promiscuous mode [ 687.321645][ T1084] veth1_vlan: left promiscuous mode [ 687.333069][ T1084] veth0_vlan: left promiscuous mode [ 687.949022][ T9114] loop4: detected capacity change from 0 to 164 [ 687.986855][ T9114] rock: directory entry would overflow storage [ 687.993399][ T9114] rock: sig=0x5252, size=5, remaining=3 [ 687.999110][ T9114] isofs_fill_super: root inode is not a directory. Corrupted media? [ 689.753955][ T9117] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 693.094844][ T9136] loop0: detected capacity change from 0 to 164 [ 693.128202][ T9136] rock: directory entry would overflow storage [ 693.134765][ T9136] rock: sig=0x5252, size=5, remaining=3 [ 693.140403][ T9136] isofs_fill_super: root inode is not a directory. Corrupted media? [ 693.776730][ T9085] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 695.930274][ T9148] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 696.172151][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 697.373802][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 697.994900][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.249302][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.390954][ T9167] fuse: Unknown parameter 'group_id00000000000000000000' [ 701.798432][ T1084] bond0 (unregistering): Released all slaves [ 702.047173][ T8985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 702.134967][ T8985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 702.329275][ T8985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 702.602601][ T9183] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 704.078090][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.184299][ T8985] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.264828][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.272106][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.954790][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.961988][ T7308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.823932][ T8985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.865168][ T9214] loop0: detected capacity change from 0 to 1024 [ 706.872416][ T9214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 706.894853][ T9214] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 707.249718][ T9214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.262443][ T9214] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.287802][ T9220] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 709.499011][ T9220] EXT4-fs (loop0): Remounting filesystem read-only [ 709.807273][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 710.288031][ T9236] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 711.598934][ T8985] veth0_vlan: entered promiscuous mode [ 712.078941][ T8985] veth1_vlan: entered promiscuous mode [ 712.453043][ T8985] veth0_macvtap: entered promiscuous mode [ 712.561667][ T8985] veth1_macvtap: entered promiscuous mode [ 712.653242][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.691385][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.733355][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.772392][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.813796][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.851375][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.863284][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.945610][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.017508][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.051463][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.081395][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.091244][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.161368][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.183477][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.235050][ T8985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.271357][ T8985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.280078][ T8985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.330912][ T8985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.842395][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.850299][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.050332][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.082429][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.155191][ T9276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 717.444287][ T9282] loop0: detected capacity change from 0 to 1024 [ 717.454747][ T9282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 718.187774][ T9282] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 718.583577][ T9282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.598487][ T9282] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.637418][ T9282] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.735: bg 0: block 112: padding at end of block bitmap is not set [ 720.034578][ T9289] Process accounting resumed [ 720.151469][ T9282] EXT4-fs (loop0): Remounting filesystem read-only [ 720.158427][ T9282] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.0.735: cleanup dec ref error -28 [ 720.419739][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 720.533937][ T9294] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 724.402436][ T9314] loop0: detected capacity change from 0 to 512 [ 724.980778][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.740'. [ 727.059911][ T9330] loop0: detected capacity change from 0 to 32768 [ 727.120571][ T9330] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.742 (9330) [ 727.199594][ T9330] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 727.210477][ T9330] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 727.219345][ T9330] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 727.229030][ T9330] BTRFS info (device loop0): use zstd compression, level 3 [ 727.236353][ T9330] BTRFS info (device loop0): force clearing of disk cache [ 727.243499][ T9330] BTRFS info (device loop0): enabling disk space caching [ 727.251353][ T9330] BTRFS info (device loop0): disk space caching is enabled [ 728.302171][ T9330] BTRFS info (device loop0): enabling ssd optimizations [ 728.309261][ T9330] BTRFS info (device loop0): auto enabling async discard [ 728.317080][ T9330] BTRFS info (device loop0): rebuilding free space tree [ 728.329079][ T9330] BTRFS info (device loop0): disabling free space tree [ 728.336024][ T9330] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 728.345884][ T9330] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 729.957087][ T9359] Process accounting resumed [ 730.666530][ T5798] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 734.752442][ T9391] loop5: detected capacity change from 0 to 1024 [ 734.771077][ T9391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 734.878109][ T9391] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 735.194955][ T9391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.208058][ T9391] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.255622][ T9391] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.749: bg 0: block 112: padding at end of block bitmap is not set [ 735.561469][ T9391] EXT4-fs (loop5): Remounting filesystem read-only [ 735.568246][ T9391] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.5.749: cleanup dec ref error -28 [ 735.840194][ T8985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 738.810658][ T9419] loop0: detected capacity change from 0 to 4096 [ 740.559688][ T9422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 740.576952][ T28] audit: type=1800 audit(1793662559.236:8): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.756" name="attr_allow_any_host" dev="configfs" ino=21076 res=0 errno=0 [ 741.153279][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.743'. [ 741.799793][ T9419] ntfs3: loop0: Failed to load $Extend (-22). [ 741.956465][ T9419] ntfs3: loop0: Failed to initialize $Extend. [ 743.492205][ T8376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.502834][ T8376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.510542][ T8376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.519482][ T8376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.527394][ T8376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 743.535551][ T8376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 744.503078][ T9451] rxe_eth0 speed is unknown, defaulting to 1000 [ 745.659114][ T5792] Bluetooth: hci2: command tx timeout [ 745.765770][ T9468] loop4: detected capacity change from 0 to 512 [ 746.404385][ T9473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.763'. [ 747.426905][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.434841][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.731510][ T5792] Bluetooth: hci2: command tx timeout [ 747.795946][ T1084] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.255731][ T9451] chnl_net:caif_netlink_parms(): no params data found [ 751.144739][ T9496] Process accounting resumed [ 751.231574][ T5792] Bluetooth: hci2: command tx timeout [ 752.647518][ T9510] loop5: detected capacity change from 0 to 512 [ 752.938495][ T1084] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.958479][ T9512] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 753.263298][ T5792] Bluetooth: hci2: command tx timeout [ 753.282241][ T9521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.772'. [ 755.164571][ T1084] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.275111][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.303423][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.347849][ T9451] bridge_slave_0: entered allmulticast mode [ 755.358166][ T9451] bridge_slave_0: entered promiscuous mode [ 757.053919][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.061089][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.106792][ T9451] bridge_slave_1: entered allmulticast mode [ 757.123077][ T9451] bridge_slave_1: entered promiscuous mode [ 757.349829][ T1084] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.250305][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.316974][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.544654][ T9451] team0: Port device team_slave_0 added [ 758.603014][ T9451] team0: Port device team_slave_1 added [ 759.466962][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.712013][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.827938][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.033501][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.040510][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.161486][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.490584][ T9573] loop5: detected capacity change from 0 to 512 [ 760.636386][ T9451] hsr_slave_0: entered promiscuous mode [ 760.920447][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.5.777'. [ 761.781720][ T9451] hsr_slave_1: entered promiscuous mode [ 761.866600][ T9578] loop0: detected capacity change from 0 to 4096 [ 761.960894][ T9451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.006135][ T9451] Cannot create hsr debugfs directory [ 762.036962][ T9578] NILFS (loop0): The specified checkpoint is not a snapshot (checkpoint number=2) [ 763.872798][ T9597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.733563][ T28] audit: type=1800 audit(1793662582.566:9): pid=9597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.789" name="attr_allow_any_host" dev="configfs" ino=21541 res=0 errno=0 [ 771.083537][ T9451] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 771.163988][ T9451] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 771.226431][ T9451] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 771.413178][ T9451] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.807488][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.569265][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.748103][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.755360][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.824835][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.832102][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.196353][ T9451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 777.601503][ T9663] loop0: detected capacity change from 0 to 512 [ 777.891927][ T9663] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 777.972102][ T9663] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.800: invalid indirect mapped block 256 (level 1) [ 777.996099][ T1084] hsr_slave_0: left promiscuous mode [ 778.071466][ T9663] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.800: invalid indirect mapped block 2683928664 (level 1) [ 778.093709][ T1084] hsr_slave_1: left promiscuous mode [ 778.152664][ T9663] EXT4-fs (loop0): 1 truncate cleaned up [ 778.159784][ T9663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.241512][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.249457][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.374331][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.441487][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.693290][ T1084] bridge_slave_1: left allmulticast mode [ 778.698998][ T1084] bridge_slave_1: left promiscuous mode [ 778.766945][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.972567][ T1084] bridge_slave_0: left allmulticast mode [ 778.978325][ T1084] bridge_slave_0: left promiscuous mode [ 779.010674][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.031636][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.301773][ T1084] veth1_macvtap: left promiscuous mode [ 780.307400][ T1084] veth0_macvtap: left promiscuous mode [ 780.314110][ T1084] veth1_vlan: left promiscuous mode [ 780.319505][ T1084] veth0_vlan: left promiscuous mode [ 783.854219][ T8376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.869687][ T8376] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.881518][ T8376] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.892538][ T8376] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.903115][ T8376] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 783.910567][ T8376] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 783.990675][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 784.075213][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 784.120243][ T9702] nbd: must specify an index to disconnect [ 784.157229][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.212491][ T9704] loop0: detected capacity change from 0 to 512 [ 784.220334][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.579747][ T9706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.806'. [ 786.892930][ T5792] Bluetooth: hci4: command tx timeout [ 786.945012][ T1084] bond0 (unregistering): Released all slaves [ 787.191876][ T9698] rxe_eth0 speed is unknown, defaulting to 1000 [ 787.380043][ T9718] loop5: detected capacity change from 0 to 8 [ 787.489672][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.888462][ T5792] Bluetooth: hci4: command tx timeout [ 790.220397][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.454162][ T9749] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 790.489178][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.565599][ T9698] chnl_net:caif_netlink_parms(): no params data found [ 790.668207][ T9753] loop0: detected capacity change from 0 to 512 [ 790.683473][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.070161][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.813'. [ 791.981364][ T5792] Bluetooth: hci4: command tx timeout [ 792.017356][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.660561][ T9451] veth0_vlan: entered promiscuous mode [ 792.807708][ T9451] veth1_vlan: entered promiscuous mode [ 792.830207][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.844773][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.855378][ T9698] bridge_slave_0: entered allmulticast mode [ 792.868745][ T9775] loop5: detected capacity change from 0 to 512 [ 792.875805][ T9698] bridge_slave_0: entered promiscuous mode [ 793.135003][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.143496][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.150784][ T9698] bridge_slave_1: entered allmulticast mode [ 793.159596][ T9698] bridge_slave_1: entered promiscuous mode [ 793.269978][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.816'. [ 795.481531][ T5792] Bluetooth: hci4: command tx timeout [ 795.621918][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.767618][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.037646][ T9698] team0: Port device team_slave_0 added [ 796.279750][ T9797] fuse: Invalid rootmode [ 796.741976][ T9698] team0: Port device team_slave_1 added [ 796.756944][ T9451] veth0_macvtap: entered promiscuous mode [ 796.995819][ T9451] veth1_macvtap: entered promiscuous mode [ 797.078890][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.114034][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.166785][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.275339][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.291322][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.381400][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.449941][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.465436][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.479375][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.504832][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.519265][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.530992][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.555765][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.744176][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.777308][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.794421][ T9819] loop0: detected capacity change from 0 to 512 [ 797.801298][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.823494][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.833741][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.844682][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.856503][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.223775][ T9823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 798.331816][ T9698] hsr_slave_0: entered promiscuous mode [ 798.395564][ T9698] hsr_slave_1: entered promiscuous mode [ 798.490296][ T9698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.590019][ T9698] Cannot create hsr debugfs directory [ 798.757476][ T9451] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.789060][ T9451] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.817739][ T9451] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.848271][ T9451] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.051405][ T9826] loop5: detected capacity change from 0 to 164 [ 800.714629][ T9826] rock: directory entry would overflow storage [ 800.720879][ T9826] rock: sig=0x5252, size=5, remaining=3 [ 800.729792][ T9826] isofs_fill_super: root inode is not a directory. Corrupted media? [ 800.851344][ T8376] Bluetooth: hci0: command 0x0406 tx timeout [ 802.089817][ T9841] loop5: detected capacity change from 0 to 512 [ 802.140817][ T12] hsr_slave_0: left promiscuous mode [ 802.301526][ T12] hsr_slave_1: left promiscuous mode [ 802.394789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.431562][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.501902][ T9847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.829'. [ 802.734465][ T9845] loop0: detected capacity change from 0 to 512 [ 802.857406][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.112703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.249725][ T12] bridge_slave_1: left allmulticast mode [ 803.265986][ T9845] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 803.304955][ T12] bridge_slave_1: left promiscuous mode [ 803.310824][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.344487][ T9845] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.827: invalid indirect mapped block 256 (level 1) [ 803.425170][ T9845] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.827: invalid indirect mapped block 2683928664 (level 1) [ 803.478180][ T12] bridge_slave_0: left allmulticast mode [ 803.487038][ T9845] EXT4-fs (loop0): 1 truncate cleaned up [ 803.508764][ T12] bridge_slave_0: left promiscuous mode [ 803.516281][ T9845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.735123][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.766875][ T9854] fuse: Invalid rootmode [ 804.270869][ T12] veth1_macvtap: left promiscuous mode [ 804.278048][ T12] veth0_macvtap: left promiscuous mode [ 804.283957][ T12] veth1_vlan: left promiscuous mode [ 804.289468][ T12] veth0_vlan: left promiscuous mode [ 804.773492][ T8376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 804.790669][ T8376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 804.810850][ T8376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 804.821188][ T8376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 804.830461][ T8376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 804.839197][ T8376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 805.043104][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.941406][ T8376] Bluetooth: hci1: command tx timeout [ 807.947623][ T9874] loop5: detected capacity change from 0 to 32768 [ 807.959863][ T9874] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.835 (9874) [ 807.998982][ T9874] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 808.009583][ T9874] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 808.018459][ T9874] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 808.029513][ T9874] BTRFS info (device loop5): use zstd compression, level 3 [ 808.036905][ T9874] BTRFS info (device loop5): force clearing of disk cache [ 808.044796][ T9874] BTRFS info (device loop5): enabling disk space caching [ 808.052033][ T9874] BTRFS info (device loop5): disk space caching is enabled [ 808.114117][ T12] team0 (unregistering): Port device team_slave_1 removed [ 808.199651][ T9874] BTRFS info (device loop5): enabling ssd optimizations [ 808.206890][ T9874] BTRFS info (device loop5): auto enabling async discard [ 808.243549][ T9874] BTRFS info (device loop5): rebuilding free space tree [ 808.267250][ T9874] BTRFS info (device loop5): disabling free space tree [ 808.274401][ T9874] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 808.284324][ T9874] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 808.300050][ T12] team0 (unregistering): Port device team_slave_0 removed [ 808.528184][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.021609][ T8376] Bluetooth: hci1: command tx timeout [ 809.179068][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.194773][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.276992][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.345221][ T8985] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 809.924382][ T9902] loop0: detected capacity change from 0 to 512 [ 809.999156][ T9902] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 811.631393][ T8376] Bluetooth: hci1: command tx timeout [ 811.652587][ T9902] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.839: invalid indirect mapped block 256 (level 1) [ 811.677037][ T9902] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.839: invalid indirect mapped block 2683928664 (level 1) [ 811.730617][ T9902] EXT4-fs (loop0): 1 truncate cleaned up [ 811.747472][ T9902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.395786][ T12] bond0 (unregistering): Released all slaves [ 812.457056][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.617206][ T9911] loop0: detected capacity change from 0 to 512 [ 812.729192][ T9860] rxe_eth0 speed is unknown, defaulting to 1000 [ 812.822766][ T9698] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 812.913614][ T9698] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 813.008818][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.842'. [ 813.454860][ T9698] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 813.632229][ T9698] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 813.669517][ T8376] Bluetooth: hci1: command tx timeout [ 814.070160][ T9698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.106888][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.209360][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.216627][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.279762][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.287039][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.517708][ T7476] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.196005][ T7476] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.285925][ T7476] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.509739][ T7476] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.385230][ T9860] chnl_net:caif_netlink_parms(): no params data found [ 817.901536][ T9860] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.908748][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.937962][ T9860] bridge_slave_0: entered allmulticast mode [ 817.953068][ T9860] bridge_slave_0: entered promiscuous mode [ 818.027734][ T9860] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.043754][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.051019][ T9860] bridge_slave_1: entered allmulticast mode [ 818.059441][ T9860] bridge_slave_1: entered promiscuous mode [ 818.226671][ T9860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.292491][ T9860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.607631][ T9860] team0: Port device team_slave_0 added [ 819.625752][ T9860] team0: Port device team_slave_1 added [ 819.720743][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.797077][ T9973] loop0: detected capacity change from 0 to 512 [ 819.816925][ T9860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.839282][ T9860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.866098][ T9860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.082149][ T9860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.089202][ T9860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.116785][ T9860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.190746][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 821.161028][ T9860] hsr_slave_0: entered promiscuous mode [ 821.174294][ T9860] hsr_slave_1: entered promiscuous mode [ 821.186844][ T9860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 821.197628][ T9860] Cannot create hsr debugfs directory [ 822.573008][ T9698] veth0_vlan: entered promiscuous mode [ 822.608283][ T9698] veth1_vlan: entered promiscuous mode [ 824.615515][ T7476] hsr_slave_0: left promiscuous mode [ 824.663587][ T7476] hsr_slave_1: left promiscuous mode [ 824.682749][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.690192][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.738444][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.760870][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.789198][ T7476] bridge_slave_1: left allmulticast mode [ 824.795494][ T7476] bridge_slave_1: left promiscuous mode [ 824.815284][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.869023][ T7476] bridge_slave_0: left allmulticast mode [ 824.877325][ T7476] bridge_slave_0: left promiscuous mode [ 824.908319][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.032023][ T7476] veth1_macvtap: left promiscuous mode [ 825.037634][ T7476] veth0_macvtap: left promiscuous mode [ 825.051464][ T7476] veth1_vlan: left promiscuous mode [ 825.056868][ T7476] veth0_vlan: left promiscuous mode [ 826.271686][T10009] fuse: Bad value for 'fd' [ 826.964251][T10012] loop0: detected capacity change from 0 to 2048 [ 826.998695][T10012] NILFS (loop0): invalid segment: Magic number mismatch [ 827.015301][T10012] NILFS (loop0): trying rollback from an earlier position [ 827.081100][T10012] NILFS (loop0): recovery complete [ 827.088268][T10013] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 827.189504][T10012] NILFS (loop0): bad btree node (ino=0, blocknr=2): level = 0, flags = 0x2, nchildren = 0 [ 827.208540][T10012] NILFS (loop0): error -5 preparing GC: cannot read source blocks [ 827.475609][T10015] loop0: detected capacity change from 0 to 512 [ 828.966390][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.857'. [ 829.167862][ T7476] team0 (unregistering): Port device team_slave_1 removed [ 829.317893][ T7476] team0 (unregistering): Port device team_slave_0 removed [ 829.477315][ T7476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.605016][ T7476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.117744][T10028] loop0: detected capacity change from 0 to 512 [ 830.196464][T10028] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 830.208129][T10028] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.861: invalid indirect mapped block 256 (level 1) [ 830.230086][T10028] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.861: invalid indirect mapped block 2683928664 (level 1) [ 830.251301][T10028] EXT4-fs (loop0): 1 truncate cleaned up [ 830.258415][T10028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.133763][ T7476] bond0 (unregistering): Released all slaves [ 831.203080][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.141592][T10042] fuse: Bad value for 'fd' [ 834.745049][ T9698] veth0_macvtap: entered promiscuous mode [ 834.812292][ T9698] veth1_macvtap: entered promiscuous mode [ 834.863201][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.901422][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.917094][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.951427][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.010247][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.053075][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.091520][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.112301][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.131291][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.162787][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.217437][ T9698] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.261287][ T9698] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.270037][ T9698] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.311299][ T9698] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.565499][ T9860] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 835.642000][ T9860] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 835.656670][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.672499][ T9860] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 835.688752][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.728595][ T9860] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 835.830035][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.850451][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.106085][ T9860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.167979][ T9860] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.252685][ T9860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 836.266558][ T9860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.281293][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.288508][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.323889][T10069] loop5: detected capacity change from 0 to 8 [ 836.364079][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.371328][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.105784][T10080] loop0: detected capacity change from 0 to 512 [ 838.131805][T10080] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 838.140837][T10080] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.869: invalid indirect mapped block 256 (level 1) [ 838.190446][T10080] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.869: invalid indirect mapped block 2683928664 (level 1) [ 838.270111][T10080] EXT4-fs (loop0): 1 truncate cleaned up [ 838.302229][T10080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.180917][T10082] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 839.382979][T10082] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 840.184721][ T9860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.214196][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.182698][ T9860] veth0_vlan: entered promiscuous mode [ 842.224218][ T9860] veth1_vlan: entered promiscuous mode [ 842.324594][ T9860] veth0_macvtap: entered promiscuous mode [ 842.359660][ T9860] veth1_macvtap: entered promiscuous mode [ 842.418238][ T9860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.446011][ T9860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.488648][ T9860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.521374][ T9860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.541314][ T9860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.578771][ T9860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.603038][ T9860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.645342][ T9860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.674383][ T9860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.706454][ T9860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.731525][ T9860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.911159][T10116] Process accounting resumed [ 844.312308][ T9860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.351277][ T9860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.802913][ T9860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.845361][ T9860] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.877121][ T9860] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.076009][ T9860] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.161594][ T9860] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.915943][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.959363][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.201869][ T9132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.209748][ T9132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.345347][T10136] loop8: detected capacity change from 0 to 4096 [ 847.376835][T10137] loop5: detected capacity change from 0 to 2048 [ 847.635444][T10139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 848.556959][ T28] audit: type=1800 audit(1793662666.306:10): pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.878" name="attr_allow_any_host" dev="configfs" ino=23890 res=0 errno=0 [ 848.716475][T10137] NILFS (loop5): invalid segment: Magic number mismatch [ 848.742231][T10137] NILFS (loop5): trying rollback from an earlier position [ 848.749712][T10142] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 848.788965][T10137] NILFS (loop5): recovery complete [ 848.808230][T10143] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 850.899085][T10149] loop5: detected capacity change from 0 to 512 [ 851.044793][T10149] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 851.119659][T10149] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.880: invalid indirect mapped block 256 (level 1) [ 851.235072][T10149] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.880: invalid indirect mapped block 2683928664 (level 1) [ 851.289336][T10149] EXT4-fs (loop5): 1 truncate cleaned up [ 851.319679][T10149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.385213][ T8985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.947078][T10173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 857.891478][ T28] audit: type=1800 audit(1793662675.616:11): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.886" name="attr_allow_any_host" dev="configfs" ino=23942 res=0 errno=0 [ 858.530809][T10184] loop7: detected capacity change from 0 to 2048 [ 858.647066][T10184] NILFS (loop7): invalid segment: Magic number mismatch [ 858.689286][T10184] NILFS (loop7): trying rollback from an earlier position [ 858.741710][T10184] NILFS (loop7): recovery complete [ 858.752810][T10186] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 863.863191][T10219] loop5: detected capacity change from 0 to 3711 [ 863.933250][T10221] loop5: detected capacity change from 3711 to 4639 [ 866.379938][T10234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 867.300690][ T28] audit: type=1800 audit(1793662685.056:12): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.897" name="attr_allow_any_host" dev="configfs" ino=24014 res=0 errno=0 [ 869.401753][T10249] loop0: detected capacity change from 0 to 8 [ 870.301604][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.308430][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.543523][T10256] loop0: detected capacity change from 0 to 64 [ 870.621293][T10256] hfs: unable to locate alternate MDB [ 870.626754][T10256] hfs: continuing without an alternate MDB [ 873.582425][ T28] audit: type=1800 audit(1793662692.236:13): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.907" name="attr_allow_any_host" dev="configfs" ino=24075 res=0 errno=0 [ 873.619815][T10275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 877.932353][T10326] loop7: detected capacity change from 0 to 32768 [ 877.985299][T10326] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.917 (10326) [ 878.035984][T10326] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 878.046291][T10326] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 878.055134][T10326] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 878.064635][T10326] BTRFS info (device loop7): use zstd compression, level 3 [ 878.071921][T10326] BTRFS info (device loop7): force clearing of disk cache [ 878.079034][T10326] BTRFS info (device loop7): enabling disk space caching [ 878.086842][T10326] BTRFS info (device loop7): disk space caching is enabled [ 878.263418][T10326] BTRFS info (device loop7): enabling ssd optimizations [ 878.270496][T10326] BTRFS info (device loop7): auto enabling async discard [ 878.308759][T10326] BTRFS info (device loop7): rebuilding free space tree [ 878.391722][T10326] BTRFS info (device loop7): disabling free space tree [ 878.399434][T10326] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 878.409334][T10326] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 878.517459][T10348] loop8: detected capacity change from 0 to 512 [ 879.331562][T10348] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 879.803378][T10348] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.919: invalid indirect mapped block 256 (level 1) [ 879.941603][T10348] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.919: invalid indirect mapped block 2683928664 (level 1) [ 880.016240][ T9860] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 880.027226][T10348] EXT4-fs (loop8): 1 truncate cleaned up [ 880.052780][T10348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.314197][T10363] loop0: detected capacity change from 0 to 512 [ 881.794795][ T9698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.633382][T10387] loop5: detected capacity change from 0 to 8 [ 886.721893][T10399] Process accounting resumed [ 887.427049][T10395] loop5: detected capacity change from 0 to 4096 [ 887.635559][T10401] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 888.267169][T10408] loop5: detected capacity change from 0 to 512 [ 888.471369][T10349] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 891.163771][T10429] loop7: detected capacity change from 0 to 512 [ 891.330192][T10429] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 891.340562][T10429] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.929: invalid indirect mapped block 256 (level 1) [ 891.362572][T10429] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.929: invalid indirect mapped block 2683928664 (level 1) [ 891.380933][T10429] EXT4-fs (loop7): 1 truncate cleaned up [ 891.388072][T10429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.643437][T10443] Process accounting resumed [ 894.243121][ T9860] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.008910][T10454] fuse: Unknown parameter 'user_id00000000000000000000' [ 896.510871][T10462] ªªªªªª: renamed from vlan0 (while UP) [ 897.032336][T10470] loop5: detected capacity change from 0 to 512 [ 897.274117][T10473] loop0: detected capacity change from 0 to 32768 [ 897.301632][T10470] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 897.316568][T10473] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.945 (10473) [ 897.338408][T10473] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 897.349154][T10473] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 897.357966][T10473] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 897.367381][T10473] BTRFS info (device loop0): use zstd compression, level 3 [ 897.374663][T10473] BTRFS info (device loop0): force clearing of disk cache [ 897.381810][T10473] BTRFS info (device loop0): enabling disk space caching [ 897.388835][T10473] BTRFS info (device loop0): disk space caching is enabled [ 897.461880][T10470] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.946: invalid indirect mapped block 256 (level 1) [ 897.566047][T10470] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.946: invalid indirect mapped block 2683928664 (level 1) [ 897.612808][T10473] BTRFS info (device loop0): enabling ssd optimizations [ 897.619837][T10473] BTRFS info (device loop0): auto enabling async discard [ 897.635856][T10473] BTRFS info (device loop0): rebuilding free space tree [ 897.646587][T10470] EXT4-fs (loop5): 1 truncate cleaned up [ 897.672291][T10473] BTRFS info (device loop0): disabling free space tree [ 897.679219][T10473] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 897.688987][T10473] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 897.701871][T10470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.681979][ T5798] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 899.177174][T10501] loop8: detected capacity change from 0 to 512 [ 899.249760][T10349] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop0 scanned by udevd (10349) [ 901.731437][T10476] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 901.821066][T10476] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 902.454325][T10526] loop7: detected capacity change from 0 to 1024 [ 902.512450][T10526] EXT4-fs: Ignoring removed orlov option [ 902.518174][T10526] EXT4-fs: Ignoring removed orlov option [ 902.715471][T10526] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.408594][T10526] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 904.511740][T10526] CacheFiles: File cache on CacheFiles registered [ 904.537864][T10524] CacheFiles: File cache on CacheFiles unregistering [ 904.575816][T10524] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 904.789807][ T9860] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.265140][T10547] loop7: detected capacity change from 0 to 32768 [ 905.313169][T10547] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 11 [ 906.065772][T10551] loop0: detected capacity change from 0 to 512 [ 906.321487][T10305] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 906.442714][T10349] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 11 [ 907.215654][ T8985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.617740][T10572] loop0: detected capacity change from 0 to 512 [ 908.250796][ T8376] Bluetooth: hci4: command 0x0406 tx timeout [ 908.839024][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'. [ 915.397854][T10646] loop7: detected capacity change from 0 to 512 [ 915.565595][T10647] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 919.676089][T10668] loop8: detected capacity change from 0 to 8 [ 922.248441][T10693] loop8: detected capacity change from 0 to 512 [ 922.411308][T10647] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 926.525966][T10729] loop0: detected capacity change from 0 to 512 [ 929.655935][ T8376] Bluetooth: hci1: command 0x0406 tx timeout [ 929.682226][T10729] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 929.787178][T10729] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.967: invalid indirect mapped block 256 (level 1) [ 929.873524][T10729] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.967: invalid indirect mapped block 2683928664 (level 1) [ 929.943648][T10729] EXT4-fs (loop0): 1 truncate cleaned up [ 930.037100][T10729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.483000][T10729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.113513][ T8376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 931.129551][ T8376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 931.138693][ T8376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 931.193212][ T8376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 931.206780][ T8376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 931.221647][ T8376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 931.468217][T10758] rxe_eth0 speed is unknown, defaulting to 1000 [ 931.739972][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.746854][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.078620][T10768] loop7: detected capacity change from 0 to 512 [ 932.227041][T10768] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 932.235089][T10768] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 932.243280][T10768] System zones: 0-1, 15-15, 18-18, 34-34 [ 932.249443][T10768] EXT4-fs (loop7): orphan cleanup on readonly fs [ 932.256461][T10768] EXT4-fs error (device loop7): ext4_ext_check_inode:532: inode #4: comm syz.7.988: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 932.302828][T10768] EXT4-fs error (device loop7): ext4_quota_enable:7152: comm syz.7.988: Bad quota inode: 4, type: 1 [ 932.317931][T10768] EXT4-fs warning (device loop7): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 932.336497][T10768] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 932.378404][T10768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 933.331390][ T8376] Bluetooth: hci2: command tx timeout [ 933.484530][ T9860] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.191601][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 934.235593][T10758] chnl_net:caif_netlink_parms(): no params data found [ 934.463951][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.044614][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 936.059253][ T8376] Bluetooth: hci2: command tx timeout [ 936.108981][ T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 936.118320][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.205301][ T9] usb 9-1: Product: syz [ 936.211283][ T9] usb 9-1: Manufacturer: syz [ 936.231288][ T9] usb 9-1: SerialNumber: syz [ 936.486256][ T9] usb 9-1: USB disconnect, device number 2 [ 938.992197][ T8376] Bluetooth: hci2: command tx timeout [ 939.225722][ T9132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.555530][ T9132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.872765][ T9132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.971067][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.999417][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.016092][T10758] bridge_slave_0: entered allmulticast mode [ 940.025541][T10758] bridge_slave_0: entered promiscuous mode [ 940.092434][T10829] use of bytesused == 0 is deprecated and will be removed in the future, [ 940.121265][T10829] use the actual size instead. [ 940.136783][ T9132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.203940][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.212300][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.219678][T10758] bridge_slave_1: entered allmulticast mode [ 940.245040][T10758] bridge_slave_1: entered promiscuous mode [ 940.445078][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.011447][ T8376] Bluetooth: hci2: command tx timeout [ 942.034896][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.374530][T10758] team0: Port device team_slave_0 added [ 942.396908][T10758] team0: Port device team_slave_1 added [ 942.543127][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.550146][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.672255][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.739607][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.756363][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.966782][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.422622][T10758] hsr_slave_0: entered promiscuous mode [ 944.457338][T10758] hsr_slave_1: entered promiscuous mode [ 944.486325][T10758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.506962][T10758] Cannot create hsr debugfs directory [ 944.906027][T10872] loop7: detected capacity change from 0 to 512 [ 944.969977][T10872] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 944.990611][T10872] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 945.019126][T10872] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (13186!=33349) [ 945.081373][T10872] EXT4-fs (loop7): group descriptors corrupted! [ 946.455023][ T8996] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 946.676631][T10889] loop8: detected capacity change from 0 to 164 [ 948.789125][T10889] rock: directory entry would overflow storage [ 948.795430][T10889] rock: sig=0x5252, size=5, remaining=3 [ 948.801022][T10889] isofs_fill_super: root inode is not a directory. Corrupted media? [ 949.333231][ T8996] usb 8-1: device not accepting address 2, error -71 [ 951.259429][T10758] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 951.329105][T10758] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 951.457327][T10911] FAULT_INJECTION: forcing a failure. [ 951.457327][T10911] name failslab, interval 1, probability 0, space 0, times 0 [ 951.511425][T10911] CPU: 0 PID: 10911 Comm: syz.7.1012 Not tainted syzkaller #0 [ 951.518984][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 951.529096][T10911] Call Trace: [ 951.532429][T10911] [ 951.535409][T10911] dump_stack_lvl+0x18c/0x250 [ 951.540157][T10911] ? show_regs_print_info+0x20/0x20 [ 951.545420][T10911] ? load_image+0x420/0x420 [ 951.549986][T10911] ? __might_sleep+0xe0/0xe0 [ 951.554670][T10911] ? __lock_acquire+0x7eb0/0x7eb0 [ 951.559757][T10911] should_fail_ex+0x394/0x4c0 [ 951.564499][T10911] should_failslab+0x9/0x20 [ 951.569054][T10911] slab_pre_alloc_hook+0x59/0x300 [ 951.574134][T10911] kmem_cache_alloc+0x5a/0x2d0 [ 951.578947][T10911] ? __kernfs_new_node+0xe5/0x7f0 [ 951.584041][T10911] __kernfs_new_node+0xe5/0x7f0 [ 951.588963][T10911] ? kernfs_new_node+0x260/0x260 [ 951.594000][T10911] ? sysfs_do_create_link_sd+0x75/0x110 [ 951.599602][T10911] ? __lock_acquire+0x7eb0/0x7eb0 [ 951.604686][T10911] kernfs_new_node+0x14c/0x260 [ 951.609519][T10911] kernfs_create_link+0xa7/0x200 [ 951.614509][T10911] sysfs_do_create_link_sd+0x83/0x110 [ 951.619932][T10911] driver_sysfs_add+0xec/0x210 [ 951.624760][T10911] really_probe+0x13f/0xae0 [ 951.629351][T10911] ? pm_runtime_barrier+0x14b/0x1c0 [ 951.634611][T10911] __driver_probe_device+0x1f5/0x390 [ 951.639962][T10911] driver_probe_device+0x4f/0x420 [ 951.645051][T10911] __driver_attach+0x444/0x6d0 [ 951.649873][T10911] bus_for_each_dev+0x235/0x2b0 [ 951.654785][T10911] ? driver_attach+0x50/0x50 [ 951.659446][T10911] ? bus_remove_file+0x140/0x140 [ 951.664451][T10911] ? do_raw_spin_unlock+0x121/0x230 [ 951.669722][T10911] bus_add_driver+0x340/0x630 [ 951.674467][T10911] driver_register+0x23a/0x310 [ 951.679318][T10911] usb_gadget_register_driver_owner+0xf9/0x270 [ 951.685530][T10911] raw_ioctl+0x1613/0x3d80 [ 951.690004][T10911] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 951.695693][T10911] ? tomoyo_path_number_perm+0x217/0x5e0 [ 951.701379][T10911] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 951.706894][T10911] ? make_qualifier+0x260/0x260 [ 951.711831][T10911] ? __fget_files+0x28/0x460 [ 951.716495][T10911] ? bpf_lsm_file_ioctl+0x9/0x10 [ 951.721507][T10911] ? security_file_ioctl+0x80/0xa0 [ 951.726670][T10911] ? make_qualifier+0x260/0x260 [ 951.731574][T10911] __se_sys_ioctl+0xfd/0x170 [ 951.736225][T10911] do_syscall_64+0x55/0xb0 [ 951.740709][T10911] ? clear_bhb_loop+0x40/0x90 [ 951.745446][T10911] ? clear_bhb_loop+0x40/0x90 [ 951.750212][T10911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.756257][T10911] RIP: 0033:0x7f86f2d9f7ab [ 951.760728][T10911] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 951.780393][T10911] RSP: 002b:00007f86f3c9df00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 951.788873][T10911] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f86f2d9f7ab [ 951.796926][T10911] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 951.804942][T10911] RBP: 00007f86f3c9efd0 R08: 0000000000000001 R09: 00000000ffffffff [ 951.812998][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.821015][T10911] R13: 00002000000001c0 R14: 0000000000000000 R15: 0000000000000000 [ 951.829047][T10911] [ 951.872748][T10911] really_probe: driver_sysfs_add(gadget.7) failed [ 951.899546][T10758] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 951.942092][T10911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.006385][T10911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.083520][T10758] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 952.550062][T10758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.711754][ T9132] hsr_slave_0: left promiscuous mode [ 952.781238][ T9132] hsr_slave_1: left promiscuous mode [ 952.831308][ T9132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.839242][ T9132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.890190][ T9132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.912575][ T9132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.935441][T10918] loop8: detected capacity change from 0 to 512 [ 952.955959][ T9132] bridge_slave_1: left allmulticast mode [ 952.981212][ T9132] bridge_slave_1: left promiscuous mode [ 952.987038][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.202427][ T9132] bridge_slave_0: left allmulticast mode [ 953.208164][ T9132] bridge_slave_0: left promiscuous mode [ 953.261608][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.246556][ T9132] veth1_macvtap: left promiscuous mode [ 955.253319][ T9132] veth0_macvtap: left promiscuous mode [ 955.259143][ T9132] veth1_vlan: left promiscuous mode [ 955.265657][ T9132] veth0_vlan: left promiscuous mode [ 955.605284][T10938] loop7: detected capacity change from 0 to 164 [ 955.623189][T10938] rock: directory entry would overflow storage [ 955.629449][T10938] rock: sig=0x5252, size=5, remaining=3 [ 955.635148][T10938] isofs_fill_super: root inode is not a directory. Corrupted media? [ 961.132528][T10952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 962.104783][ T28] audit: type=1800 audit(1793662779.906:14): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1019" name="attr_allow_any_host" dev="configfs" ino=27558 res=0 errno=0 [ 962.622797][T10957] loop7: detected capacity change from 0 to 2048 [ 962.721398][T10957] NILFS (loop7): invalid segment: Magic number mismatch [ 962.728448][T10957] NILFS (loop7): trying rollback from an earlier position [ 962.803542][T10957] NILFS (loop7): recovery complete [ 962.842132][T10958] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 962.923261][T10957] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 962.960132][T10955] loop8: detected capacity change from 0 to 32768 [ 962.996202][ T9132] team0 (unregistering): Port device team_slave_1 removed [ 963.259093][ T9132] team0 (unregistering): Port device team_slave_0 removed [ 963.523239][ T9132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.107385][ T9132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.909448][T10972] loop7: detected capacity change from 0 to 164 [ 965.013439][T10972] rock: directory entry would overflow storage [ 965.019728][T10972] rock: sig=0x5252, size=5, remaining=3 [ 965.026446][T10972] isofs_fill_super: root inode is not a directory. Corrupted media? [ 965.135745][T10974] fuse: Unknown parameter '0x0000000000000006' [ 965.185709][T10973] loop8: detected capacity change from 0 to 256 [ 965.522696][T10973] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 965.891078][T10979] loop7: detected capacity change from 0 to 32768 [ 967.522428][T10979] JBD2: Ignoring recovery information on journal [ 967.530257][T10979] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75 [ 967.539070][T10979] JBD2: bad block at offset 32 [ 967.664576][T10979] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 967.850395][T10979] OCFS2: ERROR (device loop7): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 967.871850][T10979] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 967.881759][T10979] OCFS2: File system is now read-only. [ 967.887288][T10979] (syz.7.1027,10979,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 967.896418][T10979] (syz.7.1027,10979,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 967.904998][T10979] (syz.7.1027,10979,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 967.913320][T10979] (syz.7.1027,10979,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 967.922234][T10979] (syz.7.1027,10979,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 967.930287][T10979] (syz.7.1027,10979,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 967.939195][T10979] (syz.7.1027,10979,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 967.948141][T10979] (syz.7.1027,10979,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 968.374074][ T8996] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 968.564190][ T8996] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.581322][ T8996] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 968.621346][ T8996] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 968.649722][ T8996] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.681334][ T8996] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 968.697508][ T8996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.766752][ T8996] option 8-1:1.0: GSM modem (1-port) converter detected [ 969.853639][T10994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 969.887828][ T28] audit: type=1800 audit(1793662788.526:15): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1029" name="attr_allow_any_host" dev="configfs" ino=26238 res=0 errno=0 [ 969.915025][ T9132] bond0 (unregistering): Released all slaves [ 969.933115][ T8996] usb 8-1: USB disconnect, device number 4 [ 969.959473][ T8996] option 8-1:1.0: device disconnected [ 970.229880][T10758] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.289267][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.296507][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.387380][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.394644][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.628295][T11012] loop5: detected capacity change from 0 to 512 [ 971.702919][ T9860] ocfs2: Unmounting device (7,7) on (node local) [ 971.784303][T11012] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 971.803885][T11012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 971.820960][T11012] System zones: 0-1, 15-15, 18-18, 34-34 [ 971.857421][T11012] EXT4-fs (loop5): orphan cleanup on readonly fs [ 971.891806][T11012] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #4: comm syz.5.1033: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 971.941600][T11012] EXT4-fs error (device loop5): ext4_quota_enable:7152: comm syz.5.1033: Bad quota inode: 4, type: 1 [ 971.987885][T11012] EXT4-fs warning (device loop5): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 972.031213][T11012] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 972.039384][T11012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 972.142456][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.910002][ T8985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.139060][T11033] loop7: detected capacity change from 0 to 164 [ 973.238757][T11033] rock: directory entry would overflow storage [ 973.245210][T11033] rock: sig=0x5252, size=5, remaining=3 [ 973.250895][T11033] isofs_fill_super: root inode is not a directory. Corrupted media? [ 973.799244][T11036] loop5: detected capacity change from 0 to 8 [ 974.743909][T11045] loop8: detected capacity change from 0 to 4096 [ 974.848263][T11048] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 977.044334][T11058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 978.028285][ T28] audit: type=1800 audit(1793662795.816:16): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1038" name="attr_allow_any_host" dev="configfs" ino=27830 res=0 errno=0 [ 978.076768][T10758] veth0_vlan: entered promiscuous mode [ 978.276596][T10758] veth1_vlan: entered promiscuous mode [ 978.327300][T10758] veth0_macvtap: entered promiscuous mode [ 978.370047][T10758] veth1_macvtap: entered promiscuous mode [ 978.418442][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.460957][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.504955][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.531406][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.562536][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.590609][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.613350][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.660241][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.691256][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.711707][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.731224][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.755315][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.781204][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.812920][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.845191][T10758] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.874893][T10758] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.901612][T10758] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.921026][T10758] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.185046][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.212662][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.314045][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.352061][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.646261][T11063] loop8: detected capacity change from 0 to 32768 [ 979.941369][ T27] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 980.157264][ T27] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 980.169490][ T27] usb 10-1: config 0 has no interface number 0 [ 981.005870][ T27] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 981.031243][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.039408][ T27] usb 10-1: Product: syz [ 981.051267][ T27] usb 10-1: Manufacturer: syz [ 981.056039][ T27] usb 10-1: SerialNumber: syz [ 981.076621][ T27] usb 10-1: config 0 descriptor?? [ 981.332029][ T27] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 981.418342][ T27] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 981.718292][T11099] loop5: detected capacity change from 0 to 164 [ 981.945162][T11075] usb 10-1: dvb_usb_ec168: I2C read not implemented [ 982.145435][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 982.523678][T11099] rock: directory entry would overflow storage [ 982.529919][T11099] rock: sig=0x5252, size=5, remaining=3 [ 982.536323][T11099] isofs_fill_super: root inode is not a directory. Corrupted media? [ 982.806695][ T27] usb 10-1: media controller created [ 983.050392][T11105] loop7: detected capacity change from 0 to 8 [ 983.086163][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 984.461214][T11112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 985.437918][ T28] audit: type=1800 audit(1793662803.216:17): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1047" name="attr_allow_any_host" dev="configfs" ino=28139 res=0 errno=0 [ 985.484040][ T27] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 985.647048][T11107] loop5: detected capacity change from 0 to 4096 [ 985.734869][T11116] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 989.052404][ T27] usb 10-1: USB disconnect, device number 2 [ 990.003560][T11139] loop5: detected capacity change from 0 to 164 [ 990.044389][T11139] rock: directory entry would overflow storage [ 990.050697][T11139] rock: sig=0x5252, size=5, remaining=3 [ 990.056740][T11139] isofs_fill_super: root inode is not a directory. Corrupted media? [ 991.031943][ T27] IPVS: starting estimator thread 0... [ 991.141598][T11147] IPVS: using max 16 ests per chain, 38400 per kthread [ 992.112936][T11159] loop5: detected capacity change from 0 to 8 [ 994.361582][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.371268][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.438036][T11190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 998.513740][T11190] loop8: detected capacity change from 0 to 2048 [ 1000.796458][T11219] fuse: Unknown parameter 'fd0x0000000000000006' [ 1000.894014][T11224] loop7: detected capacity change from 0 to 164 [ 1002.020309][T11224] rock: directory entry would overflow storage [ 1002.026710][T11224] rock: sig=0x5252, size=5, remaining=3 [ 1002.032440][T11224] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1010.800699][T11275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1011.757567][ T28] audit: type=1800 audit(1793662829.566:18): pid=11275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1079" name="attr_allow_any_host" dev="configfs" ino=28469 res=0 errno=0 [ 1012.461966][T11285] loop5: detected capacity change from 0 to 1024 [ 1012.521282][T11285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1014.218347][T11285] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1014.561685][T11285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.641442][T11285] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.744076][T11285] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1074: bg 0: block 112: padding at end of block bitmap is not set [ 1014.886366][T11285] EXT4-fs (loop5): Remounting filesystem read-only [ 1014.981718][T11285] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.5.1074: cleanup dec ref error -28 [ 1015.293681][ T8985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1017.139560][T11318] loop8: detected capacity change from 0 to 164 [ 1018.430680][T11318] rock: directory entry would overflow storage [ 1018.437126][T11318] rock: sig=0x5252, size=5, remaining=3 [ 1018.442899][T11318] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1024.345163][T11364] loop5: detected capacity change from 0 to 164 [ 1024.384420][T11364] rock: directory entry would overflow storage [ 1024.390758][T11364] rock: sig=0x5252, size=5, remaining=3 [ 1024.396474][T11364] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1026.357874][T11378] loop5: detected capacity change from 0 to 512 [ 1026.910464][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1096'. [ 1030.941465][T11399] loop8: detected capacity change from 0 to 512 [ 1030.997204][T11399] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1031.007205][T11397] syzkaller0: entered promiscuous mode [ 1031.026625][T11399] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1031.041467][T11397] syzkaller0: entered allmulticast mode [ 1031.052140][T11399] System zones: 0-1, 15-15, 18-18, 34-34 [ 1031.058219][T11399] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1031.101486][T11399] EXT4-fs error (device loop8): ext4_ext_check_inode:532: inode #4: comm syz.8.1101: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1031.151516][T11399] EXT4-fs error (device loop8): ext4_quota_enable:7152: comm syz.8.1101: Bad quota inode: 4, type: 1 [ 1031.195642][T11399] EXT4-fs warning (device loop8): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1031.255680][T11399] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 1031.280434][T11399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1032.228453][ T9698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.635535][T11438] loop8: detected capacity change from 0 to 164 [ 1034.668113][T11438] rock: directory entry would overflow storage [ 1034.674438][T11438] rock: sig=0x5252, size=5, remaining=3 [ 1034.680028][T11438] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1035.256108][T11401] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1035.358007][T11444] loop9: detected capacity change from 0 to 512 [ 1035.621605][T11445] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1036.192382][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1105'. [ 1038.756511][T11455] loop5: detected capacity change from 0 to 32768 [ 1038.911852][T11455] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1038.947256][T11455] (syz.5.1108,11455,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1038.963899][T11455] (syz.5.1108,11455,1):ocfs2_prepare_dir_for_insert:4373 ERROR: status = -2 [ 1038.972704][T11455] (syz.5.1108,11455,1):ocfs2_mknod:299 ERROR: status = -2 [ 1038.979839][T11455] (syz.5.1108,11455,1):ocfs2_mknod:504 ERROR: status = -2 [ 1038.987135][T11455] (syz.5.1108,11455,1):ocfs2_mkdir:661 ERROR: status = -2 [ 1040.893433][ T8985] ocfs2: Unmounting device (7,5) on (node local) [ 1042.326181][T11491] loop5: detected capacity change from 0 to 164 [ 1042.351503][T11491] rock: directory entry would overflow storage [ 1042.357782][T11491] rock: sig=0x5252, size=5, remaining=3 [ 1042.363530][T11491] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1043.150779][T11495] loop5: detected capacity change from 0 to 512 [ 1043.177774][T11496] loop8: detected capacity change from 0 to 8 [ 1053.833269][T11575] loop8: detected capacity change from 0 to 512 [ 1054.201611][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1120'. [ 1054.637565][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.644194][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.254334][T10554] Bluetooth: hci2: command 0x0406 tx timeout [ 1058.640771][T11606] loop9: detected capacity change from 0 to 256 [ 1058.806655][T11606] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012a39, chksum : 0xe80182e3, utbl_chksum : 0xe619d30d) [ 1062.691100][T11628] loop9: detected capacity change from 0 to 512 [ 1063.045589][T11576] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1063.392310][T11635] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1142'. [ 1065.658203][T11649] loop7: detected capacity change from 0 to 32768 [ 1068.412588][T11649] workqueue: Failed to create a rescuer kthread for wq "gfs2-delete/syz:syz": -EINTR [ 1068.760548][T11664] loop9: detected capacity change from 0 to 512 [ 1072.160052][T11679] loop9: detected capacity change from 0 to 512 [ 1072.257487][T11576] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1072.569030][T11684] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1152'. [ 1075.404105][T11704] loop7: detected capacity change from 0 to 164 [ 1075.521278][T11704] rock: directory entry would overflow storage [ 1075.527583][T11704] rock: sig=0x5252, size=5, remaining=3 [ 1075.533505][T11704] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1076.237918][T11596] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1076.866598][ T7476] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.105613][ T7476] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.303607][ T7476] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.521418][ T8996] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1077.844051][ T8996] usb 6-1: Using ep0 maxpacket: 32 [ 1077.998563][ T8996] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 1078.160738][ T8996] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1078.221206][ T8996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.258560][ T8996] usb 6-1: Product: syz [ 1078.276702][ T8996] usb 6-1: Manufacturer: syz [ 1078.297278][ T8996] usb 6-1: SerialNumber: syz [ 1078.315725][ T7476] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.333194][ T8996] usb 6-1: config 0 descriptor?? [ 1078.393273][ T8996] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1078.426266][ T8996] dvb-usb: bulk message failed: -22 (2/0) [ 1078.469916][ T8996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1078.500153][ T8996] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1078.529164][ T8996] usb 6-1: media controller created [ 1078.570200][ T8996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1078.595495][T11727] dvb-usb: bulk message failed: -22 (4/0) [ 1078.864249][T11755] loop7: detected capacity change from 0 to 164 [ 1078.939915][T11755] rock: directory entry would overflow storage [ 1078.946285][T11755] rock: sig=0x5252, size=5, remaining=3 [ 1078.952010][T11755] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1079.256192][ T8996] usb 6-1: selecting invalid altsetting 7 [ 1079.351582][ T8996] cxusb: set interface failed [ 1079.461758][ T8996] dvb-usb: bulk message failed: -22 (1/0) [ 1079.660167][T11596] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1079.720566][ T8996] DVB: Unable to find symbol lgdt330x_attach() [ 1079.734785][ T8996] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1080.171360][ T8996] rc_core: IR keymap rc-dvico-portable not found [ 1080.177782][ T8996] Registered IR keymap rc-empty [ 1080.961902][ T8996] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1080.975985][ T8996] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input39 [ 1080.989758][ T8996] dvb-usb: schedule remote query interval to 100 msecs. [ 1080.996836][ T8996] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1081.009032][ T8996] usb 6-1: USB disconnect, device number 2 [ 1081.255627][T10554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1081.378421][T10554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1081.402919][T10554] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1081.414930][T10554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1081.439423][T10554] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1081.448138][T10554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1083.621333][T10554] Bluetooth: hci2: command tx timeout [ 1083.643379][ T8996] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1084.891897][T11777] rxe_eth0 speed is unknown, defaulting to 1000 [ 1085.701226][T10554] Bluetooth: hci2: command tx timeout [ 1086.204133][T11807] loop5: detected capacity change from 0 to 164 [ 1086.263700][T11807] rock: directory entry would overflow storage [ 1086.270612][T11807] rock: sig=0x5252, size=5, remaining=3 [ 1086.276422][T11807] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1086.910036][T11809] loop8: detected capacity change from 0 to 4096 [ 1087.087209][T11809] ntfs3: loop8: Failed to load $Extend (-22). [ 1088.693465][T10554] Bluetooth: hci2: command tx timeout [ 1088.698974][T11809] ntfs3: loop8: Failed to initialize $Extend. [ 1090.194640][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1173'. [ 1090.446089][T11832] vlan2: entered allmulticast mode [ 1090.491940][T11832] bridge1: entered allmulticast mode [ 1090.508249][T11833] bridge1: port 1(erspan0) entered blocking state [ 1090.536402][T11833] bridge1: port 1(erspan0) entered disabled state [ 1090.562067][T11833] erspan0: entered allmulticast mode [ 1090.569926][T11833] erspan0: entered promiscuous mode [ 1090.589605][T11833] bridge1: port 1(erspan0) entered blocking state [ 1090.596595][T11833] bridge1: port 1(erspan0) entered forwarding state [ 1090.772468][T10554] Bluetooth: hci2: command tx timeout [ 1090.852335][T11777] chnl_net:caif_netlink_parms(): no params data found [ 1091.698656][T11857] loop5: detected capacity change from 0 to 164 [ 1092.417231][T11857] rock: directory entry would overflow storage [ 1092.423594][T11857] rock: sig=0x5252, size=5, remaining=3 [ 1092.429228][T11857] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1092.464032][ T7476] hsr_slave_0: left promiscuous mode [ 1092.530695][ T7476] hsr_slave_1: left promiscuous mode [ 1092.670895][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.701651][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.740742][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.776467][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.823135][ T7476] bridge_slave_1: left allmulticast mode [ 1092.846108][ T7476] bridge_slave_1: left promiscuous mode [ 1092.869110][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.545122][T11866] sctp: [Deprecated]: syz.5.1188 (pid 11866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1093.545122][T11866] Use struct sctp_sack_info instead [ 1094.619000][ T7476] bridge_slave_0: left allmulticast mode [ 1094.651276][ T7476] bridge_slave_0: left promiscuous mode [ 1094.657119][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.813170][ T7476] veth1_macvtap: left promiscuous mode [ 1094.818786][ T7476] veth0_macvtap: left promiscuous mode [ 1094.895306][ T7476] veth1_vlan: left promiscuous mode [ 1094.900730][ T7476] veth0_vlan: left promiscuous mode [ 1095.011000][T11870] loop7: detected capacity change from 0 to 4096 [ 1095.182197][T11870] ntfs3: loop7: Failed to load $Extend (-22). [ 1095.188362][T11870] ntfs3: loop7: Failed to initialize $Extend. [ 1095.835288][T11873] loop7: detected capacity change from 0 to 1024 [ 1095.847367][T11873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1095.863375][T11873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1095.985852][T11873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.999505][T11873] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.055835][T11873] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1191: bg 0: block 112: padding at end of block bitmap is not set [ 1096.079424][T11873] EXT4-fs (loop7): Remounting filesystem read-only [ 1096.086660][T11873] EXT4-fs warning (device loop7): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.7.1191: cleanup dec ref error -117 [ 1096.809638][ T9860] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1098.280365][T11878] loop8: detected capacity change from 0 to 40427 [ 1098.502754][T11878] F2FS-fs (loop8): invalid crc value [ 1098.608750][T11878] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1098.724397][T11904] loop5: detected capacity change from 0 to 164 [ 1098.757692][T11904] rock: directory entry would overflow storage [ 1098.764328][T11904] rock: sig=0x5252, size=5, remaining=3 [ 1098.769971][T11904] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1099.253190][T11906] loop7: detected capacity change from 0 to 8 [ 1099.490019][T11878] F2FS-fs (loop8): Start checkpoint disabled! [ 1100.145693][T11911] FAULT_INJECTION: forcing a failure. [ 1100.145693][T11911] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1100.220457][T11911] CPU: 1 PID: 11911 Comm: syz.5.1197 Not tainted syzkaller #0 [ 1100.228030][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1100.238150][T11911] Call Trace: [ 1100.241470][T11911] [ 1100.244529][T11911] dump_stack_lvl+0x18c/0x250 [ 1100.249265][T11911] ? show_regs_print_info+0x20/0x20 [ 1100.254515][T11911] ? load_image+0x420/0x420 [ 1100.259069][T11911] ? ex_get_fixup_type+0x70/0x70 [ 1100.264061][T11911] should_fail_ex+0x394/0x4c0 [ 1100.268799][T11911] get_futex_key+0x134/0xf40 [ 1100.273451][T11911] ? futex_setup_timer+0xc0/0xc0 [ 1100.278438][T11911] ? lockdep_hardirqs_on+0x98/0x150 [ 1100.283694][T11911] futex_wake+0x127/0x4f0 [ 1100.288085][T11911] ? futex_wake_mark+0x150/0x150 [ 1100.293086][T11911] ? _copy_from_user+0xc8/0xe0 [ 1100.297897][T11911] ? media_device_ioctl+0x3f7/0x4a0 [ 1100.303147][T11911] do_futex+0x35d/0x3e0 [ 1100.307336][T11911] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1100.313264][T11911] __se_sys_futex+0x3a9/0x440 [ 1100.317974][T11911] ? __x64_sys_futex+0xf0/0xf0 [ 1100.322766][T11911] ? __x64_sys_futex+0x21/0xf0 [ 1100.327558][T11911] do_syscall_64+0x55/0xb0 [ 1100.332005][T11911] ? clear_bhb_loop+0x40/0x90 [ 1100.336709][T11911] ? clear_bhb_loop+0x40/0x90 [ 1100.341420][T11911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1100.347381][T11911] RIP: 0033:0x7f12b7b9fb19 [ 1100.351824][T11911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.371481][T11911] RSP: 002b:00007f12b8a950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1100.379917][T11911] RAX: ffffffffffffffda RBX: 00007f12b7e25fa8 RCX: 00007f12b7b9fb19 [ 1100.387909][T11911] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12b7e25fac [ 1100.395909][T11911] RBP: 00007f12b7e25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1100.403912][T11911] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1100.411905][T11911] R13: 00007f12b7e26038 R14: 00007fffe78a0f80 R15: 00007fffe78a1068 [ 1100.419909][T11911] [ 1100.637350][ T7476] team0 (unregistering): Port device team_slave_1 removed [ 1102.917557][ T7476] team0 (unregistering): Port device team_slave_0 removed [ 1103.329699][ T7476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.606505][T11927] loop8: detected capacity change from 0 to 1024 [ 1103.618287][ T7476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.628083][T11927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1103.653273][T11927] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1104.046451][T11927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.059825][T11927] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.107081][T11927] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1200: bg 0: block 112: padding at end of block bitmap is not set [ 1104.178353][T11927] EXT4-fs (loop8): Remounting filesystem read-only [ 1104.189179][T11927] EXT4-fs warning (device loop8): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.8.1200: cleanup dec ref error -28 [ 1104.652207][ T9698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1104.719498][T11924] loop7: detected capacity change from 0 to 32768 [ 1104.822748][T11924] ERROR: (device loop7): duplicateIXtree: [ 1104.822748][T11924] [ 1104.850776][T11924] ERROR: (device loop7): remounting filesystem as read-only [ 1104.959755][ T9860] ------------[ cut here ]------------ [ 1104.965964][ T9860] kernel BUG at fs/jfs/inode.c:175! [ 1105.012972][ T9860] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1105.019137][ T9860] CPU: 1 PID: 9860 Comm: syz-executor Not tainted syzkaller #0 [ 1105.026722][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1105.036827][ T9860] RIP: 0010:jfs_evict_inode+0x424/0x430 [ 1105.042434][ T9860] Code: e5 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 66 dd e5 fe e9 16 fe ff ff e8 cc d4 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54 [ 1105.062117][ T9860] RSP: 0018:ffffc9000355fb08 EFLAGS: 00010293 [ 1105.068222][ T9860] RAX: ffffffff82fb09d4 RBX: ffff8880553d3bb0 RCX: ffff88805e148000 [ 1105.076233][ T9860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880553d3bb0 [ 1105.084248][ T9860] RBP: 0000000000000001 R08: ffffffff92223677 R09: 1ffffffff24446ce [ 1105.092251][ T9860] R10: dffffc0000000000 R11: fffffbfff24446cf R12: dffffc0000000000 [ 1105.100259][ T9860] R13: dffffc0000000000 R14: ffff8880553d3838 R15: ffff8880553d3be8 [ 1105.108259][ T9860] FS: 0000555555e4e500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1105.117248][ T9860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1105.123864][ T9860] CR2: 00007fb5c23aa000 CR3: 000000007ad59000 CR4: 00000000003506e0 [ 1105.131871][ T9860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1105.139884][ T9860] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1105.147893][ T9860] Call Trace: [ 1105.151207][ T9860] [ 1105.154169][ T9860] ? jfs_write_inode+0x220/0x220 [ 1105.159145][ T9860] evict+0x4b3/0x9d0 [ 1105.163080][ T9860] ? proc_nr_inodes+0x230/0x230 [ 1105.167977][ T9860] ? do_raw_spin_unlock+0x121/0x230 [ 1105.173244][ T9860] ? do_raw_spin_unlock+0x121/0x230 [ 1105.178503][ T9860] evict_inodes+0x64a/0x6e0 [ 1105.183050][ T9860] ? clear_inode+0x140/0x140 [ 1105.187679][ T9860] generic_shutdown_super+0x97/0x2b0 [ 1105.192998][ T9860] kill_block_super+0x44/0x90 [ 1105.197753][ T9860] deactivate_locked_super+0x9c/0x210 [ 1105.203166][ T9860] cleanup_mnt+0x3d7/0x460 [ 1105.207625][ T9860] task_work_run+0x1d4/0x260 [ 1105.212260][ T9860] ? task_work_cancel+0x220/0x220 [ 1105.217331][ T9860] ? exit_to_user_mode_loop+0x3b/0x110 [ 1105.222838][ T9860] exit_to_user_mode_loop+0xe6/0x110 [ 1105.228176][ T9860] exit_to_user_mode_prepare+0xee/0x180 [ 1105.233767][ T9860] syscall_exit_to_user_mode+0x1a/0x50 [ 1105.239259][ T9860] do_syscall_64+0x61/0xb0 [ 1105.243705][ T9860] ? clear_bhb_loop+0x40/0x90 [ 1105.248494][ T9860] ? clear_bhb_loop+0x40/0x90 [ 1105.253200][ T9860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1105.259115][ T9860] RIP: 0033:0x7f86f2da0d57 [ 1105.263549][ T9860] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1105.283175][ T9860] RSP: 002b:00007ffd4f63afd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1105.291605][ T9860] RAX: 0000000000000000 RBX: 00007f86f2e36f3b RCX: 00007f86f2da0d57 [ 1105.299605][ T9860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4f63b090 [ 1105.307616][ T9860] RBP: 00007ffd4f63b090 R08: 00007ffd4f63c090 R09: 00000000ffffffff [ 1105.315610][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4f63c120 [ 1105.323607][ T9860] R13: 00007f86f2e36f3b R14: 000000000010dbda R15: 00007ffd4f63c160 [ 1105.331710][ T9860] [ 1105.334799][ T9860] Modules linked in: [ 1105.354032][ T9860] ---[ end trace 0000000000000000 ]--- [ 1105.359575][ T9860] RIP: 0010:jfs_evict_inode+0x424/0x430 [ 1105.382219][ T9860] Code: e5 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 66 dd e5 fe e9 16 fe ff ff e8 cc d4 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54 [ 1105.473448][T11935] loop8: detected capacity change from 0 to 164 [ 1105.684306][T11935] rock: directory entry would overflow storage [ 1105.690580][T11935] rock: sig=0x5252, size=5, remaining=3 [ 1105.696729][T11935] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1105.913285][ T9860] RSP: 0018:ffffc9000355fb08 EFLAGS: 00010293 [ 1105.933276][ T9860] RAX: ffffffff82fb09d4 RBX: ffff8880553d3bb0 RCX: ffff88805e148000 [ 1105.992748][ T9860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880553d3bb0 [ 1106.018402][ T9860] RBP: 0000000000000001 R08: ffffffff92223677 R09: 1ffffffff24446ce [ 1106.028441][ T9860] R10: dffffc0000000000 R11: fffffbfff24446cf R12: dffffc0000000000 [ 1106.037280][ T9860] R13: dffffc0000000000 R14: ffff8880553d3838 R15: ffff8880553d3be8 [ 1106.051822][ T9860] FS: 0000555555e4e500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1106.060822][ T9860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1106.069557][ T9860] CR2: 00007fff743737c8 CR3: 000000007ad59000 CR4: 00000000003506e0 [ 1106.077838][ T9860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1106.087765][ T9860] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1106.096074][ T9860] Kernel panic - not syncing: Fatal exception [ 1106.102316][ T9860] Kernel Offset: disabled [ 1106.106647][ T9860] Rebooting in 86400 seconds..