last executing test programs: 3.132215334s ago: executing program 4 (id=524): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xfffd}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x597b5e483af24e03, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fe800000000000000000000000000008e0000002000000000000000000000000008623008a7180ab03e6a5358af4000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x4000000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x3f000000}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r5, &(0x7f0000000480), 0x21, 0xe0ff) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 3.122162845s ago: executing program 4 (id=525): openat$autofs(0xffffffffffffff9c, &(0x7f0000011b80), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f00000003c0), &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/132, 0x84}], 0x1}) io_uring_enter(r0, 0x1ce4, 0x0, 0x0, 0x0, 0x0) 3.088292237s ago: executing program 4 (id=526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x2, 0x2000000, &(0x7f0000000ec0)="c2e2"}) 2.971754064s ago: executing program 4 (id=528): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@jqfmt_vfsv1}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nouid32}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@sysvgroups}]}, 0x1, 0x57b, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qYgRT1IoQcr2t0m8UcFwXoUWyzoxVO7JNNQsumW7KY0sWB7sBcvUgQRC+If4N1j8R/w7B9Q0EKRElQQMTKb2XSb7GaTNHHT7ucD0743M9v3vjvzXt+bt8sG0LeOZH8UIl6IiC+TiIMtxwYjP3hk6byFB9fGsy2JxcWPfk8iyfc1z0/yv/fnmecj4qfPI46f/uWTleXW5uanypVKOpPnS/Xpy6Xa3Pzxi9PlyXQyvTQ6NnbyjbHRt996c8tifeXsn998eOf9k18cXfj6h3uHbiVxKg7kx1rjaOvfxfUUcb01c6T8T54ailMrThzZQL2fBEmvK8CmDOTtfCiyPuBgDOStHnj6fRYRi0CfSrR/6FPNcUBzbt91HvyUuf/e0gRodfyDS89GYk9jbrRvIXlkZpTNd4e3oPysjB9/u30r22Lt5xB7u+QBNuT6jYg4MTi4uv9L8v5v8040Hh6v8sgDppVl9Nv/P9BLd7Lxz2vtxj+F5fFPtBn/7G/Tdjeje/sv3NuCYjrKxn/vtB3/LnddwwN57pnGmG8ouXCxkp6IiGcj4lgM7c7ya63nnFy423HxqHX8l21Z+c2xYF6Pe4O7H33NRLlefpyYW92/EfFi2/Fvsnz9kzbXP3s/zq6zjMPp7Zda862LZN3j316L30e83Pb6P1zRylKlZmb1+mSpcT+UmnfFan/cPPxzp/J7HX92/fetHf9w0rpeW9t4Gd/t+TvtdGyz9/+u5ONGele+72q5Xp8ZidiVnF69f/Tha5v55vlZ/MeORsQa/V+7+z+bfJ2P9gOclW4+d/P85uPfXln8Exu6/htP3P3g0287lb++6/96I3Us39Op//urJb3eCj7u+wcAAAAAAAA7SSEiDkRSKC6nC4Vi8eHxSrVWf/VCdfbSRDS+KzscQ4XmSvfBls9DjOSfh23mR1fkxyLiUER8NbC3kS+OVysTvQwcAAAAAAAAAAAAAAAAAAAAdpD9a3z//9eBXtcO2HaNHzbY3etaAL3Q9Sf/t+KXnoAdqWv7B55a2j/0L+0f+pf2D/1L+4f+pf1D/9L+oX9p/wAAAAAAAAAAAAAAAAAAAAAAAAAAALClzp45k22LCw+ujWf5iStzs1PVK8cn0tpUcXp2vDhenblcnKxWJytpcbw63e3fq1Srl0dGY/ZqqZ7W6qXa3Py56erspfq5i9PlyfRcOvS/RAUAAAAAAAAAAAAAAAAAAABPltrc/FS5UklnJDom3o0dUY3tDHDJpl4+uFOikNjSRI87JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo8V8AAAD//4hENxA=") r1 = shmget(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001400)={0x0, 0x0}) r5 = getuid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, 0xffffffffffffffff, r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007fc0)={0x0, 0x0}, &(0x7f0000008000)=0xc) r10 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r11, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r12, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000008040), 0x400000, 0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000008080), 0x202000, 0x0) r15 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000080c0), &(0x7f0000008100)=0x10, 0x800) r16 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r16) r17 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000008140)='./file1\x00', &(0x7f0000008180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb22c5a016766a39b) r19 = getpid() sched_setscheduler(r19, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000008200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file1\x00'}) r21 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r22, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r23, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") r24 = accept(0xffffffffffffffff, &(0x7f0000008240)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f00000082c0)=0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000095c0)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="f08cd022f61c2e769079829c448267bf472e1bdf20db56adbb348d7d5846d916c882d6b5a39badeaa75b1d42ba434ad5ae73a26048228ecbc0fe26873071bd5cfd2dee6a2dc5f71808d52c040fcfa58531c9db819d16dd608dd5e82df287df22dd64a8f2cb5350b4d37a2863a2ddef1b8582d4cdfb21a90756846bf8da15ce2ccb620581458571fc630d01bf6c9c65856cabe95c5d73de8754b958d55e099e6b22", 0xa1}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="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", 0x1000}], 0x3, 0x0, 0x0, 0x20040840}}, {{&(0x7f00000001c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)="94b0c2128a1ee9f9fe65c07cdabcde4598b43984300f78e7bde9442dd12caf30f1fbeabd773186ded916171dfd48a3c17630d764df38cf05100952f14f09bb96a3c4503eb23a87674463f7b9b3dfb5b56afec6d055986f6bbe7f992c3941054561a2f59f28d2ad15c0a359f6e540967b662d3910130b83254017705ca1761ffdec15ed", 0x83}, {&(0x7f0000000300)="c84766f73b5f64199e8f621dd95143282349626f35205aaa654f567445e03066c5244a278dae4110", 0x28}, {&(0x7f0000000340)="c85eb499d46515922379c01d0dc1162720f67b34f8eb2cd1129e5fa3cdb069470cc77d305e72ab3f39d9bdbdf9d12aa413039556e5", 0x35}, {&(0x7f0000003b40)="5f35db244802bc2489329c3665d91d0138073093f30e94076dcd76a53a35101cf8f33d006df952f587d96a7d65186acec714e5b1dd604923f891b269a4c543b38daf998d324f07e82d2d5d9ae163dd790ae068da8fee96b66be7f270fc8c277a92bd86f668206e4aaa1321b2b99a3bb295388d8effb5bb865d106b124f6581a03292dc06c53bb8a065b57590e93759e96b3da414382a902a76108b37227223fe6176cf7be2f65e980b36361f409b49483da2e8c271c2c8083f711001b4cb49b9c4ddff4efc4da5ba519d2bdeecf731c4ed5dd93da42af3dddf72347de58f7d29d8645fd8494d903ee8ab46f91fa729e5722a3e22170a523b69a725dde1cd8af7719dbf0d81d24dbd5a77b14b39f20e9be48dd052e5e87f80b99d54e6b8d90888dcfb08e0651159a362a0a4689ed72d1128e4a9d982f8870981ae02be3d08704587af03cc066cfb57f47219bbf163fff1534da59254f6e3a438a0ef11ceb9fb513d16f04616ff3714faa89ec63e286051e3bd0e2f2bebb51e0dbd9e3f9bb299a17311134a6c454d70bfe1417b8a36236ae5606308b5f52db48b232da616c7116f00893aedb7f9a0c001daf0c40628832c5053c6d837789923e949e871a7a7e0ad40f656c778272dc6ce10c7a870208ac952f117415441af47b0f1c5fd8b01b7d41ee44319d41f902017f08540000ad0949a3505d6f7473aa62bbe516ec1660e2120d18f58c0a66c6f14bbea4e012b2ffa2d91f76a73d129c2033ba818105d3c352893cfe1b7451d47df6d36294bcd6c2c019d1815a27b397999ddd49d54caa940b08788778aec4094d1fede6030e847a91f446dfd9e30100e5a89c8fe2f5d7e5f262e71ee95111b6cd6d4d654eaebbb34596ea9e355aa06a4e1714ed9fc4e44594420bd7c297ee13df8773a0357058161b558c3f0aab5684501724ae640ceeab01a7eed9558bcde5ae2e8be0f0af4401b506963cadb4eb00ca8f44bec512ea216e9d74a2ff9a5c343360afba20ce25a75e5cd84557d33ad8ad73a22160ef2c0bd5b2ff7dc7c0ce215fd2581ae34e5ea2311c3f87b4464490631a327a8b22409310b69b1e8cc55df45dd61de910a0baf4bc40993001b89afabe124bc9f1a4ae4f4d82ce0f4b8188b7b602f19940f41222a9302d1730baa22fdba14ea1cb9c8f745906176626333b92125e0d6f4457daf1b6aefaa9f81dd27a93cf6dcc02ebbe0b947de52eecfebee6b860cd502f03df862ecf78156d61592d40a2bbb8e2ef374982f624e0ef5ae4e684586d9ecb129606d3eedf94074b08763ebfa36780bc84b0810b825c95da60d5db81b2d3b4940bf3dfdc011428c3c6116fad1f98cc906467e3240af79c91262abb546ba8914b27f86d3f807751baec4d101d54a9754a583cd87f818f09acba36d6c19b5ac4d315ca61dbe38add1aac16d392bcc98764655ebac4bb0b075e5254be121672dd036505a84d242e8616678c98fc6d28539eab9ef411ad10b28484f7ebba9cc2cbfa41437e6ef6e343667603b6c262ca595c716400fd61ca6929ccb3aed4054eb27895d917a96376da99dd9e5e0764e985a539fd0ecf9476a46ed4c3b652645ddeb5eb60d4a3f48c5bff9aef2a72e24e55f2d7321f6bcd8399cf45d71424154075c9a1f76354878f08a2f28e7461a242eb75a6910f5c664842cb4455961ca5b676053726b4d7db6c3fa6eb468e680195d99c89fe66c6faea753a8a937ebd125e478843aa0ecdb240424cfb7441c0320b7d8590cc4a6917530f3fcecbc483bd8a29dd60638264ae9c2a60311a5dfb6fff67b38e277240b54906aaf05a356f73ad78db661a55410168bfe26f1cd3f2c0db95c734c3a32cf013b8e25a9afd38b68df6893609ebdc5704f3fd6d327b8ddc0db1f80627066decbeb41187d5e61eed5618a7feb27040852600adca2fcdd14e8070f31bb69fb2c7e04c389e3b646bf0859a4099e63d980fa62f3f5992e5f21c65f28d0528e3a2b3300de4a750f22c0c2342782580624c72fe3e3bef117852d5d0dd053dfb0d7abaadb2344504dc71d0e69ac6675d4009f66e661545e81503d8a8923410cba499f6b85afe9d93a74bb830a9b922b8cddeec585bce57db363a75f54d7ed1c69023bea19b37238fccbf5f0d1e139c64ab2a0d1e9e17b60d7b77fb3e46ae9de17f14b144668b360cac00df249373b76e037364de1cdcbc600744f8304ddd43594e50489df9e61d1a714fab6226bdbf9203339441cea52f6aa841e22bd84ec60e797d5b60b1ae3443f406e8a0d0c7b26802f9e8b9c950286b6892e874ba7df6a9873b4b9c8453028841d4442b93d608b403b3d15e06a3c52737d194541445df9df7dab8c23ab437454d72c4e86043d07397da85f69683f86e1354e6657fc3ec367dc406dc27faff8df58d91885972de55a460f195379fd2931c416b668bd4b3762ce4709acd3ae90c3a7951b76e8d94e57f992652b7f5edc806899a1e3380eb42148b62761791a57bff4b8aebbeef76352b27a2c7448dc597f17ef24a72b4a4abb101725fe9e26d4c1a213e71437dd542b95a70f0eb41d1c474bda6b8c11d621e24fe6dda1897603b2d19a34fc881774226f0909adaf55a6edaa34b28e7b77a0a0b1a86a3819d60f3fe65dc0c0938b24863180985c0e2c8924f640650545eff34b8b842ff64c9aa5dcaec40515020984bfa88940b8ee37fe68b02bfe9e2d8a9bbe0f3c78a30514ec26fee5f9add4a4fcb6a5eefaccf97e6b2d3297076d0666ad6d174993a182e69de8d00ab0f0d7e865c7702fa1789f22abd6f441e028b65297e087c513dddc5db470f0cc705b725bae11e3c9aafda26cddefe56ef443463a6889822d934376f46dfe412bcec9659014d8e878990b206b32dcec52c67e0fcea83bfe5d5650b89929219c2559d00ea11f4a5a77fd8652fda724ff2c9d0a5544979ecb012dbff88e579003cee5061f3c63ffd1156c9a870629675931ee0ce9a581775d5923bd1fe85271e39b0693c742c2524083914bb379aec7be9a412aa971a216d246c701106ff64a31e8899c40bcd02b81d965fcc2129a192c32c9e3e9379d6ac33168de19c0de1363664d6a7a27aacef7535863f5fbbf714420a27d99348b948c5bf915af3dbeab9bbda514e92de6dd0ca2e528a3089d2716575658d04280d87c29f7e7a8c7a7c91b36fa1e894292d21e9ca57e1a2fd0318a350db4b86b3b2cbc6fec564116c1b41c33f4f8804e74e631e297fc83fcd6a24da882cb0728f8f119563a19ba194b8ab604d75dabf429ef4a18b1cf4de2caee38528e161b4504ee916423d035e3c14fba1aa385e4a49c9131302cac1dd50fc02aa4b11d14d35eacb6f877e6b4dec61e1f07eddd034cf734f189ce6c9979676961084232dd11fdd26965813072883a50daa6ae7908fe9d38bde2557c1e2cb642259c759b73629f20115f7aef72c6c56cb4602e51fa5d5a0d73cddf1834c0ae894815f5c9e11bc75c76628b7139053aa5ce04e13509bebbbd1524b808413961b4eb01c2eb03dc7872613b9932c348e44bec1c6c586155012862bce1e61fa72f57f519d528a82400a10e973fab920655ce1783e2e158b522e01ab63ce6d4ac43f34c24a1fa5e2ebc8b2fc48319e220e5a6adfd9959b36df06821bbced93c66ef3fcc972d8db043d5b0b45ef68e2c0252bbbaa8ae0072ca56e7b73c62c53d12d3a6bdae5ee9c04c2d1ebec474a2a18bd351ebf86e16ae29ac462550049851e7bbb271e585fcacac87f69147da8606c29b038fbad850d3fd5b584a66ecd42d19ad3a7c78b004be9f9c6839eba14d0a76bdba100aa394d7d76270367ef901f69c2d1e9da26c17f77cd4b866978afe00873292254ea8bc0ba36d07df07ad3feae7ccf940102f8aa7acd48e03dc25c8773883939d759d03a7d408fa4bc7375b455e62107db5ff5690ffbfc55acb9bfba6fdba93be4383504f53f2f8f567fa35a6517899efba017c16e449ae3b14cbeb239258dfb1f1388a27450bc82d15ed26218048fbfe0356699c33466c9218a377a1e3300a76c6b5b6d04215f34c5adc10bdfc34ddf0c75c666cadf71257a392a3dcffc7efdab1a7de3834325f0155c1f79f772e21f96ec4763fa71bc69d5f6abfb29d7271b7484331f1d59bd20e42172769d0b0d3561dd1f496d8ebedbd6d3721b7ef6967551ffd94a95a31ce996598bf221a37e75ec128b86836841869ad64aee0bcba4d258a7f7064efb0c6413403237867f0939a678086ce0976d76c60381fc82537a79fef8a378944e49270585944f52e7aa8301210106646f41a59c6b6a9210aca1670ac07fab3ea0c339239e3d0bb548702a8b30c656b16af685a81d9333ae1f7469dd0ef0a3bd2a25ed2f31c0d25854743e073dd3c67a0b76c03c647b16f05cb34186b5bb7bf9d5ca82973fec21fd03b25244cef5edad0e4248b8c066f1712cb4b60d3a9b51c8e8d12c9938a675020f313137cac060df4bf6123846ea418841edb1f92c877e32f0f3c826b38a625a1dc3e09e4d6f374c785503104d0432abc8c6b7b041d43beedbfa32a1f3375338a952716b309bee1d679ef930d08394af66b23e0cdd8d7e2157ca9686d46b6959b6e2b33ab872c1cece5420e1cbb09e6136b7f4e72b854832a61c03e583565397660b41f50f448d726ad1d7d11a663bab3e88bb3d3a7e8e8c9b62a9852c8ac464f2868b9ddc4fe7688a273cb1c37e357ede6ac5150701709d91d8e7008c1c41b07db3757cd5b97b60f60a53bf8bc9446a819e4b87d7784106f9a03333b228c0fd21549e917c1ebb77f63b673c46fa5c0d964f968a79c3eb1ccc9da8c85c1adc18fabba056150bf99663cc926947fadfaa8ffa4054c06d44b18bced7711ab8f2460801cdf75fb64ab299ca25525e3d98a55ac5305bf9ba6368abbd2ab0e158d405e997c32d86b8af1b6001747bcc31075fa7a70d9bd9241f213357a455405a8b178176491a443177efddb1908d32cf853070c267476dd7901b7bff484264325da97e6c29d20674f2d6f171e2e767aec54a3deb5d41de59da308f4468315d0c97ef29b474cdb8b0f1e6ce220d8fc00a869009c4ef2394d28ed274fe4a8cf40b04b48818014d1d63e2080b08aefa8288aea53af7b27e105e4dc9aa2d0fe943cb2c3c05049f6c88edecb0489f3c9eae54397d9e886f5f11175d6c3b3f5ef57942bf947dc0cac740d08546035235b65b9fc8eb8d6498bf56c8b913bc50fbd43a1a43341ece018e2886e740385c0b4bec21b95ef9598883a2dbb0207d1c51553e802aac67bd09ff41d75771aae465eb17d2ca00ba9f950dc8d88187ec8c9abd1231430680e8dec86c39f36b27559ffb4f81e2ccf5436f6591c26478e3a5e854179529a3045160a4a6951408708f0f955696de1660262c7bb63263ced12413e62ebae77eacaf469dedbc6731cf887538c4f1bbfe9157b1525b36d249a154b8d1eb29643d72ccff97a656915d36a5e0063d926c3b6c8cff3cd265a688241efe3240e61004a08cecb1b2adc0a89b820e1a5f8f765ac4c031d9db076a7822e214692972b92bf42a163b9ef88fd79367e12273bec19e0f42d5c1c8c16e172efa52c1d29d4036af02d17e68c229bf2e1000779d8e74d4c25a45e8f6798de0f07b8fbd64bd1edab387fb04926e43a65bd458a85f8a8db0ebfe3783c32cf4240f53acb205e3ebb4bc6af5ba09b26ee5448ef5e2b7f1ebc2f0c13d9f35a0fb8f29fec6bab431d7fadec33abf2bec750e4308f83681b04a847834bd5a6f1a0dcfb5ab3fe0ee3aacc7ae3353a324555dc3d0459", 0x1000}], 0x4, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x1}}, {{&(0x7f0000000740)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000007c0)="5aa1eba529622b2a2cd3f0b87036fec9629971de1f3b07cff7", 0x19}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x88c1}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a80)="e90f6f743148863f305da5ce0d118ebf9660614683507d574e05445bf384fd867bca23df2fcd4ed3438de9bfa6f94e11feca1472af60cd5e9141e95f8bcae27d8a3dc4f7e7c1d27d937b9e6ae6a7058a586714c397caa9124b6878228db13e7a4cd1129cc2da7d5f22fec2140ad0ca57ceaf7b6f2db712f360c5ef6c13abd5ba19e3fadbafb87bf24119dba26c42a4aca4ff6b6f6e344c2ac2070c45f356709aae050d25515f0d186bf57c38292f1eed9cb7897c84e8b83171aa65ac28182d4fc51a333f66023ee42820f1d5528cbb121dde86f1fef5ad8894be21a1ea57d15f37f4cd8edf788b24e6434f83a8", 0xed}, {&(0x7f0000000b80)="5fa6223bc85f5e81b237cb7246aa189927baa341f4b4982c2befdb8b29c4e81e4477db675f286add8c160e4832f107aecf9a2a52de4e7972c4ddae4216696dacccbdf11d45637a2f75b9a20e1363e100ab4ccc5ea8ec6e0cb15adf1ae4fd166ebdbf5806059735260cb72e3642591c3585a5493f8999fd23ec8b45b69271b4afa3fcdb2bbd6fb4bc0bdc33d3f76126b45d7fc35b3684666283734cb3b1c8c8b179770b6a7bbcae317b68633cf5df3a1e77bf96b8ad78d4", 0xb7}, {&(0x7f0000000c40)="b49121bf897ccfd3915c12bcd2608932e324f2702ef2295260cfdd014d22085e33391145b0efd0630e0c3e312f65839ff36b08391ae5e9c42c1e99816f939fa139879c37d66f7a01482fdbeecc71ad4fc2724a05cb334fb883b95db67029be352edb41c33d7fc93b0258536234d7b24561ce5216f7dab2cd06b3127fd3aa6ee8f45d8b73b99761fd29e5ce4ce767810397cbc6e1ad464cba187b9797b22ed286acdbcd3e721b25a0f8acc186b1981e95f45e9a87ebff7d2c34894f8cd76583b2863c48d118b395e7ebcd9006f04b2930e6393a90f72f7ac6dc0af90b43f8", 0xde}, {&(0x7f0000000d40)="d9cc4673247e72f273bc03e3f8a46cd3d87d934653ee3e6ff22b4d3a42ad1ad34ae3fa6992868c822e82578b1f317b014143603ad54ee17053378f1cf55e4b47eef5bdc7fca1a4c28d86eff4ade8f7ca47e5e6ffcad2cb3ebec5b924707f5f425fadade5bee454349a52e6ab329aabe62cde0cd284748726998fe80637672a87eca269f268ebd93508a116e8e2d423e257f36e12029afc7a685b9246", 0x9c}, {&(0x7f0000000e00)="1ab35a0d2814b939bf04a8bf076869908adfb45cd3f18b2e8c095d5a70ceaad086407c08980dec6ff6e0dbf61965669ef9f286e5d89ad5c9e2ed615ab3dd87f9201d2283a63077599393b2b96a637c91fbb92e507fe74dbf3aca1b0979b529d773fca2a83dc4ec6be4226d733ab8b1ec03b03dae461e714bd19a5f2b1095528386b7d6940103134744748a617346fadc5015a30030ef38cfcc0bc77f7b77aa773293b2", 0xa3}, {&(0x7f0000006b80)="d2290d2dc2ec4c27d1911f3f501c71257c6500f812ed52772135ab7b10ae987841dd35ba7a74eb9fd8e39b373fe8cb5d7d7b0ce21326afae104e3d08ec6788a15805e4395662488f6a4b4f7a5cd05b1bba4ca81209ef39f040075df49ca45de266a809b99a8af8cafbea0e22ed75f311d9e55758851852a60aa21726178bcc4df3d45e68f729cc1e1d6d43d146483ce8c66f2954974c1fd79b94793ab5c365a2d5d721354f95316522e8c873331a5d59fd7d0ca5138564d84c71ef862ce8e7e0e577a509160370fab8c0a339dd4fee8a7f05e77bb920a20d3f5dc8d1eeafc96bbf6af7922111c32e2a46e1213fc1937f2f47d1940062c7f6f9811898e7bcb3c5d7249c5c12b7cba4a890b06d24aa2789a4af34063906e5971d6d6aeb85c340f0976ed9bcfcf6e5f6e3f40d290f560187b6b1d06108b4b798b9ab2d7e32a97b51ea00a98f3a9e45e02a11908068263dd783c8591cc97257a7dbb23a453724ccfdc07dda2f02fe9d21e80a4f43db9b6e30ada467cf72bffb77293d4abccfd234d8660e80aa3e314aed52f0cff532e90f41d5196eed51fe613449a55ae53a38b127c1fb77ca6a7f2ef4fb7deb6da8c7c6ff9e50407dc796f128093c9c23815c2e1692bc82b5641beecd68d651a3e2ffd9730e7181026386d21bcb3f011f41765ddbf975e6c371d28608ab38504eb6c7499f34a15758ecd4ef4a284b6404a4e6f10ad8c3db834e6bc54488f43a47e966a3018511eeb8658c6cf47b1b8d5215626e14f588d1a27a74bf9683211da79acce2b23c680838e70c8b387a6aace3bd115914cefb255bc27bfbb1740ac1d17f6298b421b60b700fb516f0575ca542787804100191f61c08159a2938faf28a61a9494962c175ec1c5576be5693865ff17314b00ee35fe2435e5ed45bc57589a59a30b25373f193d1ede05b3b8ff9bc5cbb8b6847b952c4509a8dcc7f991fb6b696546b73690e81baa4706ffc5872881106aa2ca8a809da07bf60ed13185f8998756e08fcea1408cdb7c2f87080fc682eae4dcd476cd9792c30a5f0890e1047687d5f234a22c97d1091a9219d257305121c691e7756d7a6ee1e3a1133f1be981f023fee88e568ee09b24311b5777a662fd04688792a1a04bbd68625b51f546ba203eced19dd048ac31d81fff44bf20c576337a21c33fb2a4aab3bb67f5b8beba55090895ba09026bd8a72f5328da3a88d322870d8be121e27db59be8108c9caec9f01a9bf35982f22eeacb897a3e5784ea299e1b73b7d72e3024b5ab363bc95b5f2facb61df446797faf618808843a73221ec1ab2fd022b3217ce0a6dcb1062e39a920f30a0d51b37a741687eb9de56da839315e84d99108057c5587a4b9b4e247f3657d10f777b9903378a2b5dd52e5ccd4dd4167c94533918a414e93f752f523eef22e6b65a2a778d64ee95e3f44b8019a5201ec2ed34fd3f85a49f89921ccdd81c086eb7d49f3cdf46434ed01440f44d19d1ab0b9acd0af780ace8061b5c66094454fafa2d7e8b8df15264b63e96e2ffdee563ffa0765d49262d37459aa9d3a0036c44738ce8fe39f66401e36030d1965a694c3723de9183cefbe96cd48c0f3134ad82c67678aa94d0d5d90e5ade2c5ab4f73290d812a4e18430d9b54b80443054d54ac074657f6e3bc5c45f4779a70f06c9c7873a07e392ac6b234259c209cbd50dd0be6d12e048072666130e88dae7aa94a027bcde31d2d17a627043400024ccf5d65e3ab565f6151beb00aa8cc1382f453b30f1bbd9f8d7924fa0e77ac98d7fa147081066401a74e0a4e3fbd2eadea636db397babc50559e487b499abe1d485198a2c44a7d86dae81fd1212a4227705c4b07792dc5f9dcc5a5cad5aadb5625615bcbf136885ccf0f12ce56f4a0bb3d68cc1d47359af307d7a6074fea713412229072c7db007076bc452ab4aadc53cbe7ac31b1a7a06394b2955c07b7f331185e34fb5262c91d594837263d3045d55b9aed89ccb324e31b985f42d7afde21848cdd4361b9b3025e0797cccc1a2e37cd3710946eabe10bb24ba21504becc93798626957aef8915688def8c6ebe7f5313cadcce3dd95ed3a06882e30defa28dc9169ca3857deccde8a681d48e892e39a06833154d11db8b151c97fa896607fbc0490247f9788b6d011571b93481a9cb5a7329e4a33427d0e24e2acb445df6c7dedd7d7b155b253066dd89d660b742e75ea6e66243dc4fe9ec628cd9960362359cfd6d428f32bdf9727f7b731dcb77a03376d9251124d8129e1da30a214c188fbd6bd421cffebe7131f135e55bf7ec1b96240ecf4617aef8dab0a4ee4c71885e1452d3198bb565a4d7d99fa690070cd4ce330eeea82302412827c8a8ec03a0ea2aab4a8061b57bf3f831d3c33c35dfcc1feabcd74ac78e4565218be16759542e6e917e5962ee9f8061f269e82811d8324a1e4998d35407b6051714bcd53fa182adfbe74425b8729bd10df97890f0b55dcd3c3faa24bfbc0510e641d69c92dc238705043a5b9508cf3771628c7213d6f8686cb185e877b1b623b3499755651e671c378f00c5c148b84358bf5ba3d1fc616128efe939086852480d049e1a60c98fb6ac0cca1d9a3ba14bab1287726226f539e0a06c6e3cd24b62977989faca544f9a47e75a3b75367f50a85bd2c74ff9f2e32b2f6bdc7c4f041f7a6c8f701a15347d2ed6d309c3ae79e0fa91c6088ea8f8ba6f5a5c3741af427a7d9475417b6d324629ff0025208fd1503af61fad8cceee42e6c881c5fca883dbae4923adbd79e1feb05d84a25b47f4f1ba5c409c43ad20161ac33ff113422433075e71a01b42e0908f099c0bac7160fe4c4d51fd2b14fd2d8b85b4075aab8e343050d1186f1249eaaa7f9153d7b21a1cb8a30df0baca996a97a972e64ca0bb1ad986673b4eb7507e8f023c65719d1a34134fb845c4c83221f8f5ccda1494f920c63bbd4b565fb5780dcc656725d640f8d9e19327389a69e7e9c149dbf92540cdd3a5abfd7a5df73e4c38a9e4f9a9e360d450ae0b9485aec2b43c8a9e634628cd8b63a030be07d8d0609644b701aca5e1a950cd46c2f163db53911aaf49ad8adc6dc427d96ac445f617a1e98ef53b11b1f5f0a230b91b90a91f5f00350d431def0345176bb60c7c4a17188880747dea751183a52b99d90015fd7fa39c515422b5a69898b214a1c172e9244ee556b829fdd2bdfe88acf01113af6da1cf0dfd9988c6e529659e053f98681be769734ea3c018038d16e83b3224a781ba68e22d274ba89a1a5754e9392ad8e10c5175dd12ad84c1ae890371016ec827d5806d27922158c024f7e757663e094d2b855cb075f72a4edcadf0b42ce1b7a7e125233af7273ab07e25f36c117efc242ceee4c85cb2206017cfc472b653ffc22121a6afcda6ba6ba6132a0ba1e651c4f25bd71b89717ce717722d2f78f1b059cf4d2f53f4b2e6377b3e0042b81fe82daeb4dafaf925fef54689f05ffe36a684002661409db93b7feb7c9508b5e890798a756b7ca3c64ae61c6755b8ff976982e504cf788d64e19103bf40ce462efcd079673acb351d477c91276b1d5c20dd356b9094a932979257ff69e5df363b02af92d24eef4dc48ee692b6247c482660f9d1e411f72a42093ba14a90da29e2822c3415b0e71ed197e9365e0474ff53fe18d22fa3aa102a0bf661c9cbf4018078542371f1ce25de7eaacd401cd474f1c3bd447620eae4a647fb574bc03a9ed751590bc8e73d47afda48b128f09cd6b9186f1a799f9fd3364897ab567724e145562c2792beb0e3e0e662a17adb6c2daaec1eaf16e0c03c5fbd2a226dd1e2a786be25b0f523604cce94896eb3d87a3a91e12209a7ea2bb8dccb9ae2c0e7f79e3a6f5078f9c044a17209d98b8ff243cb7a152b07edcb844a2f29eb16da6f2e89502dae49f6b1755a26c5bee7c6b0a499a9b0077fb314c5a7a2e17f460beba11363c2b6c460cba65b28883498b8757688458a12d490156cce5119a65248c290c66f3ee97a56620c7c4bd5ae573b13a0f0275225c88569d39cc57a309b5affc5f7e8884cfe38d7cda7e2d7fa7f0eb9dd07a0fe2a13316f9b56ecc3a8005b555c7cdd0dbb26c7c4c4ab0ca9d5124f77025f36591bc1fde61e88e049e490060239b7bf9a24c08046a24d5807f710bec78883a96d3bbc94ba50e24ca11b6a88c2419a36e807a40bc766c7569e99d813120ec45f2eaf4ae4201a97878f02bf522ff9e936c60e10ee6036edd93cd36ab733ae4b9e0c80721fa99deb5bddbfeca58ba42a1d4f1776def94505b706416d43f9e81049b9fcfb694aa628406e30fce81968c471c76ecc5aae0deba6982809465be9d7b9f7d2dd25a1696f96a863b12db13b6f18bf1488401cb9231937260da801b2383ff223fe49ceef616ddce96da80969cfecf7db8d0350aef0e4320b5806784be6c51de3dd92d21a553a4ac75464edf0181a5080fc6210bd5fe5d3565e34d79d82ddd6df9f48ceff16b4385b2fa32990e4d1628d3172d504f010c98042948b018da5c87c44643a56cc495e69b0dca2d9190c0d90bdbe52d03f50f76e6b876d37335de42c8dc4e6bc1d0f51f5d5a85db0d625a83a78321167ca71c0303bbfeef6a301a5d077a07e437d2670d839d1dc14e3a1ba241330c09d7ed1ce8f2ac801b94f063bee3e67af35a4b2e128bf4f26a16ede6f6ae22ed99774bcd9cce4c562540aa5a3c106a68666eaa7418af8e13dfa24470a60dcad7a52db696023f3a3718ca58433c6f243c456e85d045df07cd68b1265ee3c1aafbf2916271cb4a01e4c93038ff4778ea1c90841d253780743a78bbfb98be25499493d32ed7ed38fd9eb6645a22d352111ceef1e798c25af10c5ae0cb1c7412601453b3aec529f96434419b847072b12ab5661ca6a5164db326a72ea15e2c6b52c31d249a433dd687ab9ba8a172620c21d49a9cd030907c9b0d3ea1431191af4529991b8b6e464454caabce73f416a285e40aa58145660363df9a6a64d266660be52cbab751d8187016a6fce40ed76b8dd81b2ea2ffd3917ed09abe0271ddfea05ce669c334cc94bc14dfb009d8dba4f1249712ef3cf992f04bf5b8ad0b3c4af76ed6440178aac422c8f898820c78c70863b65aea9195cc98f579ba9e49baaa5fb98da0dee9e6191fa54f6d4cc52e9a55555d779746809acc9871114cafeb0c23cafb4aeea0a5cce632d8f45a78c691805f2a8c3db41200141054a7f04b6b5753ddae1f8459f99dda0d30dde0ed5b59af4f0a6a917c5b037afad13f6a012943e634a5755fc75a96b438e414807f9b0598736871c847b9842566ac1d4ea982282e2daa98fa069573ca15e56b7eb10b853b351a045f11204176edd8f9e49bc72ed0d6340cb1194a904b14f874c6eb96acaab151f04f9eede6e39ea737bcbe19b251badc113d18e58b075243d09d453aba4d0c1db75ee39126199722420b8c7f5ec607a03e2ef33fb590e0b625d30b12b652dba6a9ab0ffb48e2e41632b4254eabd3113aa477d384424cb3896a1e5c2da0245213d8cff074db0c8abc3d5343745087efcda9443414cdf0f2d81c6b89c056758938a6be074f34dfc6d41c6400869068258de1233ff44d372cdaacea2cba9093984b34efca39016a43be563bc4af0654a2e06ddb5dc75de8432b0a3fb179135f76b9c29b9748ced12df4e0ac3fa5e5992c469748b67fb622dbcb064021fc94441c1e9131bc60878024f5b188f3c46b998fe8c9ca890b8476b7885d69574cf1e437f2dab1c867feb6f34399d3f256e870c7d6eb348d7474917e4648a91eca", 0x1000}, {&(0x7f0000000ec0)="57ac41cd95809846f387e12ef57fe3e628a925a527e6f0c5669537222f0543d1ac228395f6a2942a4a1af739711e9b7e965efb84286c5e89e0fb408b91db83ef40dca34a640212e6718cdcfb5bcdfd0abbd70d9b8531efeb3ac5152fe865741e01bde53ec60519e5ab8527a7d3b7c44ccd3a1e69cc71fdd75e5729dcc88ef41f807773b90c8c42b1e678f6a5d6194a20392a1dd6e358a7b9b00a1c695e045cb21978b35cf794f55a5578b92abe9ddd5bc1a76340632e01aa214e5973d02545c4b9844b5ab793c67783bb51ab784f71f33ca3eb2b5a3b94b001d69fe44c74baa4f97a45268d857f47f7f35e92", 0xec}, {&(0x7f0000000fc0)="89ac52a20b5f1c369b07c3196ef8ef5bd9389f33ed119adb3e9b94f22c46f968318551b2d640", 0x26}], 0x8, &(0x7f0000001080)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x98, 0x800}}, {{&(0x7f0000001140)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f00000011c0)="256be58ec766254dafc7295966f09323ab40c908edaf112a822807f2255bf8a29770967a71679f6a934dc2151fd5", 0x2e}], 0x1, &(0x7f0000001440)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r3, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r8}}}], 0x158, 0x240400d4}}, {{0x0, 0x0, &(0x7f0000007f40)=[{&(0x7f0000007b80)="8edac78dea41da96959ff510a19e527a8f77cc394e01b03fc2133e3975ef9ee6247452949e6ad65a7767afc0891375c5c57a1313ba6b3aa443dce86e0f75291cecfe961d20d1e76322ea5f3c763a41ad290377a9c34c28945d6a3efc4164c4c1c56e888588cf86af148e4279e8007d71fb9b0cdd749324d4095be81e1c2c9e120f275853a3ddd927ea73f10c79bd50aaec48354a00ebbe960ac6f88ef62445828ee04ed31f59ca1f83e2ae109e1144f1e3712a19ccc40804dbcb54d79911c8e847f0f148e648b168e898968b333558cd1b0c8260de1ad69e4c60b30dbcdd1ddaeeb7495a88b075f04db891b0", 0xec}, {&(0x7f0000007c80)="4a33f4d259c5d9a3113330b4e7a51dcedb9dac259e638bb91d59e752a385a8f433fc78edb83032ca1dc32771f69ee2696a70a0c29f059af66ad7e061542dd51bf0c0c8469efc43cdbd3c4affd3909e8e7575464bffa8816a42f4e3983104913d9f5ef7506fa129bb0fe2b6fcf2908b61ebd4a1f7a69c5e037ddbd9ab2823f0551caec42eb2313995ee434591d9909e81e6ffc21df5fa5503cac7cd05adc8110d903b4631d81856c0a798c3b1186e94e7f0f95ef63fb5bd69bd", 0xb9}, {&(0x7f0000007d40)="b1633c0deeb5d0472799cd0b779f1ad4fb0a5309ab71b951eb4edc5e2b61b9ed597c57a978a270600a98fa8fc2d35fd24ef3e58e088afdc1b07f46154cf7c2b78c2c621acd9860e58ddb24f8e503f9b2577fbf7978d1d90be96238e2b024e29835329f016d72e63a8630f7621765ce52e94b19ec", 0x74}, {&(0x7f0000007dc0)="0a916876718f425fcb0e8f480a841ddfbb5eaeb1833f5fa2ccaeb61e6f2df3d8db06bf8ebdf3187533fafb8215bb568d52c32058cb9def8b215d89e17dcc7925843bb17bc051afd8c79d90e206f063a1da45a74c9ec5901a132118c1d67a910058cc1c08940c55f2061bec0563466112d5d8", 0x72}, {&(0x7f0000007e40)="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", 0xfa}], 0x5, &(0x7f0000006140)=ANY=[@ANYBLOB="18000000000000001cd57b83bf7b511ad1b80100000001000000b790055f0732b980bdcdd3389043a4060000000000001b55743401cacd77a11256f9f9766ef45fa6010a3bdd2a31830fce58bace0138cfb92c8c63cd26585316135f13a0574f7e1c6df3f48f482e111d0339324276b6ee0aa36b037fa6d4d5604719f39fb5bfcf4905fb9f908324048161f1f56afa40f272cd1efc3bd969e459ac4e2527e51dad40cd6d33a94510e9a3d00fb08ec114aeb0ff18401d110ff097e7d1d060eaa2e72c53a59ed1721c0d052e2b43b4b1a14ba4091c48cae877a089cd900b6887bfbff315bb587690b842fe186b1484f42252ce70d8c74135220e91fe25bb6927c1a47f55ed569f3e1a42ec2376b0747650dda961d5d3d4a88d19b44c15f5c0827b8f02f9369fcdb25aaacb", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r12, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r0, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r15, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r23, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r24, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x24040090}}, {{&(0x7f0000008400)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000009540)=[{&(0x7f0000008480)="118694ff947318a9ee370d45942ad956e6af7290444fbc7ab3f1001d51547976b98b73bcdcca78bd2e93436c4b1812473e774bdb937e63cb9a32dba7b31fe111ec7176a49ae31c0290031e8b3374c5f317f32165a9ccba551035f2c5dd5d6d96a01c8b804e94c6c0a514a5be02a3a65a7329dc71e4dd46d2ca00aa00abcfdc0c3436db43fa816555dbc83e7a62e32b7b1e0df60d25259ccc8c9c2dbf57b3bf00ffb55d", 0xa3}, {&(0x7f0000008540)="202a6d22cd15d584aeae99b37043173c6bfac5c6214cf06f3a449cdae62f44bdad252f463af7bb4d1931659ff1c431d5768ab7179e417963fb9b656f693a5987b9bfdbd901bb119d1f695e42fafb5704dd2b38dbac94669787e33990be59f83a4f023edcf1e47618d562590014d9507c1d3e1535ec1f3cec5a892f35e2942a8ba57e1dd922b7de5fae362af7a12f8c2486681bfdc8038a9652d07b548862d2f6f71c873a3017f7d18c83387fb4632c034e73dcba989ce1670f4d9eae0bce8a69d404e094dc67b7b4c66c66242f22cbbdf245cf3df4a8788336759f4756e2ae6813cc4e652c2dc7e4c19ee440539471e1cfefeffea56b60961f3bd0721d2fccd608c83d74465bc3f5388abca579fd4d10de24aadaf59655ea8285a0a962d7db51212c8f05f313866cdacb4ab29a56ada647d1bbd0b3d75fbea66caa63c6061558bc0864162f63768a4f95317091e86c40e68e81b3ee3ae19768316575706ec02e085dd5835c160524f09cd99ff0e177de8c296179545c91af03ed5365c0150d8593694bdf568e5dbdd5afed1d06db1deeb8eb4960307be1b9cf50da0031c45b22e6569d27dcd34e1b41d08a421ff046f2402be31210f98e00759e09cc7f49d644ac3cabea002dc6bbbef5fd103f501e47e388f6e0b12ebc312a7ff7dae00cec437a21d812aa40c08acb75ecea22e9601134aeff290de04da9f5ad0f5be4ed778de460f20e8ad8e0258a362ef2d8c7fb872b19fd2f3a23b8308bd9a74825c79114d183394f98f739fb44f5ae7c1b47b52223ec2c3a059ee263780f0126f694d812fc229af94a15ba8a3ac47aa170eb2cb12549a492d58716368a4e4a8e005fc98c6a53b14fc8c4be8f4501e4d6b887aa2b28cd24f6cf4d853f688c77bfce359f2403bb709b7010aaaae0698c4529f1eb84104a80e920d0f258583a1f56585f63d6ae94c54a1c421900222d92d4fc88c9384d1e3149bc436bd6ff7a61499b172a96f57e08d4f787116463cf9e1da6cfc5f483c27297093c1a2145ed2bdfa56adcc3c501611998908e6b685477980a6d3073ac961fa11535d7125b46c9744df5df582dbbe82f4104b2d92d2e2dc4be11f1c601c11a8baa6b3fef7328e539c16230cf8c0badda97f2d77e9cf2fed66af1858459a0c12ef7117a7070e43d045ec9b0c8ef71525968cd83a4015d4f55ba6876a801eb203f64aaacdac50b3797d03dc1357a63beebed997c4fc146f3c48b4d70a7b1142da7e51daf4114e5ab47ae94d8cc58b8d3170a56b9600bb33f11157bdbe6f6bf8b2373d0ce50178bcd524b3f4aa88c7561af4d965a41ed89abb13fc4a049652f47b485fdd9813288a30343bcb7d19623a28d60c1675b72d81a522a12f6b7c057f75c3188361551b6345f33b455595ecea1c82666f9efd1320b31bbc25994af0f61929579495dbb4255a85d668f17c949befc75645018e3e689e96593e7208411cef928cf05287736faac0d95559d03adab1bb97027fee57039258adfa9135883ec5f08542302fe93cddfe2563500a632b26c6fb89c45e55dce60eebfdae476ee9b5f3ab576795110b8344332f55a09f4f9aa1744d03611f4fd0f5ecbc5ed4e7793f80ea6c90729688e198c1d61412beb64c69e1f19f437c361c68e63b6fcb885f3d8b6edb9326f0dd936a6ee8ed70891b8d6382e5a0915912c3d3e78f170f13107373664cce48f3817ab1008510a9d167e0f78448c1e83175f5b8beee8e09fbb1a71dbe501d0e8ea97e887c937f97330f3686cdb33177fdefb5e511e3865a4deb8c19818bf522af08963911e990728755a7dd4ae796c8b4e175131269edd35fb937a3fe03a5093442f2501902add9e8ce6c580393468f71654a17cd38ad85f7544b557d4926deb1050df8f66a36f14ba9c84f097bf8c56752cd74c13c9e296c5d3c8a146caf78caed21b55ce1708a05f1edc63ec8ea4a77ed4774534f9f71c2480a3165734435ff62ebe728e9b51f9fc512beae62566f9273ff80b12a2bbe1ed195bd7198f8ad874c8c0903e2ca56e0adf5ba53991ba8fbf62939e1c978fc329d01d80e50820144c28fd7affad6bd3b01cf5d0b3b38d2b83fda3f981b0031fcbbd642d2885a1042e5e0def64ba419972d325c894460d8328fbad6463af2eb8ff5466383b2c4aa24c31479d9bc7c4da068e0557f35aacdcd5a1c9283168fe366f29df7aad30abf52e525b0ee8f83500d889f33ca73cad29ad975a37f747ea3496e8174eb64f861e2b768855d12de8a7003d6b1c51c363a0f6410ba2e8fb527e764c31fd3af57bcfab1e893ddb2a932b55c1482cf25faedd159737af3dee9b196e5846ac691506daa12be20c9bd1fca4c83f39143e5519b4991cb89d1ba2f4d4e55c5a7f0ee824f9c607214f411248ed94598913745f74e7a6d4b67f6b23a3940a691a101cb2e3cb48f4a5c69476a184bcd4e862511c1915115b87c83fecfce266a82b9b9abaddf6b99d89c05ac2dcee83915c83471cbc6566f5ed70a66072c78c4b891281c6b51a5c5ea19cf33ab8bf71d58c95934441dbcf896fc08e0cb9f5e23ec56a24d7eae5f380b2d17a3b0615b57fa22307ccb3c2548add49f7c897f01b4964d93e772597c1961e236ff1ba1b27fe55f281cece651a8ac7a78e37d2c660c1d684dba3ee53295ad22a3bf023c7d9f321df77a680cae6fd4fb0dcb9608fbfcf01286642f3f20d3a99c7d91b8d28ff34d880e1d10c1d2f43a7b696743171e97d960ea6ab41290479ac1f418bb7ae71694cf13f9a3f99269e53351923a90dc05cfbd0de6beb23b9c22a859773c302b2e6cd069fc05961a0bf3ad9bf8b93c50460eb4097947c1043d0ce166491e5f934919311c100b40535b2a99c6315a4ca08df697512d1f4312d26852b9d4ccf7ca7e8f0c3a33c56757df0fdbe3482fde2908f56729eb3588d04cc046e6dfadf6912d70f781db2026de2977a33827d5bd1d219adcaa9a8d1e221617a410439620ac34012f91f4bfb4d936ffb81d39eaab96f8e36901ecc701a966227636e5312d8546619c9de887fc3f5f28204923a2693f1b86ecf0f229baf1c420c37a811ba3818b30ba865146ca1896772900fc44f231016828fcf68f03793b89979e37e1b32af549ae8d10a4b386b0f1b951a930a2dfba26787e6bb6aeab8b0dc2f60ad4ffecf0988ed308d4901bbf1726873338d325bf993361ca69bfb8d83ccd5abbb305b043e752996b049152dfc6ee9b95865cb558e11a1fae5fa7b0c5702eaaeab03392492f3ddd586b89b06e4a6f04f40e0d9e6c1f80d7586079e6923b79134d507bab679f1a78eb8c96ae98c95435b6adc46113d73aa32fba9bc0b6c58d4f65f6cde632f9df4e6660d37d70ed220a27700ee554d5293bfd56558ac340beebc8c5e1b8ffc24c9d560a840a30622b66f2749f5171ad03ea1c86d7344a8c4fd40994fdc1393dc769cc3e5f03af98c03004002d5827d8c49208aab2e38a88be282c9e077216609045d9dcd0bc25a5f27b0b5457cf386d9758bc05e75923e3957853e5be3211d82de2e678651e80760b8e8c03c0eced032ef30247f573c54b94c83005b8c67337a740728c3cb3f3439634adc2d1ad89b4c1cd5d8da4d8fd91baf757007d635a27f513c397f21195f8c1c0d58b9c3951f62d249c0aa725e30693d64134393c0b3c898cdcfe8a75ea4fd761dc89a0c1ba1ba883c0ac90c3ab7a2f9d4416310d8a54e34aae700de6fb408bbea9b2974bdcda5afc6db973b5e5d3a6f6c71f3a7d64610f6cf154be348a9f24071b96eeeaae56ec27d2eeeac0da77590b04e915bcd2692eef1a4364f0abedc477a9b6a22f6c15d861f6da50651b43b903c624bc6169476ac951bd73e9d34295f802c83500658f728d1ceb8646de9bdce7bc38e9ae20d50b7fd0b8453681542cc92acd14d9c90ec9201c916a293f43f09caa3f955c1da7997039cc509beafe5c811d3236ca3eac349dcf8605783d8ae1de1660fdd6f73831e262010465dab6e36437f9d02799c29650ca72437d1f58fecc95c5688cd1e0c925f93c26564d099dd70f1459e8d53e9e43e68cb752b2a7aa9324e239f4b90cb50398520f609a9a15b513a0cb89fea47491aa5620c35719eb766edd54d06b1ab7a367f779d20044e89b04d4bda68cf53867dd7b4b506003b2715797425689c8cfc7b4699d739a2ebd0fa8d95a39840d0c5e99a6142bc6293d3a6e67ace5193b544ec2da47c1423d4dd073d51a01368283582fb738373a923e5ebde48124c2b21cc88790f5b6a90a02cf6c4b8a5b4b24cf1806b7ec8fc2d128265e188e4e079068855e6ba519c1ff84049cc797cd24e239921afcafeb24a916792f14b45d2adef21e7a90322b2e3005fd327e2026348e80fde8496a3849703f3749e63bf20fc7b57cc93f80c3f31ae78ad056b2559ff0e3cb6dfeafeb91d1c1cdecc7eadd207c7f10c02340aaa648dc4856068fc3b98aca02814d3afcf245817cc5911425b1e3b838299c67b6cc28dac0f20b16a6c6983f43be0f1d5ce8942b29cf3e10b8d30682055657f1259047758efb0858fc62225c9074453d48fdb9cc0125d9e6e48e7757bacea79d0f6c41e7e6fcf5b379bf6427c1f836802da4f93414efbe428e6245ff84bcddebc2d66e9959f5acdf3f8bbed9efb76261c03e020517b872085cc46a03d96b7ba8987d8748d1ed0037ea63eff25f6fbed0b05d7b034a395928f1048fab8b4f9ee6832dca912931541529dc9d5c0f09f0e710c70b17b2262c2c410b4ffe61a62d8feb9c76395a045ebff4f0c8f7c21e3368b007e3b781ba75b2dffd29612d97ce8a9ad9ee52df0013822979551a4ea6c5ab7e258826f2a943dd76fbfb6d3c1395a305b3e5b9b976a5b8bde8484482aa6d09871fcae570866a97e8978fbe287fd4556a66767b2a4e2916e5e7714a78920dbaa3dd3ada9a7134fd01f92735f4e273b5c7d3137eefb1e163d588f308f210ef6ae41957b856b441d62e8467079fb9621880728d8438f99d54df839aadccf0082e5bc688efe0e147f359085b869e5944e5fbfefb11adf112ab8c69d0c8ad8f7f977ec1bab1a74989e55115b82eb529a78022fdab4b772f535a6f8397e7db3287d611156c295f0dc288e7dbe965e39fffb7901ac9ca740db0776775ca58051992bd42bcc4ac976282acc785595e563db34d2abf9bf854594232d7b226bb8c2a47a9bf43f06771f3b470acf86b6384ded8f0c9ae3b755970d97a11f58cf955757dcdfc75e32cf3afa297c875adc51db23b210ca1f755c5d748b027e98b5b2c172fcff73c284457e228f6375266821aabd2b860fcb98330a0f0f8b68cc329c7322d70a81d54803470c60715c9313b228e88a6370cf418aa51daf89cb6c3bab59ed6cef1249db753770a5637e605aff424f13dce933c17eae93a34658b54ebfad3868de3a5bb0c3777d7f72a03b18b87451c7f03b0a991aead0d03a4c54d8a16fbb9d5251c31b03b3571d1cca5731c94a92e4aac8faeb61efbecf21496b5d92d55f1cff5921fe182e6061d4bd189a3c370c23b3ada059689a7aa7d00a777a8ce051e739aa5b2e621ad724347576db20b1b00cad779d51998d608de4d4a546a7d85c5f9b7c4b5edab759d1a8551f3ee9f8305595a62bf3d21526fa788816d7fd3411aeb38e05989003b8a28ad514aa8f2faa1ca99d58f07447b74427f9c6ca528e04750ddf913ac3c848e77e4a1f9ff4d5cd523349dc71df6ea3983ff5e0dc3e59f980fc601f264af04e9c3902c74ec3a99f43125679fb7f57c8de04da9307e3201ef950af97dd6891fe64", 0x1000}], 0x2, &(0x7f0000009580), 0x0, 0x12}}], 0x7, 0x80) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) 2.613170885s ago: executing program 4 (id=534): r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 2.490036452s ago: executing program 3 (id=538): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4d, 0xfffffffffffffffc, &(0x7f0000000ec0)="c2e2051d443380ab729fa91b98dab6175ed0b3c1caaf5e16991dfa0b7a3c9cce79a00b28a87634a8a872231bf1b3239898ed8c53771c874c07670c30cbf2f56b9548dc28ef8bd823f9046b48f9"}) 2.382169129s ago: executing program 3 (id=541): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"fbffffff", 0x0, 0x6, 0x2, 0x625b, 0x3, "00000000001000", '\x00', "20030400", "0e18ad33", ['\x00', "e8ffffff7fffffff00", "0cca26cfa310d15fe000", "c93a400800"]}) 2.36786499s ago: executing program 0 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0xfffffffffffffff7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) shutdown(r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1004000, &(0x7f00000004c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@nobh}, {@oldalloc}]}, 0x3, 0x4c5, &(0x7f0000000e00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r5, 0x8, 0x0, 0x8000) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250300000008000300", @ANYRES32=r7, @ANYBLOB="b23bf7ed20b1f40a334181b092e54ca87fb607ae6c7498c4de1eaf92d2efefaf28fa20eda538c98e6348f6e14256a58b7900cc327b081c060c0337c28e63ecb8eb8e96b03bcfd8cc25e647bf385ac900c911774d39e965e7c739ab4e3c795b8606c6fb42367c5904f869174198c26c16d5bedbbcb32896bef081"], 0x1c}}, 0x4004) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r10, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r12 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000580)=ANY=[@ANYRES16=r15, @ANYRESDEC=r16, @ANYRES8=r15, @ANYRESOCT=r14, @ANYBLOB="b1e6563f8cf9b3df43707e277e3870d9bbeca08c08000000000000001c9f6ff697c8ea4da0047f1529a0c7", @ANYRESHEX=r15, @ANYRESDEC=r16, @ANYRES8=r13, @ANYRES64, @ANYRES8=r15], 0x0, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001300)={0x0, 0x5165, 0x8000000000000000}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000001700)={{r1}, r16, 0x10, @unused=[0x0, 0x200, 0x8000000000000000, 0x6], @devid=r17}) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000a00000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r18}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2.304302084s ago: executing program 3 (id=543): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") syz_mount_image$fuse(0x0, &(0x7f0000002740)='./file0\x00', 0x9, 0x0, 0xb6, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="9538", 0x2) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x804800, 0x0, 0x3, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x86ffffff) 2.233448638s ago: executing program 2 (id=545): socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x4, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000040)={0x67446698, 0x1, 0x4, 0x4, 0x1, "4256bcbd0102910c93b724a985bf3b7c5040f363884fed5b7431281ea08caf5695f0c955"}, 0x34) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0x5) sendto$inet6(r1, &(0x7f0000000180)="dab82b15904573f1224c48efd7d30a4b6709261945e229648fda71f884c704f3bbf464ee0dafa7", 0x27, 0x40011, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x1c) fsopen(&(0x7f0000000200)='coda\x00', 0x1) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000240)=""/142, &(0x7f0000000300)=0x8e) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000340)={0x7c, "9810cfdf758781d5f0625f78eefcde087f7c6b65c5e3b354a22f95694c87a592bb6a2c0a4fe795f0612a8955d1d43b824460da55c09e92acc137c4441af4d915ed975112344a003e5ce81e53b51c17f56b331a7450117f955b9d5305b7e1e8ff0c3af2e273eaed8285ae6846c490665fcb44ff3ba9b75bbd7871691db9209e9f"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2800a}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x1405, 0x0, 0x70bd2d, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14000000) getpeername$packet(r1, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x1, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x2a, &(0x7f0000000740)=@raw=[@alu={0x7, 0x0, 0x7, 0x6, 0x6, 0x30, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x60}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd7b6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000008c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', r3, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r1, 0x4, 0x0, &(0x7f0000000a00)=[{0x4, 0x1, 0xe, 0xc}, {0x5, 0x4, 0xe, 0x7}, {0x2, 0x3, 0x6, 0x2}, {0x0, 0x5, 0x8, 0x9}], 0x10, 0x0, @void, @value}, 0x94) mknodat(r1, &(0x7f0000000b00)='./file0\x00', 0x1, 0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), r1) gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r5, r3, 0x25, 0x0, @void}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000d40)={&(0x7f0000000bc0)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)="ac", 0x1}], 0x1, &(0x7f0000000c80)=[@authinfo={0x18, 0x84, 0x6, {0x9}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @init={0x18, 0x84, 0x0, {0x8, 0x40, 0x0, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0xb}}, @init={0x18, 0x84, 0x0, {0xf53, 0x16, 0x9, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x7ff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0xb0, 0x4000001}, 0x20000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000d80)) openat$incfs(r1, &(0x7f0000000dc0)='.pending_reads\x00', 0x10000, 0x4a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'sit0\x00', &(0x7f0000000e40)={'gre0\x00', r3, 0x40, 0x10, 0x7, 0x9, {{0x8, 0x4, 0x1, 0x10, 0x20, 0x66, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0xb, 0xbe, [@rand_addr=0x64010100, @remote]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000fc0)={'syztnl1\x00', &(0x7f0000000f40)={'syztnl2\x00', r3, 0x2f, 0x8b, 0x9, 0x400, 0x11, @remote, @local, 0x20, 0x10, 0xcb, 0x2}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001800)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001080)={0x740, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x70c435e0}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r3}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x88d}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2c7, 0x7, 0x12, 0x5}, {0xde, 0xff, 0xb7, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbe77}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x740}}, 0x240048a0) 2.044204699s ago: executing program 2 (id=547): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x9a) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x2, 0x2000000, &(0x7f0000000ec0)="c2e2"}) 1.945101585s ago: executing program 2 (id=548): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@noflush_merge}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@noextent_cache}, {@extent_cache}, {@fastboot}]}, 0x1, 0x5500, &(0x7f0000003040)="$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") 1.909005627s ago: executing program 4 (id=549): openat$autofs(0xffffffffffffff9c, &(0x7f0000011b80), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f00000003c0), &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x1ce4, 0x0, 0x0, 0x0, 0x0) 1.817449552s ago: executing program 32 (id=549): openat$autofs(0xffffffffffffff9c, &(0x7f0000011b80), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f00000003c0), &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x1ce4, 0x0, 0x0, 0x0, 0x0) 1.453025694s ago: executing program 0 (id=551): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"fbffffff", 0x0, 0x6, 0x2, 0x625b, 0x3, "00000000001000", '\x00', "05030400", "0e18ad33", ['\x00', "e8ffffff7fffffff00", "0cca26cfa310d15fe000", "c93a400800"]}) 1.435551185s ago: executing program 3 (id=552): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async, rerun: 32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (rerun: 32) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r1 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) (rerun: 32) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, 0x0, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x80100) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) unlinkat(r0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.309817843s ago: executing program 1 (id=553): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtfilter={0x14c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x11c, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x3}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x200}, @TCA_FLOWER_KEY_ENC_OPTS={0xf8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x7, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9111}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xb}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xbe}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xef}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xf2af}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}]}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @dev={0xac, 0x14, 0x14, 0xb}}]}}]}, 0x14c}}, 0x4004080) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8c, 0x1, 0x6, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7, 0x7, 0x1, 0x4817}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x2e0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xca}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0xcc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x2e0}}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4d, 0xfffffffffffffffc, &(0x7f0000000ec0)="c2e2051d443380ab729fa91b98dab6175ed0b3c1caaf5e16991dfa0b7a3c9cce79a00b28a87634a8a872231bf1b3239898ed8c53771c874c07670c30cbf2f56b9548dc28ef8bd823f9046b48f9"}) 1.200319219s ago: executing program 0 (id=554): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"fbffffff", 0x0, 0x6, 0x2, 0x625b, 0x3, "00000000001000", '\x00', "20030400", "0e18ad33", ['\x00', "e8ffffff7fffffff00", "0cca26cfa310d15fe000", "c93a400800"]}) 1.143233492s ago: executing program 0 (id=555): r0 = syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") sync() mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000abaff9), 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x23, 0x3, 0x32, 0x0, 0x0, 0x0, 0x0}) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 1.028210699s ago: executing program 1 (id=556): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x2, 0x1000000, &(0x7f0000000ec0)="c2e2"}) 948.303964ms ago: executing program 3 (id=557): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x7, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40046629, &(0x7f0000000080)={@id={0x2, 0x0, @auto="64f5929be14c5ceae4ca9fd65937bf8e"}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x7, @empty, 0x5}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x494, @loopback, 0x6}], 0xb8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000001fff0000000002000000200001801400040000000000000000000000000000000001060001000a00000f"], 0x34}}, 0x0) 947.133914ms ago: executing program 2 (id=558): syz_io_uring_setup(0xa99, &(0x7f0000000100)={0x0, 0x11c5, 0x2000, 0x2, 0x70}, &(0x7f0000000180), &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x3, 0x611f, &(0x7f00000154c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000040)=""/52, 0x34) getdents64(r1, 0xfffffffffffffffe, 0x29) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000003c0)) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @random="017f0a432aef", @local, @empty, @mcast2}}}}, 0x0) 746.516676ms ago: executing program 1 (id=559): r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 744.803416ms ago: executing program 0 (id=560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xe, 0x10000000, 0x8, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) brk(0xc00000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x2, 0x2000000, &(0x7f0000000ec0)="c2e2"}) 741.676546ms ago: executing program 3 (id=561): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002740)='./file0\x00', 0x9, 0x0, 0xb6, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="9538", 0x2) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x804800, 0x0, 0x3, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x8cffffff) 668.206981ms ago: executing program 1 (id=562): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@local, @dev, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@newchain={0xc4, 0x64, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfffa}, {0xfff1, 0x2}, {0x8, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x8000}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x5}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x3}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0x7}}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_TO={0x8, 0x2, 0x34}]}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xc7}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "2b3277903bcb89c1f56d4488a2c15a5d"}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xe87}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}]}}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @TCA_RATE={0x6, 0x5, {0x40, 0x73}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x4c005) splice(r0, &(0x7f00000002c0)=0xc45, r0, &(0x7f0000000300)=0x9, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x39}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf80b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40890}, 0x4000010) recvmmsg(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/57, 0x39}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/194, 0xc2}], 0x6, &(0x7f00000008c0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000900)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/213, 0xd5}], 0x2, &(0x7f0000001ac0)=""/72, 0x48}, 0x7}, {{&(0x7f0000001b40)=@nl=@proc, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001bc0)=""/162, 0xa2}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x2, &(0x7f0000002cc0)=""/151, 0x97}, 0xf}, {{&(0x7f0000002d80)=@nfc_llcp, 0x80, &(0x7f0000003000)=[{&(0x7f0000002e00)=""/252, 0xfc}, {&(0x7f0000002f00)=""/241, 0xf1}], 0x2, &(0x7f0000003040)=""/57, 0x39}, 0x7fffffff}, {{&(0x7f0000003080)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003100), 0x0, &(0x7f0000003140)=""/21, 0x15}}, {{&(0x7f0000003180)=@qipcrtr, 0x80, &(0x7f00000042c0)=[{&(0x7f0000003200)=""/75, 0x4b}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/50, 0x32}], 0x3, &(0x7f0000004300)=""/249, 0xf9}, 0x1}, {{&(0x7f0000004400)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000006980)=[{&(0x7f0000004480)=""/155, 0x9b}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/153, 0x99}, {&(0x7f0000005600)=""/123, 0x7b}, {&(0x7f0000005680)=""/212, 0xd4}, {&(0x7f0000005780)=""/97, 0x61}, {&(0x7f0000005800)=""/52, 0x34}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/44, 0x2c}, {&(0x7f0000006880)=""/248, 0xf8}], 0xa, &(0x7f0000006a40)=""/4096, 0x1000}, 0x9}], 0x7, 0x2002, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000007c00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x925, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0xfb, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0xd02c, 0x1, 0x1, {0x22, 0xf0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x80, 0x9}}}}}]}}]}}, &(0x7f0000007d00)={0xa, &(0x7f0000007c40)={0xa, 0x6, 0x201, 0xb, 0x1, 0x6, 0x8, 0x1}, 0x10, &(0x7f0000007c80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x91, 0x2, 0x0, 0x5, 0x5}]}, 0x1, [{0x4, &(0x7f0000007cc0)=@lang_id={0x4, 0x3, 0xc01}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000007d80)={&(0x7f0000007d40)='skb_copy_datagram_iovec\x00', r0, 0x0, 0x2}, 0x18) fcntl$setpipe(r2, 0x407, 0x8) mount$bind(&(0x7f0000007dc0)='./file0\x00', &(0x7f0000007e00)='./file0\x00', &(0x7f0000007e40), 0x1000000, 0x0) listen(r0, 0x8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000007e80), 0x400200, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000007f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000008040)={&(0x7f0000007ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008000)={&(0x7f0000007f80)={0x78, r3, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x3b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4f}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) mq_getsetattr(r0, &(0x7f0000008080)={0x0, 0x1, 0x800, 0x8000}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000080c0)={0x43, 0x9, 0x1, {0x0, 0x6, 0x8, 0x2, 0x1, 0x8, 0x81, 0xfffffffffffffff7, 0x1}}, 0x43) r5 = syz_open_dev$sndpcmc(&(0x7f0000008140), 0x3, 0x301202) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000008180)={0xffff7fff, [[0x2, 0x5ea1, 0x4, 0xffffffc0, 0x2, 0x0, 0x7, 0x1ff], [0x4, 0x8d, 0x3, 0x3, 0x7, 0x3, 0x3, 0x101], [0x3, 0x7, 0x200000, 0xa, 0x6, 0x80000000, 0x401]], '\x00', [{0xc, 0x5, 0x1, 0x0, 0x1}, {0xfffffff8, 0x100, 0x1, 0x1}, {0x6, 0x1ff, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x8000, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x1, 0xfffffffe, 0x1, 0x0, 0x1}, {0x80, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x80, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x998, 0x3, 0x1, 0x1}, {0x6, 0x100}, {0x200, 0x64, 0x1, 0x0, 0x1, 0x1}], '\x00', 0xfffffff9}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000008500)={&(0x7f0000008400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000084c0)={&(0x7f0000008440)={0x6c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x1, 0x32]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_MASTER={0x14, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008540), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000008740)={&(0x7f0000008580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000008700)={&(0x7f00000085c0)={0x114, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0xec, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xba7e}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffe}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3490}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4af4}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000009980)={0x6, 0xb, &(0x7f0000008780)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x3b}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @ldst={0x3, 0x3, 0x2, 0x2, 0xa, 0x1, 0x4}, @call={0x85, 0x0, 0x0, 0x8b}, @map_fd={0x18, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffd}], &(0x7f0000008800)='GPL\x00', 0x3ff, 0x1000, &(0x7f0000008840)=""/4096, 0x41100, 0xc, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000009840)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000009880)={0x3, 0x1, 0xffffff01, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000098c0)=[r0], &(0x7f0000009900)=[{0x0, 0x1, 0x8}, {0x1, 0x3, 0xd, 0x9}, {0x0, 0x3, 0xf, 0x1}, {0x0, 0x1, 0xa, 0x8}, {0x2, 0x5, 0x9}, {0x4, 0x2, 0x0, 0x8}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000009c40)={r7, 0x0, 0xce, 0x0, &(0x7f0000009a40)="8e7be7e8fd123f36068069f38b5e0e9ea2f2953cfa658cc9dc8f7d977e7d72fa28728188c4a2645cbb68bf14db843106bdf32fbe769960cec28f9d626ffdf30423e86f155df11c3becc0ef335367fa934fc363409890508916d05f252107304bac4650df066fa25afd3884f8e1b3cdc587fc3a98ff42df49bfe7f5f6c04c038dd11d1a26989f9c8fec9ae2da3240f74d92b12a8e77dba87043ba3c44df1484a7f80d67db2dde717fddc0a0a6d37ca37bd01ae88c28f568f2aadc3f8bfb6b93ad206f33afd1800e466810e04fb71e", 0x0, 0x0, 0x0, 0xfc, 0x0, &(0x7f0000009b40)="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", 0x0, 0x2, 0x0, 0x5dab4a94}, 0x50) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000009d80)={&(0x7f0000009cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000009d40)={&(0x7f0000009d00)={0x34, r3, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x68}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008044}, 0x4004004) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000009e00)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x0, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f0000009dc0), {[{{@uncond, 0x0, 0x168, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x6, 0xa, 0x1, 0x1, 'syz1\x00', 0xe}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x21}, [0xff000000, 0x0, 0xff, 0xff], 0x4e24, 0x4e23, 0x4e22, 0x4e20, 0x2, 0xf, 0x1, 0x5, 0xb767}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x2, 0x1}}, @common=@addrtype={{0x30}, {0x400, 0x317, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0x0, 0xff000000, 'veth1_to_bond\x00', 'ip6erspan0\x00', {}, {0xff}, 0x88, 0x2, 0x60}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r8 = getpgid(0x0) kcmp(r8, 0x0, 0x6, r0, r7) 440.310954ms ago: executing program 0 (id=563): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4d, 0xfffffffffffffffc, &(0x7f0000000ec0)="c2e2051d443380ab729fa91b98dab6175ed0b3c1caaf5e16991dfa0b7a3c9cce79a00b28a87634a8a872231bf1b3239898ed8c53771c874c07670c30cbf2f56b9548dc28ef8bd823f9046b48f9"}) 184.757849ms ago: executing program 2 (id=564): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"fbffffff", 0x0, 0x6, 0x2, 0x625b, 0x3, "00000000001000", '\x00', "05030400", "0e18ad33", ['\x00', "e8ffffff7fffffff00", "0cca26cfa310d15fe000", "c93a400800"]}) 70.733966ms ago: executing program 2 (id=565): pselect6(0x7dcc7adf4cc4be85, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) ftruncate(0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000000)="dd4e2f1099", 0x5) (async) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791097000000000007000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) (async) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'team0\x00', 0x200}) 12.3466ms ago: executing program 1 (id=566): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"fbffffff", 0x0, 0x6, 0x2, 0x625b, 0x3, "00000000001000", '\x00', "20030400", "0e18ad33", ['\x00', "e8ffffff7fffffff00", "0cca26cfa310d15fe000", "c93a400800"]}) 0s ago: executing program 1 (id=567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f0000000140)=[@increfs={0x40046304, 0xfffffffd}, @free_buffer={0x40086303, r2}, @exit_looper], 0x0, 0x0, 0x0}) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r4 = socket(0x2, 0x2, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x6) ioctl$NBD_DISCONNECT(r5, 0xab08) r6 = dup3(r1, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4d, 0xfffffffffffffffc, &(0x7f0000000ec0)="c2e2051d443380ab729fa91b98dab6175ed0b3c1caaf5e16991dfa0b7a3c9cce79a00b28a87634a8a872231bf1b3239898ed8c53771c874c07670c30cbf2f56b9548dc28ef8bd823f9046b48f9"}) kernel console output (not intermixed with test programs): e for 'umask' [ 50.177663][ T4254] SQUASHFS error: Unable to read metadata cache entry [28b] [ 50.179394][ T4254] SQUASHFS error: Unable to read inode 0x11f [ 50.229722][ T4033] XFS (loop4): Unmounting Filesystem [ 50.247090][ T4213] loop0: detected capacity change from 0 to 4096 [ 50.302383][ T4213] ntfs3: Bad value for 'umask' [ 50.441849][ T4227] loop3: detected capacity change from 0 to 40427 [ 50.463888][ T4213] loop0: detected capacity change from 0 to 4096 [ 50.497206][ T4213] ntfs3: Bad value for 'umask' [ 50.503854][ T4227] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 50.509347][ T4227] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.520527][ T4227] F2FS-fs (loop3): invalid crc value [ 50.596440][ T4227] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 50.619335][ T4227] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 50.631615][ T4213] loop0: detected capacity change from 0 to 4096 [ 50.633772][ T4213] ntfs3: Bad value for 'umask' [ 50.738829][ T4213] loop0: detected capacity change from 0 to 4096 [ 50.743584][ T4227] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.754771][ T4227] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.770509][ T4260] loop1: detected capacity change from 0 to 32768 [ 50.824868][ T4213] ntfs3: Bad value for 'umask' [ 50.873205][ T4271] netlink: 80 bytes leftover after parsing attributes in process `syz.4.40'. [ 50.891657][ T4271] netlink: 56 bytes leftover after parsing attributes in process `syz.4.40'. [ 50.896223][ T4260] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 50.918379][ T4213] loop0: detected capacity change from 0 to 4096 [ 50.965181][ T4213] ntfs3: Bad value for 'umask' [ 51.059121][ T4213] loop0: detected capacity change from 0 to 4096 [ 51.126995][ T4213] ntfs3: Bad value for 'umask' [ 51.232830][ T4029] ocfs2: Unmounting device (7,1) on (node local) [ 51.246782][ T4281] loop3: detected capacity change from 0 to 2048 [ 51.869434][ T4281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.171214][ T4290] loop0: detected capacity change from 0 to 256 [ 52.219278][ T4290] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 52.223134][ T4270] loop2: detected capacity change from 0 to 32768 [ 52.233607][ T4290] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 52.241390][ T4290] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 52.243504][ T4290] UDF-fs: Scanning with blocksize 512 failed [ 52.247437][ T4290] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 52.260762][ T4290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.305459][ T4291] loop4: detected capacity change from 0 to 4096 [ 52.344909][ T4270] (syz.2.52,4270,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 52.347398][ T4270] (syz.2.52,4270,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 52.358782][ T4291] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 52.431405][ T4291] ntfs3: loop4: failed to convert "c46c" to maccenteuro [ 52.639139][ T4296] loop4: detected capacity change from 0 to 128 [ 52.665937][ T4292] loop1: detected capacity change from 0 to 32768 [ 52.737758][ T4292] JBD2: Ignoring recovery information on journal [ 52.787538][ T4292] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 52.802410][ T4292] FAULT_INJECTION: forcing a failure. [ 52.802410][ T4292] name failslab, interval 1, probability 0, space 0, times 0 [ 52.809679][ T4292] CPU: 0 PID: 4292 Comm: syz.1.44 Not tainted 5.15.178-syzkaller #0 [ 52.811867][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 52.814485][ T4292] Call trace: [ 52.815378][ T4292] dump_backtrace+0x0/0x530 [ 52.816495][ T4292] show_stack+0x2c/0x3c [ 52.817530][ T4292] dump_stack_lvl+0x108/0x170 [ 52.818738][ T4292] dump_stack+0x1c/0x58 [ 52.819806][ T4292] should_fail+0x3b8/0x514 [ 52.820929][ T4292] __should_failslab+0xbc/0x110 [ 52.822196][ T4292] should_failslab+0x10/0x28 [ 52.823400][ T4292] slab_pre_alloc_hook+0x64/0xe8 [ 52.824680][ T4292] __kmalloc+0xc0/0x4c8 [ 52.825705][ T4292] tomoyo_realpath_from_path+0xd0/0x508 [ 52.827118][ T4292] tomoyo_path2_perm+0x284/0x894 [ 52.828418][ T4292] tomoyo_path_rename+0x134/0x180 [ 52.829658][ T4292] security_path_rename+0x1cc/0x274 [ 52.831007][ T4292] do_renameat2+0x75c/0x10c0 [ 52.832171][ T4292] __arm64_sys_renameat2+0xe0/0xfc [ 52.833473][ T4292] invoke_syscall+0x98/0x2b8 [ 52.834647][ T4292] el0_svc_common+0x138/0x258 [ 52.835813][ T4292] do_el0_svc+0x58/0x14c [ 52.836877][ T4292] el0_svc+0x7c/0x1f0 [ 52.837938][ T4292] el0t_64_sync_handler+0x84/0xe4 [ 52.839161][ T4292] el0t_64_sync+0x1a0/0x1a4 [ 52.866568][ T4292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 52.879128][ T4296] attempt to access beyond end of device [ 52.879128][ T4296] loop4: rw=2049, want=801, limit=128 [ 52.957119][ T4296] attempt to access beyond end of device [ 52.957119][ T4296] loop4: rw=524288, want=178, limit=128 [ 52.995682][ T4029] ocfs2: Unmounting device (7,1) on (node local) [ 53.005202][ T4288] dccp_close: ABORT with 140 bytes unread [ 53.134000][ T4308] loop3: detected capacity change from 0 to 2048 [ 53.186005][ T4308] UDF-fs: bad mount option "partition=0 000000000000000512" or missing value [ 53.222134][ T4317] loop1: detected capacity change from 0 to 8 [ 53.264164][ T4317] unable to read id index table [ 53.539729][ T4306] loop2: detected capacity change from 0 to 40427 [ 53.593003][ T4306] F2FS-fs (loop2): invalid crc value [ 53.629382][ T4306] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.666710][ T4315] loop0: detected capacity change from 0 to 32768 [ 53.681364][ T4306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.750455][ T4315] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 53.863982][ T4321] loop1: detected capacity change from 0 to 32768 [ 53.878146][ T4321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.58 (4321) [ 53.895415][ T4321] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 53.901456][ T4321] BTRFS info (device loop1): enabling auto defrag [ 53.903288][ T4321] BTRFS info (device loop1): doing ref verification [ 53.909650][ T4321] BTRFS info (device loop1): use no compression [ 53.914098][ T4321] BTRFS info (device loop1): force clearing of disk cache [ 53.931916][ T4321] BTRFS info (device loop1): max_inline at 4096 [ 53.933574][ T4321] BTRFS info (device loop1): disabling free space tree [ 53.945520][ T4321] BTRFS info (device loop1): has skinny extents [ 53.953249][ T4024] ocfs2: Unmounting device (7,0) on (node local) [ 53.965952][ T4025] attempt to access beyond end of device [ 53.965952][ T4025] loop2: rw=2049, want=45120, limit=40427 [ 54.222771][ T4335] loop4: detected capacity change from 0 to 32768 [ 54.239348][ T4321] BTRFS info (device loop1): enabling ssd optimizations [ 54.246788][ T4321] BTRFS info (device loop1): clearing free space tree [ 54.248593][ T4321] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 54.251128][ T4321] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 54.304822][ T4335] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 54.336370][ T4335] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 54.401784][ T4368] loop0: detected capacity change from 0 to 512 [ 54.403777][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 54.439674][ T4368] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.496122][ T4368] EXT4-fs (loop0): failed to initialize system zone (-117) [ 54.498216][ T4368] EXT4-fs (loop0): mount failed [ 54.764369][ T4326] loop3: detected capacity change from 0 to 32768 [ 54.811099][ T4378] Zero length message leads to an empty skb [ 54.818504][ T4365] loop2: detected capacity change from 0 to 32768 [ 54.859874][ T4326] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 54.862993][ T4326] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 54.913036][ T4326] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 54.913036][ T4326] inode = 3 2074 [ 54.913036][ T4326] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 54.927258][ T4365] JBD2: Ignoring recovery information on journal [ 54.951052][ T4326] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 54.953732][ T4326] gfs2: fsid=syz:syz.0: File system withdrawn [ 54.966341][ T4326] CPU: 1 PID: 4326 Comm: syz.3.59 Not tainted 5.15.178-syzkaller #0 [ 54.968220][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 54.970883][ T4326] Call trace: [ 54.971688][ T4326] dump_backtrace+0x0/0x530 [ 54.972903][ T4326] show_stack+0x2c/0x3c [ 54.974057][ T4326] dump_stack_lvl+0x108/0x170 [ 54.975252][ T4326] dump_stack+0x1c/0x58 [ 54.976369][ T4326] gfs2_withdraw+0xeac/0x12a4 [ 54.977599][ T4326] gfs2_consist_inode_i+0xcc/0xe8 [ 54.979030][ T4326] gfs2_inode_refresh+0x964/0xdf4 [ 54.980419][ T4326] inode_go_lock+0xfc/0x390 [ 54.981537][ T4326] do_promote+0x680/0xa80 [ 54.983068][ T4326] finish_xmote+0x478/0xbb4 [ 54.985068][ T4326] do_xmote+0x6e4/0x1054 [ 54.986251][ T4326] run_queue+0x3f8/0x6bc [ 54.987403][ T4326] gfs2_glock_nq+0xa60/0x144c [ 54.988586][ T4326] init_journal+0x268/0x1f6c [ 54.989845][ T4326] init_inodes+0xe0/0x2d8 [ 54.990981][ T4326] gfs2_fill_super+0x1640/0x2010 [ 54.992292][ T4326] get_tree_bdev+0x360/0x54c [ 54.993457][ T4326] gfs2_get_tree+0x54/0x1b4 [ 54.994656][ T4326] vfs_get_tree+0x90/0x274 [ 54.995870][ T4326] do_new_mount+0x278/0x8fc [ 54.997024][ T4326] path_mount+0x594/0x101c [ 54.998144][ T4326] __arm64_sys_mount+0x510/0x5e0 [ 54.999433][ T4326] invoke_syscall+0x98/0x2b8 [ 55.000668][ T4326] el0_svc_common+0x138/0x258 [ 55.001867][ T4326] do_el0_svc+0x58/0x14c [ 55.003002][ T4326] el0_svc+0x7c/0x1f0 [ 55.003974][ T4326] el0t_64_sync_handler+0x84/0xe4 [ 55.005303][ T4326] el0t_64_sync+0x1a0/0x1a4 [ 55.006531][ C1] vkms_vblank_simulate: vblank timer overrun [ 55.029919][ T4326] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 55.068886][ T4365] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 55.087930][ T4365] FAULT_INJECTION: forcing a failure. [ 55.087930][ T4365] name failslab, interval 1, probability 0, space 0, times 0 [ 55.110375][ T4365] CPU: 1 PID: 4365 Comm: syz.2.63 Not tainted 5.15.178-syzkaller #0 [ 55.112527][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 55.115151][ T4365] Call trace: [ 55.116020][ T4365] dump_backtrace+0x0/0x530 [ 55.117171][ T4365] show_stack+0x2c/0x3c [ 55.118216][ T4365] dump_stack_lvl+0x108/0x170 [ 55.119482][ T4365] dump_stack+0x1c/0x58 [ 55.120598][ T4365] should_fail+0x3b8/0x514 [ 55.121784][ T4365] __should_failslab+0xbc/0x110 [ 55.123074][ T4365] should_failslab+0x10/0x28 [ 55.124361][ T4365] slab_pre_alloc_hook+0x64/0xe8 [ 55.125666][ T4365] __kmalloc+0xc0/0x4c8 [ 55.127892][ T4365] tomoyo_realpath_from_path+0xd0/0x508 [ 55.129331][ T4365] tomoyo_path2_perm+0x2bc/0x894 [ 55.130555][ T4365] tomoyo_path_rename+0x134/0x180 [ 55.131857][ T4365] security_path_rename+0x1cc/0x274 [ 55.133198][ T4365] do_renameat2+0x75c/0x10c0 [ 55.134474][ T4365] __arm64_sys_renameat2+0xe0/0xfc [ 55.135846][ T4365] invoke_syscall+0x98/0x2b8 [ 55.137032][ T4365] el0_svc_common+0x138/0x258 [ 55.138238][ T4365] do_el0_svc+0x58/0x14c [ 55.139322][ T4365] el0_svc+0x7c/0x1f0 [ 55.140411][ T4365] el0t_64_sync_handler+0x84/0xe4 [ 55.141718][ T4365] el0t_64_sync+0x1a0/0x1a4 [ 55.142970][ C1] vkms_vblank_simulate: vblank timer overrun [ 55.166917][ T4391] loop0: detected capacity change from 0 to 64 [ 55.189703][ T4391] MINIX-fs: bad superblock [ 55.214177][ T4365] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.232042][ T4394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.71'. [ 55.281574][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 55.362940][ T4399] fuse: Bad value for 'fd' [ 55.569457][ T4416] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 55.573262][ T4416] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 55.605660][ T4420] loop3: detected capacity change from 0 to 1024 [ 55.651950][ T4420] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.655306][ T4420] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.665400][ T4423] netlink: 232 bytes leftover after parsing attributes in process `syz.1.77'. [ 55.683021][ T4416] loop0: detected capacity change from 0 to 1024 [ 55.710847][ T4420] JBD2: no valid journal superblock found [ 55.712385][ T4420] EXT4-fs (loop3): error loading journal [ 55.726601][ T4423] device macvtap1 entered promiscuous mode [ 55.728764][ T4423] device vlan0 entered promiscuous mode [ 55.768230][ T4416] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.772349][ T4416] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.790463][ T4416] JBD2: no valid journal superblock found [ 55.791676][ T4423] team0: Device macvtap1 failed to register rx_handler [ 55.801997][ T4416] EXT4-fs (loop0): error loading journal [ 55.809284][ T4423] device vlan0 left promiscuous mode [ 55.897882][ T26] audit: type=1326 audit(55.870:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaae68d28 code=0x7ffc0000 [ 55.907691][ T26] audit: type=1326 audit(55.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffaae68d28 code=0x7ffc0000 [ 55.907742][ T26] audit: type=1326 audit(55.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm=CC242B093968F12823FB16212585F8 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac082d28 code=0x7ffc0000 [ 55.908959][ T26] audit: type=1326 audit(55.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm=CC242B093968F12823FB16212585F8 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffac082d28 code=0x7ffc0000 [ 55.974153][ T26] audit: type=1326 audit(55.940:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaae68d28 code=0x7ffc0000 [ 55.980827][ T26] audit: type=1326 audit(55.940:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm=CC242B093968F12823FB16212585F8 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac082d28 code=0x7ffc0000 [ 56.011371][ T26] audit: type=1326 audit(55.940:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm=CC242B093968F12823FB16212585F8 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac082d28 code=0x7ffc0000 [ 56.122424][ T4441] loop0: detected capacity change from 0 to 1024 [ 56.214785][ T4441] EXT4-fs (loop0): Ignoring removed bh option [ 56.222724][ T4419] loop2: detected capacity change from 0 to 32768 [ 56.299463][ T4441] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,nodelalloc,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x0000000000000003,discard,nombcache,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_lock,,errors=continue. Quota mode: none. [ 56.322199][ T4419] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 56.452133][ T4434] loop4: detected capacity change from 0 to 32768 [ 56.494412][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 56.613816][ T4434] JBD2: Ignoring recovery information on journal [ 56.718564][ T4434] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 56.782194][ T4434] FAULT_INJECTION: forcing a failure. [ 56.782194][ T4434] name failslab, interval 1, probability 0, space 0, times 0 [ 56.803366][ T4434] CPU: 0 PID: 4434 Comm: syz.4.83 Not tainted 5.15.178-syzkaller #0 [ 56.805536][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 56.808334][ T4434] Call trace: [ 56.809221][ T4434] dump_backtrace+0x0/0x530 [ 56.810503][ T4434] show_stack+0x2c/0x3c [ 56.811591][ T4434] dump_stack_lvl+0x108/0x170 [ 56.812825][ T4434] dump_stack+0x1c/0x58 [ 56.813947][ T4434] should_fail+0x3b8/0x514 [ 56.815123][ T4434] __should_failslab+0xbc/0x110 [ 56.816478][ T4434] should_failslab+0x10/0x28 [ 56.817722][ T4434] slab_pre_alloc_hook+0x64/0xe8 [ 56.819075][ T4434] __kmalloc+0xc0/0x4c8 [ 56.820174][ T4434] tomoyo_encode+0x270/0x4b0 [ 56.821346][ T4434] tomoyo_realpath_from_path+0x4b4/0x508 [ 56.822807][ T4434] tomoyo_path2_perm+0x2bc/0x894 [ 56.824139][ T4434] tomoyo_path_rename+0x134/0x180 [ 56.825450][ T4434] security_path_rename+0x1cc/0x274 [ 56.826691][ T4434] do_renameat2+0x75c/0x10c0 [ 56.827923][ T4434] __arm64_sys_renameat2+0xe0/0xfc [ 56.829348][ T4434] invoke_syscall+0x98/0x2b8 [ 56.830614][ T4434] el0_svc_common+0x138/0x258 [ 56.831819][ T4434] do_el0_svc+0x58/0x14c [ 56.833005][ T4434] el0_svc+0x7c/0x1f0 [ 56.834039][ T4434] el0t_64_sync_handler+0x84/0xe4 [ 56.835334][ T4434] el0t_64_sync+0x1a0/0x1a4 [ 56.914926][ T4434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.971141][ T148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.982128][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 57.083568][ T4457] loop2: detected capacity change from 0 to 8192 [ 57.092027][ T4450] loop1: detected capacity change from 0 to 32768 [ 57.098785][ T148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.137891][ T4450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.89 (4450) [ 57.193051][ T4450] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 57.196198][ T4450] BTRFS error (device loop1): unrecognized mount option 'obj_user=)#' [ 57.211842][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.229257][ T148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.237349][ T4450] BTRFS error (device loop1): open_ctree failed [ 57.249463][ T4467] loop0: detected capacity change from 0 to 256 [ 57.305487][ T4467] FAT-fs (loop0): invalid media value (0x00) [ 57.307438][ T4467] FAT-fs (loop0): Can't find a valid FAT filesystem [ 57.365916][ T148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.510577][ T4474] binder: 4473:4474 tried to acquire reference to desc 0, got 1 instead [ 57.514321][ T4474] binder: 4473:4474 ioctl c0306201 0 returned -14 [ 57.531869][ T4015] binder: release 4473:4474 transaction 16 out, still active [ 57.534229][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 57.539238][ T4476] loop0: detected capacity change from 0 to 512 [ 57.549923][ T4459] chnl_net:caif_netlink_parms(): no params data found [ 57.583013][ T4015] binder: send failed reply for transaction 16, target dead [ 57.614596][ T4476] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 57.617245][ T4476] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.628682][ T4450] loop1: detected capacity change from 0 to 128 [ 57.664873][ T4476] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.681639][ T4450] FAT-fs (loop1): Directory bread(block 3236) failed [ 57.683681][ T4450] FAT-fs (loop1): Directory bread(block 3237) failed [ 57.688601][ T4476] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 57.725321][ T4450] FAT-fs (loop1): Directory bread(block 3238) failed [ 57.734843][ T4450] FAT-fs (loop1): Directory bread(block 3239) failed [ 57.742764][ T4476] Quota error (device loop0): write_blk: dquota write failed [ 57.751707][ T4450] FAT-fs (loop1): Directory bread(block 3240) failed [ 57.753633][ T4450] FAT-fs (loop1): Directory bread(block 3241) failed [ 57.756677][ T4476] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 57.765112][ T4450] FAT-fs (loop1): Directory bread(block 3242) failed [ 57.766928][ T4450] FAT-fs (loop1): Directory bread(block 3243) failed [ 57.781273][ T4476] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.96: Failed to acquire dquot type 0 [ 57.806596][ T4476] EXT4-fs (loop0): 1 truncate cleaned up [ 57.826408][ T4450] FAT-fs (loop1): Directory bread(block 3236) failed [ 57.828358][ T4450] FAT-fs (loop1): Directory bread(block 3237) failed [ 57.841672][ T4465] loop4: detected capacity change from 0 to 32768 [ 57.845683][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.849391][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.852166][ T4459] device bridge_slave_0 entered promiscuous mode [ 57.852873][ T4476] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 57.856630][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.864978][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.867695][ T4459] device bridge_slave_1 entered promiscuous mode [ 57.976191][ T4465] JBD2: Ignoring recovery information on journal [ 57.998573][ T4459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.024209][ T4459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.124797][ T4482] loop2: detected capacity change from 0 to 32768 [ 58.138674][ T4488] binder: 4487:4488 tried to acquire reference to desc 0, got 1 instead [ 58.202882][ T4465] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 58.276759][ T4482] XFS (loop2): Mounting V5 Filesystem [ 58.283700][ T4459] team0: Port device team_slave_0 added [ 58.296576][ T4459] team0: Port device team_slave_1 added [ 58.360055][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 58.430312][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.432448][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.479127][ T4459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.482195][ T4482] XFS (loop2): Ending clean mount [ 58.523483][ T4482] XFS (loop2): Quotacheck needed: Please wait. [ 58.548829][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.550699][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.567754][ T4459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.588978][ T26] audit: type=1326 audit(58.560:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.0.102" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac082d28 code=0x0 [ 58.613831][ T4482] XFS (loop2): Quotacheck: Done. [ 58.697337][ T4459] device hsr_slave_0 entered promiscuous mode [ 58.745229][ T4459] device hsr_slave_1 entered promiscuous mode [ 58.776826][ T4459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.778916][ T4459] Cannot create hsr debugfs directory [ 58.830695][ T4025] XFS (loop2): Unmounting Filesystem [ 58.938802][ T4242] binder: release 4487:4488 transaction 21 out, still active [ 58.944892][ T4242] binder: undelivered TRANSACTION_COMPLETE [ 58.961056][ T4411] binder: send failed reply for transaction 21, target dead [ 58.984793][ T4411] Bluetooth: hci4: command 0x0409 tx timeout [ 59.104286][ T4538] binder: 4537:4538 tried to acquire reference to desc 0, got 1 instead [ 59.118005][ T4538] binder: 4537:4538 ioctl c0306201 0 returned -14 [ 59.126901][ T4244] binder: release 4537:4538 transaction 26 out, still active [ 59.129124][ T4244] binder: undelivered TRANSACTION_COMPLETE [ 59.159993][ T4244] binder: send failed reply for transaction 26, target dead [ 59.463587][ T4535] loop1: detected capacity change from 0 to 32768 [ 59.507082][ T4535] JBD2: Ignoring recovery information on journal [ 59.598668][ T4535] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 59.628889][ T4535] FAULT_INJECTION: forcing a failure. [ 59.628889][ T4535] name failslab, interval 1, probability 0, space 0, times 0 [ 59.632474][ T4535] CPU: 0 PID: 4535 Comm: syz.1.106 Not tainted 5.15.178-syzkaller #0 [ 59.634561][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 59.637320][ T4535] Call trace: [ 59.638182][ T4535] dump_backtrace+0x0/0x530 [ 59.639408][ T4535] show_stack+0x2c/0x3c [ 59.640487][ T4535] dump_stack_lvl+0x108/0x170 [ 59.641825][ T4535] dump_stack+0x1c/0x58 [ 59.642937][ T4535] should_fail+0x3b8/0x514 [ 59.644137][ T4535] __should_failslab+0xbc/0x110 [ 59.645391][ T4535] should_failslab+0x10/0x28 [ 59.646495][ T4535] slab_pre_alloc_hook+0x64/0xe8 [ 59.647776][ T4535] kmem_cache_alloc+0x98/0x45c [ 59.649023][ T4535] jbd2__journal_start+0x158/0x7b4 [ 59.650378][ T4535] jbd2_journal_start+0x3c/0x4c [ 59.651625][ T4535] ocfs2_start_trans+0x468/0x804 [ 59.652938][ T4535] ocfs2_rename+0x184c/0x34f0 [ 59.654271][ T4535] vfs_rename+0xac8/0xe04 [ 59.655315][ T4535] do_renameat2+0xa00/0x10c0 [ 59.656535][ T4535] __arm64_sys_renameat2+0xe0/0xfc [ 59.657873][ T4535] invoke_syscall+0x98/0x2b8 [ 59.659039][ T4535] el0_svc_common+0x138/0x258 [ 59.660283][ T4535] do_el0_svc+0x58/0x14c [ 59.661399][ T4535] el0_svc+0x7c/0x1f0 [ 59.662440][ T4535] el0t_64_sync_handler+0x84/0xe4 [ 59.663767][ T4535] el0t_64_sync+0x1a0/0x1a4 [ 59.704678][ T4535] (syz.1.106,4535,1):ocfs2_start_trans:359 ERROR: status = -12 [ 59.707018][ T4535] (syz.1.106,4535,1):ocfs2_rename:1492 ERROR: status = -12 [ 59.709522][ T4535] (syz.1.106,4535,1):ocfs2_rename:1687 ERROR: status = -12 [ 59.770330][ T4029] ocfs2: Unmounting device (7,1) on (node local) [ 59.934476][ T4575] loop2: detected capacity change from 0 to 8192 [ 60.013551][ T4575] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 60.017825][ T4575] REISERFS (device loop2): using ordered data mode [ 60.026450][ T4575] reiserfs: using flush barriers [ 60.092145][ T4575] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.111512][ T4587] binder: BINDER_SET_CONTEXT_MGR already set [ 60.113224][ T4587] binder: 4583:4587 ioctl 4018620d 400000000040 returned -16 [ 60.117397][ T4585] binder: BINDER_SET_CONTEXT_MGR already set [ 60.119120][ T4585] binder: 4584:4585 ioctl 4018620d 400000000040 returned -16 [ 60.139181][ T4575] REISERFS (device loop2): checking transaction log (loop2) [ 60.153531][ T4585] binder: tried to use weak ref as strong ref [ 60.155384][ T4585] binder: 4584:4585 Acquire 1 refcount change on invalid ref 0 ret -22 [ 60.157911][ T4585] binder: 4584:4585 got transaction to invalid handle, 1 [ 60.159764][ T4585] binder: 4584:4585 transaction failed 29201/-22, size 0-0 line 2917 [ 60.162445][ T4585] binder: 4584:4585 ioctl c0306201 400000001040 returned -14 [ 60.167638][ T4587] binder: tried to use weak ref as strong ref [ 60.169366][ T4587] binder: 4583:4587 Acquire 1 refcount change on invalid ref 0 ret -22 [ 60.181399][ T4575] REISERFS (device loop2): Using r5 hash to sort names [ 60.185399][ T4575] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 60.189222][ T4575] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 60.218381][ T4587] binder: 4583:4587 got transaction to invalid handle, 1 [ 60.220238][ T4587] binder: 4583:4587 transaction failed 29201/-22, size 0-0 line 2917 [ 60.223659][ T4558] loop0: detected capacity change from 0 to 32768 [ 60.228210][ T148] device hsr_slave_0 left promiscuous mode [ 60.283730][ T148] device hsr_slave_1 left promiscuous mode [ 60.297355][ T4558] JBD2: Ignoring recovery information on journal [ 60.439711][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.442355][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.455804][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.457867][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.461563][ T148] device bridge_slave_1 left promiscuous mode [ 60.475263][ T4558] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 60.485948][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.554132][ T148] device bridge_slave_0 left promiscuous mode [ 60.565639][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.593118][ T4024] ocfs2: Unmounting device (7,0) on (node local) [ 60.725263][ T148] device veth1_macvtap left promiscuous mode [ 60.727325][ T148] device veth0_macvtap left promiscuous mode [ 60.728837][ T148] device veth1_vlan left promiscuous mode [ 60.730514][ T148] device veth0_vlan left promiscuous mode [ 60.853459][ T4625] loop0: detected capacity change from 0 to 128 [ 61.055238][ T4412] Bluetooth: hci4: command 0x041b tx timeout [ 61.272247][ T4617] loop4: detected capacity change from 0 to 32768 [ 61.344263][ T4617] JBD2: Ignoring recovery information on journal [ 61.394407][ T4617] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 61.398501][ T4621] loop2: detected capacity change from 0 to 32768 [ 61.423672][ T4617] FAULT_INJECTION: forcing a failure. [ 61.423672][ T4617] name failslab, interval 1, probability 0, space 0, times 0 [ 61.433549][ T4617] CPU: 0 PID: 4617 Comm: syz.4.127 Not tainted 5.15.178-syzkaller #0 [ 61.435589][ T4617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 61.438205][ T4617] Call trace: [ 61.439045][ T4617] dump_backtrace+0x0/0x530 [ 61.440166][ T4617] show_stack+0x2c/0x3c [ 61.441200][ T4617] dump_stack_lvl+0x108/0x170 [ 61.442391][ T4617] dump_stack+0x1c/0x58 [ 61.443423][ T4617] should_fail+0x3b8/0x514 [ 61.444588][ T4617] __should_failslab+0xbc/0x110 [ 61.445887][ T4617] should_failslab+0x10/0x28 [ 61.447384][ T4617] slab_pre_alloc_hook+0x64/0xe8 [ 61.448714][ T4617] kmem_cache_alloc_trace+0x9c/0x47c [ 61.450194][ T4617] ocfs2_dentry_attach_lock+0x3b4/0xd90 [ 61.451713][ T4617] ocfs2_dentry_move+0x144/0x268 [ 61.453022][ T4617] ocfs2_rename+0x2b9c/0x34f0 [ 61.454262][ T4617] vfs_rename+0xac8/0xe04 [ 61.455389][ T4617] do_renameat2+0xa00/0x10c0 [ 61.456693][ T4617] __arm64_sys_renameat2+0xe0/0xfc [ 61.458107][ T4617] invoke_syscall+0x98/0x2b8 [ 61.459330][ T4617] el0_svc_common+0x138/0x258 [ 61.460582][ T4617] do_el0_svc+0x58/0x14c [ 61.461722][ T4617] el0_svc+0x7c/0x1f0 [ 61.462850][ T4617] el0t_64_sync_handler+0x84/0xe4 [ 61.464175][ T4617] el0t_64_sync+0x1a0/0x1a4 [ 61.468680][ T148] team0 (unregistering): Port device team_slave_1 removed [ 61.491744][ T4617] (syz.4.127,4617,0):ocfs2_dentry_attach_lock:282 ERROR: status = -12 [ 61.494467][ T4617] (syz.4.127,4617,0):ocfs2_dentry_move:461 ERROR: status = -12 [ 61.499158][ T148] team0 (unregistering): Port device team_slave_0 removed [ 61.515799][ T4621] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 61.520660][ T4621] JBD2: Ignoring recovery information on journal [ 61.559900][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.567711][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 61.579357][ T4621] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 61.613166][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.748146][ T4643] binder: 4642:4643 tried to acquire reference to desc 0, got 1 instead [ 61.793739][ T148] bond0 (unregistering): Released all slaves [ 61.991538][ T4621] device netdevsim0 entered promiscuous mode [ 62.001784][ T4621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 62.012955][ T4459] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.042125][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 62.061239][ T4459] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.097040][ T4459] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.131983][ T4459] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.147346][ T4648] binder: 4645:4648 tried to acquire reference to desc 0, got 1 instead [ 62.422880][ T4459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.461295][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.464415][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.476872][ T4459] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.477987][ T4654] loop1: detected capacity change from 0 to 8192 [ 62.501391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.504414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.507707][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.509687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.516597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.531958][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.535385][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.541412][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.543417][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.565370][ T4244] binder: release 4642:4643 transaction 37 out, still active [ 62.567416][ T4244] binder: undelivered TRANSACTION_COMPLETE [ 62.575935][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.583350][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.583883][ T4244] binder: send failed reply for transaction 37, target dead [ 62.610881][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.623639][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.642466][ T4459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.660027][ T4459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.673759][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.676791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.679600][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.687053][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.697558][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.706777][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.717780][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.735064][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.954478][ T4015] binder: release 4645:4648 transaction 42 out, still active [ 62.956900][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 62.986026][ T4015] binder: send failed reply for transaction 42, target dead [ 63.127319][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.129503][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.135012][ T4015] Bluetooth: hci4: command 0x040f tx timeout [ 63.173653][ T4459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.213251][ T4691] loop1: detected capacity change from 0 to 4096 [ 63.232991][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.242064][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.248001][ T4691] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 63.299386][ T4691] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 63.302312][ T4691] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 63.308949][ T4691] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 63.319470][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.322074][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.325417][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.329175][ T4691] ntfs: volume version 3.1. [ 63.336047][ T1046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.350959][ T4459] device veth0_vlan entered promiscuous mode [ 63.372463][ T4662] loop2: detected capacity change from 0 to 32768 [ 63.382860][ T4459] device veth1_vlan entered promiscuous mode [ 63.438529][ T4029] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 63.457350][ T4662] JBD2: Ignoring recovery information on journal [ 63.513801][ T4459] device veth0_macvtap entered promiscuous mode [ 63.534571][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.537407][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.566637][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.595009][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.597648][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.608255][ T4459] device veth1_macvtap entered promiscuous mode [ 63.629085][ T4697] loop0: detected capacity change from 0 to 512 [ 63.655804][ T4662] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 63.682797][ T4697] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 63.683313][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.685303][ T4697] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.700957][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.703583][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.709846][ T4700] binder: 4699:4700 tried to acquire reference to desc 0, got 1 instead [ 63.729238][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.731807][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.746852][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.760501][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.763296][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.768004][ T4697] Quota error (device loop0): do_check_range: Getting dqdh_next_free 15 out of range 0-5 [ 63.771057][ T4697] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 63.775052][ T4686] loop4: detected capacity change from 0 to 32768 [ 63.784284][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.789671][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.792362][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.795153][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.798189][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.801186][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.804207][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.804420][ T4697] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.145: Failed to acquire dquot type 1 [ 63.807021][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.813090][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.817815][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 63.818431][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.832290][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.850504][ T4686] JBD2: Ignoring recovery information on journal [ 63.860193][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.863075][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 63.889960][ T4697] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 63.896339][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.915516][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.921617][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.953158][ T4459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.955766][ T4459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.958038][ T4459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.960312][ T4459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.960936][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.016372][ T4697] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #12: comm syz.0.145: corrupted inode contents [ 64.043536][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.050268][ T4697] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #12: comm syz.0.145: mark_inode_dirty error [ 64.060232][ T4686] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 64.070846][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.078529][ T4697] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #12: comm syz.0.145: corrupted inode contents [ 64.086427][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.088734][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.093301][ T4686] FAULT_INJECTION: forcing a failure. [ 64.093301][ T4686] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.104701][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.109961][ T4697] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.145: mark_inode_dirty error [ 64.119797][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.125572][ T4686] CPU: 1 PID: 4686 Comm: syz.4.141 Not tainted 5.15.178-syzkaller #0 [ 64.127678][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.130233][ T4686] Call trace: [ 64.131049][ T4686] dump_backtrace+0x0/0x530 [ 64.132225][ T4686] show_stack+0x2c/0x3c [ 64.132330][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.133361][ T4686] dump_stack_lvl+0x108/0x170 [ 64.133397][ T4686] dump_stack+0x1c/0x58 [ 64.133406][ T4686] should_fail+0x3b8/0x514 [ 64.133419][ T4686] should_fail_usercopy+0x20/0x30 [ 64.133429][ T4686] simple_read_from_buffer+0xd8/0x26c [ 64.141742][ T4686] proc_fail_nth_read+0x1a0/0x248 [ 64.143099][ T4686] vfs_read+0x278/0xb18 [ 64.144157][ T4686] ksys_read+0x15c/0x26c [ 64.144948][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.145236][ T4686] __arm64_sys_read+0x7c/0x90 [ 64.148296][ T4686] invoke_syscall+0x98/0x2b8 [ 64.149497][ T4686] el0_svc_common+0x138/0x258 [ 64.150674][ T4686] do_el0_svc+0x58/0x14c [ 64.151833][ T4686] el0_svc+0x7c/0x1f0 [ 64.152868][ T4686] el0t_64_sync_handler+0x84/0xe4 [ 64.154081][ T4686] el0t_64_sync+0x1a0/0x1a4 [ 64.159799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.167527][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.171548][ T4697] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #12: comm syz.0.145: corrupted inode contents [ 64.197222][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.199141][ T4697] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 64.203650][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.210542][ T4697] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #12: comm syz.0.145: corrupted inode contents [ 64.220829][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.228619][ T4697] EXT4-fs error (device loop0): ext4_truncate:4272: inode #12: comm syz.0.145: mark_inode_dirty error [ 64.242126][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.248458][ T4697] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 64.264857][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.273662][ T4697] EXT4-fs (loop0): 1 truncate cleaned up [ 64.281259][ T4697] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000200,noblock_validity,mblk_io_submit,nodiscard,noinit_itable,abort,nouid32,errors=remount-ro,resgid=0x000000000000ee002. Quota mode: writeback. [ 64.302404][ T4713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 64.307473][ T4697] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #16: comm syz.0.145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 64.311590][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 64.325776][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.325936][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 64.329400][ T4697] process 'syz.0.145' launched './file2' with NULL argv: empty string added [ 64.350467][ T4697] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #16: comm syz.0.145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 64.365013][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.391956][ T4697] Quota error (device loop0): do_check_range: Getting dqdh_next_free 15 out of range 0-5 [ 64.400991][ T4697] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 64.409439][ T4697] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.145: Failed to acquire dquot type 1 [ 64.425587][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 64.473075][ T4722] binder: 4721:4722 tried to acquire reference to desc 0, got 1 instead [ 64.513807][ T4015] binder: release 4699:4700 transaction 47 out, still active [ 64.523047][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 64.525281][ T4015] binder: send failed reply for transaction 47, target dead [ 64.816317][ T4743] mmap: syz.1.158 (4743) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 65.191391][ T4758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'. [ 65.225167][ T4015] Bluetooth: hci4: command 0x0419 tx timeout [ 65.288685][ T4244] binder: release 4721:4722 transaction 52 out, still active [ 65.290739][ T4244] binder: undelivered TRANSACTION_COMPLETE [ 65.312812][ T4244] binder: send failed reply for transaction 52, target dead [ 65.388410][ T4764] binder: 4763:4764 tried to acquire reference to desc 0, got 1 instead [ 65.402181][ T4764] binder: 4763:4764 got transaction to context manager from process owning it [ 65.412142][ T4764] binder: 4763:4764 transaction failed 29201/-22, size 0-0 line 2908 [ 65.421734][ T4244] binder: release 4763:4764 transaction 57 out, still active [ 65.423744][ T4244] binder: undelivered TRANSACTION_COMPLETE [ 65.426911][ T4244] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.454887][ T4244] binder: send failed reply for transaction 57, target dead [ 65.543302][ T4745] loop2: detected capacity change from 0 to 32768 [ 65.604381][ T4770] loop1: detected capacity change from 0 to 512 [ 65.633404][ T4745] JBD2: Ignoring recovery information on journal [ 65.732000][ T4770] EXT4-fs (loop1): Ignoring removed orlov option [ 65.733699][ T4770] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.747096][ T4770] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.774348][ T4756] loop4: detected capacity change from 0 to 32768 [ 65.788126][ T4770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 65.790378][ T4770] System zones: 1-12 [ 65.822502][ T4770] EXT4-fs (loop1): 1 truncate cleaned up [ 65.824266][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,debug,nogrpid,errors=remount-ro,. Quota mode: none. [ 65.834835][ T4745] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 65.839411][ T4779] loop3: detected capacity change from 0 to 2048 [ 65.850693][ T4770] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.168: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 65.885360][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 65.888350][ T4756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.162'. [ 65.889334][ T4770] EXT4-fs (loop1): Remounting filesystem read-only [ 65.892290][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 65.910175][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 65.937623][ T4779] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.008084][ T4779] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 66.013343][ T4780] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.020558][ T4779] Remounting filesystem read-only [ 66.284533][ T4789] binder: 4788:4789 tried to acquire reference to desc 0, got 1 instead [ 66.287958][ T4789] binder: 4788:4789 got transaction to context manager from process owning it [ 66.290350][ T4789] binder: 4788:4789 transaction failed 29201/-22, size 0-0 line 2908 [ 66.322615][ T25] binder: release 4788:4789 transaction 63 out, still active [ 66.324839][ T25] binder: undelivered TRANSACTION_COMPLETE [ 66.326331][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.332888][ T4792] binder: BINDER_SET_CONTEXT_MGR already set [ 66.334378][ T4792] binder: 4791:4792 ioctl 4018620d 400000000040 returned -16 [ 66.351216][ T25] binder: send failed reply for transaction 63, target dead [ 66.355802][ T4792] binder: tried to use weak ref as strong ref [ 66.357317][ T4792] binder: 4791:4792 Acquire 1 refcount change on invalid ref 0 ret -22 [ 66.372535][ T4792] binder: 4791:4792 got transaction to invalid handle, 1 [ 66.386759][ T4792] binder: 4791:4792 transaction failed 29201/-22, size 0-0 line 2917 [ 66.455849][ T4803] sctp: [Deprecated]: syz.0.174 (pid 4803) Use of int in max_burst socket option deprecated. [ 66.455849][ T4803] Use struct sctp_assoc_value instead [ 66.483970][ T4804] sctp: [Deprecated]: syz.0.174 (pid 4804) Use of int in max_burst socket option deprecated. [ 66.483970][ T4804] Use struct sctp_assoc_value instead [ 66.603824][ T4819] loop2: detected capacity change from 0 to 256 [ 66.805444][ T4828] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 66.807460][ T4828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.816144][ T4828] vhci_hcd vhci_hcd.0: Device attached [ 66.847418][ T4831] vhci_hcd: connection closed [ 66.863036][ T153] vhci_hcd: stop threads [ 66.866750][ T153] vhci_hcd: release socket [ 66.868030][ T153] vhci_hcd: disconnect device [ 67.061193][ T4841] binder: 4840:4841 tried to acquire reference to desc 0, got 1 instead [ 67.078291][ T4841] binder: 4840:4841 got transaction to context manager from process owning it [ 67.080692][ T4841] binder: 4840:4841 transaction failed 29201/-22, size 0-0 line 2908 [ 67.092919][ T4815] loop4: detected capacity change from 0 to 32768 [ 67.095316][ T4015] binder: release 4840:4841 transaction 72 out, still active [ 67.097667][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 67.099196][ T4015] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.123524][ T4015] binder: send failed reply for transaction 72, target dead [ 67.160034][ T4845] binder: 4844:4845 tried to acquire reference to desc 0, got 1 instead [ 67.192033][ T4815] JBD2: Ignoring recovery information on journal [ 67.307512][ T4848] loop1: detected capacity change from 0 to 512 [ 67.350296][ T4815] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 67.441161][ T4848] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #2: comm syz.1.193: corrupted xattr block 255 [ 67.458598][ T4848] EXT4-fs (loop1): Remounting filesystem read-only [ 67.470755][ T4848] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 67.482406][ T4848] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,errors=remount-ro,init_itable,auto_da_alloc,grpjquota=.nouid32,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 67.496608][ T4848] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #2: comm syz.1.193: corrupted xattr block 255 [ 67.509618][ T4848] EXT4-fs (loop1): Remounting filesystem read-only [ 67.538776][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 67.839644][ T4871] loop0: detected capacity change from 0 to 128 [ 67.855662][ T4873] binder: 4868:4873 tried to acquire reference to desc 0, got 1 instead [ 67.864413][ T4873] binder: 4868:4873 got transaction to context manager from process owning it [ 67.866930][ T4873] binder: 4868:4873 transaction failed 29201/-22, size 0-0 line 2908 [ 67.885320][ T4871] EXT4-fs (loop0): Ignoring removed nobh option [ 67.891874][ T4871] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 67.906893][ T13] binder: release 4868:4873 transaction 83 out, still active [ 67.908822][ T13] binder: undelivered TRANSACTION_COMPLETE [ 67.910342][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.924183][ T4871] netlink: 48 bytes leftover after parsing attributes in process `syz.0.201'. [ 67.947007][ T13] binder: send failed reply for transaction 83, target dead [ 67.974451][ T4412] binder: release 4844:4845 transaction 78 out, still active [ 67.984882][ T4412] binder: undelivered TRANSACTION_COMPLETE [ 68.016787][ T4412] binder: send failed reply for transaction 78, target dead [ 68.048541][ T4883] loop1: detected capacity change from 0 to 64 [ 68.334324][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 68.481977][ T4862] loop4: detected capacity change from 0 to 40427 [ 68.555437][ T4862] F2FS-fs (loop4): invalid crc value [ 68.579741][ T4862] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.634254][ T4862] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.696878][ T4912] F2FS-fs (loop4) : inject dquot initialize in f2fs_dquot_initialize of f2fs_convert_inline_inode+0x2b4/0x5ec [ 68.737964][ T4903] loop2: detected capacity change from 0 to 8192 [ 68.758885][ T4033] attempt to access beyond end of device [ 68.758885][ T4033] loop4: rw=2049, want=45128, limit=40427 [ 68.947612][ T4924] binder: 4920:4924 tried to acquire reference to desc 0, got 1 instead [ 69.046670][ T4926] netlink: 'syz.0.218': attribute type 9 has an invalid length. [ 69.053695][ T4926] netlink: 158068 bytes leftover after parsing attributes in process `syz.0.218'. [ 69.117175][ T4928] netlink: 'syz.0.218': attribute type 9 has an invalid length. [ 69.121048][ T4928] netlink: 159100 bytes leftover after parsing attributes in process `syz.0.218'. [ 69.191664][ T4878] loop3: detected capacity change from 0 to 32768 [ 69.218822][ T4931] loop2: detected capacity change from 0 to 128 [ 69.258361][ T4931] syz.2.221 uses obsolete (PF_INET,SOCK_PACKET) [ 69.273775][ T4934] binder: 4932:4934 tried to acquire reference to desc 0, got 1 instead [ 69.278245][ T4878] JBD2: Ignoring recovery information on journal [ 69.279190][ T4934] binder: 4932:4934 got transaction to context manager from process owning it [ 69.284794][ T4934] binder: 4932:4934 transaction failed 29201/-22, size 0-0 line 2908 [ 69.290801][ T4242] binder: release 4932:4934 transaction 94 out, still active [ 69.292866][ T4242] binder: undelivered TRANSACTION_COMPLETE [ 69.294463][ T4242] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.360363][ T4931] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 69.369902][ T4242] binder: send failed reply for transaction 94, target dead [ 69.380805][ T4931] FAT-fs (loop2): Filesystem has been set read-only [ 69.397576][ T4878] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 69.605735][ T4459] ocfs2: Unmounting device (7,3) on (node local) [ 69.619871][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.621888][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.757269][ T4015] binder: release 4920:4924 transaction 89 out, still active [ 69.759651][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 69.794070][ T4242] binder: send failed reply for transaction 89, target dead [ 69.922944][ T4943] capability: warning: `syz.1.226' uses deprecated v2 capabilities in a way that may be insecure [ 70.218310][ T4939] loop4: detected capacity change from 0 to 40427 [ 70.260774][ T4939] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 70.263014][ T4939] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.272899][ T4939] F2FS-fs (loop4): invalid crc value [ 70.293014][ T4939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.313033][ T4939] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 70.331899][ T4939] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.333861][ T4939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.372487][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 70.467580][ T4965] binder: 4963:4965 tried to acquire reference to desc 0, got 1 instead [ 70.489950][ T4941] loop2: detected capacity change from 0 to 32768 [ 70.491233][ T4965] binder: 4963:4965 got transaction to context manager from process owning it [ 70.494230][ T4965] binder: 4963:4965 transaction failed 29201/-22, size 0-0 line 2908 [ 70.517096][ T13] binder: release 4963:4965 transaction 100 out, still active [ 70.519126][ T13] binder: undelivered TRANSACTION_COMPLETE [ 70.520512][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.530004][ T13] binder: send failed reply for transaction 100, target dead [ 70.724608][ T4971] binder: 4970:4971 tried to acquire reference to desc 0, got 1 instead [ 70.743883][ T4971] binder: 4970:4971 got transaction to context manager from process owning it [ 70.746516][ T4971] binder: 4970:4971 transaction failed 29201/-22, size 0-0 line 2908 [ 70.754347][ T4015] binder: release 4970:4971 transaction 106 out, still active [ 70.757544][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 70.759034][ T4015] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.784758][ T4015] binder: send failed reply for transaction 106, target dead [ 70.806586][ T4954] loop3: detected capacity change from 0 to 32768 [ 70.880081][ T4979] syz.2.238 uses old SIOCAX25GETINFO [ 70.889151][ T4979] loop2: detected capacity change from 0 to 256 [ 70.990928][ T4979] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 71.123014][ T4993] binder: 4992:4993 tried to acquire reference to desc 0, got 1 instead [ 71.133181][ T4993] binder: 4992:4993 got transaction to context manager from process owning it [ 71.148843][ T4993] binder: 4992:4993 transaction failed 29201/-22, size 0-0 line 2908 [ 71.153308][ T4993] binder: 4992:4993 ioctl c0306201 400000001040 returned -14 [ 71.170159][ T4243] binder: release 4992:4993 transaction 112 out, still active [ 71.176684][ T4243] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.199540][ T4243] binder: send failed reply for transaction 112, target dead [ 71.233804][ T4969] loop1: detected capacity change from 0 to 32768 [ 71.244040][ T4991] loop4: detected capacity change from 0 to 4096 [ 71.251602][ T4995] loop2: detected capacity change from 0 to 190 [ 71.270533][ T4997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.242'. [ 71.289773][ T4995] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 71.304895][ T4995] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 71.309703][ T4995] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 71.320714][ T4969] JBD2: Ignoring recovery information on journal [ 71.332458][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 71.334911][ T4999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 71.337341][ T4999] netlink: 'syz.3.242': attribute type 13 has an invalid length. [ 71.398282][ T4995] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 71.428558][ T4995] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 71.452538][ T4995] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 71.456626][ T4995] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 71.459777][ T4995] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 71.464909][ T4995] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 71.469813][ T4995] ntfs: volume version 3.1. [ 71.478921][ T4995] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 71.488700][ T4995] attempt to access beyond end of device [ 71.488700][ T4995] loop2: rw=0, want=560, limit=190 [ 71.513957][ T4969] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 71.639334][ T4029] ocfs2: Unmounting device (7,1) on (node local) [ 71.649859][ T5007] binder: 5006:5007 tried to acquire reference to desc 0, got 1 instead [ 71.657823][ T5007] binder: 5006:5007 got transaction to context manager from process owning it [ 71.670897][ T5007] binder: 5006:5007 transaction failed 29201/-22, size 0-0 line 2908 [ 71.679189][ T4243] binder: release 5006:5007 transaction 118 out, still active [ 71.681238][ T4243] binder: undelivered TRANSACTION_COMPLETE [ 71.682786][ T4243] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.711015][ T4243] binder: send failed reply for transaction 118, target dead [ 71.849622][ T5014] loop4: detected capacity change from 0 to 256 [ 71.862746][ T5015] gfs2: path_lookup on c::: returned error -2 [ 71.968277][ T5023] binder: 5022:5023 tried to acquire reference to desc 0, got 1 instead [ 71.983613][ T5023] binder: 5022:5023 got transaction to context manager from process owning it [ 72.005806][ T5023] binder: 5022:5023 transaction failed 29201/-22, size 0-0 line 2908 [ 72.007933][ T5023] binder: 5022:5023 ioctl c0306201 400000001040 returned -14 [ 72.024876][ T4015] binder: release 5022:5023 transaction 124 out, still active [ 72.026888][ T4015] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.075437][ T4015] binder: send failed reply for transaction 124, target dead [ 72.078080][ T4999] loop3: detected capacity change from 0 to 8192 [ 72.578965][ T5038] binder: 5037:5038 tried to acquire reference to desc 0, got 1 instead [ 72.584485][ T5038] binder: 5037:5038 got transaction to context manager from process owning it [ 72.597568][ T5038] binder: 5037:5038 transaction failed 29201/-22, size 0-0 line 2908 [ 72.611577][ T13] binder: release 5037:5038 transaction 130 out, still active [ 72.613936][ T13] binder: undelivered TRANSACTION_COMPLETE [ 72.616726][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.649743][ T13] binder: send failed reply for transaction 130, target dead [ 72.714354][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 72.799190][ T5042] loop4: detected capacity change from 0 to 256 [ 72.823092][ T5032] loop0: detected capacity change from 0 to 32768 [ 72.824461][ T5030] loop2: detected capacity change from 0 to 32768 [ 72.855646][ T5030] (syz.2.259,5030,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "0x0000000000000004" or missing value [ 72.859271][ T5030] (syz.2.259,5030,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 72.871996][ T5032] JBD2: Ignoring recovery information on journal [ 72.923052][ T5032] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 73.056062][ T4024] ocfs2: Unmounting device (7,0) on (node local) [ 73.185354][ T5060] binder: 5055:5060 tried to acquire reference to desc 0, got 1 instead [ 73.191239][ T5060] binder: 5055:5060 got transaction to context manager from process owning it [ 73.193664][ T5060] binder: 5055:5060 transaction failed 29201/-22, size 0-0 line 2908 [ 73.200598][ T5060] binder: 5055:5060 ioctl c0306201 400000001040 returned -14 [ 73.203189][ T4242] binder: release 5055:5060 transaction 136 out, still active [ 73.206532][ T4242] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.223901][ T4242] binder: send failed reply for transaction 136, target dead [ 73.227751][ T5065] netlink: 'syz.1.272': attribute type 10 has an invalid length. [ 73.236984][ T5066] MPTCP: addr_signal error, rm_addr=4 [ 73.240600][ T5065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.272'. [ 73.258791][ T5064] binder: 5063:5064 tried to acquire reference to desc 0, got 1 instead [ 73.261171][ T5065] device ipvlan1 entered promiscuous mode [ 73.263226][ T5064] binder: 5063:5064 got transaction to context manager from process owning it [ 73.265900][ T5065] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 73.274437][ T5064] binder: 5063:5064 transaction failed 29201/-22, size 0-0 line 2908 [ 73.284250][ T4242] binder: release 5063:5064 transaction 142 out, still active [ 73.284319][ T4242] binder: undelivered TRANSACTION_COMPLETE [ 73.284341][ T4242] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.302256][ T4242] binder: send failed reply for transaction 142, target dead [ 73.403157][ T5072] loop1: detected capacity change from 0 to 512 [ 73.506886][ T5072] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 73.867513][ T5082] loop3: detected capacity change from 0 to 32768 [ 73.950066][ T5082] JBD2: Ignoring recovery information on journal [ 73.972851][ T5093] loop1: detected capacity change from 0 to 16 [ 73.996695][ T5093] erofs: Unknown parameter 'æ' [ 74.042018][ T5070] loop2: detected capacity change from 0 to 32768 [ 74.059546][ T5082] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 74.096252][ T5070] (syz.2.276,5070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.102811][ T5070] (syz.2.276,5070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.121833][ T5097] binder: 5096:5097 tried to acquire reference to desc 0, got 1 instead [ 74.125341][ T5097] binder: 5096:5097 got transaction to context manager from process owning it [ 74.127615][ T5097] binder: 5096:5097 transaction failed 29201/-22, size 0-0 line 2908 [ 74.140157][ T5097] binder: 5096:5097 ioctl c0306201 400000001040 returned -14 [ 74.143619][ T13] binder: release 5096:5097 transaction 148 out, still active [ 74.145683][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.173779][ T13] binder: send failed reply for transaction 148, target dead [ 74.250070][ T5102] loop0: detected capacity change from 0 to 128 [ 74.268921][ T5070] JBD2: Ignoring recovery information on journal [ 74.269375][ T4459] ocfs2: Unmounting device (7,3) on (node local) [ 74.298540][ T5088] loop4: detected capacity change from 0 to 32768 [ 74.366018][ T5088] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.281 (5088) [ 74.386871][ T5088] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 74.389431][ T5088] BTRFS info (device loop4): doing ref verification [ 74.393845][ T5088] BTRFS info (device loop4): turning off barriers [ 74.398226][ T5070] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 74.408883][ T5088] BTRFS info (device loop4): setting nodatasum [ 74.410693][ T5088] BTRFS info (device loop4): turning on sync discard [ 74.422974][ T5088] BTRFS info (device loop4): setting datasum [ 74.426079][ T5088] BTRFS info (device loop4): using free space tree [ 74.431561][ T5088] BTRFS info (device loop4): has skinny extents [ 74.519328][ T5119] binder: 5117:5119 tried to acquire reference to desc 0, got 1 instead [ 74.524198][ T5116] loop0: detected capacity change from 0 to 64 [ 74.524787][ T5119] binder: 5117:5119 got transaction to context manager from process owning it [ 74.528622][ T5119] binder: 5117:5119 transaction failed 29201/-22, size 0-0 line 2908 [ 74.532666][ T25] binder: release 5117:5119 transaction 154 out, still active [ 74.534757][ T25] binder: undelivered TRANSACTION_COMPLETE [ 74.536526][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.539598][ T5114] loop1: detected capacity change from 0 to 256 [ 74.546131][ T25] binder: send failed reply for transaction 154, target dead [ 74.566642][ T5129] loop3: detected capacity change from 0 to 64 [ 74.579972][ T5114] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb814369d, utbl_chksum : 0xe619d30d) [ 74.615433][ T5116] hfs: filesystem is marked locked, mounting read-only. [ 74.623502][ T5116] hfs: filesystem is marked locked, leaving read-only. [ 74.634331][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 74.970026][ T5088] BTRFS info (device loop4): enabling ssd optimizations [ 75.594524][ C1] sched: RT throttling activated [ 75.609774][ T1534] cfg80211: failed to load regulatory.db [ 75.912711][ T5157] MPTCP: addr_signal error, rm_addr=4 [ 76.011225][ T5159] netlink: 'syz.2.293': attribute type 21 has an invalid length. [ 76.047706][ T5159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.293'. [ 76.182190][ T5156] loop3: detected capacity change from 0 to 8192 [ 76.292572][ T5156] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 76.423013][ T5166] binder: 5164:5166 tried to acquire reference to desc 0, got 1 instead [ 76.438528][ T5166] binder: 5164:5166 got transaction to context manager from process owning it [ 76.454828][ T5166] binder: 5164:5166 transaction failed 29201/-22, size 0-0 line 2908 [ 76.467907][ T5166] binder: 5164:5166 ioctl c0306201 400000001040 returned -14 [ 76.483585][ T5153] binder: release 5164:5166 transaction 160 out, still active [ 76.486155][ T5153] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.530063][ T5114] attempt to access beyond end of device [ 76.530063][ T5114] loop1: rw=0, want=34359738489, limit=256 [ 76.541529][ T5153] binder: send failed reply for transaction 160, target dead [ 76.832838][ T5114] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 76.835243][ T5114] exFAT-fs (loop1): Filesystem has been set read-only [ 76.838579][ T5173] loop3: detected capacity change from 0 to 1024 [ 76.875003][ T5176] binder: 5175:5176 tried to acquire reference to desc 0, got 1 instead [ 76.889187][ T5176] binder: 5175:5176 got transaction to context manager from process owning it [ 76.891558][ T5176] binder: 5175:5176 transaction failed 29201/-22, size 0-0 line 2908 [ 76.925841][ T4241] binder: release 5175:5176 transaction 166 out, still active [ 76.928655][ T4241] binder: undelivered TRANSACTION_COMPLETE [ 76.930148][ T4241] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.946689][ T5173] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,stripe=0x0000000000000002,noblock_validity,errors=remount-ro,noblock_validity,jqfmt=vfsold,sysvgroups,nojournal_checksum,nodelalloc,. Quota mode: none. [ 76.959862][ T4241] binder: send failed reply for transaction 166, target dead [ 77.151007][ T4216] udevd[4216]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 77.414433][ T5196] binder: 5195:5196 tried to acquire reference to desc 0, got 1 instead [ 77.422081][ T5196] binder: 5195:5196 got transaction to context manager from process owning it [ 77.449909][ T5196] binder: 5195:5196 transaction failed 29201/-22, size 0-0 line 2908 [ 77.459336][ T5196] binder: 5195:5196 ioctl c0306201 400000001040 returned -14 [ 77.472328][ T4015] binder: release 5195:5196 transaction 172 out, still active [ 77.476228][ T4015] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.506654][ T4015] binder: send failed reply for transaction 172, target dead [ 77.529468][ T5167] loop2: detected capacity change from 0 to 32768 [ 77.589079][ T5200] loop1: detected capacity change from 0 to 2048 [ 77.655198][ T5200] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.708190][ T5167] JBD2: Ignoring recovery information on journal [ 77.911871][ T5167] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 78.031151][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 78.179237][ T5214] binder: 5213:5214 tried to acquire reference to desc 0, got 1 instead [ 78.183670][ T5214] binder: 5213:5214 got transaction to context manager from process owning it [ 78.192806][ T5214] binder: 5213:5214 transaction failed 29201/-22, size 0-0 line 2908 [ 78.195965][ T4241] binder: release 5213:5214 transaction 178 out, still active [ 78.198066][ T4241] binder: undelivered TRANSACTION_COMPLETE [ 78.199669][ T4241] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.268364][ T25] binder: send failed reply for transaction 178, target dead [ 79.169434][ T5219] loop1: detected capacity change from 0 to 4096 [ 79.177376][ T5219] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 79.211720][ T5219] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 79.223179][ T5219] ntfs3: loop1: Failed to load $Secure. [ 79.314225][ T5233] binder: 5232:5233 tried to acquire reference to desc 0, got 1 instead [ 79.343788][ T5233] binder: 5232:5233 got transaction to context manager from process owning it [ 79.369756][ T5233] binder: 5232:5233 transaction failed 29201/-22, size 0-0 line 2908 [ 79.379954][ T5233] binder: 5232:5233 ioctl c0306201 400000001040 returned -14 [ 79.402858][ T5153] binder: release 5232:5233 transaction 184 out, still active [ 79.405166][ T5153] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.436064][ T5153] binder: send failed reply for transaction 184, target dead [ 79.470937][ T5241] binder: 5240:5241 tried to acquire reference to desc 0, got 1 instead [ 79.484022][ T5241] FAULT_INJECTION: forcing a failure. [ 79.484022][ T5241] name failslab, interval 1, probability 0, space 0, times 0 [ 79.502385][ T5241] CPU: 0 PID: 5241 Comm: syz.2.325 Not tainted 5.15.178-syzkaller #0 [ 79.504611][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.507171][ T5241] Call trace: [ 79.507969][ T5241] dump_backtrace+0x0/0x530 [ 79.509137][ T5241] show_stack+0x2c/0x3c [ 79.510208][ T5241] dump_stack_lvl+0x108/0x170 [ 79.511425][ T5241] dump_stack+0x1c/0x58 [ 79.512466][ T5241] should_fail+0x3b8/0x514 [ 79.513652][ T5241] __should_failslab+0xbc/0x110 [ 79.514918][ T5241] should_failslab+0x10/0x28 [ 79.516146][ T5241] slab_pre_alloc_hook+0x64/0xe8 [ 79.517444][ T5241] __kmalloc+0xc0/0x4c8 [ 79.518581][ T5241] tomoyo_realpath_from_path+0xd0/0x508 [ 79.520051][ T5241] tomoyo_path_number_perm+0x1f8/0x6b0 [ 79.521545][ T5241] tomoyo_file_ioctl+0x2c/0x3c [ 79.522775][ T5241] security_file_ioctl+0x80/0xbc [ 79.524150][ T5241] __arm64_sys_ioctl+0xa8/0x1c8 [ 79.525481][ T5241] invoke_syscall+0x98/0x2b8 [ 79.526746][ T5241] el0_svc_common+0x138/0x258 [ 79.527994][ T5241] do_el0_svc+0x58/0x14c [ 79.529199][ T5241] el0_svc+0x7c/0x1f0 [ 79.530238][ T5241] el0t_64_sync_handler+0x84/0xe4 [ 79.531525][ T5241] el0t_64_sync+0x1a0/0x1a4 [ 79.532901][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.539199][ T5247] binder: 5243:5247 tried to acquire reference to desc 0, got 1 instead [ 79.548676][ T5247] binder: 5243:5247 got transaction to context manager from process owning it [ 79.551058][ T5247] binder: 5243:5247 transaction failed 29201/-22, size 0-0 line 2908 [ 79.553804][ T5153] binder: release 5243:5247 transaction 197 out, still active [ 79.556052][ T5153] binder: undelivered TRANSACTION_COMPLETE [ 79.557757][ T5153] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.573788][ T5153] binder: send failed reply for transaction 197, target dead [ 79.593823][ T5241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.597082][ T5245] binder: BINDER_SET_CONTEXT_MGR already set [ 79.614839][ T5245] binder: 5242:5245 ioctl 4018620d 400000000040 returned -16 [ 79.622949][ T5241] binder: 5240:5241 got transaction to context manager from process owning it [ 79.634851][ T5245] binder: tried to use weak ref as strong ref [ 79.636483][ T5245] binder: 5242:5245 Acquire 1 refcount change on invalid ref 0 ret -22 [ 79.645116][ T5241] binder: 5240:5241 transaction failed 29201/-22, size 0-0 line 2908 [ 79.647908][ T5241] binder: 5240:5241 ioctl c0306201 400000001040 returned -14 [ 79.669117][ T5245] binder: 5242:5245 got transaction to invalid handle, 1 [ 79.671048][ T5245] binder: 5242:5245 transaction failed 29201/-22, size 0-0 line 2917 [ 79.679395][ T5153] binder: release 5240:5241 transaction 190 out, still active [ 79.681359][ T5153] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.706120][ T5245] binder: 5242:5245 ioctl c0306201 400000001040 returned -14 [ 79.725150][ T5153] binder: send failed reply for transaction 190, target dead [ 79.907388][ T5263] netlink: 'syz.2.335': attribute type 5 has an invalid length. [ 79.909671][ T5263] netlink: 'syz.2.335': attribute type 11 has an invalid length. [ 79.930244][ T5263] netlink: 156 bytes leftover after parsing attributes in process `syz.2.335'. [ 79.996883][ T5263] loop2: detected capacity change from 0 to 256 [ 80.060944][ T5263] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 80.080222][ T5275] binder: 5274:5275 tried to acquire reference to desc 0, got 1 instead [ 80.100632][ T5275] binder: 5274:5275 got transaction to context manager from process owning it [ 80.119645][ T5275] binder: 5274:5275 transaction failed 29201/-22, size 0-0 line 2908 [ 80.124040][ T5275] binder: 5274:5275 ioctl c0306201 400000001040 returned -14 [ 80.134705][ T5272] sctp: [Deprecated]: syz.2.335 (pid 5272) Use of int in max_burst socket option deprecated. [ 80.134705][ T5272] Use struct sctp_assoc_value instead [ 80.146888][ T5153] binder: release 5274:5275 transaction 205 out, still active [ 80.148951][ T5153] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.178084][ T5153] binder: send failed reply for transaction 205, target dead [ 80.258902][ T5279] binder: 5278:5279 tried to acquire reference to desc 0, got 1 instead [ 80.267649][ T5279] binder: 5278:5279 got transaction to context manager from process owning it [ 80.275664][ T5279] binder: 5278:5279 transaction failed 29201/-22, size 0-0 line 2908 [ 80.290051][ T4411] binder: release 5278:5279 transaction 211 out, still active [ 80.292140][ T4411] binder: undelivered TRANSACTION_COMPLETE [ 80.293695][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.323294][ T5150] binder: send failed reply for transaction 211, target dead [ 80.356785][ T5283] binder: 5282:5283 tried to acquire reference to desc 0, got 1 instead [ 80.359696][ T5283] FAULT_INJECTION: forcing a failure. [ 80.359696][ T5283] name failslab, interval 1, probability 0, space 0, times 0 [ 80.362979][ T5283] CPU: 0 PID: 5283 Comm: syz.0.341 Not tainted 5.15.178-syzkaller #0 [ 80.364933][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.367555][ T5283] Call trace: [ 80.368416][ T5283] dump_backtrace+0x0/0x530 [ 80.369627][ T5283] show_stack+0x2c/0x3c [ 80.370681][ T5283] dump_stack_lvl+0x108/0x170 [ 80.371865][ T5283] dump_stack+0x1c/0x58 [ 80.372942][ T5283] should_fail+0x3b8/0x514 [ 80.374077][ T5283] __should_failslab+0xbc/0x110 [ 80.375309][ T5283] should_failslab+0x10/0x28 [ 80.376521][ T5283] slab_pre_alloc_hook+0x64/0xe8 [ 80.377727][ T5283] __kmalloc+0xc0/0x4c8 [ 80.378822][ T5283] tomoyo_encode+0x270/0x4b0 [ 80.379992][ T5283] tomoyo_realpath_from_path+0x4b4/0x508 [ 80.381483][ T5283] tomoyo_path_number_perm+0x1f8/0x6b0 [ 80.382939][ T5283] tomoyo_file_ioctl+0x2c/0x3c [ 80.384216][ T5283] security_file_ioctl+0x80/0xbc [ 80.385471][ T5283] __arm64_sys_ioctl+0xa8/0x1c8 [ 80.386728][ T5283] invoke_syscall+0x98/0x2b8 [ 80.387946][ T5283] el0_svc_common+0x138/0x258 [ 80.389161][ T5283] do_el0_svc+0x58/0x14c [ 80.390336][ T5283] el0_svc+0x7c/0x1f0 [ 80.391384][ T5283] el0t_64_sync_handler+0x84/0xe4 [ 80.392743][ T5283] el0t_64_sync+0x1a0/0x1a4 [ 80.413735][ T5283] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.418416][ T5283] binder: 5282:5283 got transaction to context manager from process owning it [ 80.421524][ T5285] afs: Unknown parameter 'dyns' [ 80.423140][ T5283] binder: 5282:5283 ioctl c0306201 400000001040 returned -14 [ 80.426908][ T5250] loop3: detected capacity change from 0 to 32768 [ 80.429159][ T5150] binder: release 5282:5283 transaction 217 out, still active [ 80.431134][ T5150] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.432669][ T5285] binder: 5284:5285 tried to acquire reference to desc 0, got 1 instead [ 80.437734][ T5285] binder: 5284:5285 ioctl c018620c 400000000140 returned -22 [ 80.440499][ T5285] binder: 5284:5285 ioctl c0306201 400000001040 returned -14 [ 80.443057][ T4411] binder: release 5284:5285 transaction 223 out, still active [ 80.452580][ T4411] binder: send failed reply for transaction 223, target dead [ 80.460442][ T4411] binder: send failed reply for transaction 217, target dead [ 80.481376][ T5281] netlink: 36 bytes leftover after parsing attributes in process `syz.4.340'. [ 80.537737][ T5250] JBD2: Ignoring recovery information on journal [ 80.660758][ T5250] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 80.749146][ T5309] binder: 5308:5309 tried to acquire reference to desc 0, got 1 instead [ 80.753408][ T5309] binder: 5308:5309 ioctl c0306201 400000001040 returned -14 [ 80.757014][ T4411] binder: release 5308:5309 transaction 229 out, still active [ 80.772216][ T4411] binder: send failed reply for transaction 229, target dead [ 80.802589][ T4459] ocfs2: Unmounting device (7,3) on (node local) [ 80.831933][ T5316] netlink: 60 bytes leftover after parsing attributes in process `syz.4.355'. [ 80.850747][ T5319] binder: 5314:5319 tried to acquire reference to desc 0, got 1 instead [ 80.853145][ T5316] netlink: 172 bytes leftover after parsing attributes in process `syz.4.355'. [ 80.883457][ T5153] binder: release 5314:5319 transaction 235 out, still active [ 80.886170][ T5153] binder: undelivered TRANSACTION_COMPLETE [ 80.927585][ T5153] binder: send failed reply for transaction 235, target dead [ 80.980077][ T5323] binder: 5322:5323 tried to acquire reference to desc 0, got 1 instead [ 81.006337][ T5323] binder: 5322:5323 ioctl c0306201 400000001040 returned -14 [ 81.010189][ T4241] binder: release 5322:5323 transaction 241 out, still active [ 81.087538][ T5332] FAULT_INJECTION: forcing a failure. [ 81.087538][ T5332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.090666][ T5332] CPU: 0 PID: 5332 Comm: syz.3.354 Not tainted 5.15.178-syzkaller #0 [ 81.092837][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.095448][ T5332] Call trace: [ 81.096291][ T5332] dump_backtrace+0x0/0x530 [ 81.097440][ T5332] show_stack+0x2c/0x3c [ 81.098537][ T5332] dump_stack_lvl+0x108/0x170 [ 81.099716][ T5332] dump_stack+0x1c/0x58 [ 81.100819][ T5332] should_fail+0x3b8/0x514 [ 81.101937][ T5332] should_fail_usercopy+0x20/0x30 [ 81.103289][ T5332] binder_ioctl_write_read+0x14c/0xb8c8 [ 81.104716][ T5332] binder_ioctl+0x39c/0x2a80 [ 81.105890][ T5332] __arm64_sys_ioctl+0x14c/0x1c8 [ 81.107225][ T5332] invoke_syscall+0x98/0x2b8 [ 81.108316][ T5332] el0_svc_common+0x138/0x258 [ 81.109559][ T5332] do_el0_svc+0x58/0x14c [ 81.110622][ T5332] el0_svc+0x7c/0x1f0 [ 81.111626][ T5332] el0t_64_sync_handler+0x84/0xe4 [ 81.112950][ T5332] el0t_64_sync+0x1a0/0x1a4 [ 81.114230][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.157166][ T5332] binder: 5330:5332 ioctl c0306201 400000001040 returned -14 [ 81.167034][ T4241] binder: undelivered TRANSACTION_COMPLETE [ 81.179824][ T5342] MPTCP: addr_signal error, rm_addr=4 [ 81.498943][ T5313] loop1: detected capacity change from 0 to 40427 [ 81.562414][ T5313] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.564921][ T5313] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.571567][ T5313] F2FS-fs (loop1): invalid crc value [ 81.609278][ T5313] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.644706][ T5313] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.646771][ T5313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.668292][ T5338] loop4: detected capacity change from 0 to 40427 [ 81.704219][ T5346] loop3: detected capacity change from 0 to 32768 [ 81.718736][ T5338] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 81.721116][ T5338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 81.725777][ T5338] F2FS-fs (loop4): invalid crc value [ 81.730052][ T5338] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.759477][ T5346] JBD2: Ignoring recovery information on journal [ 81.775895][ T5338] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.777904][ T5338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 81.831537][ T4033] attempt to access beyond end of device [ 81.831537][ T4033] loop4: rw=2049, want=45104, limit=40427 [ 81.874452][ T5346] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 81.936835][ T4459] ocfs2: Unmounting device (7,3) on (node local) [ 82.012687][ T5362] capability: warning: `syz.0.370' uses 32-bit capabilities (legacy support in use) [ 82.024280][ T4015] binder: send failed reply for transaction 252 to 5340:5341 [ 82.027214][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 82.028816][ T4015] binder_release_work: 4 callbacks suppressed [ 82.028826][ T4015] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.194264][ T5366] loop2: detected capacity change from 0 to 128 [ 82.225550][ T5370] binder_transaction: 4 callbacks suppressed [ 82.225564][ T5370] binder: 5368:5370 got transaction to context manager from process owning it [ 82.244313][ T5370] binder_transaction: 5 callbacks suppressed [ 82.244329][ T5370] binder: 5368:5370 transaction failed 29201/-22, size 0-0 line 2908 [ 82.253987][ T5153] binder: undelivered TRANSACTION_COMPLETE [ 82.255747][ T5153] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.325705][ T5366] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 82.339099][ T5374] loop3: detected capacity change from 0 to 4096 [ 82.349879][ T5376] fuse: blksize only supported for fuseblk [ 82.368364][ T5376] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 82.400309][ T5366] binder: 5365:5366 got transaction to invalid handle, 4293918717 [ 82.421076][ T5374] __ntfs_error: 6 callbacks suppressed [ 82.421092][ T5374] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 82.429899][ T5381] FAULT_INJECTION: forcing a failure. [ 82.429899][ T5381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.448123][ T5366] binder: 5365:5366 transaction failed 29201/-22, size 0-0 line 2917 [ 82.450643][ T5366] binder: 5365:5366 ioctl c0306201 400000001040 returned -14 [ 82.452725][ T5374] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 82.476766][ T5381] CPU: 0 PID: 5381 Comm: syz.0.376 Not tainted 5.15.178-syzkaller #0 [ 82.478914][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.481431][ T5381] Call trace: [ 82.482266][ T5381] dump_backtrace+0x0/0x530 [ 82.483375][ T5381] show_stack+0x2c/0x3c [ 82.484446][ T5381] dump_stack_lvl+0x108/0x170 [ 82.485655][ T5381] dump_stack+0x1c/0x58 [ 82.486694][ T5381] should_fail+0x3b8/0x514 [ 82.487785][ T5381] should_fail_usercopy+0x20/0x30 [ 82.489183][ T5381] binder_ioctl_write_read+0xb84/0xb8c8 [ 82.490751][ T5381] binder_ioctl+0x39c/0x2a80 [ 82.491929][ T5381] __arm64_sys_ioctl+0x14c/0x1c8 [ 82.493316][ T5381] invoke_syscall+0x98/0x2b8 [ 82.494494][ T5381] el0_svc_common+0x138/0x258 [ 82.495749][ T5381] do_el0_svc+0x58/0x14c [ 82.496847][ T5381] el0_svc+0x7c/0x1f0 [ 82.497829][ T5381] el0t_64_sync_handler+0x84/0xe4 [ 82.499209][ T5381] el0t_64_sync+0x1a0/0x1a4 [ 82.500669][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.514785][ T5374] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 82.558479][ T5381] binder: 5380:5381 ioctl c0306201 400000001040 returned -14 [ 82.566052][ T4241] binder: undelivered TRANSACTION_COMPLETE [ 82.702340][ T5388] loop2: detected capacity change from 0 to 256 [ 82.737525][ T5396] MPTCP: addr_signal error, rm_addr=4 [ 82.852141][ T5388] loop2: detected capacity change from 0 to 2048 [ 82.891198][ T5388] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 82.931640][ T5388] netlink: 74 bytes leftover after parsing attributes in process `syz.2.378'. [ 83.008993][ T5408] binder: 5407:5408 got transaction to context manager from process owning it [ 83.015264][ T5408] binder: 5407:5408 transaction failed 29201/-22, size 0-0 line 2908 [ 83.021317][ T4243] binder: undelivered TRANSACTION_COMPLETE [ 83.022990][ T4243] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.177775][ T5383] loop4: detected capacity change from 0 to 32768 [ 83.204279][ T5419] binder: 5418:5419 got transaction to context manager from process owning it [ 83.208490][ T5419] binder: 5418:5419 transaction failed 29201/-22, size 0-0 line 2908 [ 83.210755][ T5419] binder: 5418:5419 ioctl c0306201 400000001040 returned -14 [ 83.213793][ T4243] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.303349][ T5427] binder: 5426:5427 got transaction to context manager from process owning it [ 83.312302][ T5427] binder: 5426:5427 transaction failed 29201/-22, size 0-0 line 2908 [ 83.312316][ T5383] JBD2: Ignoring recovery information on journal [ 83.326409][ T5427] FAULT_INJECTION: forcing a failure. [ 83.326409][ T5427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.335045][ T5427] CPU: 0 PID: 5427 Comm: syz.1.391 Not tainted 5.15.178-syzkaller #0 [ 83.337124][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.339849][ T5427] Call trace: [ 83.340657][ T5427] dump_backtrace+0x0/0x530 [ 83.341822][ T5427] show_stack+0x2c/0x3c [ 83.342948][ T5427] dump_stack_lvl+0x108/0x170 [ 83.344156][ T5427] dump_stack+0x1c/0x58 [ 83.345261][ T5427] should_fail+0x3b8/0x514 [ 83.346433][ T5427] should_fail_usercopy+0x20/0x30 [ 83.347720][ T5427] binder_ioctl_write_read+0xa6f8/0xb8c8 [ 83.349205][ T5427] binder_ioctl+0x39c/0x2a80 [ 83.350388][ T5427] __arm64_sys_ioctl+0x14c/0x1c8 [ 83.351679][ T5427] invoke_syscall+0x98/0x2b8 [ 83.352973][ T5427] el0_svc_common+0x138/0x258 [ 83.354126][ T5427] do_el0_svc+0x58/0x14c [ 83.355124][ T5427] el0_svc+0x7c/0x1f0 [ 83.356134][ T5427] el0t_64_sync_handler+0x84/0xe4 [ 83.357466][ T5427] el0t_64_sync+0x1a0/0x1a4 [ 83.364345][ T5427] binder: 5426:5427 ioctl c0306201 400000001040 returned -14 [ 83.377849][ T5383] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 83.384477][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.393049][ T4411] binder_send_failed_reply: 6 callbacks suppressed [ 83.393061][ T4411] binder: send failed reply for transaction 290, target dead [ 83.493387][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 83.511809][ T5413] loop2: detected capacity change from 0 to 32768 [ 83.708555][ T5439] binder: 5438:5439 got transaction to context manager from process owning it [ 83.714806][ T4411] binder: undelivered TRANSACTION_COMPLETE [ 83.738092][ T5441] loop1: detected capacity change from 0 to 256 [ 83.740945][ T5439] binder: 5438:5439 transaction failed 29201/-22, size 0-0 line 2908 [ 83.743317][ T4015] binder: send failed reply for transaction 273, target dead [ 83.746330][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 83.747799][ T4015] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.757888][ T4015] binder: send failed reply for transaction 296, target dead [ 83.835536][ T5444] binder: 5443:5444 got transaction to context manager from process owning it [ 83.837946][ T5444] binder: 5443:5444 transaction failed 29201/-22, size 0-0 line 2908 [ 83.854708][ T5444] binder: 5443:5444 ioctl c0306201 400000001040 returned -14 [ 83.859084][ T4015] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.912279][ T4015] binder: send failed reply for transaction 302, target dead [ 83.956330][ T5454] netlink: 'syz.2.402': attribute type 1 has an invalid length. [ 83.983005][ T5454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.137367][ T5460] binder: 5459:5460 got transaction to context manager from process owning it [ 84.139778][ T5460] binder: 5459:5460 transaction failed 29201/-22, size 0-0 line 2908 [ 84.141830][ T5460] binder: 5459:5460 ioctl c0306201 400000001040 returned -14 [ 84.154908][ T5447] loop4: detected capacity change from 0 to 32768 [ 84.156913][ T5460] FAULT_INJECTION: forcing a failure. [ 84.156913][ T5460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.160491][ T5460] CPU: 0 PID: 5460 Comm: syz.2.403 Not tainted 5.15.178-syzkaller #0 [ 84.162617][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.165201][ T5460] Call trace: [ 84.166074][ T5460] dump_backtrace+0x0/0x530 [ 84.167213][ T5460] show_stack+0x2c/0x3c [ 84.168247][ T5460] dump_stack_lvl+0x108/0x170 [ 84.169416][ T5460] dump_stack+0x1c/0x58 [ 84.170495][ T5460] should_fail+0x3b8/0x514 [ 84.171606][ T5460] should_fail_usercopy+0x20/0x30 [ 84.172867][ T5460] simple_read_from_buffer+0xd8/0x26c [ 84.174304][ T5460] proc_fail_nth_read+0x1a0/0x248 [ 84.175580][ T5460] vfs_read+0x278/0xb18 [ 84.176714][ T5460] ksys_read+0x15c/0x26c [ 84.177819][ T5460] __arm64_sys_read+0x7c/0x90 [ 84.179034][ T5460] invoke_syscall+0x98/0x2b8 [ 84.180216][ T5460] el0_svc_common+0x138/0x258 [ 84.181433][ T5460] do_el0_svc+0x58/0x14c [ 84.182521][ T5460] el0_svc+0x7c/0x1f0 [ 84.183544][ T5460] el0t_64_sync_handler+0x84/0xe4 [ 84.184735][ T5460] el0t_64_sync+0x1a0/0x1a4 [ 84.215440][ T4411] binder: send failed reply for transaction 308 to 5459:5460 [ 84.217868][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.219482][ T4411] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.320292][ T5447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.393 (5447) [ 84.871382][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 85.315274][ T5447] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 85.317559][ T5447] BTRFS info (device loop4): using free space tree [ 85.319317][ T5447] BTRFS info (device loop4): has skinny extents [ 85.595375][ T5462] loop2: detected capacity change from 0 to 32768 [ 85.622379][ T5491] binder_thread_write: 12 callbacks suppressed [ 85.622393][ T5491] binder: 5490:5491 tried to acquire reference to desc 0, got 1 instead [ 85.642171][ T5491] binder: 5490:5491 got transaction to context manager from process owning it [ 85.667309][ T5491] binder: 5490:5491 transaction failed 29201/-22, size 0-0 line 2908 [ 85.675898][ T4411] binder_thread_release: 9 callbacks suppressed [ 85.675911][ T4411] binder: release 5490:5491 transaction 314 out, still active [ 85.679408][ T4411] binder: undelivered TRANSACTION_COMPLETE [ 85.680994][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.685219][ T5447] BTRFS info (device loop4): enabling ssd optimizations [ 85.744006][ T5462] JBD2: Ignoring recovery information on journal [ 85.804714][ T5153] binder: send failed reply for transaction 314, target dead [ 85.843246][ T5462] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.025151][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 86.134711][ T5512] loop1: detected capacity change from 0 to 64 [ 86.249941][ T5512] binder: 5511:5512 got transaction to context manager from process owning it [ 86.272842][ T5512] binder: 5511:5512 transaction failed 29201/-22, size 0-0 line 2908 [ 86.279206][ T5512] binder: 5511:5512 ioctl c0306201 400000001040 returned -14 [ 86.312953][ T5518] binder: 5517:5518 tried to acquire reference to desc 0, got 1 instead [ 86.320415][ T5434] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.326757][ T5518] binder: 5517:5518 got reply transaction with bad transaction stack, transaction 322 has target 5517:0 [ 86.331367][ T5434] overlayfs: failed to set xattr on upper [ 86.336407][ T5434] overlayfs: ...falling back to index=off,metacopy=off. [ 86.340293][ T5518] binder: 5517:5518 ioctl c0306201 400000001040 returned -14 [ 86.349497][ T4241] binder: release 5517:5518 transaction 322 out, still active [ 86.381001][ T4241] binder: send failed reply for transaction 322, target dead [ 86.400932][ T4029] hfs: node 4:3 still has 1 user(s)! [ 86.606039][ T5538] binder: 5537:5538 tried to acquire reference to desc 0, got 1 instead [ 86.621432][ T5538] binder: 5537:5538 got transaction to context manager from process owning it [ 86.638600][ T5514] binder: release 5537:5538 transaction 328 out, still active [ 86.640584][ T5514] binder: undelivered TRANSACTION_COMPLETE [ 86.671516][ T5514] binder: send failed reply for transaction 328, target dead [ 86.721206][ T5529] loop1: detected capacity change from 0 to 4096 [ 86.723789][ T5529] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 86.809288][ T5529] ntfs: volume version 3.1. [ 86.847535][ T5554] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 86.876560][ T5554] binder: 5551:5554 got transaction to invalid handle, 1 [ 86.879393][ T5554] binder: 5551:5554 ioctl c0306201 400000001040 returned -14 [ 86.883340][ T5561] binder: 5560:5561 tried to acquire reference to desc 0, got 1 instead [ 86.890084][ T5561] binder: 5560:5561 unknown command 1078485779 [ 86.892367][ T5561] binder: 5560:5561 ioctl c0306201 400000001040 returned -22 [ 86.903089][ T5510] binder: release 5560:5561 transaction 338 out, still active [ 86.905462][ T5510] binder: undelivered TRANSACTION_COMPLETE [ 86.930786][ T5510] binder: send failed reply for transaction 338, target dead [ 86.968789][ T5567] loop2: detected capacity change from 0 to 512 [ 87.015314][ T5567] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 87.017870][ T5567] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 87.031319][ T5567] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 87.051606][ T5567] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.053777][ T5567] EXT4-fs (loop2): failed to initialize system zone (-117) [ 87.070439][ T5574] MPTCP: addr_signal error, rm_addr=4 [ 87.084743][ T5567] EXT4-fs (loop2): mount failed [ 87.169339][ T5549] loop4: detected capacity change from 0 to 32768 [ 87.189353][ T5582] binder: 5581:5582 tried to acquire reference to desc 0, got 1 instead [ 87.193655][ T4241] binder: release 5581:5582 transaction 343 out, still active [ 87.197237][ T4241] binder_release_work: 2 callbacks suppressed [ 87.197251][ T4241] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.204085][ T5549] JBD2: Ignoring recovery information on journal [ 87.221380][ T5510] binder: send failed reply for transaction 343, target dead [ 87.380168][ T5549] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 87.419239][ T5601] loop1: detected capacity change from 0 to 47 [ 87.430467][ T5597] loop3: detected capacity change from 0 to 256 [ 87.478165][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 87.538390][ T5604] binder: 5602:5604 tried to acquire reference to desc 0, got 1 instead [ 87.563170][ T5604] binder: 5602:5604 got transaction to invalid handle, 33554432 [ 87.566594][ T5604] binder_transaction: 4 callbacks suppressed [ 87.566607][ T5604] binder: 5602:5604 transaction failed 29201/-22, size 0-0 line 2917 [ 87.571435][ T5604] binder: 5602:5604 ioctl c0306201 400000001040 returned -14 [ 87.577763][ T4241] binder: release 5602:5604 transaction 349 out, still active [ 87.579814][ T4241] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.605956][ T4241] binder: send failed reply for transaction 349, target dead [ 87.735761][ T5609] binder: 5607:5609 tried to acquire reference to desc 0, got 1 instead [ 87.744444][ T5609] binder_transaction: 1 callbacks suppressed [ 87.744455][ T5609] binder: 5607:5609 got transaction to context manager from process owning it [ 87.753865][ T5609] binder: 5607:5609 transaction failed 29201/-22, size 0-0 line 2908 [ 87.767073][ T4241] binder: release 5607:5609 transaction 355 out, still active [ 87.770269][ T4241] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.806021][ T5612] binder: 5611:5612 tried to acquire reference to desc 0, got 1 instead [ 87.829338][ T5612] binder: 5611:5612 got transaction to context manager from process owning it [ 87.831705][ T5612] binder: 5611:5612 transaction failed 29201/-22, size 0-0 line 2908 [ 87.833835][ T5612] binder: 5611:5612 ioctl c0306201 400000001040 returned -14 [ 87.886988][ T5514] binder: send failed reply for transaction 361 to 5611:5612 [ 87.889361][ T5514] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.890930][ T5514] binder: undelivered TRANSACTION_ERROR: 29189 [ 87.985871][ T5622] netlink: 76 bytes leftover after parsing attributes in process `syz.2.453'. [ 88.132445][ T5597] x_tables: duplicate entry at hook 2 [ 88.146789][ T5631] binder: 5630:5631 tried to acquire reference to desc 0, got 1 instead [ 88.149590][ T5597] loop3: detected capacity change from 0 to 512 [ 88.160055][ T5631] binder: 5630:5631 got transaction to context manager from process owning it [ 88.162367][ T5631] binder: 5630:5631 transaction failed 29201/-22, size 0-0 line 2908 [ 88.166866][ T5628] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 88.175719][ T5631] binder: 5630:5631 ioctl c0306201 400000001040 returned -14 [ 88.185142][ T4241] binder: release 5630:5631 transaction 367 out, still active [ 88.187136][ T4241] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.215070][ T5597] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.443: casefold flag without casefold feature [ 88.229782][ T5597] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.443: couldn't read orphan inode 15 (err -117) [ 88.241200][ T5597] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.475182][ T5636] loop2: detected capacity change from 0 to 2048 [ 88.619414][ T5636] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 88.626311][ T5636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.773392][ T5621] loop0: detected capacity change from 0 to 32768 [ 88.798101][ T5621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.451 (5621) [ 88.876701][ T5621] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 88.882330][ T5621] BTRFS info (device loop0): using free space tree [ 88.884146][ T5621] BTRFS info (device loop0): has skinny extents [ 89.002517][ T5646] binder: 5642:5646 tried to acquire reference to desc 0, got 1 instead [ 89.016034][ T5646] binder: 5642:5646 got transaction to context manager from process owning it [ 89.018303][ T5646] binder: 5642:5646 transaction failed 29201/-22, size 0-0 line 2908 [ 89.048179][ T5626] loop4: detected capacity change from 0 to 32768 [ 89.069399][ T5153] binder: release 5642:5646 transaction 373 out, still active [ 89.081031][ T5153] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.089312][ T5621] BTRFS info (device loop0): enabling ssd optimizations [ 89.127806][ T5514] binder_send_failed_reply: 2 callbacks suppressed [ 89.127822][ T5514] binder: send failed reply for transaction 373, target dead [ 89.129900][ T5626] JBD2: Ignoring recovery information on journal [ 89.199066][ T5652] loop1: detected capacity change from 0 to 2048 [ 89.212536][ T5670] binder: 5669:5670 ioctl 4018620d 400000000040 returned -22 [ 89.230608][ T5670] binder: 5669:5670 ioctl c0306201 4000000003c0 returned -14 [ 89.238486][ T5652] UDF-fs: bad mount option "iochars" or missing value [ 89.242394][ T5670] binder: 5669:5670 ioctl c0306201 4000000001c0 returned -14 [ 89.247496][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.465'. [ 89.252191][ T5626] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 89.266892][ T5670] binder: 5669:5670 ioctl c0306201 400000001040 returned -14 [ 89.436939][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 89.461711][ T5685] binder: 5684:5685 got transaction to context manager from process owning it [ 89.464025][ T5685] binder: 5684:5685 transaction failed 29201/-22, size 0-0 line 2908 [ 89.472789][ T5685] binder: 5684:5685 ioctl c0306201 400000001040 returned -14 [ 89.483707][ T5510] binder: release 5684:5685 transaction 381 out, still active [ 89.487956][ T5510] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.531263][ T5687] loop3: detected capacity change from 0 to 8 [ 89.656045][ T5691] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 89.665180][ T25] binder: send failed reply for transaction 381, target dead [ 89.853074][ T5702] binder: 5701:5702 got transaction to context manager from process owning it [ 89.880249][ T5702] binder: 5701:5702 transaction failed 29201/-22, size 0-0 line 2908 [ 89.976791][ T5714] binder: 5713:5714 got transaction to invalid handle, 1 [ 89.978826][ T5714] binder: 5713:5714 transaction failed 29201/-22, size 80-24 line 2917 [ 90.001088][ T5714] binder: 5713:5714 ioctl c02064b2 400000000200 returned -22 [ 90.022696][ T5714] binder: 5713:5714 ioctl c0306201 400000001040 returned -14 [ 90.188462][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 90.193652][ T5724] binder: 5723:5724 got transaction to context manager from process owning it [ 90.197556][ T5724] binder: 5723:5724 transaction failed 29201/-22, size 0-0 line 2908 [ 90.205703][ T5724] binder: 5723:5724 ioctl c0306201 400000001040 returned -14 [ 90.211333][ T4241] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.230070][ T4241] binder: send failed reply for transaction 396, target dead [ 90.477756][ T5711] loop0: detected capacity change from 0 to 32768 [ 90.539545][ T5722] loop3: detected capacity change from 0 to 32768 [ 90.565347][ T5711] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.468 (5711) [ 90.623968][ T5711] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 90.627055][ T5711] BTRFS info (device loop0): metadata ratio 2 [ 90.628796][ T5711] BTRFS info (device loop0): force zlib compression, level 3 [ 90.633760][ T5722] JBD2: Ignoring recovery information on journal [ 90.636499][ T5711] BTRFS info (device loop0): use zlib compression, level 3 [ 90.652811][ T5711] BTRFS info (device loop0): turning on async discard [ 90.679419][ T5711] BTRFS info (device loop0): enabling ssd optimizations [ 90.681450][ T5711] BTRFS info (device loop0): using spread ssd allocation scheme [ 90.682377][ T5153] binder: send failed reply for transaction 387, target dead [ 90.683507][ T5711] BTRFS info (device loop0): using free space tree [ 90.687475][ T5711] BTRFS info (device loop0): has skinny extents [ 90.734388][ T5722] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 90.742941][ T5732] loop1: detected capacity change from 0 to 32768 [ 90.776430][ T5732] XFS: ikeep mount option is deprecated. [ 90.822370][ T5732] XFS (loop1): Mounting V5 Filesystem [ 90.872640][ T4459] ocfs2: Unmounting device (7,3) on (node local) [ 91.002536][ T5732] XFS (loop1): Ending clean mount [ 91.014039][ T5732] XFS (loop1): Quotacheck needed: Please wait. [ 91.079959][ T5771] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 91.182616][ T5773] binder: 5772:5773 got transaction to invalid handle, 1 [ 91.199093][ T5773] binder: 5772:5773 transaction failed 29201/-22, size 0-0 line 2917 [ 91.201801][ T5773] binder: 5772:5773 ioctl c0306201 400000001040 returned -14 [ 91.230674][ T5732] XFS (loop1): Quotacheck: Done. [ 91.305151][ T4029] XFS (loop1): Unmounting Filesystem [ 91.386848][ T5781] binder_thread_write: 3 callbacks suppressed [ 91.386862][ T5781] binder: 5778:5781 tried to acquire reference to desc 0, got 1 instead [ 91.394323][ T5782] binder: 5780:5782 tried to acquire reference to desc 0, got 1 instead [ 91.401864][ T5781] binder: 5778:5781 got transaction to context manager from process owning it [ 91.404395][ T5781] binder: 5778:5781 ioctl c0306201 400000001040 returned -14 [ 91.407725][ T5782] binder: 5780:5782 got transaction to context manager from process owning it [ 91.428932][ T4240] binder_thread_release: 2 callbacks suppressed [ 91.428945][ T4240] binder: release 5778:5781 transaction 410 out, still active [ 91.433733][ T4240] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.442765][ T4240] binder: send failed reply for transaction 410, target dead [ 91.482584][ T5785] IPVS: set_ctl: invalid protocol: 56053 0.0.0.0:20002 [ 91.541947][ T5787] loop2: detected capacity change from 0 to 2048 [ 91.691277][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.754167][ T5799] MPTCP: addr_signal error, rm_addr=4 [ 91.852176][ T5783] loop4: detected capacity change from 0 to 32768 [ 91.933425][ T5783] JBD2: Ignoring recovery information on journal [ 91.933961][ T5801] loop1: detected capacity change from 0 to 2048 [ 92.006828][ T5801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.022926][ T5806] loop2: detected capacity change from 0 to 1024 [ 92.037596][ T5783] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.114741][ T5806] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 92.138169][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 92.214287][ T4015] binder: send failed reply for transaction 412 to 5780:5782 [ 92.248471][ T4015] binder: undelivered TRANSACTION_ERROR: 29189 [ 92.321618][ T5813] loop1: detected capacity change from 0 to 4096 [ 92.338703][ T5819] binder: 5818:5819 tried to acquire reference to desc 0, got 1 instead [ 92.349829][ T5819] binder: 5818:5819 got transaction to context manager from process owning it [ 92.352201][ T5819] binder: 5818:5819 ioctl c0306201 400000001040 returned -14 [ 92.360532][ T4243] binder: release 5818:5819 transaction 418 out, still active [ 92.362476][ T4243] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.410375][ T4243] binder: send failed reply for transaction 418, target dead [ 92.410967][ T5824] loop4: detected capacity change from 0 to 512 [ 92.461511][ T5813] ntfs: volume version 3.1. [ 92.501768][ T5824] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.902493][ T5843] binder: 5823:5843 got transaction to context manager from process owning it [ 92.902607][ T5843] binder_transaction: 3 callbacks suppressed [ 92.902639][ T5843] binder: 5823:5843 transaction failed 29201/-22, size 0-0 line 2908 [ 92.903027][ T5843] binder: 5823:5843 ioctl c0306201 400000001040 returned -14 [ 93.634527][ T5847] binder: 5846:5847 tried to acquire reference to desc 0, got 1 instead [ 93.638154][ T5849] binder: 5848:5849 tried to acquire reference to desc 0, got 1 instead [ 93.642176][ T5847] binder: 5846:5847 got transaction to context manager from process owning it [ 93.660815][ T5849] FAULT_INJECTION: forcing a failure. [ 93.660815][ T5849] name failslab, interval 1, probability 0, space 0, times 0 [ 93.664414][ T5847] binder: 5846:5847 transaction failed 29201/-22, size 0-0 line 2908 [ 93.674771][ T5849] CPU: 1 PID: 5849 Comm: syz.0.519 Not tainted 5.15.178-syzkaller #0 [ 93.676930][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 93.679670][ T5849] Call trace: [ 93.680481][ T5849] dump_backtrace+0x0/0x530 [ 93.681618][ T5849] show_stack+0x2c/0x3c [ 93.682662][ T5849] dump_stack_lvl+0x108/0x170 [ 93.683908][ T5849] dump_stack+0x1c/0x58 [ 93.685057][ T5849] should_fail+0x3b8/0x514 [ 93.686180][ T5849] __should_failslab+0xbc/0x110 [ 93.687442][ T5849] should_failslab+0x10/0x28 [ 93.688643][ T5849] slab_pre_alloc_hook+0x64/0xe8 [ 93.689933][ T5849] __kmalloc+0xc0/0x4c8 [ 93.691016][ T5849] tomoyo_realpath_from_path+0xd0/0x508 [ 93.692486][ T5849] tomoyo_path_number_perm+0x1f8/0x6b0 [ 93.693965][ T5849] tomoyo_file_ioctl+0x2c/0x3c [ 93.695176][ T5849] security_file_ioctl+0x80/0xbc [ 93.696427][ T5849] __arm64_sys_ioctl+0xa8/0x1c8 [ 93.697707][ T5849] invoke_syscall+0x98/0x2b8 [ 93.698785][ T5849] el0_svc_common+0x138/0x258 [ 93.699993][ T5849] do_el0_svc+0x58/0x14c [ 93.701078][ T5849] el0_svc+0x7c/0x1f0 [ 93.702115][ T5849] el0t_64_sync_handler+0x84/0xe4 [ 93.703429][ T5849] el0t_64_sync+0x1a0/0x1a4 [ 93.734749][ T5849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.739075][ T5849] binder: 5848:5849 got transaction to context manager from process owning it [ 93.743956][ T5849] binder: 5848:5849 transaction failed 29201/-22, size 0-0 line 2908 [ 93.763141][ T5853] loop1: detected capacity change from 0 to 8192 [ 93.956562][ T5862] netlink: 104 bytes leftover after parsing attributes in process `syz.4.524'. [ 93.960896][ T5862] netlink: 104 bytes leftover after parsing attributes in process `syz.4.524'. [ 94.030705][ T5866] binder: 5865:5866 got transaction to invalid handle, 3 [ 94.037449][ T5866] binder: 5865:5866 transaction failed 29201/-22, size 96-24 line 2917 [ 94.061491][ T5868] binder: 5867:5868 tried to acquire reference to desc 0, got 1 instead [ 94.069300][ T5868] binder: 5867:5868 got transaction to context manager from process owning it [ 94.073248][ T5844] loop2: detected capacity change from 0 to 32768 [ 94.078654][ T5868] binder: 5867:5868 transaction failed 29201/-22, size 0-0 line 2908 [ 94.082040][ T5868] binder: 5867:5868 ioctl c0306201 400000001040 returned -14 [ 94.086920][ T21] binder: release 5867:5868 transaction 442 out, still active [ 94.089213][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.111581][ T21] binder: send failed reply for transaction 442, target dead [ 94.140187][ T5872] loop4: detected capacity change from 0 to 1024 [ 94.154175][ T5844] JBD2: Ignoring recovery information on journal [ 94.174070][ T5872] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 94.203340][ T5844] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 94.282405][ T5872] loop4: detected capacity change from 0 to 256 [ 94.289942][ T4025] ocfs2: Unmounting device (7,2) on (node local) [ 94.343119][ T5872] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 94.362942][ T5878] Injecting memory failure for pfn 0x130ff3 at process virtual address 0x400000000000 [ 94.381506][ T4240] binder: release 5846:5847 transaction 430 out, still active [ 94.390124][ T5878] Memory failure: 0x130ff3: recovery action for dirty LRU page: Recovered [ 94.396250][ T4240] binder: send failed reply for transaction 430, target dead [ 94.421855][ T5878] Injecting memory failure for pfn 0x1b0bca at process virtual address 0x400000001000 [ 94.431524][ T4240] binder: release 5848:5849 transaction 432 out, still active [ 94.444682][ T5878] Memory failure: 0x1b0bca: recovery action for reserved kernel page: Ignored [ 94.449135][ T4240] binder: send failed reply for transaction 432, target dead [ 94.482459][ T5884] loop3: detected capacity change from 0 to 512 [ 94.530196][ T5884] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 94.533217][ T5884] EXT2-fs (loop3): error: couldn't mount because of unsupported optional features (4740) [ 94.576402][ T4243] Bluetooth: hci4: command 0x0405 tx timeout [ 94.680534][ T5898] binder: 5897:5898 tried to acquire reference to desc 0, got 1 instead [ 94.683604][ T5898] binder: 5897:5898 transaction failed 29201/-22, size 0-0 line 3059 [ 94.700957][ T5901] xt_TCPMSS: Only works on TCP SYN packets [ 94.733072][ T5903] binder: 5902:5903 tried to acquire reference to desc 0, got 1 instead [ 94.772772][ T5903] binder: 5902:5903 got transaction to context manager from process owning it [ 94.798458][ T5903] binder: 5902:5903 transaction failed 29201/-22, size 0-0 line 2908 [ 94.800784][ T5903] binder: 5902:5903 ioctl c0306201 400000001040 returned -14 [ 94.803207][ T4240] binder: release 5902:5903 transaction 454 out, still active [ 94.805216][ T4240] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.854784][ T5151] binder: send failed reply for transaction 454, target dead [ 94.899022][ T5908] loop0: detected capacity change from 0 to 512 [ 94.931368][ T5916] binder: 5913:5916 tried to acquire reference to desc 0, got 1 instead [ 94.935540][ T5916] binder: 5913:5916 got transaction to context manager from process owning it [ 94.937884][ T5916] binder: 5913:5916 transaction failed 29201/-22, size 0-0 line 2908 [ 94.964624][ T5908] EXT4-fs (loop0): Ignoring removed nobh option [ 94.966430][ T5908] EXT4-fs (loop0): Ignoring removed oldalloc option [ 95.001011][ T5908] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,nobh,oldalloc,,errors=continue. Quota mode: writeback. [ 95.073365][ T5921] binder: BINDER_SET_CONTEXT_MGR already set [ 95.090960][ T5921] binder: 5920:5921 ioctl 4018620d 400000000040 returned -16 [ 95.098982][ T5908] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 95.103724][ T5921] binder: tried to use weak ref as strong ref [ 95.107841][ T5908] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 95.109044][ T5921] binder: 5920:5921 Acquire 1 refcount change on invalid ref 0 ret -22 [ 95.112077][ T5908] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.112077][ T5908] [ 95.116529][ T5908] EXT4-fs (loop0): Total free blocks count 0 [ 95.118279][ T5908] EXT4-fs (loop0): Free/Dirty block details [ 95.119974][ T5908] EXT4-fs (loop0): free_blocks=39626 [ 95.121484][ T5908] EXT4-fs (loop0): dirty_blocks=1 [ 95.122848][ T5908] EXT4-fs (loop0): Block reservation details [ 95.124576][ T5908] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 95.133278][ T5921] /dev/loop0: Can't open blockdev [ 95.136092][ T5921] binder: 5920:5921 got transaction to invalid handle, 1 [ 95.138323][ T5921] binder: 5920:5921 transaction failed 29201/-22, size 0-0 line 2917 [ 95.141091][ T5921] binder: 5920:5921 ioctl c0306201 400000001040 returned -14 [ 95.354441][ T1614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.410322][ T1614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.423855][ T5909] loop3: detected capacity change from 0 to 32768 [ 95.484427][ T1614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.499153][ T5909] JBD2: Ignoring recovery information on journal [ 95.580127][ T1614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.580528][ T5909] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.658085][ T5923] loop2: detected capacity change from 0 to 40427 [ 95.688597][ T4459] ocfs2: Unmounting device (7,3) on (node local) [ 95.749811][ T5150] binder: release 5913:5916 transaction 460 out, still active [ 95.756592][ T5923] F2FS-fs (loop2): journaled quota format not specified [ 95.783016][ T5150] binder: send failed reply for transaction 460, target dead [ 95.877388][ T5937] binder: 5935:5937 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 95.882726][ T5937] binder: 5935:5937 got transaction to invalid handle, 1 [ 95.900049][ T5937] binder: 5935:5937 transaction failed 29201/-22, size 0-0 line 2917 [ 95.911552][ T5937] binder: 5935:5937 ioctl 89f0 400000000340 returned -22 [ 95.993742][ T5941] loop0: detected capacity change from 0 to 128 [ 96.054746][ T5941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.139703][ T5949] binder: 5948:5949 tried to acquire reference to desc 0, got 1 instead [ 96.197039][ T5949] binder: 5948:5949 got transaction to context manager from process owning it [ 96.261696][ T5949] binder: 5948:5949 ioctl c0306201 400000001040 returned -14 [ 96.284968][ T4015] binder: release 5948:5958 transaction 473 out, still active [ 96.287233][ T4015] binder: undelivered TRANSACTION_COMPLETE [ 96.327924][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 96.343617][ T4015] binder: send failed reply for transaction 473, target dead [ 96.508298][ T5972] udc-core: couldn't find an available UDC or it's busy [ 96.510223][ T5972] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.530407][ T5971] binder: tried to use weak ref as strong ref [ 96.532091][ T5971] binder: 5970:5971 Acquire 1 refcount change on invalid ref 0 ret -22 [ 96.537913][ T5971] binder: 5970:5971 got transaction to invalid handle, 1 [ 96.558203][ T5971] binder: 5970:5971 ioctl c0306201 400000001040 returned -14 [ 96.573135][ T5956] loop2: detected capacity change from 0 to 32768 [ 96.649381][ T5956] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 96.649381][ T5956] [ 96.687034][ T5956] xtLookup: xtSearch returned -5 [ 96.688394][ T5956] free_index: error reading directory table [ 96.696625][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.698511][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.701257][ T5926] device bridge_slave_0 entered promiscuous mode [ 96.717956][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.730494][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.733410][ T5981] binder: 5979:5981 tried to acquire reference to desc 0, got 1 instead [ 96.737278][ T5926] device bridge_slave_1 entered promiscuous mode [ 96.747431][ T5956] bridge0: port 3(syz_tun) entered blocking state [ 96.749344][ T5956] bridge0: port 3(syz_tun) entered disabled state [ 96.758008][ T5981] binder: 5979:5981 got transaction to context manager from process owning it [ 96.761148][ T5956] device syz_tun entered promiscuous mode [ 96.763337][ T5956] bridge0: port 3(syz_tun) entered blocking state [ 96.765570][ T5956] bridge0: port 3(syz_tun) entered forwarding state [ 96.887707][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.905460][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.974842][ T5965] loop3: detected capacity change from 0 to 32768 [ 96.994859][ T5926] team0: Port device team_slave_0 added [ 97.051575][ T5926] team0: Port device team_slave_1 added [ 97.057826][ T5965] JBD2: Ignoring recovery information on journal [ 97.114283][ T5965] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.182230][ T5995] binder: 5994:5995 IncRefs 0 refcount change on invalid ref -3 ret -22 [ 97.193520][ T5997] BUG: sleeping function called from invalid context at net/core/sock.c:3285 [ 97.193879][ T5995] binder: 5994:5995 BC_FREE_BUFFER u0000000000000000 no match [ 97.196525][ T5997] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5997, name: syz.2.565 [ 97.200755][ T5997] 7 locks held by syz.2.565/5997: [ 97.202019][ T5997] #0: ffff800016cbe868 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x2c/0x54 [ 97.204543][ T5997] #1: ffff800016cbe6a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x15c/0x39c [ 97.207231][ T5997] #2: ffff0000e80af690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x108/0x6d4 [ 97.210030][ T5997] #3: ffff800016d988e8 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x17c/0x33c [ 97.212830][ T5997] #4: ffff800014d42360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 97.215357][ T5997] #5: ffff0000c5629bc8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x7b0/0x10dc [ 97.218006][ T5997] #6: ffff0000d8df1820 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xcb8/0x17b4 [ 97.220584][ T5997] Preemption disabled at: [ 97.220597][ T5997] [] mptcp_diag_dump+0x7b0/0x10dc [ 97.223405][ T5997] CPU: 0 PID: 5997 Comm: syz.2.565 Not tainted 5.15.178-syzkaller #0 [ 97.225507][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 97.228169][ T5997] Call trace: [ 97.229020][ T5997] dump_backtrace+0x0/0x530 [ 97.230194][ T5997] show_stack+0x2c/0x3c [ 97.231243][ T5997] dump_stack_lvl+0x108/0x170 [ 97.232438][ T5997] dump_stack+0x1c/0x58 [ 97.233505][ T5997] ___might_sleep+0x380/0x4dc [ 97.234686][ T5997] __might_sleep+0x98/0xf0 [ 97.235859][ T5997] __lock_sock_fast+0x3c/0xf0 [ 97.237087][ T5997] mptcp_diag_get_info+0x210/0x8a0 [ 97.238488][ T5997] inet_sk_diag_fill+0xcb8/0x17b4 [ 97.239814][ T5997] mptcp_diag_dump+0xb4c/0x10dc [ 97.241116][ T5997] __inet_diag_dump+0x1e8/0x33c [ 97.242427][ T5997] inet_diag_dump_compat+0x17c/0x288 [ 97.243864][ T5997] netlink_dump+0x4a8/0xad0 [ 97.245029][ T5997] __netlink_dump_start+0x474/0x6d4 [ 97.246594][ T5997] inet_diag_rcv_msg_compat+0x1c8/0x434 [ 97.248146][ T5997] sock_diag_rcv_msg+0x174/0x39c [ 97.249502][ T5997] netlink_rcv_skb+0x20c/0x3b8 [ 97.250813][ T5997] sock_diag_rcv+0x3c/0x54 [ 97.252014][ T5997] netlink_unicast+0x664/0x938 [ 97.253422][ T5997] netlink_sendmsg+0x844/0xb38 [ 97.254766][ T5997] ____sys_sendmsg+0x584/0x870 [ 97.256070][ T5997] ___sys_sendmsg+0x214/0x294 [ 97.257241][ T5997] __arm64_sys_sendmsg+0x1ac/0x25c [ 97.258726][ T5997] invoke_syscall+0x98/0x2b8 [ 97.260031][ T5997] el0_svc_common+0x138/0x258 [ 97.261323][ T5997] do_el0_svc+0x58/0x14c [ 97.262547][ T5997] el0_svc+0x7c/0x1f0 [ 97.263584][ T5997] el0t_64_sync_handler+0x84/0xe4 [ 97.264937][ T5997] el0t_64_sync+0x1a0/0x1a4 [ 97.287363][ T5995] block nbd1: NBD_DISCONNECT [ 97.289318][ T5995] block nbd1: Send disconnect failed -89 [ 97.303767][ T4459] ocfs2: Unmounting device (7,3) on (node local) [ 97.313287][ T5995] binder: 5994:5995 got transaction to invalid handle, 1 [ 97.328781][ T5994] block nbd1: Disconnected due to user request. [ 97.333078][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.335352][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.343805][ T5994] block nbd1: shutting down sockets [ 97.359177][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.381570][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.388158][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.411031][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.483264][ T1534] binder: release 5979:5981 transaction 482 out, still active [ 97.496944][ T1534] binder: send failed reply for transaction 482, target dead [ 97.578244][ T5926] device hsr_slave_0 entered promiscuous mode [ 97.589424][ T6001] loop3: detected capacity change from 0 to 8192 [ 97.614847][ T5153] Bluetooth: hci3: command 0x0409 tx timeout [ 97.615292][ T5926] device hsr_slave_1 entered promiscuous mode [ 97.642840][ T6001] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 97.645781][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.647804][ T5926] Cannot create hsr debugfs directory [ 97.655051][ T6001] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 97.665152][ T6001] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 97.668611][ T6001] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 97.985117][ T1614] device hsr_slave_0 left promiscuous mode [ 98.034888][ T1614] device hsr_slave_1 left promiscuous mode [ 98.094701][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.096824][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.099586][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.101844][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.104399][ T1614] device bridge_slave_1 left promiscuous mode [ 98.107557][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.145707][ T1614] device bridge_slave_0 left promiscuous mode [ 98.147551][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.274907][ T1614] device veth1_macvtap left promiscuous mode [ 98.276637][ T1614] device veth0_macvtap left promiscuous mode [ 98.278429][ T1614] device veth1_vlan left promiscuous mode [ 98.280090][ T1614] device veth0_vlan left promiscuous mode [ 98.518807][ T1614] team0 (unregistering): Port device team_slave_1 removed [ 98.534685][ T1614] team0 (unregistering): Port device team_slave_0 removed [ 98.543038][ T1614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.583518][ T1614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.748775][ T1614] bond0 (unregistering): Released all slaves [ 98.911671][ T5926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.966962][ T5926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.017248][ T5926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.068074][ T5926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.212694][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.221867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.224452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.234389][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.244226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.247224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.249750][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.251695][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.263820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.269822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.272637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.277124][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.279194][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.286243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.292342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.310940][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.330554][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.333526][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.343968][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.352356][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.363719][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.372775][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.393668][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.396769][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.404078][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.542771][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.551098][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.560260][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.695362][ T5151] Bluetooth: hci3: command 0x041b tx timeout [ 99.817088][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.819945][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.858606][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.861425][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.864319][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.868564][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.871020][ T5926] device veth0_vlan entered promiscuous mode [ 99.880768][ T5926] device veth1_vlan entered promiscuous mode [ 99.931090][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.933837][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.949273][ T5926] device veth0_macvtap entered promiscuous mode [ 99.967035][ T5926] device veth1_macvtap entered promiscuous mode [ 99.993517][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.004632][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.007512][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.010377][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.025290][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.028300][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.031123][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.033978][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.046254][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.055082][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.057823][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.060412][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.071092][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.084079][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.087498][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.090262][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.104672][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.107477][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.110408][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.120740][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.123428][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.127456][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.132692][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.136290][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.142001][ T5926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.144338][ T5926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.147855][ T5926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.150071][ T5926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.247372][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.249721][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.255126][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.298932][ T4129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.301166][ T4129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.314007][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.775571][ T5151] Bluetooth: hci3: command 0x040f tx timeout [ 103.854790][ T5151] Bluetooth: hci3: command 0x0419 tx timeout