last executing test programs: 4m19.892157033s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x810011, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0xfd, 0x1e1, &(0x7f0000000640)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)='$!\x00') capset(0x0, 0x0) 4m3.982020103s ago: executing program 32 (id=4): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x810011, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0xfd, 0x1e1, &(0x7f0000000640)="$eJzslr1u01AUx//XtpwEBSExsjAQCRhwbAcQC4gsTAxIQCIGhoiYKGCIlGQgkVDgCViYkBgY2HkBJFj7EFXaqUu6deni6vpe27eRnaT56tDzk3r6t318fD6s44AgiAvL/t7ROEA+1EWUkJPnD/TER1P8d/OHn/8/fVL/9vr3Tm5sFdJiBsHizzcA/Kvq6Mf3nr67JP+/gBbrl9BwW+o6GCypeTI1qT0wvJL6naI73N+y3rZ9z3rT8Ztc2Nw43LjcVKbzm3xlaCr5MeV6bzB83/B9r7tBMa9/k6qGh0p+6rwsiGxtpX8ONDhSV8DwXOoHyEW9ES1R6r9mJPH1mfWbWGP9tWLKJZ7KGeJcvZw5KhPAcokBLA74EytVii/yld3kO5QhdIQimuh6In/Xt1QFf9Hn+MDYelfZas1cZhZ/H4t7ojPBSByHPlcyAgajBR9hYpluJPsp+MVwU9lPYpX8CD81fITl3mB4p/2h0fJa3kfXrdy379r2PbccLiJhZ+y/QrifLiXxU79JHJOZ+NTo97uOsPGxK2zaxtXC/afh1g1xzIdrTsXNK5rJPwNGPMg/qvOjzFIIgiC2ynWw40BiREJ+TaD81n12jjkSBEEQBEEQBEEQBLEaJwEAAP//63FC3Q==") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)='$!\x00') capset(0x0, 0x0) 3m19.134978286s ago: executing program 0 (id=104): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x2, 0x2, 0x1) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000f00)=""/246, 0xf6}], 0x1}, 0x2060) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x540, 0x7, 0xd26, 0xfffffffffffffff6, 0x4, 0x8, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7f, 0x8000000000000000, 0x0, 0x100000000, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x715, 0x1ff, 0xff, 0x5f1, 0x6}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x6, 0xffff, 0x4cb, 0x7, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x7b, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2004d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m17.570648247s ago: executing program 0 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000400)="2e67450fc77eb7b9e60a00000f323e66460f38806fca48b8a1ae00000000000066410f3880200f21f835c00000000f23f8660f3881143126430f01c2440f01cb8080430000c0c03235010000000f3066b8cd008ee0", 0xffffffffffffff48}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001d40)={[0xf8, 0x1, 0x2e384775, 0x4, 0x8001, 0x200000000004, 0x67, 0x225561ec, 0x401, 0x100000000000002, 0x5, 0x4, 0x1000005, 0x5, 0x251, 0x20], 0x6000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m17.086897465s ago: executing program 0 (id=109): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) 3m16.821165321s ago: executing program 0 (id=111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$eJzs3M9vFFUcAPDv7G5BfnZF/AGiomgk/mhpQeXgRRMTD5qY6AGPtRSCLNTQmghpbDEELyZKwt2YeDHxL/DkiagnE694NyTEcAE9rRl2dtlud8u2u91t3c8nGfpe9+2+73dm3s6bGaYBDKz96T9JxPaIuB4RwxGRq2+wpbKk7e7cmpv859bcZBLl8vt/J+nb4vatuclq0yT7ua1SKaQflLuURLFJvzPnL5yeKJWmzmX10dkzn4zOnL/w8qkzEyenTk6dHT969MjhsddeHX+lK3mmMd3e+/n0vj1vf3jl3cljVz769cdKvOXy1WuHFuXRHUMRMVdbJ42e625nfbejrpwU+hgIK7I5IgrZ3no9hiN/aWftteF464u+BgesqXK5XB5v/fJCGfgfS6LfEQD9UT3Qp+e/1aVHU4914eYblROgNO872VJ5pRAXszZDDee33bQ/Io4t/PttukTD9RQAgLXwczr/eanJ/K8Y8Uhdu53ZvaFiRDwYEbsi4qGI2B0RD0el7aMR8dgK+9/fUF86/8ndWF1m7Unnf69n97YWz/9qd8GK+ay2427+Q8mJU6WpQ9k6ORhDm9P6WNNPTyIW0p9/fN2q//r5X7qk/VfnglkcNwqbF7/n+MTsRMeJZ25ejNhbaJZ/EoV7WcSeiNi7yj5OvfDDvsW/yddK989/GV24z1T+LuL5yvZfiIb8q5Ll70+OPhClqUOj1b1iqd9+v/xeq/47yr8L0u2/ten+X8u/mNTfr51Z8hGb7tfH5T+/bHlOs9r9f1PywaLOP5uYnT03FrEpeWfp7+sucFfr1fZp/gcPNB//u+Lemng8ItKd+ImIeDIinspifzoinomIA8vk/8ubz368+vzXVpr//Iq2/8oL+dPXfmrVf3vb/0i1cjeodr7/2g2wk3UHAAAAG0UuIrZHkhuplXO5kZHK/5ffHVtzpemZ2RdPTH969njlGYFiDOWqV7qG666HjmXXhqv18aw+n9UPZ9eNr+a33K2PTE6Xjvc7eRhw21qM/9Rf+X5HB6w5z2vB4DL+YXCtfvz75oCN7j6jONerOIDecxSHwdVs/M/3IQ6g9xz/YXDVxv83bTSue9yr8eFNYONx/IfBZfzDQOrkuf51UYjvI5Zvk6yXUFdU+KqTtxd6EGHk1seK6mFhPB/RxzAK7f5Vizhfnu+4035/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHfwEAAP//qO7n/A==") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0) 3m16.212152366s ago: executing program 0 (id=114): syz_emit_ethernet(0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a82c"], 0x0) 3m15.667569648s ago: executing program 0 (id=116): r0 = gettid() mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9, 0x2c1, &(0x7f0000001880)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x4000, 0x11) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{r3, r4+10000000}, {0x0, 0x989680}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffdffffffffffffc) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x2a11}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) 3m14.43584414s ago: executing program 33 (id=116): r0 = gettid() mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") r2 = open(&(0x7f0000000040)='./file2\x00', 0x4000, 0x11) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{r3, r4+10000000}, {0x0, 0x989680}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffdffffffffffffc) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x2a11}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) 2m41.719141623s ago: executing program 2 (id=195): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2800400, &(0x7f0000000140)={[{}, {@delalloc}, {@noacl}, {@user_xattr}, {@nodelalloc}, {@errors_continue}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}]}, 0x4, 0xbdf, &(0x7f0000000b00)="$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") symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2m41.349188155s ago: executing program 2 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xffffffffffff0001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) 2m39.790403166s ago: executing program 2 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 2m38.69100923s ago: executing program 2 (id=201): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000070}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m37.934386645s ago: executing program 2 (id=203): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb434, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001140)={0x2c, &(0x7f0000000f00)={0x0, 0xe, 0x27, {0x27, 0x3, "14c7d266615da366059900a522f7feac6368804d76fe216b47ec32f86c4a2b322c622c0544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m37.186711818s ago: executing program 2 (id=206): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}]}) 2m35.473372759s ago: executing program 34 (id=206): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}]}) 1m58.261778844s ago: executing program 4 (id=295): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x2e, 0x21, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000140)=[@cstype3={0x5, 0x7}], 0x1) 1m57.883895057s ago: executing program 4 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r3, 0x0, 0x20004002) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 1m57.131660311s ago: executing program 4 (id=298): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) read(r0, &(0x7f0000002a80)=""/4085, 0xff5) 1m56.871080316s ago: executing program 4 (id=300): mount(0x0, 0x0, 0x0, 0x42, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)={[{@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@discard}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@showexec}, {@fat=@umask}, {@nodots}, {@nodots}, {@nodots}, {@fat=@tz_utc}, {@dots}, {@fat=@flush}]}, 0x1, 0x224, &(0x7f0000000840)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x104d886, 0x0) 1m56.534817325s ago: executing program 4 (id=301): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1800004, &(0x7f0000000280)={[{@discard_unit_segment}, {@background_gc_off}, {@discard_unit_segment}, {@disable_roll_forward}, {@background_gc_off}, {@alloc_mode_def}, {@two_active_logs}, {@nouser_xattr}, {@checkpoint_diasble}, {@noacl}, {@noacl}, {@background_gc_on}, {@alloc_mode_def}, {@inline_data}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x63, 0x34, 0x35, 0x31, 0x64, 0x35, 0x61], 0x2d, [0x37, 0x63, 0x66, 0x33], 0x2d, [0x30, 0x36, 0x6f, 0x62], 0x2d, [0x39, 0x38, 0x62, 0x62], 0x2d, [0x34, 0x39, 0x37, 0x61, 0x7d, 0x33, 0x65, 0x32]}}}]}, 0xfd, 0x5521, &(0x7f00000079c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvLiWBIiHFsZvm85HO777vvn73PSuK8u4iB3BmLSS//1qKq3GxGK9GZPulYnucjIiXIuJaRMwc2kpF/nHifERcioiro+IRs8Wc0aEvbwyvr/zyzm/f/XDh3OWvvv1xOlcMPA1ejojuVr6/281j2srjwyJfG7az2L09LGJ+oDOfH++meX63uZFV2K0dzKtl8VYrn59u7fRHcbNTq49iq72Z5bd6+Qn7w9ZBnewND2vb2bjR3Mhiu59msbWfn3dvP//dtt8f5HUaRb1PsvIxGBzEPN/ca+bXs/Uoi/XeoMjnddNGc28Uh0UsThf1tNPI1rFxjA/6Kfduu7ezlwyb2/122ktWKtVXKtU75ep22mgOmrfLtW7jzu1ksdUZTSsPmrXuaitNW51mpZ52l5LFVr1erlaTxbvNjXatl1SrlVuVm+WVpWLvRvLm/Q+STiNZHMXX272dQbvTTzbT7SR/x1KyXLn16lJyvZq8t7aerD+4d29t/f2P7n54/7W1t98oJv1rWcni8s3l5XL1Znm5unSGrv+zYtFjvH44ltK0FwBw+hzu/0d/z17R/wMTcJz+v/uoGD+x/99+EHHy/X/o/8fiVPW/Z73/P4Hrh2PR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFk/zX39VrazkI8vF/nnitQLxbgUETMR8ecTzMb5IzVnizpz/zF/7h9r+L4UWYXROS4U26WIWC22P54/6U8BAAAAnl3ffHrti7xbz18Wpr0gJim/aTNz5eMx1ZuPiLmFn8dUbWb08uKYimU/3+dib0zVshtY82Mqlt9yOzeuav/L7JEwfyiU8jAz0eUAAAATcbQTmGwXAgAAwCR9Pu0FMB2lOHiUefAsOPvP+78fCF48MgIAAABOodK0FwAAAACcuKz/9/1/AAAA8GzLv/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/2Lmf28SBKA7AzwYv7D8tWu19W9kblLEl5JhjRAFpggJyoIY0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJDta7i5u9t25zdvp08owEAAAAu2VbrRf3PLPW/N/d/Nrd+N/0iIsqIuDR3H8WXs8xRk1O9Pn93+nz1pob7iDrh8B6T5voWEf+a6+lX158CAAAAfF6b5WqeZuvpz2zoguhTWrQpf/zPlFdERDV7zJRWHvL+ZAqrv9/juM6UVi9gTTOFpSW3ca60d6l/7sdVu+lJU6SmvPiyY5HZxg4AAPRodNb0OwsBAACgT1dDF8AwinjZyjxuBU5S02zvfT3rAQAAAB9QMXQBAAAAQOfq+X9P5//tnf8HAAAAw0jn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANClbbVebJareduc3b6dPKMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZ/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePO7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527udFbioOAPhLMpnaqjiuMocVUfCgFzud1tbexIOyePBPEJbttK6d+qPdgy1F3Is32XMvokcRQVlv/R96bqGXeuthDhXE40gyyUzaLjormKS7nw+8vG9CyPu+BJb95mUXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEqTdxdxkm16szgujt1+cH0j6+880mdu7txdzVoWR3Um/WR4uboT9ZtLBAAAgMMjKev7EMK9dHct6+NeXv+n5TlZzf/9s7O4rOcfrfvLvqz9s/bbr/dfnA/Um42TXfT85nh04vFUOv/fLNvtuX89o5Pf+fzdS5I/kPiD7RcmaX4/o29v3Xqvm4dH6sgWAPgvjpd9EZS/D2X9sMnEADg0OpXCu6z/k16zOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUYbIdni7jKISw2lnEmTsPrm/s1d/cubtatjM3buyErxfXzC6RhhDOb45HJ2qdTbtduXrt4vp4PLpcf/BKCKGp0d8ppn/xoyVODqGR+7P/4K92pNG2IC4edlvyeTKCBn8oAQBwIKVFy+r6e+nuWnYsWglh+sPD9f/rlTgsWf/f//jM7epY1fp/WNsM22+wdenzwZWr197cvLR+YXRh9OlbJ4dvD0+dPX367CB/VzLwxgQAAIB9m06n0/lOt2jV+j9eeXz9/1glDkvW/198N/yqOnCi/t/TYtGv6UwAAAAOt+df/fOPaI/jUbcbvlzf2ro8nG3n+ydn2wZS3bcjRavW/8lK01kBAAAAdZhsRw+t/5+rxGHJ9f9nfnzp5+o1kxDC0WL9//jGZ+Nz9U2n1er4c+Km5wgAAECzjhatuv6f5t//x/NPHuIQwhuvzeLi3wD+Y/2fFvV/8v43P1XHqn7/f6q+KbZS3J/dj7zvh9DpN50RAAAAB9lTRcuK/d/T3bVPfjn2Ydf3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zsAAP//IvVAvA==") 1m55.878094443s ago: executing program 4 (id=303): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0x3, 0x8080000, 0xb, 0x0, 0xb, 0x2, 0x0, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xb000, 0x60000, 0xd, 0x2, 0x0, 0x3, 0x2d, 0x7, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0x3, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x8, 0xf5, 0x5, 0x8, 0x3, 0x10}, {0xf000, 0xe000, 0xf, 0x7, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x9, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x0, 0x60000, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x25000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000003, 0x5, 0x0, 0x9]}) 1m55.287524078s ago: executing program 35 (id=303): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0x3, 0x8080000, 0xb, 0x0, 0xb, 0x2, 0x0, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xb000, 0x60000, 0xd, 0x2, 0x0, 0x3, 0x2d, 0x7, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0x3, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x8, 0xf5, 0x5, 0x8, 0x3, 0x10}, {0xf000, 0xe000, 0xf, 0x7, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x9, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x0, 0x60000, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x25000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000003, 0x5, 0x0, 0x9]}) 44.767156252s ago: executing program 7 (id=401): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0xe, 0x8, 0xc1e6, 0x1ff}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x2, 0x3b10, 0xfffa, 0x7}}) 44.575988383s ago: executing program 7 (id=402): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) close(0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2c, 0x3, 0x0) splice(r3, 0x0, r2, 0x0, 0x4ff9c, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x567, &(0x7f0000000540)="$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") socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 43.161532746s ago: executing program 7 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000180)=0x1f5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x62040200) syz_pidfd_open(r1, 0x0) 38.185250826s ago: executing program 7 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r3, 0x400, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x14) 31.240810983s ago: executing program 7 (id=423): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0xdfc, 0x5, 0x0, 0x2000af, 0x8, "1b93000000000000000900"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x0, 0x3}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@private0}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000001800)=""/248, 0xf8}], 0x1, 0x40000004, 0x0) 27.702230149s ago: executing program 7 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r3, 0x400, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x14) 12.504123408s ago: executing program 36 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r3, 0x400, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x14) 11.099578881s ago: executing program 5 (id=455): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0xdfc, 0x5, 0x0, 0x2000af, 0x8, "1b93000000000000000900"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x0, 0x3}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000180)={@private0}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000001800)=""/248, 0xf8}], 0x1, 0x40000004, 0x0) 10.801647738s ago: executing program 6 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x25, &(0x7f00000002c0)=0x0) io_submit(r1, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x120}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 10.407478481s ago: executing program 1 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, &(0x7f0000001e80)={'syz', 0x1}, &(0x7f0000000080)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s\x95\xd9\xbd>\x97\x90\xde#\xb1&b\fy\x96b\xecc\xdbr\x94\x0e+?\xea\x1ey\x1a\xa4@\xb3\bV\xb7\xc3k\x9113,', 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r4, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@discard}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") socket$unix(0x1, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "979d3101925d368394ba4f98d036ca59319add3ff41b2248dd568fa6aef21fd2", "4f5a1d5087420d1ea92fe831a94d203b9289fad293eba9f6923c050080b9d6ca", "0cc745e828fabdaf0524377c45e84e9aa3ea198973a5fc3b97347529e5d255cb", "9452ed0223b13472630c9f13fb0265faa1cf93fde267d76377af4487e72dacf4", "7aadf39f68bf62fb7afb4425e04a64f000c61554b55e4bfe09305f932af8e4c2", "7a0ef6f1f3e2311a50fcaef1", 0x0, 0x6, 0x0, 0x8, 0x2}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) 9.078767849s ago: executing program 6 (id=458): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0000000500000002000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x003S\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b100000000000000000000000800000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) munmap(&(0x7f00000b7000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=r3) recvmmsg$unix(r2, &(0x7f000001c480)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000480)=""/76, 0x4c}], 0x1, &(0x7f000001a240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000380)=""/56, 0x38}, {&(0x7f0000000700)=""/201, 0xc9}, {&(0x7f00000009c0)=""/119, 0x77}], 0x4, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000940)=""/11, 0xb}, {&(0x7f000001c840)=""/4102, 0x1006}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/177, 0xb1}, {&(0x7f000001b240)=""/4081, 0xff1}], 0x5, &(0x7f0000000dc0)}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e00)=""/73, 0x49}, {&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/171, 0xab}, {&(0x7f0000000f80)=""/129, 0x81}], 0x4, &(0x7f0000001080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001180), 0x6e, 0x0, 0x0, &(0x7f000001c440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x5, 0x40000000, &(0x7f000001c5c0)={0x0, 0x989680}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853"], 0x5, 0x5505, &(0x7f0000000340)="$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") r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x800000a1e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 8.558811789s ago: executing program 5 (id=459): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x0, 0x2, 0x6, 0xfefa}, 0x203d, [0x8000, 0x1, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x17f, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xfffffffb, 0x0, 0x5, 0x4, 0xc, 0x800, 0x2003c5a, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x8bd, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x42bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x400, 0x6, 0x1, 0xffffffff, 0x5, 0x1000005, 0x0, 0xa, 0x6e4, 0x1, 0x4, 0xb, 0x4, 0x7, 0x9, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x200003, 0x8005, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x80004, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x2000b, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x84, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0x800bb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x1, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x0, 0x0, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.365793389s ago: executing program 1 (id=460): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40540, 0x0) ppoll(&(0x7f0000002800)=[{r0, 0x1000}], 0x1, &(0x7f0000002880), 0x0, 0x0) 7.118563953s ago: executing program 1 (id=461): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000140)=[@cstype3={0x5, 0x7}], 0x1) 7.020407069s ago: executing program 5 (id=462): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='tracefs\x00', 0x10005, &(0x7f0000000200)='\x00\x80\x00\x00\x00\x00\x00\x06\x8a\x82,\x9eA\x93\x8a\xb4\xf1y\x8d\x80\x00\xbb\x14C\xee\xd2(]\x1fZG\xdb\xee\xd3\xcf\x98+\x1d\x01\x87Q\xe9\x03H;0\xa8\xe4\xfe\x1a\xbb\x17\xb9\xf0\xe2\t\x93\xde\xf4\xad\x8a\xa2\xf6{\x1d\x02\x85I\f\x06\xe0\x03\xcd\xca\xa2d\x0e\x1d\xc6[\xe8\xd2\xe1\x9cX\xed\xc1?n9%\x00#_\b\xaadP\xf8\xab\xa0#') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) accept(r4, &(0x7f0000000280)=@generic, &(0x7f00000000c0)=0x80) r5 = syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b4, 0x800, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e8, 0x2, 0x3, 0x10f, 0x0, r5}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) pread64(0xffffffffffffffff, &(0x7f0000002340)=""/4096, 0x1000, 0x80) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x81, 0x2, 0x8, 0x200, 0x6, r6}) io_uring_enter(r5, 0x87, 0x0, 0x1, 0x0, 0x0) capget(&(0x7f0000000040)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000080)={0xa, 0x3, 0xfffffff4, 0x10000, 0x200, 0x4d}) 6.559755066s ago: executing program 1 (id=463): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) close(0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2c, 0x3, 0x0) splice(r3, 0x0, r2, 0x0, 0x4ff9c, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x567, &(0x7f0000000540)="$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") socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 5.507140858s ago: executing program 5 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r3, r4, 0x0) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x560f, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000000000000000000030000000003000000020000000000000000000000000000010500000020000000020000000000000e0300004fde00000000002e"], 0x0, 0x54}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x70bd2d, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000004) 4.285647849s ago: executing program 1 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000180)=0x1f5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x62040200) syz_pidfd_open(r1, 0x0) 4.117892589s ago: executing program 5 (id=466): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0xdfc, 0x5, 0x0, 0x2000af, 0x8, "1b93000000000000000900"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x0, 0x3}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000180)={@private0}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000001800)=""/248, 0xf8}], 0x1, 0x40000004, 0x0) 4.051098993s ago: executing program 6 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, &(0x7f0000001e80)={'syz', 0x1}, &(0x7f0000000080)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s\x95\xd9\xbd>\x97\x90\xde#\xb1&b\fy\x96b\xecc\xdbr\x94\x0e+?\xea\x1ey\x1a\xa4@\xb3\bV\xb7\xc3k\x9113,', 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r4, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@discard}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") socket$unix(0x1, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "979d3101925d368394ba4f98d036ca59319add3ff41b2248dd568fa6aef21fd2", "4f5a1d5087420d1ea92fe831a94d203b9289fad293eba9f6923c050080b9d6ca", "0cc745e828fabdaf0524377c45e84e9aa3ea198973a5fc3b97347529e5d255cb", "9452ed0223b13472630c9f13fb0265faa1cf93fde267d76377af4487e72dacf4", "7aadf39f68bf62fb7afb4425e04a64f000c61554b55e4bfe09305f932af8e4c2", "7a0ef6f1f3e2311a50fcaef1", 0x0, 0x6, 0x0, 0x8, 0x2}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) 1.687446951s ago: executing program 6 (id=468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x25, &(0x7f00000002c0)=0x0) io_submit(r1, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x120}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 580.508995ms ago: executing program 1 (id=469): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x0, 0x2, 0x6, 0xfefa}, 0x203d, [0x8000, 0x1, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x17f, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xfffffffb, 0x0, 0x5, 0x4, 0xc, 0x800, 0x2003c5a, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x8bd, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x42bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x400, 0x6, 0x1, 0xffffffff, 0x5, 0x1000005, 0x0, 0xa, 0x6e4, 0x1, 0x4, 0xb, 0x4, 0x7, 0x9, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x200003, 0x8005, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x80004, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x2000b, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x84, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0x800bb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x1, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x0, 0x0, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 495.10207ms ago: executing program 6 (id=470): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000140)=[@cstype3={0x5, 0x7}], 0x1) 431.372715ms ago: executing program 5 (id=471): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='tracefs\x00', 0x10005, &(0x7f0000000200)='\x00\x80\x00\x00\x00\x00\x00\x06\x8a\x82,\x9eA\x93\x8a\xb4\xf1y\x8d\x80\x00\xbb\x14C\xee\xd2(]\x1fZG\xdb\xee\xd3\xcf\x98+\x1d\x01\x87Q\xe9\x03H;0\xa8\xe4\xfe\x1a\xbb\x17\xb9\xf0\xe2\t\x93\xde\xf4\xad\x8a\xa2\xf6{\x1d\x02\x85I\f\x06\xe0\x03\xcd\xca\xa2d\x0e\x1d\xc6[\xe8\xd2\xe1\x9cX\xed\xc1?n9%\x00#_\b\xaadP\xf8\xab\xa0#') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) accept(0xffffffffffffffff, &(0x7f0000000280)=@generic, &(0x7f00000000c0)=0x80) r4 = syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b4, 0x800, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e8, 0x2, 0x3, 0x10f, 0x0, r4}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) pread64(0xffffffffffffffff, &(0x7f0000002340)=""/4096, 0x1000, 0x80) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x81, 0x2, 0x8, 0x200, 0x6, r5}) io_uring_enter(r4, 0x87, 0x0, 0x1, 0x0, 0x0) capget(&(0x7f0000000040)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000080)={0xa, 0x3, 0xfffffff4, 0x10000, 0x200, 0x4d}) 0s ago: executing program 6 (id=472): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1600"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0) kernel console output (not intermixed with test programs): 38-01-19 (0x7fffffff) [ 132.569095][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.605021][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.539363][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.602474][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.751114][ T8] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 136.716569][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.946144][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.198413][ T8] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 137.262666][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.313163][ T8] usb 3-1: config 0 descriptor?? [ 137.676123][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 137.682987][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 137.713646][ T8] usb 3-1: USB disconnect, device number 2 [ 137.901501][ T6240] loop2: detected capacity change from 0 to 256 [ 138.110792][ T6240] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 138.280303][ T6243] loop4: detected capacity change from 0 to 8192 [ 139.672174][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 140.162645][ T6270] loop2: detected capacity change from 0 to 256 [ 140.191375][ T6272] loop1: detected capacity change from 0 to 128 [ 140.479288][ T6270] FAT-fs (loop2): Directory bread(block 64) failed [ 140.537660][ T6270] FAT-fs (loop2): Directory bread(block 65) failed [ 140.608740][ T6270] FAT-fs (loop2): Directory bread(block 66) failed [ 140.658259][ T6270] FAT-fs (loop2): Directory bread(block 67) failed [ 140.726033][ T6270] FAT-fs (loop2): Directory bread(block 68) failed [ 140.800107][ T6270] FAT-fs (loop2): Directory bread(block 69) failed [ 141.118705][ T6270] FAT-fs (loop2): Directory bread(block 70) failed [ 141.118774][ T6270] FAT-fs (loop2): Directory bread(block 71) failed [ 141.118879][ T6270] FAT-fs (loop2): Directory bread(block 72) failed [ 141.118908][ T6270] FAT-fs (loop2): Directory bread(block 73) failed [ 141.533486][ T6279] process 'syz.1.76' launched './file2' with NULL argv: empty string added [ 142.036461][ T6284] loop0: detected capacity change from 0 to 128 [ 142.378479][ T6289] loop2: detected capacity change from 0 to 256 [ 142.479879][ T6292] wg1: entered promiscuous mode [ 142.484838][ T6292] wg1: entered allmulticast mode [ 142.591310][ T6273] loop4: detected capacity change from 0 to 262144 [ 142.605005][ T5779] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.618641][ T6273] F2FS-fs (loop4): old and new quota format mixing [ 142.903435][ T5780] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.291150][ T6305] loop2: detected capacity change from 0 to 128 [ 146.404084][ T6307] loop0: detected capacity change from 0 to 256 [ 146.506265][ T6307] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 146.936839][ T6324] loop0: detected capacity change from 0 to 512 [ 146.978173][ T6324] EXT4-fs: Ignoring removed orlov option [ 147.019448][ T6324] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.036859][ T6324] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.333601][ T6324] EXT4-fs (loop0): 1 orphan inode deleted [ 147.376815][ T6324] EXT4-fs (loop0): 1 truncate cleaned up [ 147.434698][ T6330] loop1: detected capacity change from 0 to 256 [ 147.443137][ T6324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.791511][ T6324] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 147.900383][ T6324] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 147.968198][ T6324] overlayfs: failed to verify upper root origin [ 148.066694][ T6335] loop4: detected capacity change from 0 to 4096 [ 148.274238][ T6335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.342728][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.168230][ T6352] loop0: detected capacity change from 0 to 256 [ 149.271816][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.305275][ T6352] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 149.594540][ T6364] loop4: detected capacity change from 0 to 512 [ 149.649035][ T6364] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.655556][ T6364] EXT4-fs: inline encryption not supported [ 149.708222][ T6364] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.755111][ T6364] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.764645][ T6364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.837647][ T6364] EXT4-fs (loop4): 1 truncate cleaned up [ 149.869967][ T6364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.347971][ T28] audit: type=1800 audit(1770630502.772:2): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.97" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 151.477739][ T6357] loop1: detected capacity change from 0 to 40427 [ 151.504819][ T28] audit: type=1800 audit(1770630502.772:3): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.97" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 151.534267][ T6375] loop0: detected capacity change from 0 to 8192 [ 151.587438][ T6357] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 151.604454][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.656694][ T6357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 151.737177][ T6357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 151.958170][ T6357] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 151.985815][ T6357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.446867][ T6400] loop4: detected capacity change from 0 to 512 [ 152.615673][ T6405] loop0: detected capacity change from 0 to 1024 [ 152.736000][ T6400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.101: bg 0: block 393: padding at end of block bitmap is not set [ 152.855602][ T6400] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 152.937832][ T6400] EXT4-fs (loop4): 2 truncates cleaned up [ 152.973489][ T6405] EXT4-fs: Ignoring removed i_version option [ 152.981644][ T6400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.991086][ T6405] EXT4-fs: inline encryption not supported [ 153.021953][ T6405] EXT4-fs (loop0): Test dummy encryption mode enabled [ 153.089843][ T6405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.168436][ T6400] EXT4-fs error (device loop4): empty_inline_dir:1867: inode #12: block 7: comm syz.4.101: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 153.255902][ T6400] EXT4-fs warning (device loop4): empty_inline_dir:1874: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 153.285740][ T6414] loop2: detected capacity change from 0 to 512 [ 153.339868][ T6414] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 153.382307][ T6414] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 153.396532][ T6405] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 153.408961][ T6414] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.430539][ T6414] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.103: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 153.524087][ T6414] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.103: couldn't read orphan inode 13 (err -117) [ 153.545888][ T6414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.604564][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.998260][ T6426] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 154.658831][ T6426] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (24564!=0) [ 154.822821][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.852534][ T6430] loop1: detected capacity change from 0 to 512 [ 154.860095][ T6430] EXT4-fs: Ignoring removed orlov option [ 154.880768][ T6430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.006638][ T6430] EXT4-fs (loop1): 1 orphan inode deleted [ 155.027161][ T6430] EXT4-fs (loop1): 1 truncate cleaned up [ 155.043257][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.057296][ T6437] loop2: detected capacity change from 0 to 512 [ 155.155037][ T6437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.242963][ T6430] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 155.303672][ T6437] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.322441][ T6430] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 155.348149][ T6430] overlayfs: failed to verify upper root origin [ 155.413510][ T6437] EXT4-fs (loop2): shut down requested (0) [ 155.549605][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.674278][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.072118][ T6466] loop0: detected capacity change from 0 to 512 [ 156.087536][ T6466] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 156.098053][ T5841] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.115538][ T6466] EXT4-fs (loop0): orphan cleanup on readonly fs [ 156.125393][ T6466] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.111: Block bitmap for bg 0 marked uninitialized [ 156.192462][ T6466] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 156.231472][ T6466] EXT4-fs (loop0): 1 orphan inode deleted [ 156.242722][ T6466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.308029][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 156.341823][ T5841] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 156.357970][ T5841] usb 2-1: config 0 has no interface number 0 [ 156.393149][ T5841] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 156.408154][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.426506][ T5841] usb 2-1: Product: syz [ 156.437986][ T5841] usb 2-1: Manufacturer: syz [ 156.442674][ T5841] usb 2-1: SerialNumber: syz [ 156.472089][ T5841] usb 2-1: config 0 descriptor?? [ 156.518505][ T5841] smsc95xx v2.0.0 [ 156.522240][ T5841] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 156.539571][ T5766] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /34/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 156.548826][ T5841] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 156.580317][ T5766] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 156.601497][ T5766] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 156.744999][ T8] usb 2-1: USB disconnect, device number 3 [ 157.013870][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.101194][ T2947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.117686][ T6478] loop2: detected capacity change from 0 to 512 [ 157.130226][ T6478] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 157.163024][ T6478] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 157.183953][ T6478] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.197510][ T6478] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.115: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 157.232356][ T6478] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.115: couldn't read orphan inode 13 (err -117) [ 157.275644][ T6478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.311554][ T2947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.621710][ T2947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.685890][ T6482] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.277299][ T2947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.328863][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.729457][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.768463][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.778535][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.789630][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.797682][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.805650][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.485529][ T6517] loop2: detected capacity change from 0 to 16 [ 161.529938][ T6517] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 146300) [ 161.946950][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.158475][ T5776] Bluetooth: hci0: command tx timeout [ 163.209175][ T6514] chnl_net:caif_netlink_parms(): no params data found [ 163.425380][ T2947] hsr_slave_0: left promiscuous mode [ 163.450485][ T2947] hsr_slave_1: left promiscuous mode [ 163.466762][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.491243][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.519603][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.527088][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.555338][ T2947] bridge_slave_1: left allmulticast mode [ 163.565373][ T2947] bridge_slave_1: left promiscuous mode [ 163.574523][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.594104][ T2947] bridge_slave_0: left allmulticast mode [ 163.610235][ T2947] bridge_slave_0: left promiscuous mode [ 163.626786][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.721262][ T2947] veth1_macvtap: left promiscuous mode [ 163.741908][ T2947] veth0_macvtap: left promiscuous mode [ 163.776635][ T2947] veth1_vlan: left promiscuous mode [ 163.794950][ T2947] veth0_vlan: left promiscuous mode [ 163.869918][ T6537] loop1: detected capacity change from 0 to 40427 [ 163.893025][ T6537] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 163.911010][ T6537] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.301522][ T5776] Bluetooth: hci0: command tx timeout [ 164.509722][ T6537] F2FS-fs (loop1): invalid crc value [ 164.673939][ T6537] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.790606][ T6537] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 164.797748][ T6537] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.020348][ T2952] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 165.049990][ T2952] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 166.013692][ T2947] team0 (unregistering): Port device team_slave_1 removed [ 166.034527][ T5858] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.051255][ T5773] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 166.084969][ T2947] team0 (unregistering): Port device team_slave_0 removed [ 166.138301][ T2947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.197860][ T2947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.252678][ T5858] usb 2-1: config 0 has no interfaces? [ 166.261752][ T5858] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 166.271221][ T5773] usb 3-1: Using ep0 maxpacket: 16 [ 166.281817][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.301891][ T5858] usb 2-1: config 0 descriptor?? [ 166.307818][ T5773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.319630][ T5776] Bluetooth: hci0: command tx timeout [ 166.327416][ T5773] usb 3-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 166.344429][ T5773] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.363592][ T5773] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 166.379370][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.395600][ T5773] usb 3-1: config 0 descriptor?? [ 166.436694][ T5773] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 166.642734][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.666888][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.941700][ T2947] bond0 (unregistering): Released all slaves [ 167.042605][ T6593] x_tables: ip_tables: osf match: only valid for protocol 6 [ 168.038726][ T6588] syzkaller0: entered promiscuous mode [ 168.044297][ T6588] syzkaller0: entered allmulticast mode [ 168.329665][ T27] usb 2-1: USB disconnect, device number 4 [ 168.337999][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.366242][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.400279][ T5776] Bluetooth: hci0: command tx timeout [ 168.409671][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.417023][ T6514] bridge_slave_0: entered allmulticast mode [ 168.445616][ T6514] bridge_slave_0: entered promiscuous mode [ 168.491985][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.513523][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.533916][ T6514] bridge_slave_1: entered allmulticast mode [ 168.546106][ T6514] bridge_slave_1: entered promiscuous mode [ 168.555985][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 168.570428][ T8] usb 5-1: config 0 has an invalid interface number: 201 but max is 0 [ 168.578969][ T8] usb 5-1: config 0 has no interface number 0 [ 168.585164][ T8] usb 5-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice=d8.06 [ 168.621918][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.663658][ T6514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.672036][ T8] usb 5-1: config 0 descriptor?? [ 168.709617][ T6514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.907066][ T8] usb 5-1: USB disconnect, device number 2 [ 168.927748][ T6514] team0: Port device team_slave_0 added [ 168.977586][ T6514] team0: Port device team_slave_1 added [ 169.111986][ T27] usb 3-1: USB disconnect, device number 3 [ 169.134925][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.160496][ T6617] 9pnet_fd: Insufficient options for proto=fd [ 169.175063][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.225780][ T6514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.262097][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.279561][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.330211][ T6514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.444003][ T6514] hsr_slave_0: entered promiscuous mode [ 169.479061][ T6514] hsr_slave_1: entered promiscuous mode [ 169.524425][ T27] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.583861][ T27] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.731417][ T6622] loop2: detected capacity change from 0 to 4096 [ 169.759814][ T6622] EXT4-fs: Ignoring removed orlov option [ 169.820319][ T6622] EXT4-fs (loop2): Test dummy encryption mode enabled [ 169.886993][ T6622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.981188][ T6626] fido_id[6626]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.058696][ T6634] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.219830][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.370160][ T6514] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.410670][ T6514] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.467005][ T6514] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.490905][ T6644] loop2: detected capacity change from 0 to 256 [ 170.531418][ T6514] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.548886][ T6644] exfat: Deprecated parameter 'utf8' [ 170.564614][ T6644] exfat: Deprecated parameter 'namecase' [ 170.587027][ T6644] exfat: Deprecated parameter 'utf8' [ 170.611338][ T6644] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 170.927488][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.022139][ T6514] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.101381][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.108647][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.136968][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.144287][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.747688][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.957129][ T6683] loop4: detected capacity change from 0 to 512 [ 172.057339][ T6683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.104844][ T6683] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.228617][ T6683] EXT4-fs (loop4): shut down requested (0) [ 172.437210][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.482631][ T6698] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.831733][ T6514] veth0_vlan: entered promiscuous mode [ 172.891593][ T6514] veth1_vlan: entered promiscuous mode [ 173.002003][ T6514] veth0_macvtap: entered promiscuous mode [ 174.734410][ T6514] veth1_macvtap: entered promiscuous mode [ 174.771620][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.783085][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.793919][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.804894][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.815980][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.832425][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.844843][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.893024][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.904429][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.933463][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.960197][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.971340][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.985897][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.003832][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.032824][ T6514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.055237][ T6514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.074666][ T6514] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.098265][ T6514] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.466466][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.501408][ T6728] loop4: detected capacity change from 0 to 256 [ 175.527955][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.645792][ T6728] FAT-fs (loop4): Directory bread(block 64) failed [ 175.698167][ T6728] FAT-fs (loop4): Directory bread(block 65) failed [ 175.751386][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.907079][ T6728] FAT-fs (loop4): Directory bread(block 66) failed [ 175.915495][ T6728] FAT-fs (loop4): Directory bread(block 67) failed [ 175.939098][ T6728] FAT-fs (loop4): Directory bread(block 68) failed [ 175.945787][ T6728] FAT-fs (loop4): Directory bread(block 69) failed [ 175.953385][ T6728] FAT-fs (loop4): Directory bread(block 70) failed [ 177.076450][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.080663][ T6728] FAT-fs (loop4): Directory bread(block 71) failed [ 177.093094][ T6728] FAT-fs (loop4): Directory bread(block 72) failed [ 177.101931][ T6728] FAT-fs (loop4): Directory bread(block 73) failed [ 177.299904][ T6728] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.755911][ T6753] loop5: detected capacity change from 0 to 512 [ 177.797824][ T6753] EXT4-fs: Ignoring removed orlov option [ 177.825137][ T6755] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 177.884759][ T6753] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 177.973157][ T6753] EXT4-fs (loop5): 1 orphan inode deleted [ 177.993198][ T6753] EXT4-fs (loop5): 1 truncate cleaned up [ 178.023830][ T6753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.144990][ T6753] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 178.202078][ T6753] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 178.229686][ T6753] overlayfs: failed to verify upper root origin [ 178.609773][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.743841][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.163'. [ 181.453836][ T6807] loop4: detected capacity change from 0 to 512 [ 181.580710][ T6807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.612236][ T6807] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.698520][ T6807] Quota error (device loop4): do_check_range: Getting block 33554437 out of range 1-5 [ 181.710050][ T6807] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 181.720201][ T6807] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.170: Failed to acquire dquot type 0 [ 181.825222][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.638535][ T6837] loop5: detected capacity change from 0 to 2048 [ 182.721091][ T6837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.817494][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.010888][ T6856] overlayfs: failed to resolve './file0/../file0': -2 [ 188.184732][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 188.377799][ T6919] loop2: detected capacity change from 0 to 256 [ 188.378348][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 188.419965][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.437984][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 188.478151][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.497693][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 188.520590][ T6919] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 188.532851][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.559436][ T6919] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 188.571117][ T9] usb 5-1: config 0 descriptor?? [ 188.592581][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 189.258927][ T6939] loop1: detected capacity change from 0 to 512 [ 189.306953][ T6939] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.432907][ T6907] x_tables: ip_tables: osf match: only valid for protocol 6 [ 190.890950][ T6962] capability: warning: `syz.2.193' uses 32-bit capabilities (legacy support in use) [ 191.230645][ T6966] loop2: detected capacity change from 0 to 4096 [ 191.241541][ T6967] xt_hashlimit: size too large, truncated to 1048576 [ 191.253682][ T6966] ext4: Unknown parameter 'noacl' [ 191.279834][ T6969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 191.676108][ T6974] loop1: detected capacity change from 0 to 512 [ 191.695394][ T5773] usb 5-1: USB disconnect, device number 3 [ 191.715625][ T6974] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.751942][ T6974] EXT4-fs: inline encryption not supported [ 191.764235][ T6974] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.833524][ T6974] EXT4-fs (loop1): Test dummy encryption mode enabled [ 191.880983][ T6974] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.070366][ T6974] EXT4-fs (loop1): 1 truncate cleaned up [ 192.262569][ T6974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.762686][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.201402][ T6999] loop2: detected capacity change from 0 to 512 [ 194.246687][ T6999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.312020][ T6999] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.563068][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570165][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.855312][ T5767] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 194.932158][ T5767] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 194.933588][ T6981] loop4: detected capacity change from 0 to 40427 [ 194.975579][ T6981] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 195.002330][ T6981] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 195.047151][ T6981] F2FS-fs (loop4): invalid crc value [ 195.072653][ T6981] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4) [ 195.341810][ T7020] loop4: detected capacity change from 0 to 128 [ 195.384254][ T7020] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.393797][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.433690][ T7020] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.455281][ T5945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.722629][ T5945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.751177][ T5972] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.006952][ T5945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.141796][ T5945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.825367][ T7046] loop1: detected capacity change from 0 to 256 [ 197.840346][ T7046] exfat: Deprecated parameter 'utf8' [ 197.846087][ T7046] exfat: Deprecated parameter 'namecase' [ 197.853376][ T7046] exfat: Deprecated parameter 'namecase' [ 197.859410][ T7046] exfat: Deprecated parameter 'utf8' [ 198.005792][ T7046] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 199.112812][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.125297][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.185648][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.198806][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.210958][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 199.220009][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.393044][ T7068] netlink: 136 bytes leftover after parsing attributes in process `syz.1.212'. [ 200.607788][ T7072] loop4: detected capacity change from 0 to 4096 [ 200.619708][ T7072] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.626292][ T7072] EXT4-fs: Ignoring removed orlov option [ 200.726085][ T7072] EXT4-fs (loop4): Test dummy encryption mode enabled [ 200.736689][ T7080] loop1: detected capacity change from 0 to 256 [ 200.782884][ T7072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.949056][ T7080] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 201.238360][ T7072] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 201.296970][ T7086] overlayfs: failed to resolve './bus': -2 [ 201.308865][ T7088] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 201.386203][ T7102] loop1: detected capacity change from 0 to 512 [ 201.499119][ T7102] EXT4-fs: Ignoring removed i_version option [ 201.525631][ T51] Bluetooth: hci1: command tx timeout [ 201.594497][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.605950][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 201.645846][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.017086][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.186551][ T7116] loop4: detected capacity change from 0 to 512 [ 202.298087][ T7116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.363655][ T7116] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 202.426588][ T7116] System zones: 1-2, 4-12, 8-8 [ 202.473404][ T7116] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.219: iget: bad i_size value: 38620345925642 [ 202.516124][ T7116] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.219: couldn't read orphan inode 15 (err -117) [ 202.577746][ T7116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.558162][ T5945] hsr_slave_0: left promiscuous mode [ 203.590477][ T5945] hsr_slave_1: left promiscuous mode [ 203.598087][ T51] Bluetooth: hci1: command tx timeout [ 203.630367][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.652092][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.671520][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.692738][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.713078][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.764510][ T5945] bridge_slave_1: left allmulticast mode [ 203.792011][ T5945] bridge_slave_1: left promiscuous mode [ 203.808322][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.829541][ T5945] bridge_slave_0: left allmulticast mode [ 203.835290][ T5945] bridge_slave_0: left promiscuous mode [ 203.858575][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.940369][ T5945] veth1_macvtap: left promiscuous mode [ 203.946025][ T5945] veth0_macvtap: left promiscuous mode [ 203.968327][ T5945] veth1_vlan: left promiscuous mode [ 203.978353][ T5945] veth0_vlan: left promiscuous mode [ 205.022785][ T7138] loop4: detected capacity change from 0 to 40427 [ 205.071497][ T7138] F2FS-fs (loop4): heap/no_heap options were deprecated [ 205.091248][ T7138] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff [ 205.607476][ T7142] binder: 7141:7142 ioctl c0306201 200000000200 returned -22 [ 205.678520][ T51] Bluetooth: hci1: command tx timeout [ 205.900139][ T5945] team0 (unregistering): Port device team_slave_1 removed [ 206.000706][ T5945] team0 (unregistering): Port device team_slave_0 removed [ 206.103779][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.264410][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.390048][ T7149] loop4: detected capacity change from 0 to 4096 [ 206.492368][ T7149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.699464][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.758543][ T51] Bluetooth: hci1: command tx timeout [ 208.054720][ T5945] bond0 (unregistering): Released all slaves [ 208.367807][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.382598][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.390057][ T7052] bridge_slave_0: entered allmulticast mode [ 208.399495][ T7052] bridge_slave_0: entered promiscuous mode [ 208.410215][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.417433][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.458479][ T7052] bridge_slave_1: entered allmulticast mode [ 208.469859][ T7052] bridge_slave_1: entered promiscuous mode [ 208.596219][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.623373][ T7170] loop5: detected capacity change from 0 to 512 [ 208.633523][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.646044][ T7170] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 208.710506][ T7170] EXT4-fs (loop5): 1 truncate cleaned up [ 208.717700][ T7170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.759841][ T7052] team0: Port device team_slave_0 added [ 208.771540][ T7052] team0: Port device team_slave_1 added [ 208.828087][ T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 208.847066][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.858026][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.966289][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.975541][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.040357][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.067831][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.082550][ T27] usb 2-1: config 15 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.137645][ T27] usb 2-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.170056][ T27] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 209.183312][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.208449][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.430046][ T7052] hsr_slave_0: entered promiscuous mode [ 209.455081][ T7052] hsr_slave_1: entered promiscuous mode [ 209.470279][ T7052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.500793][ T7052] Cannot create hsr debugfs directory [ 209.786853][ T27] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 209.818038][ T27] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 209.825022][ T27] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 209.864405][ T27] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 209.883643][ T27] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 209.897584][ T7168] loop4: detected capacity change from 0 to 40427 [ 209.906827][ T27] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 209.951096][ T7168] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 209.981653][ T27] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 209.990087][ T7168] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 210.066279][ T7168] F2FS-fs (loop4): invalid crc value [ 210.128644][ T7168] F2FS-fs (loop4): Found nat_bits in checkpoint [ 210.168823][ T787] usb 2-1: USB disconnect, device number 5 [ 210.375256][ T7052] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.397821][ T7168] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 210.405095][ T7168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 210.420247][ T7190] fido_id[7190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 210.469059][ T7052] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.487025][ T7168] F2FS-fs (loop4): Unrecognized mount option "|" or missing value [ 210.526612][ T7052] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.580423][ T7052] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.656752][ T7178] loop5: detected capacity change from 0 to 40427 [ 210.686616][ T7178] F2FS-fs (loop5): heap/no_heap options were deprecated [ 210.761222][ T7178] F2FS-fs (loop5): build fault injection attr: rate: 19, type: 0x7ffff [ 211.149654][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.253058][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.313197][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.320479][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.385015][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.392261][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.626842][ T7211] loop4: detected capacity change from 0 to 256 [ 211.717130][ T7211] FAT-fs (loop4): Directory bread(block 64) failed [ 211.748259][ T7211] FAT-fs (loop4): Directory bread(block 65) failed [ 211.755008][ T7211] FAT-fs (loop4): Directory bread(block 66) failed [ 211.791657][ T7211] FAT-fs (loop4): Directory bread(block 67) failed [ 211.801880][ T7211] FAT-fs (loop4): Directory bread(block 68) failed [ 211.822965][ T7211] FAT-fs (loop4): Directory bread(block 69) failed [ 211.848161][ T7211] FAT-fs (loop4): Directory bread(block 70) failed [ 211.893645][ T7211] FAT-fs (loop4): Directory bread(block 71) failed [ 211.926442][ T7211] FAT-fs (loop4): Directory bread(block 72) failed [ 211.948023][ T7211] FAT-fs (loop4): Directory bread(block 73) failed [ 211.998114][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 212.139800][ T7220] Zero length message leads to an empty skb [ 212.328834][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.003734][ T7241] loop4: detected capacity change from 0 to 256 [ 213.017428][ T7241] exfat: Deprecated parameter 'utf8' [ 213.023350][ T7241] exfat: Deprecated parameter 'namecase' [ 213.029921][ T7241] exfat: Deprecated parameter 'namecase' [ 213.035766][ T7241] exfat: Deprecated parameter 'utf8' [ 213.333296][ T7241] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 214.022438][ T7245] xt_hashlimit: size too large, truncated to 1048576 [ 214.597644][ T7052] veth0_vlan: entered promiscuous mode [ 214.661166][ T7052] veth1_vlan: entered promiscuous mode [ 214.765635][ T7052] veth0_macvtap: entered promiscuous mode [ 214.808125][ T7052] veth1_macvtap: entered promiscuous mode [ 214.877642][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.914861][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.942168][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.964035][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.983557][ T7262] loop5: detected capacity change from 0 to 128 [ 214.998018][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.018365][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.042848][ T7262] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.071995][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.096121][ T7262] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.119291][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.158571][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.198410][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.225570][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.256791][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.292630][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.339644][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.439113][ T7052] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.471769][ T7052] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.490843][ T7052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.511740][ T7052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.738414][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.774769][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.810241][ T7272] loop5: detected capacity change from 0 to 128 [ 215.878787][ T7272] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.918690][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.949099][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.993162][ T7272] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.218765][ T6514] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.384155][ T7280] loop6: detected capacity change from 0 to 512 [ 216.450957][ T7280] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.458533][ T7280] EXT4-fs: inline encryption not supported [ 216.492919][ T7280] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.543821][ T7280] EXT4-fs (loop6): Test dummy encryption mode enabled [ 216.578081][ T7280] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 216.627294][ T7280] EXT4-fs (loop6): 1 truncate cleaned up [ 216.671313][ T7280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.935104][ T7292] loop1: detected capacity change from 0 to 512 [ 217.031929][ T7292] EXT4-fs (loop1): Test dummy encryption mode enabled [ 217.211599][ T7292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.437391][ T7292] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.247: bad orphan inode 131083 [ 217.505708][ T7292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.716700][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.944424][ T7292] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 218.123080][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.364672][ T7330] loop1: detected capacity change from 0 to 128 [ 220.388667][ T7330] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.522049][ T7330] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.265920][ T7350] loop1: detected capacity change from 0 to 512 [ 222.299940][ T7350] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.306456][ T7350] EXT4-fs: inline encryption not supported [ 222.379304][ T7350] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.409411][ T7350] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.416367][ T7350] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.488279][ T7350] EXT4-fs (loop1): 1 truncate cleaned up [ 222.495404][ T7350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.561953][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.857477][ T7374] loop1: detected capacity change from 0 to 256 [ 224.022285][ T7380] loop6: detected capacity change from 0 to 128 [ 224.060595][ T7380] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.134559][ T7380] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.205588][ T7386] loop1: detected capacity change from 0 to 1024 [ 224.233005][ T7386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.293804][ T7386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.477441][ T7386] EXT4-fs warning (device loop1): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 226.244980][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.802067][ T7413] loop5: detected capacity change from 0 to 512 [ 226.853246][ T7413] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.905040][ T7413] EXT4-fs: inline encryption not supported [ 226.966402][ T7413] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.103733][ T7413] EXT4-fs (loop5): Test dummy encryption mode enabled [ 227.110982][ T7413] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.129819][ T7417] loop1: detected capacity change from 0 to 512 [ 227.159825][ T7413] EXT4-fs (loop5): 1 truncate cleaned up [ 227.166560][ T7417] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 227.182639][ T7413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.215682][ T7417] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 227.254260][ T7417] EXT4-fs (loop1): orphan cleanup on readonly fs [ 227.262020][ T7417] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.270: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 227.281130][ T7417] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.270: couldn't read orphan inode 13 (err -117) [ 227.295146][ T7417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.223414][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.607491][ T7431] loop4: detected capacity change from 0 to 128 [ 228.627584][ T7431] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.677198][ T7431] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.904809][ T7420] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (24564!=0) [ 229.077106][ T7440] loop4: detected capacity change from 0 to 256 [ 229.205845][ T7439] loop5: detected capacity change from 0 to 4096 [ 229.252383][ T7439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.612043][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.828169][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 230.027973][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 230.040616][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.055440][ T9] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 230.077442][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.105136][ T9] usb 7-1: config 0 descriptor?? [ 230.355632][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.539557][ T9] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 230.567388][ T9] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 230.597774][ T9] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 230.610305][ T9] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 230.617727][ T9] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 230.667703][ T7474] loop4: detected capacity change from 0 to 4096 [ 230.683680][ T9] holtek_kbd 0003:04D9:A055.0003: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0 [ 230.690691][ T7474] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.732665][ T7474] EXT4-fs: Ignoring removed orlov option [ 230.749074][ T9] usb 7-1: USB disconnect, device number 2 [ 230.802682][ T7474] EXT4-fs (loop4): Test dummy encryption mode enabled [ 230.817408][ T7470] loop1: detected capacity change from 0 to 8192 [ 230.898077][ T7474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.914951][ T7476] fido_id[7476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 231.107333][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.188490][ T7485] cgroup: fork rejected by pids controller in /syz1 [ 231.248174][ T7484] loop5: detected capacity change from 0 to 512 [ 231.267636][ T7484] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.323462][ T7484] EXT4-fs: inline encryption not supported [ 231.374691][ T7484] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.430747][ T7484] EXT4-fs (loop5): Test dummy encryption mode enabled [ 231.453849][ T7484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 231.470428][ T7491] loop4: detected capacity change from 0 to 128 [ 231.490971][ T7491] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 231.542053][ T7484] EXT4-fs (loop5): 1 truncate cleaned up [ 231.553684][ T7491] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.593683][ T7484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.742400][ T7495] loop6: detected capacity change from 0 to 2048 [ 231.778289][ T7495] EXT4-fs (loop6): bad block size 65536 [ 232.526962][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 232.626181][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.683203][ T7504] loop4: detected capacity change from 0 to 512 [ 232.700587][ T7504] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 232.711548][ T7504] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 232.723091][ T7504] EXT4-fs (loop4): orphan cleanup on readonly fs [ 232.736540][ T7504] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.287: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 232.769117][ T7504] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.287: couldn't read orphan inode 13 (err -117) [ 232.809521][ T7504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.105528][ T7509] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 233.121494][ T7509] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (24564!=0) [ 233.174787][ T2947] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.292982][ T2947] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.425205][ T2947] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.532205][ T5972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.699889][ T2947] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.823500][ T7516] loop6: detected capacity change from 0 to 1024 [ 233.991804][ T7516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.599234][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.696357][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.708735][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.726838][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.736584][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.746847][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.755856][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.797685][ T7541] loop6: detected capacity change from 0 to 512 [ 234.807003][ T7541] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.813954][ T7541] EXT4-fs: inline encryption not supported [ 234.822912][ T7541] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.836722][ T7541] EXT4-fs (loop6): Test dummy encryption mode enabled [ 234.843884][ T7541] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.892624][ T7541] EXT4-fs (loop6): 1 truncate cleaned up [ 234.979539][ T7541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.411094][ T7527] loop5: detected capacity change from 0 to 40427 [ 235.443873][ T7527] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 235.470210][ T7527] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 235.526177][ T7527] F2FS-fs (loop5): invalid crc value [ 235.574954][ T7527] F2FS-fs (loop5): Found nat_bits in checkpoint [ 235.789623][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.902575][ T7527] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 235.954517][ T7527] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 236.032270][ T7569] loop4: detected capacity change from 0 to 256 [ 236.049451][ T7566] loop6: detected capacity change from 0 to 512 [ 236.092297][ T7527] syz.5.292: attempt to access beyond end of device [ 236.092297][ T7527] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 236.109402][ T7566] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 236.192667][ T7566] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 236.262045][ T7566] EXT4-fs (loop6): orphan cleanup on readonly fs [ 236.350586][ T7566] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.299: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 236.449735][ T7566] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.299: couldn't read orphan inode 13 (err -117) [ 236.470017][ T7566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.653697][ T7536] chnl_net:caif_netlink_parms(): no params data found [ 236.799354][ T5776] Bluetooth: hci2: command tx timeout [ 236.817739][ T7576] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 236.838649][ T7576] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (24564!=0) [ 237.166996][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.181472][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.188816][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.197166][ T7536] bridge_slave_0: entered allmulticast mode [ 237.207728][ T7536] bridge_slave_0: entered promiscuous mode [ 237.325770][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.348077][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.355401][ T7536] bridge_slave_1: entered allmulticast mode [ 237.388099][ T7536] bridge_slave_1: entered promiscuous mode [ 237.635677][ T7536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.704445][ T2947] hsr_slave_0: left promiscuous mode [ 237.721287][ T2947] hsr_slave_1: left promiscuous mode [ 239.278284][ T5776] Bluetooth: hci2: command tx timeout [ 239.336118][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.364688][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.379201][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.387216][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.428755][ T2947] bridge_slave_1: left allmulticast mode [ 239.453794][ T2947] bridge_slave_1: left promiscuous mode [ 239.482273][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.502564][ T2947] bridge_slave_0: left allmulticast mode [ 239.522050][ T2947] bridge_slave_0: left promiscuous mode [ 239.532286][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.624819][ T2947] veth0_macvtap: left promiscuous mode [ 239.641193][ T2947] veth1_vlan: left promiscuous mode [ 239.646563][ T2947] veth0_vlan: left promiscuous mode [ 239.895028][ T7605] loop6: detected capacity change from 0 to 512 [ 239.905485][ T7605] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.925681][ T7605] EXT4-fs: inline encryption not supported [ 239.950471][ T7605] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.992651][ T7605] EXT4-fs (loop6): Test dummy encryption mode enabled [ 240.001284][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.012420][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.020438][ T7605] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 240.035028][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.050390][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.068566][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 240.088577][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.105617][ T7605] EXT4-fs (loop6): 1 truncate cleaned up [ 240.113105][ T7605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.650936][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.107454][ T2947] team0 (unregistering): Port device team_slave_1 removed [ 241.176092][ T2947] team0 (unregistering): Port device team_slave_0 removed [ 241.262764][ T2947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.358157][ T5776] Bluetooth: hci2: command tx timeout [ 241.366100][ T2947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.239064][ T5776] Bluetooth: hci3: command tx timeout [ 242.616700][ T2947] bond0 (unregistering): Released all slaves [ 242.745698][ T7536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.941307][ T7536] team0: Port device team_slave_0 added [ 242.964460][ T7536] team0: Port device team_slave_1 added [ 243.102970][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.117165][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.157524][ T7630] loop6: detected capacity change from 0 to 128 [ 243.166916][ T7536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.211471][ T7630] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.238745][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.246046][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.272526][ T7536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.285659][ T7630] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.433320][ T7052] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.438789][ T5776] Bluetooth: hci2: command tx timeout [ 243.532335][ T7536] hsr_slave_0: entered promiscuous mode [ 243.550410][ T7536] hsr_slave_1: entered promiscuous mode [ 243.576905][ T7536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.605319][ T7536] Cannot create hsr debugfs directory [ 244.348480][ T5776] Bluetooth: hci3: command tx timeout [ 244.987526][ T7606] chnl_net:caif_netlink_parms(): no params data found [ 245.061460][ T2947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.340136][ T2947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.544395][ T2947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.694188][ T2947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.996643][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.028176][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.035490][ T7606] bridge_slave_0: entered allmulticast mode [ 246.049519][ T7606] bridge_slave_0: entered promiscuous mode [ 246.240746][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.272232][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.295637][ T7606] bridge_slave_1: entered allmulticast mode [ 246.309511][ T7606] bridge_slave_1: entered promiscuous mode [ 246.399487][ T5776] Bluetooth: hci3: command tx timeout [ 246.580710][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.610779][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.859305][ T7606] team0: Port device team_slave_0 added [ 246.914173][ T7606] team0: Port device team_slave_1 added [ 247.115021][ T7672] loop5: detected capacity change from 0 to 1024 [ 247.169034][ T7672] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 247.296954][ T7672] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 2: comm syz.5.315: lblock 2 mapped to illegal pblock 2 (length 1) [ 247.334183][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.347936][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.374852][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.390614][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.397631][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.424435][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.435282][ T7672] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 247.450756][ T7649] loop6: detected capacity change from 0 to 131072 [ 247.468682][ T7672] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 48: comm syz.5.315: lblock 0 mapped to illegal pblock 48 (length 1) [ 247.493134][ T7649] F2FS-fs (loop6): Insane cp_payload (327680 >= 504) [ 247.516402][ T7649] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 247.538360][ T7672] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 247.551527][ T7672] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.315: Failed to acquire dquot type 0 [ 247.556843][ T7649] F2FS-fs (loop6): invalid crc value [ 247.571975][ T7672] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 247.591280][ T7672] EXT4-fs error (device loop5): ext4_evict_inode:252: inode #11: comm syz.5.315: mark_inode_dirty error [ 247.603420][ T7672] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 247.615044][ T7672] EXT4-fs (loop5): 1 orphan inode deleted [ 247.623714][ T7672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.649273][ T7649] F2FS-fs (loop6): Found nat_bits in checkpoint [ 247.699165][ T5945] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 247.733538][ T5945] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 247.764977][ T5945] EXT4-fs error (device loop5): ext4_release_dquot:6985: comm kworker/u4:9: Failed to release dquot type 0 [ 247.888933][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.909446][ T48] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 247.942570][ T48] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 247.974853][ T48] EXT4-fs error (device loop5): ext4_release_dquot:6985: comm kworker/u4:3: Failed to release dquot type 0 [ 248.008744][ T6514] EXT4-fs error (device loop5): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 248.033290][ T7606] hsr_slave_0: entered promiscuous mode [ 248.047222][ T6514] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 248.066119][ T6514] EXT4-fs error (device loop5): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 248.078297][ T7606] hsr_slave_1: entered promiscuous mode [ 248.090511][ T7606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.128551][ T7606] Cannot create hsr debugfs directory [ 248.143536][ T7536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.370927][ T7536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.478759][ T51] Bluetooth: hci3: command tx timeout [ 248.568099][ T7536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.650050][ T7536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.701062][ T7536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.225544][ T2947] hsr_slave_0: left promiscuous mode [ 250.327160][ T2947] hsr_slave_1: left promiscuous mode [ 250.651928][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.678210][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.727260][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.756736][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.829475][ T2947] bridge_slave_1: left allmulticast mode [ 250.835347][ T2947] bridge_slave_1: left promiscuous mode [ 250.858362][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.919123][ T2947] bridge_slave_0: left allmulticast mode [ 250.936882][ T2947] bridge_slave_0: left promiscuous mode [ 251.046454][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.221988][ T2947] veth1_macvtap: left promiscuous mode [ 251.227633][ T2947] veth0_macvtap: left promiscuous mode [ 251.240738][ T2947] veth1_vlan: left promiscuous mode [ 251.246183][ T2947] veth0_vlan: left promiscuous mode [ 255.546082][ T2947] team0 (unregistering): Port device team_slave_1 removed [ 255.746632][ T2947] team0 (unregistering): Port device team_slave_0 removed [ 256.009888][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.016757][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.250259][ T2947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.345915][ T2947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.132094][ T2947] bond0 (unregistering): Released all slaves [ 257.560997][ T7536] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.610897][ T7757] loop6: detected capacity change from 0 to 128 [ 257.692552][ T7606] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 257.725310][ T7757] syz.6.326: attempt to access beyond end of device [ 257.725310][ T7757] loop6: rw=2049, sector=145, nr_sectors = 57 limit=128 [ 257.749497][ T7606] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 257.793773][ T7606] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 257.859843][ T7606] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 257.924583][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.931967][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.997492][ T7760] netlink: 32 bytes leftover after parsing attributes in process `syz.6.327'. [ 258.052223][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.059528][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.085610][ T7760] netlink: 32 bytes leftover after parsing attributes in process `syz.6.327'. [ 258.551542][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.686504][ T7606] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.750513][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.757745][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.920293][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.927658][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.233171][ T7536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.087671][ T7536] veth0_vlan: entered promiscuous mode [ 261.229355][ T7536] veth1_vlan: entered promiscuous mode [ 261.515000][ T7536] veth0_macvtap: entered promiscuous mode [ 261.554903][ T7536] veth1_macvtap: entered promiscuous mode [ 261.632588][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.662394][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.694696][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.725802][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.747674][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.774549][ T7606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.802230][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.837217][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.855769][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.867252][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.880467][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.949857][ T7536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.963497][ T7536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.976689][ T7536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.006767][ T7536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.413413][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.445589][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.599402][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.607533][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.657412][ T7821] loop6: detected capacity change from 0 to 512 [ 262.740359][ T7821] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 262.789588][ T7821] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 262.808309][ T7821] EXT4-fs (loop6): orphan cleanup on readonly fs [ 262.866566][ T7821] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.333: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 263.002645][ T7821] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.333: couldn't read orphan inode 13 (err -117) [ 263.042445][ T7821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.356403][ T7606] veth0_vlan: entered promiscuous mode [ 263.396696][ T7836] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 263.423689][ T7836] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (24564!=0) [ 263.444271][ T7606] veth1_vlan: entered promiscuous mode [ 263.670276][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.680608][ T7606] veth0_macvtap: entered promiscuous mode [ 263.729236][ T7606] veth1_macvtap: entered promiscuous mode [ 263.801962][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.839320][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.889503][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.916251][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.934238][ T7840] loop6: detected capacity change from 0 to 512 [ 263.947942][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.963892][ T7840] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.998219][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.008268][ T7840] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 264.063791][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.210860][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.257191][ T7833] loop1: detected capacity change from 0 to 40427 [ 264.258353][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.292317][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.327950][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.345500][ T7833] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 264.362681][ T7833] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 264.370972][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.370996][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.375607][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.415662][ T7606] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.424782][ T7606] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.433596][ T7606] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.442683][ T7833] F2FS-fs (loop1): invalid crc value [ 264.448127][ T7606] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.465922][ T7833] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.698632][ T7833] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 264.705766][ T7833] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 264.723811][ T7853] loop6: detected capacity change from 0 to 128 [ 264.744460][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.767031][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.785370][ T7853] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.889347][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.897269][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.937974][ T7853] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.468252][ T5858] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.492647][ T7866] loop7: detected capacity change from 0 to 512 [ 265.586063][ T7866] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.304: invalid indirect mapped block 256 (level 2) [ 265.625658][ T7866] EXT4-fs (loop7): 2 truncates cleaned up [ 265.657438][ T7866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.684035][ T5858] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.703961][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.718612][ T5858] usb 6-1: Product: syz [ 265.725508][ T5858] usb 6-1: Manufacturer: syz [ 265.744105][ T5858] usb 6-1: SerialNumber: syz [ 265.829916][ T7866] EXT4-fs error (device loop7): empty_inline_dir:1867: inode #12: block 7: comm syz.7.304: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 265.928582][ T7866] EXT4-fs warning (device loop7): empty_inline_dir:1874: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 266.043624][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.388611][ T7883] loop1: detected capacity change from 0 to 512 [ 266.411882][ T7883] EXT4-fs: Ignoring removed nobh option [ 266.445713][ T7883] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 266.543378][ T7883] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.338: iget: bad extra_isize 90 (inode size 256) [ 266.559413][ T9] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 266.575255][ T7883] EXT4-fs (loop1): Remounting filesystem read-only [ 266.583592][ T7883] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 266.598253][ T7883] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 266.609728][ T7883] EXT4-fs (loop1): 1 orphan inode deleted [ 266.617065][ T7883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.692396][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.764574][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.796621][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.829823][ T5858] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 266.840089][ T9] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 266.868669][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.908978][ T9] usb 8-1: config 0 descriptor?? [ 268.929913][ T5858] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 269.040675][ T5858] usb 6-1: USB disconnect, device number 2 [ 269.069854][ T5858] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 269.449414][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 269.468409][ T9] usbhid: probe of 8-1:0.0 failed with error -71 [ 269.540913][ T9] usb 8-1: USB disconnect, device number 2 [ 269.555568][ T5769] udevd[5769]: setting mode of /dev/bus/usb/006/002 to 020664 failed: No such file or directory [ 269.558762][ T7898] loop5: detected capacity change from 0 to 512 [ 269.606394][ T5769] udevd[5769]: setting owner of /dev/bus/usb/006/002 to uid=0, gid=0 failed: No such file or directory [ 269.871686][ T7898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.478310][ T7898] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.343: No space for directory leaf checksum. Please run e2fsck -D. [ 270.718624][ T7898] EXT4-fs error (device loop5): ext4_readdir:223: inode #2: comm syz.5.343: path /51/file1: directory fails checksum at offset 0 [ 271.769759][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.018479][ T7921] loop1: detected capacity change from 0 to 256 [ 272.029281][ T7921] exfat: Deprecated parameter 'utf8' [ 272.035325][ T7921] exfat: Deprecated parameter 'namecase' [ 272.143429][ T7921] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 273.318887][ T7933] loop1: detected capacity change from 0 to 128 [ 273.358008][ T7933] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.450162][ T7933] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.130861][ T7948] loop1: detected capacity change from 0 to 512 [ 274.207037][ T7948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.221128][ T7948] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.484983][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.734328][ T7957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.353'. [ 275.690361][ T7971] loop7: detected capacity change from 0 to 512 [ 275.723094][ T7971] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 275.780535][ T7971] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 275.793605][ T7971] EXT4-fs (loop7): orphan cleanup on readonly fs [ 275.818435][ T7971] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #13: comm syz.7.355: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 275.886892][ T7971] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.355: couldn't read orphan inode 13 (err -117) [ 275.903366][ T7971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.978319][ T7979] loop5: detected capacity change from 0 to 256 [ 275.986263][ T7979] exfat: Deprecated parameter 'utf8' [ 275.991855][ T7979] exfat: Deprecated parameter 'namecase' [ 276.185301][ T7979] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 276.998691][ T7980] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.039137][ T7980] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (24564!=0) [ 278.387259][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.858736][ T7995] loop1: detected capacity change from 0 to 128 [ 278.867331][ T7995] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.371663][ T7995] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.679314][ T27] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 280.891266][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.952850][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.995047][ T27] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 281.068101][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.119878][ T27] usb 2-1: config 0 descriptor?? [ 283.090727][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 283.096824][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 283.106887][ T27] usb 2-1: USB disconnect, device number 6 [ 283.402179][ T8035] loop6: detected capacity change from 0 to 256 [ 283.409640][ T8035] exfat: Deprecated parameter 'utf8' [ 283.415131][ T8035] exfat: Deprecated parameter 'namecase' [ 283.924171][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 283.934561][ T8035] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 284.297181][ T8036] loop7: detected capacity change from 0 to 512 [ 284.448415][ T8036] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 284.501360][ T8036] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 284.543954][ T8036] EXT4-fs (loop7): orphan cleanup on readonly fs [ 284.571594][ T8036] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #13: comm syz.7.366: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 284.767238][ T8036] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.366: couldn't read orphan inode 13 (err -117) [ 287.146369][ T8036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.369567][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.528837][ T8055] loop6: detected capacity change from 0 to 1024 [ 287.553097][ T8055] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 287.563420][ T8057] loop5: detected capacity change from 0 to 512 [ 287.564412][ T8057] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.564437][ T8057] EXT4-fs: inline encryption not supported [ 287.564500][ T8057] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.638253][ T8057] EXT4-fs (loop5): Test dummy encryption mode enabled [ 287.645133][ T8057] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 287.674578][ T8062] loop7: detected capacity change from 0 to 128 [ 287.693146][ T8055] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 2: comm syz.6.369: lblock 2 mapped to illegal pblock 2 (length 1) [ 287.736878][ T8062] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.758582][ T8057] EXT4-fs (loop5): 1 truncate cleaned up [ 287.813564][ T8057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.840053][ T8055] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 287.850224][ T8055] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 48: comm syz.6.369: lblock 0 mapped to illegal pblock 48 (length 1) [ 287.875805][ T8062] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.908105][ T5858] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 287.926485][ T8055] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 287.960327][ T8055] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.369: Failed to acquire dquot type 0 [ 287.999939][ T8055] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 288.039489][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.060501][ T8055] EXT4-fs error (device loop6): ext4_evict_inode:252: inode #11: comm syz.6.369: mark_inode_dirty error [ 288.121349][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 288.129121][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.150276][ T8055] EXT4-fs warning (device loop6): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 288.159348][ T5858] usb 2-1: config 0 has no interfaces? [ 288.182047][ T5858] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 288.222896][ T8055] EXT4-fs (loop6): 1 orphan inode deleted [ 288.230311][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.243070][ T2947] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 288.257461][ T5858] usb 2-1: Product: syz [ 288.270149][ T5858] usb 2-1: Manufacturer: syz [ 288.275690][ T8055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.328197][ T2947] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 288.336754][ T2947] EXT4-fs error (device loop6): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 0 [ 288.492619][ T5858] usb 2-1: SerialNumber: syz [ 288.500077][ T5858] r8152-cfgselector 2-1: config 0 descriptor?? [ 291.961738][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.993866][ T5858] r8152-cfgselector 2-1: Unknown version 0x0000 [ 292.006743][ T5858] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 292.035189][ T7052] EXT4-fs error (device loop6): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 292.112514][ T7052] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 292.149604][ T7052] EXT4-fs error (device loop6): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 292.420375][ T8096] loop7: detected capacity change from 0 to 256 [ 292.427809][ T8096] exfat: Deprecated parameter 'utf8' [ 292.433403][ T8096] exfat: Deprecated parameter 'namecase' [ 292.862619][ T8096] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 293.555683][ T8100] loop1: detected capacity change from 0 to 512 [ 293.835298][ T8100] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 293.935292][ T8100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 293.979047][ T8100] EXT4-fs (loop1): orphan cleanup on readonly fs [ 294.013078][ T8100] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.378: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 294.062127][ T23] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 294.475575][ T8100] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.378: couldn't read orphan inode 13 (err -117) [ 294.706612][ T8100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.757441][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.795016][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.022283][ T23] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 295.032804][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.070258][ T23] usb 8-1: config 0 descriptor?? [ 295.146920][ T8120] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 295.179615][ T8120] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (24564!=0) [ 295.218467][ T8119] loop6: detected capacity change from 0 to 128 [ 295.266093][ T8119] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.392146][ T8119] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.789592][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.828698][ T23] usbhid 8-1:0.0: can't add hid device: -71 [ 295.857131][ T23] usbhid: probe of 8-1:0.0 failed with error -71 [ 295.895542][ T23] usb 8-1: USB disconnect, device number 3 [ 296.068255][ T8127] loop1: detected capacity change from 0 to 512 [ 296.254978][ T8127] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.283440][ T8127] EXT4-fs: inline encryption not supported [ 296.305654][ T8127] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.481951][ T8127] EXT4-fs (loop1): Test dummy encryption mode enabled [ 297.508183][ T8127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 297.591161][ T8127] EXT4-fs (loop1): 1 truncate cleaned up [ 297.598127][ T8127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.845288][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.402267][ T8157] loop1: detected capacity change from 0 to 256 [ 299.413320][ T8157] exfat: Deprecated parameter 'utf8' [ 299.419440][ T8157] exfat: Deprecated parameter 'namecase' [ 299.941438][ T8157] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 300.668595][ T8170] loop7: detected capacity change from 0 to 512 [ 301.839162][ T8170] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 301.873785][ T8170] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 301.896793][ T8170] EXT4-fs (loop7): orphan cleanup on readonly fs [ 301.941173][ T8170] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #13: comm syz.7.390: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 301.959771][ T8170] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.390: couldn't read orphan inode 13 (err -117) [ 302.036946][ T8170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.286630][ T8188] loop6: detected capacity change from 0 to 128 [ 302.313634][ T8188] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.392267][ T8188] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.472681][ T8192] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 302.532109][ T8192] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (24564!=0) [ 302.941162][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.015421][ T8197] loop6: detected capacity change from 0 to 512 [ 303.055181][ T8197] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.062084][ T9] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 303.100331][ T8197] EXT4-fs: inline encryption not supported [ 303.106294][ T8197] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.134042][ T8197] EXT4-fs (loop6): Test dummy encryption mode enabled [ 303.161318][ T8197] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 303.241317][ T8197] EXT4-fs (loop6): 1 truncate cleaned up [ 303.276392][ T8197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.306429][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.330679][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.341455][ T9] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 303.351138][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.404288][ T9] usb 6-1: config 0 descriptor?? [ 304.104235][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.413708][ T8212] loop7: detected capacity change from 0 to 128 [ 306.568070][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 306.574174][ T9] usbhid: probe of 6-1:0.0 failed with error -71 [ 306.605432][ T9] usb 6-1: USB disconnect, device number 3 [ 308.389221][ T8246] loop7: detected capacity change from 0 to 512 [ 308.434931][ T8246] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 308.476302][ T8246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 308.488707][ T8246] EXT4-fs (loop7): orphan cleanup on readonly fs [ 308.526230][ T8246] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #13: comm syz.7.402: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 308.608792][ T8246] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.402: couldn't read orphan inode 13 (err -117) [ 308.660985][ T8246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.088898][ T8257] loop5: detected capacity change from 0 to 512 [ 309.099942][ T8258] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 309.109185][ T8258] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (24564!=0) [ 309.127342][ T8257] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.172994][ T8257] EXT4-fs: inline encryption not supported [ 309.209262][ T8257] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.431636][ T8257] EXT4-fs (loop5): Test dummy encryption mode enabled [ 309.475115][ T8257] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 309.665870][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.714652][ T8257] EXT4-fs (loop5): 1 truncate cleaned up [ 309.765572][ T8257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.739678][ T8271] loop1: detected capacity change from 0 to 256 [ 310.747119][ T8271] exfat: Deprecated parameter 'utf8' [ 310.752678][ T8271] exfat: Deprecated parameter 'namecase' [ 310.941704][ T8271] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 312.789961][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.742371][ T8290] loop1: detected capacity change from 0 to 128 [ 314.188047][ T8] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 314.400498][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.414099][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.465132][ T8] usb 7-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 314.491078][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.626133][ T8] usb 7-1: config 0 descriptor?? [ 315.174846][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 315.203062][ T8] usbhid: probe of 7-1:0.0 failed with error -71 [ 315.224063][ T8321] random: crng reseeded on system resumption [ 315.229402][ T8] usb 7-1: USB disconnect, device number 3 [ 315.463185][ T8325] loop5: detected capacity change from 0 to 512 [ 315.507489][ T8325] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 315.547469][ T8325] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 315.568422][ T8325] EXT4-fs (loop5): orphan cleanup on readonly fs [ 315.636570][ T8325] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.414: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 315.715108][ T8325] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.414: couldn't read orphan inode 13 (err -117) [ 315.766532][ T8325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.051241][ T8325] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 316.078128][ T8325] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (24564!=0) [ 316.212190][ T8333] loop6: detected capacity change from 0 to 256 [ 316.219693][ T8333] exfat: Deprecated parameter 'utf8' [ 316.225444][ T8333] exfat: Deprecated parameter 'namecase' [ 316.726118][ T8333] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 316.948157][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.377419][ T8343] loop5: detected capacity change from 0 to 512 [ 317.471140][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.480965][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.507100][ T8343] EXT4-fs: Ignoring removed mblk_io_submit option [ 318.908028][ T8343] EXT4-fs: inline encryption not supported [ 318.964532][ T8343] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.238615][ T8343] EXT4-fs (loop5): Test dummy encryption mode enabled [ 319.245483][ T8343] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 320.556121][ T8362] loop1: detected capacity change from 0 to 512 [ 320.639864][ T8343] EXT4-fs (loop5): 1 truncate cleaned up [ 320.647780][ T8343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.694142][ T8362] EXT4-fs: Ignoring removed nobh option [ 320.766249][ T8362] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.934363][ T8362] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.419: iget: bad extra_isize 90 (inode size 256) [ 320.986968][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.045206][ T8362] EXT4-fs (loop1): Remounting filesystem read-only [ 321.088206][ T8362] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 321.128165][ T8362] EXT4-fs (loop1): 1 orphan inode deleted [ 321.135504][ T8362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.159486][ T8365] loop6: detected capacity change from 0 to 4096 [ 321.253639][ T8365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.555980][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.665517][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.118851][ T9] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 323.130014][ T8384] loop6: detected capacity change from 0 to 512 [ 323.189194][ T8384] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 323.215703][ T8384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 323.253688][ T8384] EXT4-fs (loop6): orphan cleanup on readonly fs [ 323.261547][ T8384] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.424: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 323.301054][ T8384] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.424: couldn't read orphan inode 13 (err -117) [ 323.320613][ T8384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.349771][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 323.384937][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.435823][ T9] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 323.469550][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.526424][ T9] usb 8-1: config 0 descriptor?? [ 323.604590][ T8384] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 323.614705][ T8384] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (24564!=0) [ 323.752456][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.072760][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 324.079347][ T9] usbhid: probe of 8-1:0.0 failed with error -71 [ 324.089054][ T9] usb 8-1: USB disconnect, device number 4 [ 324.494064][ T8405] loop1: detected capacity change from 0 to 256 [ 324.501361][ T8405] exfat: Deprecated parameter 'utf8' [ 324.506839][ T8405] exfat: Deprecated parameter 'namecase' [ 324.658408][ T8405] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 324.971440][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 325.298175][ T8416] loop1: detected capacity change from 0 to 512 [ 325.355441][ T8416] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.405863][ T8416] EXT4-fs: inline encryption not supported [ 325.412211][ T8416] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.444001][ T8416] EXT4-fs (loop1): Test dummy encryption mode enabled [ 325.540331][ T8416] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 326.057635][ T8416] EXT4-fs (loop1): 1 truncate cleaned up [ 326.110079][ T8416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.488925][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.736689][ T8435] loop1: detected capacity change from 0 to 512 [ 326.820113][ T8435] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 326.875555][ T8435] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 326.891999][ T8435] EXT4-fs (loop1): orphan cleanup on readonly fs [ 326.904278][ T8435] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.433: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 326.997602][ T8435] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.433: couldn't read orphan inode 13 (err -117) [ 327.026812][ T8435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.315016][ T8435] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 327.332520][ T8435] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (24564!=0) [ 328.584021][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.225509][ T8464] loop5: detected capacity change from 0 to 256 [ 330.232972][ T8464] exfat: Deprecated parameter 'utf8' [ 330.239467][ T8464] exfat: Deprecated parameter 'namecase' [ 330.754024][ T8464] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 331.610191][ T5841] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 331.869222][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 331.900898][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.958557][ T5841] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 331.992600][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.038712][ T5841] usb 6-1: config 0 descriptor?? [ 333.875767][ T8496] loop1: detected capacity change from 0 to 512 [ 333.921679][ T8496] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 333.977042][ T8496] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 334.011943][ T8496] EXT4-fs (loop1): orphan cleanup on readonly fs [ 334.029382][ T5841] usbhid 6-1:0.0: can't add hid device: -71 [ 334.035510][ T5841] usbhid: probe of 6-1:0.0 failed with error -71 [ 334.057075][ T8496] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.443: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 334.099211][ T5841] usb 6-1: USB disconnect, device number 4 [ 334.159602][ T8496] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.443: couldn't read orphan inode 13 (err -117) [ 334.213574][ T8496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.234316][ T8496] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 334.246740][ T8496] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (24564!=0) [ 334.459533][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.051395][ T8517] loop6: detected capacity change from 0 to 512 [ 336.109891][ T8517] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.116402][ T8517] EXT4-fs: inline encryption not supported [ 336.158593][ T8517] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.182379][ T8523] loop1: detected capacity change from 0 to 256 [ 336.214813][ T8517] EXT4-fs (loop6): Test dummy encryption mode enabled [ 336.241440][ T8523] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.242424][ T8517] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 336.355548][ T8526] loop5: detected capacity change from 0 to 256 [ 336.366860][ T8526] exfat: Deprecated parameter 'utf8' [ 336.372937][ T8526] exfat: Deprecated parameter 'namecase' [ 336.443083][ T8526] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 336.583421][ T8517] EXT4-fs (loop6): 1 truncate cleaned up [ 336.944628][ T8517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.391763][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.523411][ T8550] loop6: detected capacity change from 0 to 512 [ 340.575086][ T8550] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 340.749681][ T8550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 340.773001][ T8550] EXT4-fs (loop6): orphan cleanup on readonly fs [ 340.870277][ T8550] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.453: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 341.693261][ T8550] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.453: couldn't read orphan inode 13 (err -117) [ 341.774136][ T8550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.884792][ T8550] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 341.899110][ T8550] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (24564!=0) [ 341.973176][ T7052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.077980][ T5773] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 342.217020][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.229115][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.253155][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.265409][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.363447][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.371402][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.378507][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 342.378541][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.378582][ T5773] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 342.378609][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.507480][ T5773] usb 6-1: config 0 descriptor?? [ 343.653363][ T5773] usbhid 6-1:0.0: can't add hid device: -71 [ 343.667969][ T5773] usbhid: probe of 6-1:0.0 failed with error -71 [ 343.696855][ T5773] usb 6-1: USB disconnect, device number 5 [ 343.884365][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 344.251119][ T1131] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.456127][ T8589] loop1: detected capacity change from 0 to 256 [ 344.467289][ T8589] exfat: Deprecated parameter 'utf8' [ 344.473401][ T8589] exfat: Deprecated parameter 'namecase' [ 344.483889][ T5776] Bluetooth: hci4: command tx timeout [ 344.700321][ T8589] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 345.092506][ T8587] loop5: detected capacity change from 0 to 512 [ 345.233220][ T8587] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.268115][ T8587] EXT4-fs: inline encryption not supported [ 345.285880][ T8587] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.296137][ T1131] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.326481][ T8587] EXT4-fs (loop5): Test dummy encryption mode enabled [ 345.392289][ T8587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 345.393432][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.458215][ T8587] EXT4-fs (loop5): 1 truncate cleaned up [ 345.465780][ T8587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.479616][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.487033][ T8567] bridge_slave_0: entered allmulticast mode [ 345.494663][ T8567] bridge_slave_0: entered promiscuous mode [ 345.635780][ T1131] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.685158][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.703552][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.725999][ T8567] bridge_slave_1: entered allmulticast mode [ 345.739509][ T8567] bridge_slave_1: entered promiscuous mode [ 345.774928][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.866689][ T8579] loop6: detected capacity change from 0 to 40427 [ 345.889163][ T1131] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.911895][ T8579] F2FS-fs (loop6): build fault injection attr: rate: 174, type: 0x7ffff [ 345.950631][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.967779][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.065489][ T8567] team0: Port device team_slave_0 added [ 346.105656][ T8567] team0: Port device team_slave_1 added [ 346.558029][ T5776] Bluetooth: hci4: command tx timeout [ 347.213700][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.221561][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.279724][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.313845][ T8610] loop1: detected capacity change from 0 to 512 [ 347.337673][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.366496][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.409631][ T8610] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 347.440761][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.592567][ T8610] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 347.614122][ T8610] EXT4-fs (loop1): orphan cleanup on readonly fs [ 347.674618][ T8610] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.463: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 347.696548][ T8610] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.463: couldn't read orphan inode 13 (err -117) [ 347.716092][ T8610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.189677][ T8609] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 348.222058][ T8609] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (24564!=0) [ 348.355952][ T8567] hsr_slave_0: entered promiscuous mode [ 348.407341][ T8567] hsr_slave_1: entered promiscuous mode [ 348.440445][ T8567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.474104][ T8567] Cannot create hsr debugfs directory [ 348.482033][ T7536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.648018][ T5776] Bluetooth: hci4: command tx timeout [ 348.863592][ T8623] loop6: detected capacity change from 0 to 256 [ 348.874392][ T8623] exfat: Deprecated parameter 'utf8' [ 348.880488][ T8623] exfat: Deprecated parameter 'namecase' [ 348.972913][ T8623] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 349.095220][ T23] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 349.401316][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.643480][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.775370][ T5776] Bluetooth: hci4: command tx timeout [ 350.801864][ T23] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 350.811511][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.824256][ T23] usb 6-1: config 0 descriptor?? [ 351.529313][ T8567] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 351.609196][ T8567] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 351.693268][ T8567] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 351.746998][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 351.755182][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 351.777227][ T8567] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 351.785014][ T23] usb 6-1: USB disconnect, device number 6 [ 352.277296][ T1131] hsr_slave_0: left promiscuous mode [ 352.316867][ T1131] hsr_slave_1: left promiscuous mode [ 352.328921][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.336414][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.390366][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.406002][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.426936][ T1131] bridge_slave_1: left allmulticast mode [ 352.444142][ T1131] bridge_slave_1: left promiscuous mode [ 352.458612][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.695627][ T1131] bridge_slave_0: left allmulticast mode [ 352.722337][ T1131] bridge_slave_0: left promiscuous mode [ 352.742781][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.222711][ T1131] veth1_macvtap: left promiscuous mode [ 353.371795][ T1131] veth0_macvtap: left promiscuous mode [ 353.381625][ T1131] veth1_vlan: left promiscuous mode [ 353.405522][ T1131] veth0_vlan: left promiscuous mode [ 353.640920][ T8652] loop6: detected capacity change from 0 to 1024 [ 353.648981][ T8652] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.700344][ T8652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.824309][ T8652] ================================================================== [ 353.832465][ T8652] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 353.840273][ T8652] Read of size 18446744073709551588 at addr ffff888024dbf040 by task syz.6.472/8652 [ 353.849778][ T8652] [ 353.852155][ T8652] CPU: 0 PID: 8652 Comm: syz.6.472 Not tainted syzkaller #0 [ 353.859486][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 353.869610][ T8652] Call Trace: [ 353.872941][ T8652] [ 353.875915][ T8652] dump_stack_lvl+0x18c/0x250 [ 353.880663][ T8652] ? read_lock_is_recursive+0x20/0x20 [ 353.886094][ T8652] ? show_regs_print_info+0x20/0x20 [ 353.891368][ T8652] ? load_image+0x400/0x400 [ 353.895964][ T8652] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 353.901477][ T8652] ? __virt_addr_valid+0x18c/0x540 [ 353.906649][ T8652] ? __virt_addr_valid+0x469/0x540 [ 353.911815][ T8652] print_report+0xa8/0x210 [ 353.916389][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 353.922008][ T8652] kasan_report+0x117/0x150 [ 353.926580][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 353.932098][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 353.937703][ T8652] kasan_check_range+0x241/0x290 [ 353.942706][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 353.948225][ T8652] __asan_memmove+0x29/0x70 [ 353.952799][ T8652] ext4_xattr_set_entry+0x94b/0x1e90 [ 353.958200][ T8652] ext4_xattr_block_set+0xae8/0x32b0 [ 353.963559][ T8652] ? ext4_destroy_inode+0x200/0x200 [ 353.968817][ T8652] ? proc_nr_inodes+0x230/0x230 [ 353.973716][ T8652] ? do_raw_spin_unlock+0x121/0x230 [ 353.978965][ T8652] ? _raw_spin_unlock+0x28/0x40 [ 353.983878][ T8652] ? ext4_xattr_block_find+0x350/0x350 [ 353.989493][ T8652] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 353.994936][ T8652] ext4_xattr_set_handle+0x1280/0x14c0 [ 354.000491][ T8652] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 354.006557][ T8652] ? __ext4_journal_start_sb+0x259/0x560 [ 354.012258][ T8652] ext4_xattr_set+0x252/0x340 [ 354.017104][ T8652] ? end_current_label_crit_section+0x170/0x170 [ 354.023494][ T8652] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 354.029121][ T8652] ? posix_xattr_acl+0x93/0xb0 [ 354.033934][ T8652] ? ext4_xattr_trusted_get+0x40/0x40 [ 354.039371][ T8652] __vfs_setxattr+0x431/0x470 [ 354.044116][ T8652] __vfs_setxattr_noperm+0x12d/0x5e0 [ 354.049477][ T8652] vfs_setxattr+0x16b/0x2f0 [ 354.054053][ T8652] ? xattr_permission+0x470/0x470 [ 354.059138][ T8652] ? __mnt_want_write+0x223/0x2a0 [ 354.064218][ T8652] ? path_setxattr+0x3a1/0x5d0 [ 354.069038][ T8652] path_setxattr+0x3f3/0x5d0 [ 354.073695][ T8652] ? simple_xattrs_free+0x150/0x150 [ 354.078965][ T8652] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 354.085002][ T8652] ? lock_chain_count+0x20/0x20 [ 354.089908][ T8652] __x64_sys_lsetxattr+0xb8/0xd0 [ 354.094898][ T8652] do_syscall_64+0x55/0xa0 [ 354.099350][ T8652] ? clear_bhb_loop+0x40/0x90 [ 354.104077][ T8652] ? clear_bhb_loop+0x40/0x90 [ 354.108814][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.114755][ T8652] RIP: 0033:0x7fa5a499aeb9 [ 354.119231][ T8652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.138895][ T8652] RSP: 002b:00007fa5a5889028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 354.147410][ T8652] RAX: ffffffffffffffda RBX: 00007fa5a4c15fa0 RCX: 00007fa5a499aeb9 [ 354.155441][ T8652] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 354.163466][ T8652] RBP: 00007fa5a4a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 354.167486][ T8657] loop1: detected capacity change from 0 to 512 [ 354.171463][ T8652] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 354.171481][ T8652] R13: 00007fa5a4c16038 R14: 00007fa5a4c15fa0 R15: 00007ffead97a718 [ 354.171506][ T8652] [ 354.171519][ T8652] [ 354.171523][ T8652] Allocated by task 8652: [ 354.171533][ T8652] kasan_set_track+0x4e/0x70 [ 354.171561][ T8652] __kasan_kmalloc+0x8f/0xa0 [ 354.171582][ T8652] __kmalloc_node_track_caller+0xb2/0x230 [ 354.193718][ T8657] EXT4-fs: Ignoring removed mblk_io_submit option [ 354.193912][ T8652] kmemdup+0x2b/0x70 [ 354.196972][ T8657] EXT4-fs: inline encryption not supported [ 354.199305][ T8652] ext4_xattr_block_set+0x9ea/0x32b0 [ 354.199334][ T8652] ext4_xattr_set_handle+0x1280/0x14c0 [ 354.199360][ T8652] ext4_xattr_set+0x252/0x340 [ 354.199384][ T8652] __vfs_setxattr+0x431/0x470 [ 354.199407][ T8652] __vfs_setxattr_noperm+0x12d/0x5e0 [ 354.199430][ T8652] vfs_setxattr+0x16b/0x2f0 [ 354.238317][ T8657] EXT4-fs: Ignoring removed mblk_io_submit option [ 354.240275][ T8652] path_setxattr+0x3f3/0x5d0 [ 354.276165][ T8652] __x64_sys_lsetxattr+0xb8/0xd0 [ 354.281142][ T8652] do_syscall_64+0x55/0xa0 [ 354.285694][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.291608][ T8652] [ 354.293958][ T8652] Last potentially related work creation: [ 354.299694][ T8652] kasan_save_stack+0x3e/0x60 [ 354.304399][ T8652] __kasan_record_aux_stack+0xaf/0xc0 [ 354.309794][ T8652] kvfree_call_rcu+0xee/0x790 [ 354.314518][ T8652] neigh_periodic_work+0x3f7/0xd70 [ 354.319709][ T8652] process_scheduled_works+0xa5d/0x15d0 [ 354.325304][ T8652] worker_thread+0xa55/0xfc0 [ 354.330018][ T8652] kthread+0x2fa/0x390 [ 354.334108][ T8652] ret_from_fork+0x48/0x80 [ 354.338556][ T8652] ret_from_fork_asm+0x11/0x20 [ 354.343452][ T8652] [ 354.345803][ T8652] The buggy address belongs to the object at ffff888024dbf000 [ 354.345803][ T8652] which belongs to the cache kmalloc-1k of size 1024 [ 354.359908][ T8652] The buggy address is located 64 bytes inside of [ 354.359908][ T8652] 1024-byte region [ffff888024dbf000, ffff888024dbf400) [ 354.373310][ T8652] [ 354.375659][ T8652] The buggy address belongs to the physical page: [ 354.382287][ T8652] page:ffffea0000936e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24db8 [ 354.392473][ T8652] head:ffffea0000936e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 354.401433][ T8652] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 354.409890][ T8652] page_type: 0xffffffff() [ 354.414247][ T8652] raw: 00fff00000000840 ffff888017c41dc0 0000000000000000 dead000000000001 [ 354.423038][ T8652] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 354.431739][ T8652] page dumped because: kasan: bad access detected [ 354.438187][ T8652] page_owner tracks the page as allocated [ 354.443929][ T8652] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2952, tgid 2952 (kworker/u4:8), ts 95204806327, free_ts 94184678394 [ 354.464975][ T8652] post_alloc_hook+0x1c1/0x200 [ 354.469778][ T8652] get_page_from_freelist+0x1951/0x19e0 [ 354.475358][ T8652] __alloc_pages+0x1f0/0x460 [ 354.479987][ T8652] alloc_slab_page+0x5d/0x160 [ 354.484700][ T8652] new_slab+0x87/0x2d0 [ 354.488804][ T8652] ___slab_alloc+0xc5d/0x12f0 [ 354.493517][ T8652] __kmem_cache_alloc_node+0x19e/0x250 [ 354.499008][ T8652] __kmalloc+0xa4/0x230 [ 354.503190][ T8652] ___neigh_create+0x6d2/0x2440 [ 354.508159][ T8652] ip6_finish_output2+0x1581/0x1630 [ 354.513480][ T8652] ndisc_send_skb+0xc26/0x14f0 [ 354.518284][ T8652] addrconf_dad_completed+0x7ef/0xd90 [ 354.523776][ T8652] addrconf_dad_work+0xc90/0x1530 [ 354.528850][ T8652] process_scheduled_works+0xa5d/0x15d0 [ 354.534435][ T8652] worker_thread+0xa55/0xfc0 [ 354.539057][ T8652] kthread+0x2fa/0x390 [ 354.543331][ T8652] page last free stack trace: [ 354.548032][ T8652] free_unref_page_prepare+0x7b2/0x8c0 [ 354.553547][ T8652] free_unref_page+0x32/0x2e0 [ 354.558362][ T8652] __unfreeze_partials+0x1cf/0x210 [ 354.563499][ T8652] put_cpu_partial+0x17c/0x250 [ 354.568311][ T8652] __slab_free+0x319/0x400 [ 354.572761][ T8652] qlist_free_all+0x75/0xd0 [ 354.577294][ T8652] kasan_quarantine_reduce+0x143/0x160 [ 354.582815][ T8652] __kasan_slab_alloc+0x22/0x80 [ 354.587698][ T8652] slab_post_alloc_hook+0x6e/0x4b0 [ 354.592848][ T8652] kmem_cache_alloc_node+0x14c/0x320 [ 354.598163][ T8652] __alloc_skb+0x103/0x2c0 [ 354.602719][ T8652] alloc_skb_with_frags+0xca/0x7b0 [ 354.607866][ T8652] sock_alloc_send_pskb+0x883/0x9a0 [ 354.613091][ T8652] __ip_append_data+0x2ac1/0x3d40 [ 354.618156][ T8652] ip_make_skb+0x22b/0x440 [ 354.622593][ T8652] udp_sendmsg+0x1ade/0x23b0 [ 354.627217][ T8652] [ 354.629575][ T8652] Memory state around the buggy address: [ 354.635226][ T8652] ffff888024dbef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 354.643317][ T8652] ffff888024dbef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 354.651404][ T8652] >ffff888024dbf000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 354.659483][ T8652] ^ [ 354.665654][ T8652] ffff888024dbf080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 354.673756][ T8652] ffff888024dbf100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 354.681861][ T8652] ================================================================== [ 354.699519][ T8652] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 354.706798][ T8652] CPU: 1 PID: 8652 Comm: syz.6.472 Not tainted syzkaller #0 [ 354.714133][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 354.724242][ T8652] Call Trace: [ 354.727557][ T8652] [ 354.730520][ T8652] dump_stack_lvl+0x18c/0x250 [ 354.735251][ T8652] ? show_regs_print_info+0x20/0x20 [ 354.740485][ T8652] ? load_image+0x400/0x400 [ 354.745031][ T8652] panic+0x2dc/0x730 [ 354.748954][ T8652] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.755134][ T8652] ? bpf_jit_dump+0xd0/0xd0 [ 354.759666][ T8652] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 354.765675][ T8652] ? _raw_spin_unlock+0x40/0x40 [ 354.770565][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 354.776153][ T8652] check_panic_on_warn+0x84/0xa0 [ 354.781295][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 354.786783][ T8652] end_report+0x6f/0x130 [ 354.791148][ T8652] kasan_report+0x128/0x150 [ 354.795686][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 354.801184][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 354.806718][ T8652] kasan_check_range+0x241/0x290 [ 354.811690][ T8652] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 354.817184][ T8652] __asan_memmove+0x29/0x70 [ 354.821741][ T8652] ext4_xattr_set_entry+0x94b/0x1e90 [ 354.827096][ T8652] ext4_xattr_block_set+0xae8/0x32b0 [ 354.832425][ T8652] ? ext4_destroy_inode+0x200/0x200 [ 354.837767][ T8652] ? proc_nr_inodes+0x230/0x230 [ 354.842692][ T8652] ? do_raw_spin_unlock+0x121/0x230 [ 354.848028][ T8652] ? _raw_spin_unlock+0x28/0x40 [ 354.852994][ T8652] ? ext4_xattr_block_find+0x350/0x350 [ 354.858488][ T8652] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 354.863894][ T8652] ext4_xattr_set_handle+0x1280/0x14c0 [ 354.869397][ T8652] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 354.875679][ T8652] ? __ext4_journal_start_sb+0x259/0x560 [ 354.881623][ T8652] ext4_xattr_set+0x252/0x340 [ 354.886363][ T8652] ? end_current_label_crit_section+0x170/0x170 [ 354.892649][ T8652] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 354.898232][ T8652] ? posix_xattr_acl+0x93/0xb0 [ 354.903023][ T8652] ? ext4_xattr_trusted_get+0x40/0x40 [ 354.908434][ T8652] __vfs_setxattr+0x431/0x470 [ 354.913153][ T8652] __vfs_setxattr_noperm+0x12d/0x5e0 [ 354.918480][ T8652] vfs_setxattr+0x16b/0x2f0 [ 354.923110][ T8652] ? xattr_permission+0x470/0x470 [ 354.928341][ T8652] ? __mnt_want_write+0x223/0x2a0 [ 354.933410][ T8652] ? path_setxattr+0x3a1/0x5d0 [ 354.938212][ T8652] path_setxattr+0x3f3/0x5d0 [ 354.942839][ T8652] ? simple_xattrs_free+0x150/0x150 [ 354.948123][ T8652] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 354.954163][ T8652] ? lock_chain_count+0x20/0x20 [ 354.959050][ T8652] __x64_sys_lsetxattr+0xb8/0xd0 [ 354.964026][ T8652] do_syscall_64+0x55/0xa0 [ 354.968475][ T8652] ? clear_bhb_loop+0x40/0x90 [ 354.973184][ T8652] ? clear_bhb_loop+0x40/0x90 [ 354.977980][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.983905][ T8652] RIP: 0033:0x7fa5a499aeb9 [ 354.988435][ T8652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.008067][ T8652] RSP: 002b:00007fa5a5889028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 355.016527][ T8652] RAX: ffffffffffffffda RBX: 00007fa5a4c15fa0 RCX: 00007fa5a499aeb9 [ 355.024527][ T8652] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 355.032532][ T8652] RBP: 00007fa5a4a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 355.040536][ T8652] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 355.048547][ T8652] R13: 00007fa5a4c16038 R14: 00007fa5a4c15fa0 R15: 00007ffead97a718 [ 355.056574][ T8652] [ 355.059771][ T8652] Kernel Offset: disabled [ 355.064107][ T8652] Rebooting in 86400 seconds..