last executing test programs: 13.185423036s ago: executing program 4 (id=1319): syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file1\x00', 0x1205419, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES16], 0x30, 0x5c6, &(0x7f0000002080)="$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") openat(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f58ec7a9be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d510100a51cc339021268", 0x2f, r0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000006, 0x10, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, r1, &(0x7f0000000180)=""/221, 0xdd) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000500)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d69736f383835392d312c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c756d61736b3d30303030303030303030303030303030303030303231372c6465636f6d706f73652c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYRES8=0xffffffffffffffff], 0x1, 0x6ec, &(0x7f0000000a40)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2000006, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x25, 0x364, &(0x7f0000000a00)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', '', [], 0xa, "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"}, 0x12f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000240)) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0xfffffffffffffdc7}}, 0xfffffcf9) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400), 0x4) 10.585933196s ago: executing program 4 (id=1325): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4002, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c73686f72746e616d653d77696e6e742c636f6465706167653d313235350073686f72746e616d653d6d697865642c696f636861727365743d6d616363656e7465283d082f6b0e21243f0e1175726f2c756e695f786c6174653d312c726f6469722c696f636861727365743d69736f3838357fcf6a0559476faf392d372c73686f72746e616d654000696e39352c73686f72746e37cbc94ce83c6e4e3354f37ad4321e4ae1a1a405414303b014ce9a8de086a09a49d713584e772fffb467cbc4029fb6f90bd26032bcfad005edf2181113dafa9c077c882e3016fe4e7c03e5ef14946eb81fad488c8fe5932559cd37c9a8a9adb75dfb58aef6964dd28ab902a7f814887136b89a076aa41fcb54046ecaf8714fe71868a5e0bda04e6d5c43875dfd54bd0747598816fffb77a264eedacd5bea1477073c8cd06ff4bd1caad0cfe7557d5a2e992dac50a91bc7b6ca54a3453b1cbeb8d934b6584e9fc587a71ddf1adc8fb5f9b09f54a464ffb4c6f0fb0bb609a53616878056798abe262270b17f8f2740a7ae6f7886f83e9b38e8fc27f29da73b18ba4ee42f3172e542894c771f9ae5cdf1dd583ee31f56ded8fa2d2cca59ffb3372ca5ef74933d6bd97c04d3e61686a560202df974077ac77caf7756336b818b8d5cfb9279963c1428104d9dc0974014e606955281e9b773ce8a862b2639320120d8554b3c00000000f6dbe8e095d468ad48d22eb7f50402610937cf953bfc915361e8df53f117582022c04c214cd1a1c8b657d700d97d864ce7c31198065fd6f24677af5984fa93a0d983768a9e1e9e6257769da9b041f815d1d0e84f95949a476a72b96c331d3ee95f5df73983be5c6ec1c46a08bb3fe54dcfab2ba075c55d207f3c4478122653510e4556b2bff42fc58e3b"], 0x11, 0x22f, &(0x7f0000000880)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x200, 0x0) io_submit(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r5, &(0x7f00000003c0)=[{&(0x7f0000000840)=""/193, 0xc1}], 0x1, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) 10.579621666s ago: executing program 2 (id=1328): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) pipe2$9p(0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000308000000", @ANYRES64], 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.357773794s ago: executing program 0 (id=1330): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d40), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='\b', 0x1, 0x0, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000240)=0x100, 0xffeb) 10.311967808s ago: executing program 1 (id=1331): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r4, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 10.265041722s ago: executing program 3 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0xff, 0x0, 0xfffff00e}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x2}]}, 0x10) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x2) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r0, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040), 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) 8.779109182s ago: executing program 3 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'gre0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@ipv6={@local, @local, [], [], 'gre0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 8.776439132s ago: executing program 4 (id=1334): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x60, 0xc8, 0xdd, 0x40, 0x1604, 0x8005, 0xf0db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0xc2, 0x94}}]}}]}}, 0x0) 8.762893743s ago: executing program 0 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 8.5542196s ago: executing program 1 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a2ad3c249c95b7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x0, 0x4, 0x10005}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x28000, 0xffffff89, 0x0, 0x146c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2004, 0x2, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r8, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2b}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9", 0x39}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xcd}, {0x0}, {&(0x7f0000000440)}, {0x0}], 0x5}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYRES8=r2, @ANYRES8=r2, @ANYRES64, @ANYRES64], 0x18}}], 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c0000380002800400130006001000000000000800080000000000050006008a00000006001000000000"], 0x70}}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0x80045515, 0x0) 6.629279205s ago: executing program 0 (id=1338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) sched_setscheduler(r0, 0x2, &(0x7f0000000340)) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0xe, 0x1e, 0x15d, &(0x7f0000000100)="446fc663446b56e2e2d54fdca9bc6c277be78dc858795e7da44afc40ea401dcc226147741ee8fa5867cc2551538b80251003b42f7397fc90dc5ea5500d0b2bfea0d8e9338361b0cbe6bf30903c1fa3fa3c9aadfb0603c707e7868bf9c404e7cc52d5fca2808808c4ced4db4601cbeb74b3e877ef54334142c4005c4513f1dacfc2d1ae0b229cab1e4a026c7a3a9ba51fee4f544508090b54941cb27d0a899c58ccb0586f86a2bcd78dc315ad4b52b60fb5b76a310252711785bc2e00022a853a20932b5c2905380148d700149c3bbfe872a512f445ef80dd8153d4e2d047a089ed1a00acc5dd7aca8bef5ab26286889cab9a695968820ce9358ec304b330e3fd0a6e0da254ae1e04125b1159bb8cbf13865f2c565c01b34d515dd5f744d6cddcee84dc90f29a37c4cd4affe1364b520157fa7123ed2237acea09d02094146e6b3ff2a0910cb403c532a5ecacd3d26f5658884af39b575b4045e15d9e7fc2cba4eb63662ec8303caab487746cd4d8c8f9426bb2a4fc6cd94715192eb4ecfa5561e9f2b19d0aceb4df2613b424e573aea9f6cbd1ace28f27578bad99bb7e2f26e063c48945f9ee4900c61c63de280a72719a2ac4459588a2b467520117eb86b559c756eb12f8dceff3643cc2c804eee8560c041b8c1dcd798b723ac54ce515403b99d13b2eb3534c258e46979dc20a4772997ca8553abcad135e46e0834d317320a158d530a62b87c34d2dfef23d965cc9cce45234c9eaae2ec3a6be787569e9e267df2cb5d5c53a620f12065f9aa8920f71afa121b0164a694542a7ba36fc7a13738065fd4f8dae40e8a920f2dfecb3429b71affa50e1ffd21591c0d06fc36cb4c51eeb8f5ef1393e1694bd065bebe9468c792bbfa826aee0f4b0c75facf1a4ea5a89dfd08cf6c541133b6b81406c1f66649e212535065e913dcc64c12f10714f81dffe550d925b0e17bb3dd5da212a627b11c09049c0f63087511628e210d6c54696cc45ce9d4c7188429802e2d6fa68423e453f46391eb3f3c181d6badfbeab28bb103e28c8ebc38edeb400e88b352f8aee174337bfa8e14240c3a2275f631323f1eb2ef7f7933ad673f32cd6034128d70c8ad78218420c7f7c2e011cc2d07d5cf8407c3a02ecf605c3bb5bb335525c8779d372a555a3bbb5e4f5d6a73b31802a725b66ff2ae0d659a0f50a41be9925adddd9cd7f5b77e4cfabadd422c2e9bdb1a81403a96ee6112d26eb7b5d2fd6f213f2744890123e8b9ceb8c02dd29c7d8cb68091e5adfeb7b2bf492feaafff3fce4ccaccdf2c4a3af4be35bff96afd85f58052f2ed939cc90372a7937949e67c9d7ccd399ac69d3a0ef755abc98a5c515c6e23f88c0856babb8fbbeea00ab091930f93bc9b2a8e4628bb6f784fd3838e35bf4db500efb1945c7a7e567496888b476fa68f2cd501f7771279933300e6c98"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d008b0000000500010004"], 0x4c}}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x1000, 0x1}, {0xa5, 0x3}]}) ioctl$TIOCGPTPEER(r5, 0x5441, 0x8) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) 6.628908525s ago: executing program 2 (id=1339): tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206425da9da7b6763d4197aa3cff5d7b65cfe63fe4ee002020207b1af8ff00000000bfa100000000000000080000009703000000000000850000003c00000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x3, 0x0) sendmmsg(r4, &(0x7f0000002cc0), 0x1a3, 0x0) 6.628746905s ago: executing program 3 (id=1340): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0x4d, 0xe5, 0x40, 0xb95, 0x172a, 0x4bd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6e, 0x47, 0x3f}}]}}]}}, 0x0) 5.792204023s ago: executing program 1 (id=1341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000017c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, "fb99101719afec01"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 4.057549883s ago: executing program 2 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}}, 0x0) 3.781497165s ago: executing program 2 (id=1343): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="091e21b81dfc6fb0feb157135f914b110011504efbf790845429946409a9244bffb818fbbc5ead98aeff6a5549e74cef0600", @ANYRESOCT, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES64], 0x2, 0x1d8, &(0x7f0000000840)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10a5020, 0x0) 3.673532493s ago: executing program 1 (id=1344): pipe2(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f0a00c30001bcf2f39ecf0f1d23"], 0x22) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000003000000000000000000000500000000000000000000000a02"], 0x0, 0x4a}, 0x20) r1 = syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x201048c, &(0x7f0000000300)=ANY=[], 0xfd, 0x640, &(0x7f0000000680)="$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") r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @prog_id}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000200), &(0x7f00000004c0)=@tcp6=r6}, 0x20) write(r6, &(0x7f0000000480)='M', 0xffffff1f) r9 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, 0x1, 0x4, 0x0, 0x0, 0x0, {0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r9, 0x0, 0x2e, &(0x7f0000000ec0)=""/179, &(0x7f0000000100)=0xb3) fanotify_mark(r5, 0x10, 0x8000000, r1, 0x0) poll(&(0x7f00000012c0)=[{r3, 0x8}, {r0, 0xa000}, {r2, 0x4000}, {r1, 0xc428}, {r0, 0x284}, {r2, 0x8011}, {r3, 0x1010}, {r1, 0xc040}], 0x8, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000140)={0x7, 0x7, 0x2, 0x8}) 3.662454465s ago: executing program 0 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000001c0)=0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x2f8}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast1, @empty, [], [], 'vlan1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3a69199fb8f4af703fe193000f3e34e1c27647d8cd16b804edb9654cf89d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000002c0)=""/232, &(0x7f0000000180)=0xe8) read(r3, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x3ff, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 3.626822017s ago: executing program 4 (id=1346): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000680)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@fat=@check_strict}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_win95}]}, 0x25, 0x343, &(0x7f0000000300)="$eJzs3T9sG2UUAPDnXhKnkUoyIFUwGTYkVDVBDDAlqoJUkQGKLP4tWDTlT2wqxcJSGOJ6ATGCWJBgYusAY+eKASE2BlaKhAqIhW6VWnHIvrN9/pM2RThQ8fsN7dP73rvvu8spviTOl9fWY+f8fFy4ceN6LC6WYm79zHrcLMVKHIskMpfy/yNNAwC4/91M0/gjzdy9+uOlfrQw43UBALPTe/1/48QwUT5c3+LMVgQAzNohv/5/bmr24syWBQDM0MTr/6Mjw2Pf5p8bvCcAALh/vfDyK89ubEWcq1QWIxoftKqtajw9HN+4EG9FPbbjdCzH7YjsQSF7Wuj++8zZrc3Tla5fVqLa7WhVIxrtVjV7UthIev3lWI3lWMn700F/0u1f7fVXIuJSuzd/NEqt6nws5fP/uBTbsRbL8eBEf8TZrc21Sn6AaqPf347oDH9G0V3/qViO71+Pi1GP8/lbGfvr31+tVM6kWyP9rcvlXh0AAAAAAAAAAAAAAAAAAAAAAMzCqcrAymD/m7TRbr1/brxgZWR/nGo2nO8P1Mn2B0rL/d15PkzG9wca3Z+nVZ2LY//qmQMAAAAAAAAAAAAAAAAAAMB/R3NvIWr1+vZuc++9nWLQLmTe+fbLr4/HeM3byTATc9nh+pmrmxF7eS4KXUkM2tNBe5qM1ORBEjEsvnxlsOJiTXlwFhPt3aA8MVTK11Sr10888vNn07r+HGaSmLgso0Epn78w1HggS92h6+Bg7S4119I0Pah9/9PJrihFzE184P6J4Jvrbz70RPPkk73M1XzTh8ceX37x2idf/LZTq0d+aer1hd3m7fRvz5UU7p9Sfp1LU+6E6UFnmOnsNvdqyQ+/v/TwR9+NFSfT75+0mHn34Lm+Gs8sZEF3mYc50/kpN//04NVbg7v33i/myc/Xa1f2f/r1DjXHikcufJKwUQcAAAAAAAAAAAAAAAAAAByJwu+K34Onnp/digAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6A3//n8h6ExkDhPcasfkUHl7t3ng5MeP9FQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+ysAAP//kWB5Xw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.517798106s ago: executing program 3 (id=1347): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000240)=[r2, r1, r1], 0x3}) 3.263125437s ago: executing program 0 (id=1348): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00'}, 0x10) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001340)={{}, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x2000017b, &(0x7f0000000dc0)=ANY=[@ANYRESHEX=r0], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x90) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x1ff) 3.262664967s ago: executing program 3 (id=1349): mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x15, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f0000000700)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x139d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044160, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000280)='+', 0x1, 0x0) 3.242904869s ago: executing program 2 (id=1350): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0xc, &(0x7f0000000dc0)=@framed={{0x18, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {0x4, 0x0, 0x2, 0x3}}]}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x12, 0x2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r4, r2, 0x12, 0x2}, 0x10) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r6, r2, 0x12, 0x2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r9, r7, 0x28, 0x2}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r9, 0x20, &(0x7f0000000380)={&(0x7f0000000400)=""/182, 0xb6, 0x0, &(0x7f00000004c0)=""/166, 0xa6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r12 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r12, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r13, r11, 0x12, 0x2}, 0x10) 2.876644998s ago: executing program 2 (id=1351): r0 = socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x0, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) read(r6, &(0x7f00000044c0)=""/22, 0x16) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x5411, 0xfffffffffffffffe) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 2.204757782s ago: executing program 3 (id=1352): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = dup(r1) ftruncate(r2, 0x3f5e00) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) 2.153474696s ago: executing program 0 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0xba01}, 0x0) 2.081413462s ago: executing program 1 (id=1354): tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206425da9da7b6763d4197aa3cff5d7b65cfe63fe4ee002020207b1af8ff00000000bfa100000000000000080000009703000000000000850000003c00000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x3, 0x0) sendmmsg(r4, &(0x7f0000002cc0), 0x1a3, 0x0) 2.033899316s ago: executing program 4 (id=1355): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setpriority(0x2, 0xff, 0x0) 132.928739ms ago: executing program 1 (id=1356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) sched_setscheduler(r0, 0x2, &(0x7f0000000340)) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0xe, 0x1e, 0x15d, &(0x7f0000000100)="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"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d008b0000000500010004"], 0x4c}}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x1000, 0x1}, {0xa5, 0x3}]}) ioctl$TIOCGPTPEER(r5, 0x5441, 0x8) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) 0s ago: executing program 4 (id=1357): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000005d80), 0x1, 0x5ce8, &(0x7f0000005dc0)="$eJzs3U1vHVcZB/Dnvvj6pbSNKlSFiEWaQmkpzXsC5a0pCxawAAllTSLXrQIpoMQgWlnElReIFV8BNt2w6FfgA/QzID4AkWxWXVAGjX1OMh5f5zokvnPt8/tJzswz547vmfw9nns9M/cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/+uHPLvQi4sbv0oITEV+IQUQ/YrGuT0c9cy0/fhgRJ2O7OV6MiMF8RL3+9j/PR1yOiE+fi9jcWluuF188YD+unF+98/mPf/CPP/554+Qv3vn5x+32n37x0id/uhdx4idvfvL5vaez7QAAAFCKqqqqXnqbfyq9v+933SkAYCry8b9K8nK1Wq1Wq9XHr26qxrvXLCJivblO/ZrB6XgAOGLW47Ouu0CH5F+0YUQ803UngJnW67oDHIrNrbXlXsq31zwenN5pz9eC7Mp/vffg/o79ppO0rzGZ1s/XRgzihX36szilPsySnH+/nf+NnfZRetxh5z8t++U/2rn1qTg5/0E7/5bjk39/bP6lyvkPHyv/gfwBAAAAAGCG5b//n+j4/O/8k2/KgTzq/O/pKfUBAAAAAAAAAJ62Jx3/7wHj/wEAAMDMqt+r1/7y3MNl+30WW738ei/i2dbjgcKkm2WWuu4HAAAAAAAAAAAAAJRkuHMN7/VexFxEPLu0VFVV/dXUrh/Xk65/1JW+/VCyrn/JAwDAjk+fa93L34tYiIjr6bP+5paWlqpqYXGpWqoW5/Pr2dH8QrXYeF+bp/Wy+dEBXhAPR1X9zRYa6zVNer88qb39/ernGlWDA3RsOjoMHAAiYudotOmIdMxU1fPR9ascjgb7//Fj/+cguv45BQAAAA5fVVVVL32c96l0zr/fdacAgKnIx//2eQG1Wq1Wq9XHr26qxrvXLCJivblO/ZrBcPwAcMSsx2ddd4EOyb9ow4g42XUngJnW67oDHIrNrbXlXsq31zwepPHd87Ugu/Jf722vl9cfN52kfY3JtH6+NmIQL+zTnxen1IdZkvPvt/O/sdM+So877PynZb/86+080UF/upbzH7Tzbzk++ffH5l+qnP/wsfIfyB8AAAAAAGZY/vv/Ced/8yYDAAAAAAAAwJGzubW2nO97zef/vzzmce7/PJ5y/j35Fynn32/n37ogZ9CYv//2w/z/vbW2/PHqv76UpzOf/9xgVD/3XK8/GKZrfqq5d+NW3I6VOL/n8cNd7Rf2tM/tar84of3SnvZR3b6Y28/Gcvw6bsc7D9rnJ1wYtTChvZrQnvMf2P+LlPMfNr7q/JdSe681rd3/qL9nv29Oxz3Ptb/955W9e9f0bcTgwbY11dt3poP+bP+fPDOK395duXP29zdXV+9ciDTZtfRipMlTlvOfS185/1df3mnPv/eb++v9j0aPnf+s2Ijhvvm/3Jivt/e1KfetCzn/UfrK+ecj0Pj9/yjnv//+/3oH/QEAAAAAAAAAAAAAAIBHqapq+xbRaxFxNd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49f3VSN91aziIi/N9epXzP8Ydw3AwBm2X8j4p9dd4LOyL9g+fP+6ulXuu4MMFV3P/jwlzdv3165c7frngAAAAAAAAAA/688/ufpxvjP29cBtcaN3jX+69tx+siO/9kfDbbHOk8b9FI8evzvM/Ho8b+HE55vbkL7aEL7/IT2hQntY2/0aMj5v5QyzvmfShtW0vivr3bQn67l/M+ksZ5z/l9rPa6Zf/XXo5x/f1f+51bf/825ux98+Mat92++t/Leyq8unL96+dKVy5euXDn37q3bK+d3/u2wx4cr55/HvnYdaFly/jlz+Zcl5//VVMu/LDn/V1It/7Lk/PPrPfmXJeef3/vIvyw5/9dSLf+y5Py/nmr5lyXn/3qq5V+WnP83Ui3/suT830i1/MuS8z+bavmXJed/LtXyL0vOP5/hkn9Zcv75ygb5lyXnfzHV8i9Lzv9SquVflpz/5VTLvyw5/yupln9Zcv5XUy3/suT8v5lq+Zcl5/+tVMu/LDn/N1Mt/7Lk/L+davmXJef/nVTLvyw5/++mWv5lyfl/L9XyL0vO//upln9Zcv5vpVr+ZXn4+f9mzJgxk2e6/s0EAAAAAAAAAAAAALRN43LirrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO/cWI2d53w/83ZO9NgT8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO8up6KyKbQlClKR2gt60TSJ0ihSW4GqSE0lGiE1UnvXXDXiJmqlXPgCKgcllVIFtnpnnufxzOx63jVmYOZ9Pp8I/+ydd2aeeeeZ2f1u9B0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVhs/PvOnQ0VRlP81/lhXFOeXf19T7C7/ubDj/V4hAAAAcK7eavz5dxemL+xewZVajvnXq/79u4uLi4vFF948+fafLy6mCzYUxcjqomhcFv3bL36+2HpM8EwxPjTc8u/hirsfqbh8tOLysYrLV1Vcvrri8vGKy5ecgCXWNH8f07ixaxt/Xdc8pcXFxVjjsmuXudYzQ6uHh+PvchqGGtdZHDtQHCoOFzPF1JLrDDX+VxSvbCzv694i3tdwy32tL4ri1E+f2hfXMBTO8bVF2501tD53b9xdbHjzp0/t+/bc61csNytPw5KVFsXmTeU6ny2K07+uKoaK1emcxHUOt6xz/TLrHGlb51DjeuXfO9d5aoXrjI97PKzzh13WuT587fFriqJYKM54TKdniuFibce9pvM93twR5W2UT+UHi9Gz2icbV7BPyuv85Jr2fdK5J+P53xjOyegZ1tD6dLzx5VVLzvs73Sflo+6HvVre9v3lnY6Pt/5qtW2vlsc8dd2Z98Cyz90yeyDt5ZY9sKlqDwyvGmnsgeHTa97Utgeml1xnuBhq3NfJ67rvgcm5I8cnZ5948pZDR/YenDk4c3R6ase2rdu3bd2+ffLAocMzU80/z+6UDpC1xXDag5vCe03cgzd0HNu6JRe/8e69Dsb75HVQPvbPXF8u6Pzh4gx7vDzm2c3n/jpI3/dbXgejLa+DZd9Tl3kdjK7gdVAec2rzyr5njrb8t9waevVeuK5lD7yf3w/L+3zoxjO/F64P63ruprP9fjiyZA/EhzUUXnvlV9LPe+O3h/OydF9cWV5w3qpifnbmxK2P752bOzFdhPGeuKjluercL2tbHlOxZL8Mn/V+2f23v7z+ymW+vi6cq/Gbuz9X5THbJro/V4139+XPZ9tXtxRhvMve6/O53Hez8nymLNHlfJbHPHvLuf8smHJJy/vfWNX738jYaPP9bySdjbG297+lT81IY2VFceqWlb3/jYX/3uv3v4v75P2vPFcP3dp9D5THPDd5tntgtOv73zVhDoX13BgSw3hL7n+7cflCc5u2PJeV+2Z0dCzsm9F4j+37ZuuS65S3Vt735ql3tm82X9P+XLX93FLDfVOeq7+Y6r5vymNenT7394418a8t7x2rqvbA2Miqcr1jaRM03+8W18Q9cGuxrzhWHC72p+uUz3J5XxNbVrYHVoX/3uv3jsv7ZA+U5+rFLd33QHnMD7a+uz87bQ5fSce0/OzU+fuFM2X+K0dP317naXu3M3+5zk9s6/67ofKY17edbc7ofp5uDl85b5nz1Pn6OdOe3l+8N+fp8rDOw9u7/26qPObiHSvcT7uLonht+rXG77vC73f/Yf4/vtv2e9/lfqf82vRr900+8KOzWT8AAO/c240/F1Y1f9Zs+X+sV/L//wMAAAADIeb+4TAT+R8AAABqI+b+kTAT+R8AAABqI+b+0TCTTPL/I7fvfOmtp4v0aYCLQbw8nob772weFzveC+HfGxZPK7/+sW+NvfSVp1d238NFUfzyvg8te/wjd8Z1NR2P6/xI+9eXuPzqFd3/ww+ePq718xNO7Wzefnw8K90Gsav8yuSWxu1ueGK6MV+9r2jMBxaee6Z5+81/x+NPbm0e/1fhQ0t2Hxhqu/7msJ5rw9wQPlPm/t2nz0M54/VeWn/Vv1z02dP3F683tOmCxsN88Q+btxs/I+qFi5rHx8d9pvX/81e/81J5/OPXLb/+p4eXX//JcLs/CfMXu5rHt57zr7Ss/4/D+uP9xevd+s3vL7v+ly9rHv9y2BdfD7Nz/Xf/2YffWu75ivez+47m9eL9T/3Ptsb14u3F2+9c//jT023no/P2X32zeTu7Hv3ZSOvx8evxfqKH72jf30Ph+W3rkRdF8Z0/KdrOc/HR5vX+qWP98faO37H8+m/uWOfxoasb1z/9eNa1Pa6v/c2WZR9vXM/uv1/X9nheuCecvzcnf1De7skHwn4Ml//vD5u31/lZpi/f0/5+E4//+rrm6zbe3mTH+l/oWP/C1eW5q17/vW821//yXavb1r/7k2E/3ducVes/+NcXtl3/G99uPh8nHps4emx2/tD+lrPa+jpePb5m7Xnnf+CCC8N7aee/9xybe2TmxIapDVNFsWEAPzKw1+v/Zpj/3RwL7/49NP3oZ8199/ynmt+3bvh5898vhK8/HJ7P+P3xa3851rZfO5/3hbua81zXf1NYx0pd9tX/unpFB578/Cvz//hHr3f+XBAfz/FLxhuP78WNlzYuG3q1eXnn+1WV/7yk/XX949GpxvxeOK+L4ZOZN13avL/O24+fTfL8p5uv3/iTXLx+0fF5IutG2h/Hua7/x+HnmO9f3v7+F/fH957u+DTndcVQuYSF8P5QLDQvj0fF8/38qUuXvb/4OTzFwhVns8wzmn1idvLwoaPzj0/OzczOTc4+8eSeI8fmj87taXx26Z4vVl3/9Ot7beP1vX9mx7ai8Wo/1hw99n6v//iD+/bfNnX9/pkDe+cPzD14fObEwX2zs/tm9s9ev/fAgZnHqq5/aP+u6S07t962ZeLgof27bt+5c+vOiUNHj5XLaC6qwo6pL00cPbGncZXZXdt2Tm/fvm1q4six/TO7bpuampivun7je9NEee1HJ07MHN47d+jIzMTsoSdndk3v3LFjS+WnPx45fmB2w+SJ+aOT87MzJyabj2XDXOPL5fe+quuTh9lj4f2uw1D46fxzN+9In49b+taXz3hTzUPafzwt3gifBRW/v1X9O+b+sTCTTPI/AAAA5CDm/vDB/6cvkP8BAACgNmLuXx1mIv8DAABAbcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/bvT/9f8Hef36//r/VOu3/n/M/WuKIsv8DwAAADmIuX9tmIn8DwAAALURc/95YSbyPwAAANRGzP3nh5lkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/B8JMMsn/AAAAkIOY+y8IM5H/AQAAoDZi7r8wzET+BwAAgNqIuX9dmEkm+V//X/9f/1//X/9f/7+X9P/1/7vR/9f/H+T16//r/1Ot3/r/Mff/vzCTTPI/AAAA5CDm/g+Gmcj/AAAAUBsx918UZiL/AwAAQG3E3H9xmEkm+V//X/9f/1//X/9f/7+X9P/1/7vR/9f/H+T16//r/1Ot3/r/MfdfEmaSSf4HAACAHMTcf2mYifwPAAAAtRFz/2VhJvI/AAAA1EbM/ZeHmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc/8VYSaZ5H8AAADIQcz9V4aZyP8AAABQGzH3fyjMRP4HAACA2oi5f32YSSb5X/9f/1//X/9f/1//v5f0//X/u9H/1/8f5PXr/+v/U63f+v8x9384zCST/A8AAAA5iLn/qjAT+R8AAABqI+b+q8NM5H8AAACojZj7N4SZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXr/+v/4/1fqt/x9z/8Ywk0zyPwAAAOQg5v5NYSbyPwAAANRGzP3XhJnI/wAAAFAbMfdfG2aSSf7X/9f/1//X/9f/1//vJf1//f9u9P/1/wd5/fr/+v9U67f+f8z914WZZJL/AQAAIAcx918fZiL/AwAAQG3E3H9DmIn8DwAAALURc//mMJNM8r/+v/6//r/+v/6//n8v6f/r/3ej/6//P8jr1//X/6dav/X/Y+6/Mcwkk/wPAAAAOYi5/6YwE/kfAAAAaiPm/pvDTOR/AAAAqI2Y+yfCTDLJ//r/+v/6//r/+v/6/72k/6//343+v/7/IK9f/1//n2r91v+Puf+WMJNM8j8AAADkIOb+W8NM5H8AAACojZj7J8NM5H8AAACojZj7p8JMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5fzrMJJP8DwAAADmIuX9LmIn8DwAAALURc//WMBP5HwAAAGoj5v5tYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9y/Pcwkk/wPAAAAOYi5f0eYifwPAAAAtRFz/21hJvI/AAAA1EbM/beHmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc//OMJNM8j8AAADkIOb+j4SZyP8AAABQGzH33xFmIv8DAABAbcTc/9Ewk0zyv/6//r/+v/6//r/+fy/p/+v/d6P/r/8/yOvX/9f/p1q/9f9j7t8VZpJJ/gcAAIAcxNx/Z5iJ/A8AAAC1EXP/XWEm8j8AAADURsz9u8NMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/+4wk0zyPwAAAOQg5v6PhZnI/wAAAFAbMfd/PMxE/gcAAIDaiLn/E2EmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fcf0+YSSb5HwAAAHIQc/8nw0zkfwAAAKiNmPv/f5iJ/A8AAAC1EXP/vWEmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fc/ythJpnkfwAAAMhBzP33hZnI/wAAAFAbMfd/KsxE/gcAAIDaiLn/V8NMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/9fCTDLJ/wAAAJCDmPt/PcxE/gcAAIDaiLn/N8JM5H8AAACojZj77w8zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/t8MM8kk/wMAAEAOYu5/IMxE/gcAAIDaiLn/02Em8j8AAADURsz9nwkzyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/gfDTDLJ/wAAAJCDmPs/G2Yi/wMAAEBtxNz/W2Em8j8AAADURsz9vx1mkkn+1//X/9f/1//X/9f/7yX9f/3/bvT/9f8Hef36//r/VOu3/n/M/Z8LM8kk/wMAAEAOYu7/nTAT+R8AAABqI+b+3w0zkf8BAACgNmLufyjMJJP8r/+v/6//r/+v/6//30v6//r/3ej/6/8P8vr1//X/qdZv/f+Y+z8fZpJJ/gcAAIAcxNz/e2Em8j8AAADURsz9e8JM5H8AAACojZj7Hw4zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/r1hJpnkfwAAAMhBzP1fCDOR/wEAAKA2Yu7fF2Yi/wMAAEBtxNy/P8wkk/yv/6//r/+v/6//r//fS/r/+v/d6P/r/w/y+vX/9f+p1m/9/5j7Z8JMMsn/AAAAkIOY+w+Emcj/AAAAUBsx9x8MM5H/AQAAoDZi7n8kzCST/K//r/+v/6//r/+v/99L+v/6/93o/+v/D/L69f/1/6nWb/3/mPsPhZlkkv8BAAAgBzH3fzHMRP4HAACA2oi5/0thJvI/AAAA1EbM/YfDTDLJ//r/+v/6//r/+v/6/72k/6//343+v/7/IK9f/1//n2r91v+Puf9ImEkm+R8AAAByEHP/0TAT+R8AAABqI+b+Y2Em8j8AAADURsz9x8NMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5//fDTDLJ/wAAAJCDmPtPhJnI/wAAAFAbMffPhpnI/wAAAFAbMffPhZlkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/fJhJJvkfAAAAchBz/6NhJvI/AAAA1EbM/Y+Fmcj/AAAAUBsx9z8eZpJJ/tf/1//X/9f/1//X/+8l/X/9/270//X/B3n9+v/6/1Trt/5/zP1PhJlkkv8BAAAgBzH3PxlmIv8DAABAbcTc/wdh/h/79qwF4NKDYfTGf9u2bdu2bRzbVnGaJOU31aw1M9m7SZv2LZ5i/wMAAMAxcvc/J25psv/1//p//b/+X/+v/59J/6//v6L/1//v/L/+X//P2Gr9f+7+58YtTfY/AAAAdJC7/3lxi/0PAAAAx8jd//y4xf4HAACAY+Tuf0Hc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/S+MW5rsfwAAAOggd/+L4hb7HwAAAI6Ru//FcYv9DwAAAMfI3f+SuKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/uftfGrc02f8AAADQQe7+l8Ut9j8AAAAcI3f/y+MW+x8AAACOkbv/FXFLk/2v/9f/6//1//p//f9M+n/9/xX9v/5/5//1//p/xlbr/3P3vzJuabL/AQAAoIPc/a+KW+x/AAAAOEbu/lfHLfY/AAAAHCN3/2vilib7X/+v/9f/6//1//r/mfT/+v8r+n/9/87/6//1/4yt1v/n7n9t3NJk/wMAAEAHuftfF7fY/wAAAHCM3P2vj1vsfwAAADhG7v43xC1N9r/+X/+v/9f/6//1/zPp//X/V/T/+v+d/9f/6/8ZW63/z93/xrilyf4HAACADnL3vylusf8BAADgGLn73xy32P8AAABwjNz9b4lbmux//b/+X/+v/9f/6/9n0v/r/6/o//X/O/+v/9f/M7Za/5+7/61xS5P9DwAAAB3k7n9b3GL/AwAAwDFy9789brH/AQAA4Bi5+98RtzTZ//p//b/+X/+v/9f/z6T/1/9f0f/r/3f+X/+v/2dstf4/d/8745Ym+x8AAAA6yN3/rrjF/gcAAIBj5O5/d9xi/wMAAMAxcve/J25psv/1//p//b/+X/+v/59J/6//v6L/1//v/L/+X//P2Gr9f+7+98YtTfY/AAAAdJC7/31xi/0PAAAAx8jd//64xf4HAACAY+Tu/0Dc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/R+MW5rsfwAAAOggd/+H4hb7HwAAAI6Ru//DcYv9DwAAAMfI3f+RuKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/ufs/Grc02f8AAADQQe7+j8Ut9j8AAAAcI3f/x+MW+x8AAACOkbv/E3FLk/2v/9f/6//1//p//f9M+n/9/xX9v/5/5//1//p/xlbr/3P3fzJuabL/AQAAoIPc/Z+KW+x/AAAAOEbu/k/HLfY/AAAAHCN3/2filib7X/+v/9f/6//1//r/mfT/+v8r+n/9/87/6//1/4yt1v/n7v9s3NJk/wMAAEAHufs/F7fY/wAAAHCM3P2fj1vsfwAAADhG7v4vxC1N9r/+X/+v/9f/6//1/zPp//X/V/T/+v+d/9f/6/8ZW63/z93/xbilyf4HAACADnL3fylusf8BAADgGLn7vxy32P8AAABwjNz9X4lbmux//b/+X/+v/9f/6/9n0v/r/6/o//X/O/+v/9f/M7Za/5+7/6txS5P9DwAAAB3k7v9a3GL/AwAAwDFy9389brH/AQAA4Bi5+78RtzTZ//p//b/+X/+v/9f/z6T/1/9f0f/r/3f+X/+v/2dstf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBj5O7/dtxi/wMAAMAxcvd/J25psv/1//p//b/+X/+v/59J/6//v6L/1//v/L/+X//P2Gr9f+7+78YtTfY/AAAAdJC7/3txi/0PAAAAx8jd//24xf4HAACAY+Tu/0Hc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/T+MW5rsfwAAAOggd/+P4hb7HwAAAI6Ru//HcYv9DwAAAMfI3f+TuKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/uft/Grc02f8AAADQQe7+n8Ut9j8AAAAcI3f/z+MW+x8AAACOkbv/F3FLk/2v/9f/6//1//p//f9M+n/9/xX9v/5/5//1//p/xlbr/3P3/zJuabL/AQAAoIPc/b+KW+x/AAAAOEbu/l/HLfY/AAAAHCN3/2/ilib7X/+v/9f/6//1//r/mfT/+v8r+n/9/87/6//1/4yt1v/n7v9t3NJk/wMAAEAHuft/F7fY/wAAAHCM3P2/j1vsfwAAADhG7v4/xC1N9r/+X/+v/9f/6//1/zPp//X/V/T/+v+d/9f/6/8ZW63/z93/x7ilyf4HAACADnL3/ylusf8BAADgGLn7/xy32P8AAABwjNz9f4lbmux//b/+X/+v/9f/6/9n0v/r/6/o//X/O/+v/9f/M7Za/5+7/69xS5P9DwAAAB3k7v9b3GL/AwAAwDFy9/89brH/AQAA4Bi5+/8RtzTZ//p//b/+X/+v/9f/z6T/1/9f0f/r/3f+X/+v/2dstf4/d/8/45Ym+x8AAAA6yN3/r7jF/gcAAIBj5O7/d9xi/wMAAMAxcvf/J25psv/1//p//b/+X/+v/59J/6//v6L/1//v/L/+X//P2Gr9f+7+/8YtTfY/AAAAdJC7/39xi/0PAAAAx8jd//+4xf4HAACAY+TuvyFuabL/9f/6f/2//l//r/+fSf+v/7+i/9f/7/y//l//z9hq/X/u/hvjlib7HwAAADrI3X9T3GL/AwAAwDFy998ct9j/AAAAcIzc/bfELU32v/5f/6//1//r//X/M+n/9f9X9P/6/53/1//r/xlbrf/P3X9r3NJk/wMAAEAHuftvi1vsfwAAADhG7v7b4xb7HwAAAI6Ru/+OuKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/ufvvjFua7H8AAADoIHf/XXGL/Q8AAADHyN1/d9xi/wMAAMAxcvffE7c02f/6f/2//l//r//X/8+k/9f/X9H/6/93/l//r/9nbLX+P3f/vXFLk/0PAAAAHeTuvy9usf8BAADgGLn7749b7H8AAAA4Ru7+B+KWJvtf/6//1//r//X/+v+Z9P/6/yv6f/3/zv/r//X/jK3W/+fufzBuabL/AQAAoIPc/Q/FLfY/AAAAHCN3/8Nxi/0PAAAAx8jd/0jc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/Y/GLU32PwAAAHSQu/+xuMX+BwAAgGPk7n88brH/AQAA4Bi5+5+IW5rsf/2//l//r//X/+v/Z9L/6/+v6P/1/zv/r//X/zO2Wv+fu//JuKXJ/gcAAIAOcvc/FbfY/wAAAHCM3P1Pxy32PwAAABwjd/8zcUuT/a//1//r//X/+n/9/0z6f/3/Ff2//n/n//X/+n/GVuv/c/c/GwAA//9/h0Q1") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000580)=""/45, 0x2d) getdents64(r0, 0x0, 0x480a) kernel console output (not intermixed with test programs): 286.674422][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.686786][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.699094][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.715331][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.731138][ T6281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.763478][ T6281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.792363][ T6281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.808360][ T6281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.843555][ T6384] device veth1_vlan entered promiscuous mode [ 287.012567][ T6384] device veth0_macvtap entered promiscuous mode [ 287.026361][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.034646][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.053807][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.064856][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.088124][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.106175][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.116394][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.132406][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.175497][ T6384] device veth1_macvtap entered promiscuous mode [ 287.242972][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.263261][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.273490][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.300384][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.325619][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.352321][ T6558] loop2: detected capacity change from 0 to 128 [ 287.356924][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.383956][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.397248][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.412262][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.412424][ T6558] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 287.425927][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.461339][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.476328][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.488728][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.497188][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.511460][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.526229][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.555877][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.567137][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.578096][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.590014][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.601088][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.623489][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.634094][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.646754][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.657637][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.670371][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.682621][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.695292][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.705317][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.786932][ T6384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.815053][ T6384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.834392][ T6384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.854012][ T6384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.882982][ T6564] loop1: detected capacity change from 0 to 1024 [ 288.251849][ T6572] loop2: detected capacity change from 0 to 512 [ 288.464333][ T6570] loop3: detected capacity change from 0 to 1764 [ 288.484860][ T6572] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 288.493248][ T6572] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 288.507270][ T6572] EXT4-fs (loop2): 1 truncate cleaned up [ 288.513138][ T6572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 288.572555][ T6572] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 289.146963][ T6202] EXT4-fs (loop2): unmounting filesystem. [ 289.410482][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.430321][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.550185][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.589293][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.627814][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.687882][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.756462][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 289.864608][ T6585] netlink: 76 bytes leftover after parsing attributes in process `syz.2.665'. [ 290.243233][ T6599] loop3: detected capacity change from 0 to 164 [ 290.420793][ T6599] loop3: detected capacity change from 0 to 1024 [ 290.473038][ T6601] loop2: detected capacity change from 0 to 64 [ 290.631788][ T6596] netlink: 'syz.3.669': attribute type 10 has an invalid length. [ 290.696904][ T6603] loop0: detected capacity change from 0 to 4096 [ 290.704211][ T6601] hfs: request for non-existent node 237 in B*Tree [ 290.749931][ T6603] __ntfs_error: 21 callbacks suppressed [ 290.749952][ T6603] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 290.760978][ T6601] hfs: request for non-existent node 237 in B*Tree [ 290.840417][ T6603] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 290.860737][ T6579] loop1: detected capacity change from 0 to 40427 [ 290.909910][ T34] hfsplus: b-tree write err: -5, ino 4 [ 290.921563][ T34] hfsplus: bad catalog file entry [ 290.935744][ T6603] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 290.952873][ T6603] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 290.958626][ T6579] F2FS-fs (loop1): invalid crc value [ 290.984673][ T6603] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 291.005868][ T6606] hfs: request for non-existent node 237 in B*Tree [ 291.005921][ T6603] ntfs: volume version 3.1. [ 291.090023][ T6579] F2FS-fs (loop1): Found nat_bits in checkpoint [ 291.096446][ T6606] hfs: request for non-existent node 237 in B*Tree [ 291.107794][ T6603] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 291.150940][ T6605] hfs: request for non-existent node 237 in B*Tree [ 291.157966][ T6605] hfs: request for non-existent node 237 in B*Tree [ 291.160230][ T6603] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 291.203588][ T4292] device hsr_slave_0 left promiscuous mode [ 291.216415][ T6603] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 291.260875][ T6603] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 291.294907][ T6603] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 291.310089][ T4292] device hsr_slave_1 left promiscuous mode [ 291.314922][ T6579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.325570][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.353529][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.387324][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.406914][ T9] hfs: request for non-existent node 237 in B*Tree [ 291.422843][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.426161][ T9] hfs: request for non-existent node 237 in B*Tree [ 291.451463][ T4292] device bridge_slave_1 left promiscuous mode [ 291.457757][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.480257][ T4292] device bridge_slave_0 left promiscuous mode [ 291.486819][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.498131][ T4488] syz-executor: attempt to access beyond end of device [ 291.498131][ T4488] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 291.604516][ T3689] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 291.650697][ T4292] device dummy0 left promiscuous mode [ 291.687719][ T6616] loop2: detected capacity change from 0 to 512 [ 291.698353][ T3655] Bluetooth: hci1: command tx timeout [ 291.704053][ T4292] device veth1_macvtap left promiscuous mode [ 291.722349][ T4292] device veth0_macvtap left promiscuous mode [ 291.731082][ T4292] device veth1_vlan left promiscuous mode [ 291.732580][ T6616] EXT4-fs (loop2): Unsupported encryption level 9 [ 291.737274][ T4292] device veth0_vlan left promiscuous mode [ 291.868435][ T3689] usb 5-1: Using ep0 maxpacket: 16 [ 292.011578][ T6616] loop2: detected capacity change from 0 to 256 [ 292.115267][ T6616] exfat: Unknown parameter '184467440737095516150x0000000000000000' [ 292.159557][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.472120][ T3689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.818630][ T3689] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.848419][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.908167][ T3689] usb 5-1: config 0 descriptor?? [ 292.974262][ T6633] loop1: detected capacity change from 0 to 512 [ 293.050767][ T6616] loop2: detected capacity change from 0 to 512 [ 293.088014][ T6633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.115020][ T6633] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038 (0x7fffffff) [ 293.212093][ T4292] team0 (unregistering): Port device vlan2 removed [ 293.244044][ T4292] bond1 (unregistering): Released all slaves [ 293.426195][ T4488] EXT4-fs (loop1): unmounting filesystem. [ 293.452221][ T3689] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0010/input/input25 [ 293.567221][ T3689] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 293.722300][ T6652] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.827683][ T6656] loop1: detected capacity change from 0 to 1024 [ 293.887052][ T4704] usb 5-1: USB disconnect, device number 15 [ 293.966626][ T6662] loop2: detected capacity change from 0 to 512 [ 293.977631][ T6656] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 293.977845][ T6662] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.096230][ T6665] loop3: detected capacity change from 0 to 256 [ 294.099086][ T6662] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.691: invalid indirect mapped block 83886080 (level 1) [ 294.104072][ T6665] exfat: Unknown parameter '' [ 294.207944][ T6662] EXT4-fs (loop2): 1 orphan inode deleted [ 294.227571][ T6662] EXT4-fs (loop2): 1 truncate cleaned up [ 294.251130][ T6669] loop3: detected capacity change from 0 to 256 [ 294.251913][ T6662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 294.577881][ T6662] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.691: Invalid inode table block 5 in block_group 0 [ 294.644308][ T6662] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.691: Invalid inode bitmap blk 4 in block_group 0 [ 294.660669][ T4704] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 294.937799][ T4704] usb 2-1: Using ep0 maxpacket: 16 [ 294.951299][ T6202] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 295.040554][ T6202] EXT4-fs (loop2): unmounting filesystem. [ 295.088417][ T4704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.118921][ T4704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.185701][ T4704] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 295.201728][ T6679] loop4: detected capacity change from 0 to 128 [ 295.225409][ T4704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.249438][ T6679] FAT-fs (loop4): Unrecognized mount option "nf" or missing value [ 295.281506][ T4704] usb 2-1: config 0 descriptor?? [ 295.457157][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 295.506706][ T6682] block nbd3: shutting down sockets [ 295.521672][ T6668] trusted_key: encrypted_key: master key parameter is missing [ 295.535204][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 295.649682][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.678371][ T3691] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 295.734930][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.821138][ T4704] lenovo 0003:17EF:6009.0011: unknown global tag 0xc [ 295.828020][ T4704] lenovo 0003:17EF:6009.0011: item 0 2 1 12 parsing failed [ 295.836720][ T4704] lenovo 0003:17EF:6009.0011: hid_parse failed [ 295.843881][ T4704] lenovo: probe of 0003:17EF:6009.0011 failed with error -22 [ 296.047328][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 296.047345][ T27] audit: type=1400 audit(1723512623.202:58): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A02994F13051CA817FA97844BAA978732BDAD5A3D174B3B1A18F96A11DC04562D34DE812A8A50C8704F71C73A1FC74446E8CF9241B377C91B0B53F5534161F48AC6622327EB36968AF0475A7B4630BCD33388C7DCC896E8A18B2E4167D6E25801CA3608AFFEF1FD22809551 pid=6667 comm="syz.1.694" [ 296.108402][ T3691] usb 5-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 296.119024][ T3691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.198714][ T3691] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.208098][ T3691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.223368][ T3691] usb 5-1: SerialNumber: syz [ 296.240160][ T4292] bond0 (unregistering): Released all slaves [ 296.429309][ T6689] 9pnet_fd: Insufficient options for proto=fd [ 296.548742][ T27] audit: type=1400 audit(1723512623.692:59): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A090EA3680EB06A1A5FD3F7614EFCD31267A0590DD509A5EFFE069ABB05AD3352B3AC017439E1DBC66F4DF20C0741B02DB717F35BBBCD4A734DE1F70C73C07EDA77D9616BE3DD1E63E92055FE373A94F022B1F018E4B2A80C8DE7F63E446A7147 pid=6686 comm="syz.0.701" [ 297.263111][ T3691] usb 5-1: 0:2 : does not exist [ 297.268140][ T3691] usb 5-1: unit 255 not found! [ 297.510369][ T3691] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 297.578912][ T3691] usb 5-1: USB disconnect, device number 16 [ 297.696927][ T4871] usb 2-1: USB disconnect, device number 16 [ 297.765385][ T6698] overlayfs: missing 'lowerdir' [ 297.987579][ T3657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.002692][ T3657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.013106][ T3657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.024178][ T3657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.032772][ T3657] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 298.040899][ T3657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.128574][ T3691] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 298.154649][ T6707] loop1: detected capacity change from 0 to 1024 [ 298.214897][ T6707] hfsplus: unable to parse mount options [ 298.263828][ T5219] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.569005][ T3691] usb 5-1: config 0 has no interfaces? [ 298.574872][ T3691] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.658447][ T3691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.680525][ T3691] usb 5-1: config 0 descriptor?? [ 298.920653][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.171016][ T6705] chnl_net:caif_netlink_parms(): no params data found [ 299.245534][ T6719] loop3: detected capacity change from 0 to 128 [ 299.317995][ T4703] usb 5-1: USB disconnect, device number 17 [ 299.369677][ T6719] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 299.422507][ T6719] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 299.503365][ T6725] loop1: detected capacity change from 0 to 1024 [ 299.572271][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.632536][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.664899][ T6705] device bridge_slave_0 entered promiscuous mode [ 299.691068][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.700232][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 299.716894][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.768085][ T6705] device bridge_slave_1 entered promiscuous mode [ 299.841956][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.872988][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.032421][ T6734] netlink: 64 bytes leftover after parsing attributes in process `syz.0.725'. [ 300.058493][ T6734] tipc: Invalid UDP bearer configuration [ 300.058557][ T6734] tipc: Enabling of bearer rejected, failed to enable media [ 300.072280][ T6735] loop3: detected capacity change from 0 to 2048 [ 300.094754][ T6705] team0: Port device team_slave_0 added [ 300.108907][ T3657] Bluetooth: hci1: command tx timeout [ 300.214646][ T27] audit: type=1400 audit(1723512627.352:60): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A090EA3680EB06A1A5FD3F7614EFCD31267A0590DD509A5EFFE069ABB05AD3352B3AC017439E1DBC66F4DF20C0741B02DB717F35BBBCD4A734DE1F70C73C07EDA77D9616BE3DD1E63E92055FE373A94F022B1F018E4B2A80C8DE7F63E446A7147 pid=6736 comm="syz.4.716" [ 300.880939][ T6739] sp0: Synchronizing with TNC [ 300.942828][ T6735] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.717: bad orphan inode 8192 [ 300.984851][ T6705] team0: Port device team_slave_1 added [ 301.011024][ T6735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 302.063926][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.071155][ T4293] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 302.082219][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 302.120368][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.178499][ T3657] Bluetooth: hci1: command tx timeout [ 302.208379][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.221407][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.228684][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.255296][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.395155][ T6752] loop3: detected capacity change from 0 to 256 [ 302.402230][ T4410] hfsplus: b-tree write err: -5, ino 4 [ 302.424727][ T6705] device hsr_slave_0 entered promiscuous mode [ 302.473964][ T6705] device hsr_slave_1 entered promiscuous mode [ 302.497777][ T6752] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 1032) [ 302.519826][ T6705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.546077][ T6705] Cannot create hsr debugfs directory [ 302.597291][ T6755] loop1: detected capacity change from 0 to 128 [ 302.681883][ T6755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.698631][ T4293] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 302.718344][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.726397][ T4293] usb 5-1: Product: syz [ 302.741409][ T4293] usb 5-1: Manufacturer: syz [ 302.748519][ T4293] usb 5-1: SerialNumber: syz [ 302.759612][ T4293] usb 5-1: config 0 descriptor?? [ 302.793902][ T6755] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 302.833450][ T4293] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 303.048390][ T4293] gspca_sunplus: reg_r err -71 [ 303.055049][ T4293] usb 5-1: USB disconnect, device number 18 [ 303.473998][ T6755] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.721: Unimplemented hash flags: 0x00ad [ 303.926453][ T6755] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.721: Corrupt directory, running e2fsck is recommended [ 303.940154][ T6755] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.721: Invalid inode bitmap blk 3029842369236818995 in block_group 0 [ 303.959865][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.981851][ T6764] device batadv_slave_0 entered promiscuous mode [ 304.141420][ T6770] loop4: detected capacity change from 0 to 8 [ 304.150147][ T4488] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz-executor: Unimplemented hash flags: 0x00ad [ 304.198338][ T4488] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 304.269226][ T3657] Bluetooth: hci1: command tx timeout [ 304.312591][ T4488] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 4: comm syz-executor: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=0, inode=188389578, rec_len=48405, size=1024 fake=0 [ 304.359293][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 304.373756][ T4488] EXT4-fs error (device loop1): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 14875662660405297151 in block_group 0 [ 304.389086][ T4488] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 304.399354][ T4488] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #2: comm syz-executor: mark_inode_dirty error [ 304.418019][ T6705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.457473][ T4488] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz-executor: Unimplemented hash flags: 0x00ad [ 304.491343][ T4488] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 304.544811][ T6779] overlayfs: missing 'lowerdir' [ 304.597195][ T4488] EXT4-fs error (device loop1): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 14875662660405297151 in block_group 0 [ 304.648094][ T4488] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 304.721965][ T4488] EXT4-fs error (device loop1): __ext4_unlink:3325: inode #2: comm syz-executor: mark_inode_dirty error [ 305.081312][ T6705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.098661][ T4409] EXT4-fs error (device loop1): __ext4_get_inode_loc:4506: comm kworker/u4:14: Invalid inode table block 14875662660405297151 in block_group 0 [ 305.368652][ T4708] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 305.649075][ T4708] usb 5-1: Using ep0 maxpacket: 32 [ 305.718521][ T6705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.789765][ T4708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.823066][ T5088] EXT4-fs (loop1): unmounting filesystem. [ 305.848753][ T4708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.931395][ T4708] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.948700][ T4708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.970560][ T4708] usb 5-1: config 0 descriptor?? [ 306.009751][ T4708] hub 5-1:0.0: USB hub found [ 306.140283][ T6705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.654967][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.713759][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.932300][ T3657] Bluetooth: hci1: command tx timeout [ 307.048497][ T4708] hub 5-1:0.0: 1 port detected [ 307.317946][ T4292] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.378774][ T6705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.453734][ T4292] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.501307][ T6705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.527644][ T6705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.624799][ T4292] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.666176][ T6705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.709061][ T4708] hub 5-1:0.0: activate --> -90 [ 307.759504][ T4292] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.906567][ T3657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.908768][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.924937][ T6806] loop3: detected capacity change from 0 to 32768 [ 307.930507][ T3653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.948989][ T3653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.949902][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.963841][ T3653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.990044][ T3653] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.994270][ T6806] XFS (loop3): Mounting V5 Filesystem [ 308.002824][ T3653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.043603][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.057535][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.075642][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.084662][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.094325][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.101512][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.116665][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.135181][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.139367][ T6806] XFS (loop3): Ending clean mount [ 308.146794][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.154839][ T6806] XFS (loop3): Quotacheck needed: Please wait. [ 308.155405][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.192082][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.204120][ T6819] loop4: detected capacity change from 0 to 512 [ 308.222920][ T6819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.228922][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.240916][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.299516][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.310208][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.328063][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.343240][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.377420][ T6806] XFS (loop3): Quotacheck: Done. [ 308.383035][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.392225][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.401781][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.408762][ T6819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.410821][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.428008][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.444481][ T4292] tipc: Left network mode [ 308.466129][ T6705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.473846][ T6819] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 308.476078][ T27] audit: type=1804 audit(1723512635.642:61): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.740" name="/newroot/48/file0/file2" dev="loop3" ino=9287 res=1 errno=0 [ 308.905773][ T6090] XFS (loop3): Unmounting Filesystem [ 308.937483][ T5240] usb 5-1: USB disconnect, device number 19 [ 309.009643][ T6809] chnl_net:caif_netlink_parms(): no params data found [ 309.068683][ T4708] usb 5-1-port1: config error [ 309.283559][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.298718][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.460879][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.518124][ T6281] EXT4-fs (loop4): unmounting filesystem. [ 309.637386][ T6853] loop3: detected capacity change from 0 to 8 [ 309.778802][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.787615][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.121103][ T6860] overlayfs: missing 'lowerdir' [ 310.191492][ T3655] Bluetooth: hci0: command tx timeout [ 310.793903][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.812650][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.836494][ T6809] device bridge_slave_0 entered promiscuous mode [ 310.990636][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.009311][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.038608][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.045748][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.055204][ T6866] loop3: detected capacity change from 0 to 2048 [ 311.086584][ T6809] device bridge_slave_1 entered promiscuous mode [ 311.096373][ T6866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.229074][ T6864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.747'. [ 311.529400][ T6705] device veth0_vlan entered promiscuous mode [ 311.905926][ T5240] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 311.970036][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.978704][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.996987][ T6809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.072488][ T6809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.089503][ T6705] device veth1_vlan entered promiscuous mode [ 312.268575][ T3655] Bluetooth: hci0: command tx timeout [ 312.308576][ T5240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.320298][ T5240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.330998][ T5240] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 312.340478][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.350912][ T5240] usb 5-1: config 0 descriptor?? [ 312.890165][ T6809] team0: Port device team_slave_0 added [ 312.935844][ T6809] team0: Port device team_slave_1 added [ 313.116923][ T6893] loop3: detected capacity change from 0 to 512 [ 313.212825][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.224685][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.241235][ T6705] device veth0_macvtap entered promiscuous mode [ 313.261507][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.298738][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.369761][ T6809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.397260][ T5240] logitech-hidpp-device 0003:046D:C086.0012: unbalanced collection at end of report description [ 313.416814][ T5240] logitech-hidpp-device 0003:046D:C086.0012: hidpp_probe:parse failed [ 313.425643][ T5240] logitech-hidpp-device: probe of 0003:046D:C086.0012 failed with error -22 [ 313.757803][ T5240] usb 5-1: USB disconnect, device number 20 [ 314.338293][ T3653] Bluetooth: hci0: command tx timeout [ 314.485086][ T6705] device veth1_macvtap entered promiscuous mode [ 314.500841][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.507876][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.537183][ T6809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.575039][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.597109][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.642242][ C1] eth0: bad gso: type: 1, size: 1408 [ 314.643351][ T6918] loop3: detected capacity change from 0 to 16 [ 314.697396][ T4292] device hsr_slave_0 left promiscuous mode [ 314.727874][ T6918] erofs: (device loop3): mounted with root inode @ nid 36. [ 314.745673][ T4292] device hsr_slave_1 left promiscuous mode [ 314.778998][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.786567][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.825476][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.865376][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.904325][ T4292] device bridge_slave_1 left promiscuous mode [ 314.934699][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.993938][ T4292] device bridge_slave_0 left promiscuous mode [ 315.054598][ T6917] syz.3.761: attempt to access beyond end of device [ 315.054598][ T6917] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 315.099477][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.113103][ T4292] device hsr_slave_0 left promiscuous mode [ 315.145190][ T4292] device hsr_slave_1 left promiscuous mode [ 315.180045][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.223037][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.261353][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.304722][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.349751][ T4292] device bridge_slave_1 left promiscuous mode [ 315.376874][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.393160][ T4292] device bridge_slave_0 left promiscuous mode [ 315.400139][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.508998][ T4292] device veth1_macvtap left promiscuous mode [ 315.515225][ T4292] device veth0_macvtap left promiscuous mode [ 315.521941][ T4292] device veth1_vlan left promiscuous mode [ 315.527988][ T4292] device veth0_vlan left promiscuous mode [ 315.538173][ T4292] device veth1_macvtap left promiscuous mode [ 315.545206][ T4292] device veth0_macvtap left promiscuous mode [ 315.554057][ T4292] device veth1_vlan left promiscuous mode [ 315.577573][ T4292] device veth0_vlan left promiscuous mode [ 315.762634][ T6937] fuse: Unknown parameter ' ګ)5k+?s TDq%7ˁ$}jfn+` [ 315.762634][ T6937] K!i.:fZHYI~GY36^ycs*^bG-zYAi9 [ 315.762634][ T6937] +/mFf?I^hNBBmG{L`-*Qj;e1Paj%7TY1b I'8ާCsכ(9C%sfIh+qz-Ŀ#tOf?^2uQ~aYij H:Tjy҆Nq5]q~ϭۓ]p0x0000000000000008' [ 315.840943][ T6937] binder_alloc: binder_alloc_mmap_handler: 6935 20ffc000-20ffd000 already mapped failed -16 [ 316.213531][ T6941] loop3: detected capacity change from 0 to 736 [ 316.419009][ T3653] Bluetooth: hci0: command tx timeout [ 317.061760][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.095185][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.324264][ T6949] binder: 6943:6949 ioctl c0403d08 20000100 returned -22 [ 318.671335][ T6951] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffc [ 318.816077][ T6953] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 318.827588][ T6953] netlink: 56 bytes leftover after parsing attributes in process `syz.0.774'. [ 319.115819][ T6959] loop4: detected capacity change from 0 to 256 [ 319.175664][ T5245] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.794150][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.891310][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.468697][ T4292] bond0 (unregistering): Released all slaves [ 323.644291][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 323.786202][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 323.919600][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.050808][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.269747][ T4292] bond0 (unregistering): Released all slaves [ 325.464577][ T6809] device hsr_slave_0 entered promiscuous mode [ 325.513418][ T6809] device hsr_slave_1 entered promiscuous mode [ 325.520485][ T6809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.531905][ T6809] Cannot create hsr debugfs directory [ 325.589535][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.600436][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.615399][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.626373][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.669379][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.680822][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.700137][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.756629][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.778421][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.798282][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.831398][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.846961][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.857860][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.906460][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.936156][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.965333][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.993264][ T6705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.009846][ T6705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.038842][ T6705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.047609][ T6705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.111429][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 326.127769][ T7018] netlink: 'syz.4.798': attribute type 15 has an invalid length. [ 326.357655][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.376670][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.503214][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.593038][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.606310][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.752961][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.783514][ T7037] fuse: Bad value for 'fd' [ 326.851889][ T7040] Option ' >' to dns_resolver key: bad/missing value [ 327.002430][ T7045] loop2: detected capacity change from 0 to 256 [ 327.228268][ T3689] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 327.380772][ T7056] loop4: detected capacity change from 0 to 1024 [ 327.425491][ T7056] EXT4-fs (loop4): invalid inodes per group: 204800 [ 327.425491][ T7056] [ 327.451382][ T7059] loop2: detected capacity change from 0 to 128 [ 327.472221][ T6809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.673890][ T6809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.388821][ T3689] usb 4-1: config 0 has no interfaces? [ 328.397843][ T3689] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.416323][ T3689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.975379][ C1] eth0: bad gso: type: 1, size: 1408 [ 329.066582][ T3689] usb 4-1: config 0 descriptor?? [ 329.155465][ T6809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.224549][ T6809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 329.458069][ T4710] usb 4-1: USB disconnect, device number 5 [ 329.644381][ T6809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.691720][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.701291][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.723078][ T6809] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.761982][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.779376][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.792518][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.799722][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.833440][ T4868] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 329.863413][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.871750][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.887226][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.911945][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.919151][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.957726][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.045158][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.063212][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.078641][ T4868] usb 3-1: Using ep0 maxpacket: 32 [ 330.087829][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.100600][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.111204][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.139447][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.198420][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.209194][ T4868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 330.222359][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.237377][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.257440][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.281393][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.355423][ T7098] netlink: 'syz.0.823': attribute type 1 has an invalid length. [ 330.558588][ T4868] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 330.574737][ T4868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.607530][ T4868] usb 3-1: Product: syz [ 330.666830][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 330.675915][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 330.787539][ T4868] usb 3-1: Manufacturer: syz [ 330.926710][ T4868] usb 3-1: SerialNumber: syz [ 331.447060][ T4868] usb 3-1: config 0 descriptor?? [ 331.514762][ T4868] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 331.717501][ T4868] usb 3-1: USB disconnect, device number 13 [ 331.728397][ T11] usb 3-1: Failed to submit usb control message: -71 [ 331.735801][ T11] usb 3-1: unable to send the bmi data to the device: -71 [ 331.771905][ T11] usb 3-1: unable to get target info from device [ 331.833768][ T11] usb 3-1: could not get target info (-71) [ 331.866752][ T11] usb 3-1: could not probe fw (-71) [ 332.538681][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.546299][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.617594][ T6809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.732394][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.780273][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.840271][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.859993][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.891194][ T6809] device veth0_vlan entered promiscuous mode [ 332.899852][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.934793][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.989989][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 333.024606][ T6809] device veth1_vlan entered promiscuous mode [ 333.172506][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.187214][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.229118][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.289155][ T1163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.301353][ T6809] device veth0_macvtap entered promiscuous mode [ 333.371252][ T6809] device veth1_macvtap entered promiscuous mode [ 333.386815][ T7152] Bluetooth: MGMT ver 1.22 [ 333.504457][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.516700][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.526785][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.539303][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.549563][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.565674][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.093466][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.101958][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.221970][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.262842][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.293166][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.399351][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.453196][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.463665][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.478602][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.498976][ T3653] Bluetooth: min 2 > max 0 [ 334.508006][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.565914][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.610502][ T6809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.645917][ T6809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.685989][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.848425][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.869116][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.468713][ T3655] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 335.545564][ T3655] Bluetooth: hci3: command 0x1407 tx timeout [ 335.723050][ T6809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.788302][ T6809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.884320][ T6809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.895044][ T6809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.219049][ T3827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.238264][ T3827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.264434][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 338.919927][ T3655] Bluetooth: hci3: command 0x1407 tx timeout [ 339.060683][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.109220][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.233145][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.338638][ T7195] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 339.353513][ T5618] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 339.428413][ T7195] netlink: 'syz.0.849': attribute type 2 has an invalid length. [ 339.908535][ T4703] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 341.028254][ T4703] usb 3-1: Using ep0 maxpacket: 16 [ 341.061425][ T7226] loop1: detected capacity change from 0 to 512 [ 341.091496][ T7226] EXT4-fs (loop1): Test dummy encryption mode enabled [ 341.158590][ T4703] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 341.189377][ T7226] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.857: inline data xattr refers to an external xattr inode [ 341.216066][ T7226] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.857: couldn't read orphan inode 12 (err -117) [ 341.268298][ T7226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 341.304664][ T7203] loop4: detected capacity change from 0 to 32768 [ 341.332993][ T7203] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.850 (7203) [ 341.349711][ T7203] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.360215][ T7203] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 341.386757][ T7203] BTRFS info (device loop4): setting nodatacow, compression disabled [ 341.405499][ T7203] BTRFS info (device loop4): enabling auto defrag [ 341.412194][ T4703] usb 3-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=3f.fd [ 341.412351][ T7203] BTRFS info (device loop4): max_inline at 0 [ 341.434284][ T7203] BTRFS info (device loop4): using free space tree [ 341.437109][ T4703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.446767][ T7239] fuse: Bad value for 'fd' [ 341.514242][ T7226] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.857: Directory hole found for htree leaf block 0 [ 341.543763][ T4703] usb 3-1: Product: syz [ 341.554438][ T4703] usb 3-1: Manufacturer: syz [ 341.559689][ T4703] usb 3-1: SerialNumber: syz [ 341.574710][ T4703] usb 3-1: config 0 descriptor?? [ 341.629762][ T4703] usb 3-1: bad CDC descriptors [ 341.705966][ T7267] loop3: detected capacity change from 0 to 512 [ 341.713468][ T7267] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.721872][ T7267] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 341.788219][ T7267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 341.801328][ T6809] EXT4-fs (loop1): unmounting filesystem. [ 341.818487][ T7267] System zones: 1-12 [ 341.863475][ T34] BTRFS info (device loop4): cannot satisfy tickets, dumping space info [ 341.872683][ T34] BTRFS info (device loop4): space_info DATA+METADATA has 10563584 free, is full [ 341.881924][ T34] BTRFS info (device loop4): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=917504, readonly=0 zone_unusable=0 [ 341.895655][ T34] BTRFS info (device loop4): failing ticket with 48651242045440 bytes [ 341.918847][ T4868] usb 3-1: USB disconnect, device number 14 [ 341.926788][ T7199] BTRFS info (device loop4): space_info DATA+METADATA has 10563584 free, is full [ 341.936695][ T7199] BTRFS info (device loop4): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=917504, readonly=0 zone_unusable=0 [ 341.950528][ T7199] BTRFS info (device loop4): global_block_rsv: size 917504 reserved 917504 [ 341.960877][ T7199] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 341.966364][ T7267] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.863: corrupted in-inode xattr [ 341.968588][ T7199] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 341.981310][ T7267] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.863: couldn't read orphan inode 15 (err -117) [ 341.988062][ T7199] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 342.000616][ T7267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 342.007679][ T7199] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 342.329205][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 342.437859][ T6281] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 342.483231][ T7288] loop1: detected capacity change from 0 to 1024 [ 342.622334][ T7288] EXT4-fs: Ignoring removed orlov option [ 342.676796][ T7288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.850848][ T7288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 343.013142][ T6809] EXT4-fs (loop1): unmounting filesystem. [ 343.144806][ T7301] loop2: detected capacity change from 0 to 128 [ 343.196868][ T7301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 343.238744][ T7301] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff) [ 343.355271][ T6705] EXT4-fs (loop2): unmounting filesystem. [ 343.525747][ T7319] loop2: detected capacity change from 0 to 512 [ 343.568877][ T7319] EXT4-fs (loop2): Test dummy encryption mode enabled [ 343.581375][ T7321] raw_sendmsg: syz.0.876 forgot to set AF_INET. Fix it! [ 343.634540][ T7319] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.875: inline data xattr refers to an external xattr inode [ 343.679139][ T7326] loop4: detected capacity change from 0 to 1024 [ 343.690461][ T7319] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.875: couldn't read orphan inode 12 (err -117) [ 343.734861][ T7319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 343.746467][ T7326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 343.794600][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 343.905661][ T7319] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.875: Directory hole found for htree leaf block 0 [ 345.030205][ T6281] EXT4-fs (loop4): unmounting filesystem. [ 345.108123][ T6705] EXT4-fs (loop2): unmounting filesystem. [ 345.415530][ T7352] netlink: 'syz.0.886': attribute type 3 has an invalid length. [ 345.526422][ T7323] loop1: detected capacity change from 0 to 40427 [ 345.533114][ T3642] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 345.571766][ T7323] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 345.609593][ T7323] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 345.632952][ T7323] F2FS-fs (loop1): invalid crc value [ 345.656914][ T7323] F2FS-fs (loop1): Found nat_bits in checkpoint [ 345.672655][ T7362] loop2: detected capacity change from 0 to 512 [ 345.726996][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.735626][ T7357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.800011][ T7362] EXT4-fs error (device loop2): ext4_do_update_inode:5221: inode #3: comm syz.2.891: corrupted inode contents [ 345.812775][ T3642] usb 5-1: Using ep0 maxpacket: 8 [ 345.823272][ T7362] EXT4-fs error (device loop2): ext4_dirty_inode:6083: inode #3: comm syz.2.891: mark_inode_dirty error [ 345.835237][ T7323] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 345.842847][ T7323] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 345.861707][ T7362] EXT4-fs error (device loop2): ext4_do_update_inode:5221: inode #3: comm syz.2.891: corrupted inode contents [ 345.865707][ T27] audit: type=1804 audit(1723512673.022:62): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.877" name="/newroot/8/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 345.902273][ T27] audit: type=1804 audit(1723512673.062:63): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.877" name="/newroot/8/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 345.927052][ T7362] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.891: mark_inode_dirty error [ 345.938555][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.949559][ T27] audit: type=1804 audit(1723512673.092:64): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.877" name="/newroot/8/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 345.978740][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.995478][ T3642] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 346.005236][ T3642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.037965][ T7362] Quota error (device loop2): write_blk: dquota write failed [ 346.054216][ T3642] usb 5-1: config 0 descriptor?? [ 346.079063][ T7362] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 346.093866][ T7323] syz.1.877: attempt to access beyond end of device [ 346.093866][ T7323] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 346.158768][ T7362] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.891: Failed to acquire dquot type 0 [ 346.256608][ T7362] EXT4-fs error (device loop2): ext4_do_update_inode:5221: inode #16: comm syz.2.891: corrupted inode contents [ 346.321557][ T7362] EXT4-fs error (device loop2): ext4_dirty_inode:6083: inode #16: comm syz.2.891: mark_inode_dirty error [ 346.384210][ T7362] EXT4-fs error (device loop2): ext4_do_update_inode:5221: inode #16: comm syz.2.891: corrupted inode contents [ 346.441489][ T7362] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.891: mark_inode_dirty error [ 346.523097][ T7362] EXT4-fs error (device loop2): ext4_do_update_inode:5221: inode #16: comm syz.2.891: corrupted inode contents [ 346.576126][ T7362] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 346.585508][ T7362] EXT4-fs error (device loop2): ext4_do_update_inode:5221: inode #16: comm syz.2.891: corrupted inode contents [ 346.594136][ T3642] cherry 0003:046A:0027.0013: unknown main item tag 0x0 [ 346.613777][ T3827] kworker/u4:7: attempt to access beyond end of device [ 346.613777][ T3827] loop1: rw=1, sector=77824, nr_sectors = 664 limit=40427 [ 346.635867][ T7362] EXT4-fs error (device loop2): ext4_truncate:4311: inode #16: comm syz.2.891: mark_inode_dirty error [ 346.635915][ T3642] cherry 0003:046A:0027.0013: unknown main item tag 0xe [ 346.655337][ T3642] cherry 0003:046A:0027.0013: unknown main item tag 0x5 [ 346.662213][ T3827] kworker/u4:7: attempt to access beyond end of device [ 346.662213][ T3827] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 346.732905][ T7376] loop3: detected capacity change from 0 to 1024 [ 346.754527][ T7362] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 346.778300][ T3642] cherry 0003:046A:0027.0013: unknown main item tag 0x4 [ 346.785542][ T3642] cherry 0003:046A:0027.0013: ignoring exceeding usage max [ 346.786574][ T7362] EXT4-fs (loop2): 1 truncate cleaned up [ 346.799837][ T3642] cherry 0003:046A:0027.0013: usage index exceeded [ 346.806411][ T3642] cherry 0003:046A:0027.0013: item 0 0 2 0 parsing failed [ 346.814050][ T7362] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 346.826035][ T7376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 346.828878][ T7362] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 346.845482][ T3642] cherry: probe of 0003:046A:0027.0013 failed with error -22 [ 346.855853][ T3642] usb 5-1: USB disconnect, device number 22 [ 347.054769][ T4292] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 347.103850][ T7362] syz.2.891 (7362) used greatest stack depth: 19328 bytes left [ 347.128798][ T6705] EXT4-fs (loop2): unmounting filesystem. [ 347.149105][ T4292] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:12: Failed to release dquot type 1 [ 348.133931][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 349.694969][ T7392] loop4: detected capacity change from 0 to 128 [ 350.800222][ T7392] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 350.962547][ T7392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.238217][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 351.247876][ T7407] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 352.910207][ T7418] loop4: detected capacity change from 0 to 2048 [ 353.203640][ T7418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 353.211145][ T7428] loop1: detected capacity change from 0 to 512 [ 353.219549][ T7428] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.233742][ T7428] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 353.263985][ T7428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 353.278727][ T7428] System zones: 1-12 [ 353.392206][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 353.401307][ T7436] tipc: Started in network mode [ 353.406276][ T7436] tipc: Node identity 1, cluster identity 4711 [ 353.412538][ T7436] tipc: Node number set to 1 [ 353.813316][ T7428] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.910: corrupted in-inode xattr [ 353.838910][ T7428] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.910: couldn't read orphan inode 15 (err -117) [ 354.596753][ T7428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 354.862854][ T6281] EXT4-fs (loop4): unmounting filesystem. [ 355.312318][ T7449] loop3: detected capacity change from 0 to 512 [ 355.329097][ T6809] EXT4-fs (loop1): unmounting filesystem. [ 355.352057][ T7449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 355.455410][ T7449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 355.482889][ T7449] System zones: 1-12 [ 355.502762][ T7449] EXT4-fs (loop3): 1 truncate cleaned up [ 355.535801][ T7449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 355.594726][ T27] audit: type=1800 audit(1723512682.752:65): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.916" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 356.629960][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 356.635966][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'. [ 357.788573][ T152] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 358.333013][ T7488] loop4: detected capacity change from 0 to 2048 [ 358.468506][ T152] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 358.537900][ T152] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 358.565601][ T7495] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.582514][ T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.593796][ T152] usb 4-1: config 0 descriptor?? [ 359.024586][ T152] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 359.188489][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 359.197560][ T7500] netlink: 'syz.0.930': attribute type 4 has an invalid length. [ 359.294147][ T1163] usb 4-1: USB disconnect, device number 6 [ 360.989716][ T7537] netlink: 76 bytes leftover after parsing attributes in process `syz.2.941'. [ 361.043221][ T7539] netlink: 'syz.3.943': attribute type 4 has an invalid length. [ 361.562499][ T7543] loop1: detected capacity change from 0 to 512 [ 362.622555][ T7555] loop3: detected capacity change from 0 to 128 [ 363.019214][ T7555] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 363.293354][ T7555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.732305][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #3: comm syz.1.945: corrupted inode contents [ 363.798561][ T7543] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #3: comm syz.1.945: mark_inode_dirty error [ 363.845759][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #3: comm syz.1.945: corrupted inode contents [ 363.883866][ T7543] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.945: mark_inode_dirty error [ 364.003002][ T1163] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 364.039694][ T7543] Quota error (device loop1): write_blk: dquota write failed [ 364.050892][ T7543] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 364.066688][ T7543] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.945: Failed to acquire dquot type 0 [ 364.107676][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #16: comm syz.1.945: corrupted inode contents [ 364.137792][ T7543] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #16: comm syz.1.945: mark_inode_dirty error [ 364.479860][ T1163] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 364.524804][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #16: comm syz.1.945: corrupted inode contents [ 364.624492][ T1163] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 364.962358][ T7543] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.945: mark_inode_dirty error [ 364.998278][ T1163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.012579][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #16: comm syz.1.945: corrupted inode contents [ 365.037689][ T1163] usb 3-1: config 0 descriptor?? [ 365.044274][ T7543] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 365.060887][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #16: comm syz.1.945: corrupted inode contents [ 365.096388][ T7543] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.945: mark_inode_dirty error [ 365.110287][ T1163] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 365.188012][ T7543] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 365.209385][ T7543] EXT4-fs (loop1): 1 truncate cleaned up [ 365.235664][ T7543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 365.278100][ T7543] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 365.324332][ T6809] EXT4-fs (loop1): unmounting filesystem. [ 366.202196][ T7578] syz.0.955 (7578): drop_caches: 2 [ 366.477218][ T7586] loop4: detected capacity change from 0 to 512 [ 366.487248][ T4710] usb 3-1: USB disconnect, device number 15 [ 366.506275][ T7586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.537889][ T7586] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.958: corrupted in-inode xattr [ 366.570164][ T7588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'. [ 366.586842][ T7588] netlink: 13 bytes leftover after parsing attributes in process `syz.0.960'. [ 366.597737][ T7586] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.958: couldn't read orphan inode 15 (err -117) [ 366.611771][ T7586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 366.732666][ T7592] loop3: detected capacity change from 0 to 128 [ 366.773048][ T6281] EXT4-fs (loop4): unmounting filesystem. [ 367.868336][ C1] eth0: bad gso: type: 1, size: 1408 [ 368.799605][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 368.799754][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'. [ 369.577737][ C1] eth0: bad gso: type: 1, size: 1408 [ 369.579048][ C1] eth0: bad gso: type: 1, size: 1408 [ 369.600425][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 371.945045][ T7627] loop3: detected capacity change from 0 to 2048 [ 373.254070][ T7005] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 374.403918][ T4710] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 374.874715][ T27] audit: type=1326 audit(1723512702.032:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb08d3799f9 code=0x0 [ 375.000019][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 375.009110][ T7657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.981'. [ 375.804557][ T4710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 375.852931][ T4710] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 375.877057][ T4710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.887967][ T4710] usb 2-1: config 0 descriptor?? [ 376.050585][ T4710] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 376.113412][ T4710] usb 2-1: USB disconnect, device number 17 [ 376.151783][ C1] eth0: bad gso: type: 1, size: 1408 [ 376.205932][ T7665] loop1: detected capacity change from 0 to 256 [ 376.247731][ T7667] block nbd4: shutting down sockets [ 376.338375][ T3655] Bluetooth: hci3: command 0x1407 tx timeout [ 376.416712][ T7649] loop3: detected capacity change from 0 to 32768 [ 376.534915][ T7679] trusted_key: encrypted_key: insufficient parameters specified [ 376.560735][ T7649] XFS (loop3): Mounting V5 Filesystem [ 376.575137][ T7679] Bluetooth: MGMT ver 1.22 [ 376.694765][ T7649] XFS (loop3): Ending clean mount [ 376.755038][ T7649] Process accounting resumed [ 376.761980][ T7682] loop1: detected capacity change from 0 to 8192 [ 376.802641][ T7682] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 376.820357][ T7682] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 376.846933][ T7682] REISERFS (device loop1): using ordered data mode [ 376.859519][ T7682] reiserfs: using flush barriers [ 376.874444][ T7682] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 376.917699][ T7682] REISERFS (device loop1): checking transaction log (loop1) [ 376.961356][ T7682] REISERFS (device loop1): Using r5 hash to sort names [ 376.976870][ T6090] XFS (loop3): Unmounting Filesystem [ 376.983198][ T7682] REISERFS (device loop1): using 3.5.x disk format [ 376.990308][ T7682] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 377.376790][ T7696] loop4: detected capacity change from 0 to 128 [ 380.988952][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.995347][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.477329][ T7704] loop3: detected capacity change from 0 to 256 [ 381.969321][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 381.978397][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'. [ 383.894053][ T27] audit: type=1326 audit(1723512711.052:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.4.997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942d3799f9 code=0x0 [ 384.283522][ T7725] : renamed from pim6reg1 [ 384.612241][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 384.643004][ T7727] tipc: Started in network mode [ 384.688919][ T7727] tipc: Node identity , cluster identity 8 [ 384.735995][ T7740] loop1: detected capacity change from 0 to 128 [ 384.758481][ T7740] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 384.776855][ T7740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.680350][ T7751] loop4: detected capacity change from 0 to 512 [ 385.698265][ T3655] Bluetooth: hci2: command 0x0406 tx timeout [ 386.679811][ C1] eth0: bad gso: type: 1, size: 1408 [ 386.749044][ T7751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 386.808915][ T7751] ext4 filesystem being mounted at /69/bus supports timestamps until 2038 (0x7fffffff) [ 387.211574][ T6281] EXT4-fs (loop4): unmounting filesystem. [ 387.368429][ T1163] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 387.789169][ T1163] usb 4-1: Using ep0 maxpacket: 16 [ 387.992481][ T1163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.424913][ T1163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.475355][ T1163] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 388.567354][ T1163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.683153][ T7798] sp0: Synchronizing with TNC [ 388.850221][ T1163] usb 4-1: config 0 descriptor?? [ 389.896155][ T7810] loop2: detected capacity change from 0 to 128 [ 389.995249][ T7810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 390.023861][ T7810] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 390.072794][ T7814] loop1: detected capacity change from 0 to 256 [ 390.093680][ T7814] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 1032) [ 390.204453][ T7810] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.1033: Unimplemented hash flags: 0x00ad [ 390.230714][ T7810] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1033: Corrupt directory, running e2fsck is recommended [ 390.254033][ T7810] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1033: Invalid inode bitmap blk 3029842369236818995 in block_group 0 [ 390.304934][ T1163] uclogic 0003:5543:0004.0014: item fetching failed at offset 5/7 [ 390.305445][ T1163] uclogic 0003:5543:0004.0014: parse failed [ 390.305486][ T1163] uclogic: probe of 0003:5543:0004.0014 failed with error -22 [ 390.324866][ T6705] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz-executor: Unimplemented hash flags: 0x00ad [ 390.372036][ T7819] loop4: detected capacity change from 0 to 64 [ 390.476663][ T6705] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 390.495880][ T6705] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 4: comm syz-executor: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=0, inode=188389578, rec_len=48405, size=1024 fake=0 [ 390.529937][ T6705] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 14875662660405297151 in block_group 0 [ 390.567284][ T6705] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 390.605812][ T6705] EXT4-fs error (device loop2): ext4_dirty_inode:6083: inode #2: comm syz-executor: mark_inode_dirty error [ 390.665933][ T6705] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz-executor: Unimplemented hash flags: 0x00ad [ 390.704672][ T6705] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 390.735288][ T1163] usb 4-1: USB disconnect, device number 7 [ 390.747370][ T6705] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 14875662660405297151 in block_group 0 [ 390.795867][ T6705] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 390.804877][ T7825] loop1: detected capacity change from 0 to 4096 [ 390.814714][ T6705] EXT4-fs error (device loop2): __ext4_unlink:3325: inode #2: comm syz-executor: mark_inode_dirty error [ 390.847358][ T7825] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 390.895992][ T7825] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 391.623282][ T7217] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm kworker/u4:16: Invalid inode table block 14875662660405297151 in block_group 0 [ 391.894184][ T6705] EXT4-fs (loop2): unmounting filesystem. [ 392.260221][ T7842] Illegal XDP return value 666508736 on prog (id 218) dev syz_tun, expect packet loss! [ 392.948355][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 393.228769][ T3657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.242134][ T3657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.258465][ T3657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.268899][ T3657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.276825][ T3657] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.286462][ T3657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.404372][ T7849] loop3: detected capacity change from 0 to 32768 [ 393.910345][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.036521][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.129681][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1062'. [ 394.216887][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.455319][ T7869] chnl_net:caif_netlink_parms(): no params data found [ 394.519475][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.656326][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 394.671060][ T7907] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 394.687823][ T7910] loop1: detected capacity change from 0 to 1024 [ 394.830350][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.837522][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.886548][ T7869] device bridge_slave_0 entered promiscuous mode [ 394.926635][ T3828] hfsplus: b-tree write err: -5, ino 4 [ 394.977497][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.994975][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.026355][ T7869] device bridge_slave_1 entered promiscuous mode [ 395.165194][ T7869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.261044][ T7869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.381161][ T3657] Bluetooth: hci1: command tx timeout [ 395.887855][ T7869] team0: Port device team_slave_0 added [ 395.989079][ T3655] Bluetooth: hci4: command 0x0406 tx timeout [ 396.235226][ T7869] team0: Port device team_slave_1 added [ 396.253856][ T7929] loop3: detected capacity change from 0 to 4096 [ 396.283081][ T7929] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 396.292817][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 396.832685][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.915718][ T7948] 9pnet: Unknown protocol version 9 [ 396.979029][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.176117][ T7952] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1084'. [ 397.189030][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1084'. [ 397.475036][ T7869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.518367][ T3653] Bluetooth: hci1: command tx timeout [ 397.906372][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.923102][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.951809][ T7869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.062993][ T3655] Bluetooth: hci3: unexpected event for opcode 0x200f [ 398.136662][ T7869] device hsr_slave_0 entered promiscuous mode [ 398.148365][ T1163] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 398.192609][ T7869] device hsr_slave_1 entered promiscuous mode [ 398.202537][ T7869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.217159][ T7869] Cannot create hsr debugfs directory [ 398.534900][ T1163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.575789][ T1163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.589169][ C1] eth0: bad gso: type: 1, size: 1408 [ 398.614378][ T1163] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 398.633998][ T1163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.665322][ T1163] usb 2-1: config 0 descriptor?? [ 399.668666][ T3655] Bluetooth: hci1: command tx timeout [ 399.751576][ T1163] logitech-hidpp-device 0003:046D:C086.0015: unbalanced collection at end of report description [ 399.763885][ T1163] logitech-hidpp-device 0003:046D:C086.0015: hidpp_probe:parse failed [ 399.779044][ T1163] logitech-hidpp-device: probe of 0003:046D:C086.0015 failed with error -22 [ 399.963941][ T152] usb 2-1: USB disconnect, device number 18 [ 400.051333][ T7998] loop3: detected capacity change from 0 to 64 [ 400.051523][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 400.163067][ T9] device hsr_slave_0 left promiscuous mode [ 400.172740][ T9] device hsr_slave_1 left promiscuous mode [ 400.196249][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.204126][ T8002] fuse: Bad value for 'fd' [ 400.228387][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.243255][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.251050][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.271025][ T9] device bridge_slave_1 left promiscuous mode [ 400.287634][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.313234][ T9] device bridge_slave_0 left promiscuous mode [ 400.333415][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.383312][ T8008] fuse: Unknown parameter ' ګ)5k+?s TDq%7ˁ$}jfn+` [ 400.383312][ T8008] K!i.:fZHYI~GY36^ycs*^bG-zYAi9 [ 400.383312][ T8008] +/mFf?I^hNBBmG{L`-*Qj;e1Paj%7TY1b I'8ާCsכ(9C%sfIh+qz-Ŀ#tOf?^2uQ~aYij H:Tjy҆Nq5]q~ϭۓ]p0xffffffffffffffff' [ 400.436071][ T9] device veth1_macvtap left promiscuous mode [ 400.452878][ T9] device veth0_macvtap left promiscuous mode [ 400.480942][ T9] device veth1_vlan left promiscuous mode [ 400.487523][ T9] device veth0_vlan left promiscuous mode [ 401.163817][ T9] team0 (unregistering): Port device team_slave_1 removed [ 401.222254][ T9] team0 (unregistering): Port device team_slave_0 removed [ 401.274384][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.326611][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.700785][ T3653] Bluetooth: hci1: command tx timeout [ 401.881987][ T9] bond0 (unregistering): Released all slaves [ 402.069412][ T8019] loop4: detected capacity change from 0 to 256 [ 402.134560][ T8023] loop3: detected capacity change from 0 to 512 [ 402.143102][ T8019] FAT-fs (loop4): bogus logical sector size 0 [ 402.178965][ T8019] FAT-fs (loop4): Can't find a valid FAT filesystem [ 402.281574][ T8023] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.1114: casefold flag without casefold feature [ 402.309387][ T8023] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #3: comm syz.3.1114: corrupted inode contents [ 402.330876][ T8019] netlink: 'syz.4.1115': attribute type 4 has an invalid length. [ 402.332284][ T8023] EXT4-fs error (device loop3): ext4_dirty_inode:6083: inode #3: comm syz.3.1114: mark_inode_dirty error [ 402.367445][ T8023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1114: bg 0: block 64: padding at end of block bitmap is not set [ 403.239033][ T8023] Quota error (device loop3): write_blk: dquota write failed [ 403.256478][ T8023] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 403.273724][ T8023] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1114: Failed to acquire dquot type 0 [ 403.742286][ T8038] loop1: detected capacity change from 0 to 16 [ 403.759543][ T8038] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 405.646841][ T7869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.678000][ T8023] EXT4-fs (loop3): 1 truncate cleaned up [ 405.713613][ T8023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 405.729929][ T7869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.891037][ T8023] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038 (0x7fffffff) [ 405.949719][ T7869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.048947][ T7869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.115599][ T8023] syz.3.1114 (8023) used greatest stack depth: 18872 bytes left [ 406.201161][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 406.698505][ T3689] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 410.089567][ T7869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.162894][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.174405][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.208680][ T7869] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.237500][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.260634][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.270468][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.277609][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.321714][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 410.378970][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.401920][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.439311][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.446522][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.483098][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.524027][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.542147][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.585447][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.627211][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.640566][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.671779][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.691178][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.714609][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.744693][ T7869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.776671][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.799747][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.831728][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.938542][ T8063] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 412.174246][ T8091] loop3: detected capacity change from 0 to 2048 [ 412.229195][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.236762][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.282679][ T7869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.295468][ T8093] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.373228][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.389979][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.448497][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.457204][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.506794][ T7869] device veth0_vlan entered promiscuous mode [ 412.524015][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.538489][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.572585][ T7869] device veth1_vlan entered promiscuous mode [ 412.634002][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 412.649106][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 412.666519][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.709598][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.740898][ T7869] device veth0_macvtap entered promiscuous mode [ 412.755380][ T7869] device veth1_macvtap entered promiscuous mode [ 412.832470][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.880536][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.927827][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.973908][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.002088][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.033250][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.068307][ T7869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.096093][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 413.111239][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 413.145284][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.173625][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.201204][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.239590][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.268793][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.302847][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.347856][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.368798][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.403671][ T7869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.434841][ T7869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.461497][ T7869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.513345][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.534066][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.560334][ T8100] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 413.562336][ T7869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.598334][ T7869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.607110][ T7869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.658317][ T7869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.669391][ T8096] loop1: detected capacity change from 0 to 40427 [ 413.719579][ T8096] F2FS-fs (loop1): invalid crc value [ 413.776089][ T8109] loop4: detected capacity change from 0 to 128 [ 413.795585][ T8096] F2FS-fs (loop1): Found nat_bits in checkpoint [ 413.857089][ T8109] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 413.910628][ T8109] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 413.929781][ T7217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.953754][ T7217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.040893][ T8096] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 414.043831][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.056645][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.084786][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.143088][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 414.497593][ T56] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 415.083860][ T6809] syz-executor: attempt to access beyond end of device [ 415.083860][ T6809] loop1: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 415.443293][ T8136] ptrace attach of "./syz-executor exec"[7869] was attempted by "./syz-executor exec"[8136] [ 415.955466][ T8146] loop2: detected capacity change from 0 to 64 [ 416.026177][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 416.629066][ T8165] loop3: detected capacity change from 0 to 256 [ 416.723459][ T8165] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 416.771045][ T8165] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 416.826596][ T8165] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 416.860586][ T27] audit: type=1800 audit(1723512744.031:68): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1164" name="file1" dev="loop3" ino=1048675 res=0 errno=0 [ 416.885685][ T8164] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 417.095447][ T8181] loop3: detected capacity change from 0 to 1024 [ 417.733034][ T8193] loop3: detected capacity change from 0 to 512 [ 417.873577][ T8193] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 417.986788][ T8193] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.1175: bad orphan inode 16 [ 418.009677][ T8198] binder: 8197:8198 ioctl c0306201 200003c0 returned -14 [ 418.028838][ T8193] ext4_test_bit(bit=15, block=18) = 1 [ 418.055689][ T8193] is_bad_inode(inode)=0 [ 418.099116][ T8193] NEXT_ORPHAN(inode)=65535 [ 418.103617][ T8193] max_ino=32 [ 418.106832][ T8193] i_nlink=0 [ 418.165635][ T8193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 418.223789][ T8193] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038 (0x7fffffff) [ 418.290613][ T3655] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 418.336070][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 418.568302][ T4871] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 418.586103][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 419.548340][ T4871] usb 2-1: Using ep0 maxpacket: 16 [ 419.626511][ T8230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1190'. [ 419.648317][ T8230] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1190'. [ 419.674972][ T8232] loop3: detected capacity change from 0 to 256 [ 419.688502][ T8230] netlink: 'syz.2.1190': attribute type 5 has an invalid length. [ 419.716216][ T8232] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 419.745893][ T8230] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1190'. [ 419.858641][ T4871] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 419.870688][ T4871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.879323][ T4871] usb 2-1: Product: syz [ 419.883680][ T4871] usb 2-1: Manufacturer: syz [ 419.888948][ T4871] usb 2-1: SerialNumber: syz [ 419.905006][ T4871] usb 2-1: config 0 descriptor?? [ 419.949829][ T4871] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 420.125581][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 420.187955][ T8251] program syz.2.1199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.575972][ T8261] loop2: detected capacity change from 0 to 512 [ 420.676735][ T8261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 420.688597][ T4871] ssu100: probe of 2-1:0.0 failed with error -71 [ 420.697800][ T8261] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 420.734617][ T4871] usb 2-1: USB disconnect, device number 20 [ 420.819092][ T52] block nbd2: Attempted send on invalid socket [ 420.825885][ T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.837904][ T8261] vxfs: unable to read disk superblock at 1 [ 420.847372][ T52] block nbd2: Attempted send on invalid socket [ 420.854251][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.868578][ T8261] vxfs: unable to read disk superblock at 8 [ 420.878251][ T8261] vxfs: can't find superblock. [ 421.084583][ T7869] EXT4-fs (loop2): unmounting filesystem. [ 421.284429][ T8270] loop2: detected capacity change from 0 to 64 [ 422.187541][ T8268] loop4: detected capacity change from 0 to 32768 [ 422.342215][ T3655] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 422.351194][ T3655] Bluetooth: hci3: Injecting HCI hardware error event [ 422.361297][ T3655] Bluetooth: hci3: hardware error 0x00 [ 422.401242][ T8285] loop1: detected capacity change from 0 to 32768 [ 422.417144][ T8285] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1212 (8285) [ 422.452668][ T8285] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 422.462985][ T8285] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 422.471731][ T8285] BTRFS info (device loop1): doing ref verification [ 422.478403][ T8285] BTRFS info (device loop1): enabling ssd optimizations [ 422.485464][ T8285] BTRFS info (device loop1): max_inline at 4096 [ 422.491934][ T8285] BTRFS info (device loop1): max_inline at 3 [ 422.498067][ T8285] BTRFS info (device loop1): not using ssd optimizations [ 422.505312][ T8285] BTRFS info (device loop1): using free space tree [ 422.512103][ T4871] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 422.579804][ T8268] XFS (loop4): Mounting V5 Filesystem [ 422.723740][ T8268] XFS (loop4): Ending clean mount [ 422.778257][ T4871] usb 3-1: Using ep0 maxpacket: 16 [ 422.836928][ T8266] loop3: detected capacity change from 0 to 8192 [ 422.844060][ T8266] FAT-fs (loop3): Unrecognized mount option "kmem_cache_free" or missing value [ 422.928451][ T4871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.005286][ T6809] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 423.055570][ T6281] XFS (loop4): Unmounting Filesystem [ 423.129437][ T4871] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 423.158010][ T4871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.172027][ T4871] usb 3-1: Product: syz [ 423.176228][ T4871] usb 3-1: Manufacturer: syz [ 423.181098][ T4871] usb 3-1: SerialNumber: syz [ 423.220717][ T4871] usb 3-1: config 0 descriptor?? [ 423.482208][ T3691] usb 3-1: USB disconnect, device number 16 [ 423.921719][ T8321] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1218'. [ 424.114980][ T8326] loop3: detected capacity change from 0 to 1024 [ 424.165018][ T8330] loop2: detected capacity change from 0 to 128 [ 424.242718][ T8326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 424.518451][ T3655] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 425.122785][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 425.140832][ T7869] sysv_free_block: flc_count > flc_size [ 425.181794][ T7869] sysv_free_block: flc_count > flc_size [ 425.187477][ T7869] sysv_free_block: flc_count > flc_size [ 425.227233][ T7869] sysv_free_block: flc_count > flc_size [ 425.278280][ T7869] sysv_free_block: flc_count > flc_size [ 425.283919][ T7869] sysv_free_block: flc_count > flc_size [ 425.300334][ T7869] sysv_free_block: flc_count > flc_size [ 425.305929][ T7869] sysv_free_block: flc_count > flc_size [ 425.353819][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 425.372110][ T7869] sysv_free_block: flc_count > flc_size [ 425.377705][ T7869] sysv_free_block: flc_count > flc_size [ 425.403903][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 425.415460][ T7869] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 425.428745][ T8338] netlink: 'syz.4.1225': attribute type 5 has an invalid length. [ 425.565232][ T8342] loop3: detected capacity change from 0 to 256 [ 425.615521][ T8344] ptrace attach of "./syz-executor exec"[7869] was attempted by "./syz-executor exec"[8344] [ 425.655107][ T8346] loop1: detected capacity change from 0 to 2048 [ 425.753643][ T8346] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.1227: bad orphan inode 8192 [ 425.765361][ T8346] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 425.918249][ T4705] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 426.785346][ T6809] EXT4-fs (loop1): unmounting filesystem. [ 426.798272][ T4705] usb 3-1: Invalid ep0 maxpacket: 32 [ 426.949237][ T4705] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 426.997593][ T8365] netlink: 'syz.1.1232': attribute type 10 has an invalid length. [ 427.038537][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.047280][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.336295][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'. [ 427.398284][ T4705] usb 3-1: Invalid ep0 maxpacket: 32 [ 427.411597][ T4705] usb usb3-port1: attempt power cycle [ 428.010947][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.018249][ T8365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.025981][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.033133][ T8365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.150007][ T8365] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 428.368279][ T4705] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 428.478459][ T4705] usb 3-1: Invalid ep0 maxpacket: 32 [ 428.628409][ T4705] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 428.758256][ T4713] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 428.973872][ T4705] usb 3-1: device not accepting address 20, error -71 [ 428.981147][ T4705] usb usb3-port1: unable to enumerate USB device [ 429.198112][ T8390] loop2: detected capacity change from 0 to 1024 [ 429.870529][ T8390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 429.899420][ T8394] loop1: detected capacity change from 0 to 164 [ 429.938368][ T4713] usb 4-1: Using ep0 maxpacket: 32 [ 430.056313][ T8394] loop1: detected capacity change from 0 to 1024 [ 430.101278][ T7869] EXT4-fs (loop2): unmounting filesystem. [ 430.178859][ T4713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.328375][ T4713] usb 4-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 430.368349][ T4713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 430.846640][ T4713] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.097155][ T9] hfsplus: b-tree write err: -5, ino 4 [ 431.162802][ T8397] loop2: detected capacity change from 0 to 512 [ 431.181384][ T8399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1245'. [ 431.206136][ T8397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 431.218408][ T4713] usb 4-1: string descriptor 0 read error: -22 [ 431.234342][ T4713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.250762][ T4713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.261133][ T3655] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 431.309181][ T4713] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 431.336267][ T4713] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 431.348544][ T4713] cdc_ncm 4-1:1.0: bind() failure [ 431.377362][ T8397] EXT4-fs (loop2): 1 truncate cleaned up [ 431.391167][ T4712] usb 4-1: USB disconnect, device number 8 [ 431.404741][ T8397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 431.557575][ T8408] loop3: detected capacity change from 0 to 512 [ 431.602370][ T8408] EXT4-fs (loop3): Test dummy encryption mode enabled [ 431.633799][ T8408] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1: comm syz.3.1246: invalid block [ 431.728738][ T8408] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1246: couldn't read orphan inode 11 (err -117) [ 431.756375][ T7869] EXT4-fs (loop2): unmounting filesystem. [ 431.796450][ T8408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 432.211870][ T8425] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1246: Directory hole found for htree leaf block 0 [ 432.463971][ T8426] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1246: Directory hole found for htree leaf block 0 [ 432.635848][ T8429] loop2: detected capacity change from 0 to 128 [ 432.868262][ T8429] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 434.004034][ T8429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.586454][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 434.761185][ T27] audit: type=1804 audit(1723512761.931:69): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1253" name="/newroot/117/bus/file0" dev="overlay" ino=649 res=1 errno=0 [ 434.970067][ T8445] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1255'. [ 434.981491][ T4712] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 435.334925][ T8416] loop1: detected capacity change from 0 to 8192 [ 435.350844][ T8416] FAT-fs (loop1): Unrecognized mount option "kmem_cache_free" or missing value [ 435.680930][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1262'. [ 435.709009][ T8453] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1262'. [ 435.868451][ T4712] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=4b.d6 [ 435.879758][ T4712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.887814][ T4712] usb 3-1: Product: syz [ 435.904551][ T4712] usb 3-1: Manufacturer: syz [ 435.914666][ T4712] usb 3-1: SerialNumber: syz [ 435.917848][ T8459] loop1: detected capacity change from 0 to 512 [ 435.940015][ T4712] usb 3-1: config 0 descriptor?? [ 435.947606][ T8459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 435.970685][ T8461] loop4: detected capacity change from 0 to 512 [ 435.995798][ T8459] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.1264: bad orphan inode 16 [ 436.019271][ T4712] asix: probe of 3-1:0.0 failed with error -22 [ 436.034220][ T8459] ext4_test_bit(bit=15, block=18) = 1 [ 436.039780][ T8459] is_bad_inode(inode)=0 [ 436.044072][ T8459] NEXT_ORPHAN(inode)=65535 [ 436.044090][ T8461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 436.053974][ T8459] max_ino=32 [ 436.060764][ T8459] i_nlink=0 [ 436.066387][ T8459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 436.082846][ T8459] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038 (0x7fffffff) [ 436.096890][ T8461] ext4 filesystem being mounted at /120/bus supports timestamps until 2038 (0x7fffffff) [ 436.245703][ T4871] usb 3-1: USB disconnect, device number 21 [ 436.270933][ T6281] EXT4-fs (loop4): unmounting filesystem. [ 436.284840][ T8470] loop3: detected capacity change from 0 to 2048 [ 436.349974][ T8470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 436.480475][ T8477] loop4: detected capacity change from 0 to 512 [ 436.626804][ T8477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 436.637426][ T8477] ext4 filesystem being mounted at /122/bus supports timestamps until 2038 (0x7fffffff) [ 436.659054][ C1] eth0: bad gso: type: 1, size: 1408 [ 437.506719][ T6809] EXT4-fs (loop1): unmounting filesystem. [ 437.536549][ T8488] loop2: detected capacity change from 0 to 128 [ 437.580403][ T8488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 437.595252][ T8488] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 437.619956][ T6090] EXT4-fs (loop3): unmounting filesystem. [ 437.641110][ T6281] EXT4-fs (loop4): unmounting filesystem. [ 437.671164][ T8488] syz.2.1273 (pid 8488) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 437.727663][ T7869] EXT4-fs (loop2): unmounting filesystem. [ 437.802139][ T8494] loop1: detected capacity change from 0 to 128 [ 438.044962][ T6809] sysv_free_block: flc_count > flc_size [ 438.056409][ T6809] sysv_free_block: flc_count > flc_size [ 438.071375][ T6809] sysv_free_block: flc_count > flc_size [ 438.101504][ T6809] sysv_free_block: flc_count > flc_size [ 438.124270][ T6809] sysv_free_block: flc_count > flc_size [ 438.140835][ T8504] loop4: detected capacity change from 0 to 16 [ 438.151595][ T6809] sysv_free_block: flc_count > flc_size [ 438.164862][ T6809] sysv_free_block: flc_count > flc_size [ 438.182370][ T8504] erofs: (device loop4): mounted with root inode @ nid 36. [ 438.206421][ T6809] sysv_free_block: flc_count > flc_size [ 438.221562][ T6809] sysv_free_block: flc_count > flc_size [ 438.237610][ T6809] sysv_free_block: flc_count > flc_size [ 438.257931][ T6809] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 438.542896][ T8508] netlink: 'syz.4.1281': attribute type 10 has an invalid length. [ 438.567132][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.574551][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.667408][ T8510] loop1: detected capacity change from 0 to 2048 [ 438.695261][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.702423][ T8508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.709801][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.716868][ T8508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.755644][ T8510] NILFS (loop1): error -5 while loading last checkpoint (checkpoint number=2) [ 438.808624][ T8508] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 438.947456][ T8500] loop2: detected capacity change from 0 to 8192 [ 439.000191][ T8500] FAT-fs (loop2): Unrecognized mount option "kmem_cache_free" or missing value [ 439.036943][ T8514] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1285'. [ 439.332662][ T8491] loop3: detected capacity change from 0 to 40427 [ 439.743777][ T27] audit: type=1326 audit(1723512766.901:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8517 comm="syz.1.1286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff4b5799f9 code=0x0 [ 440.198414][ T3655] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 440.209353][ T3655] Bluetooth: hci0: Injecting HCI hardware error event [ 440.219009][ T3655] Bluetooth: hci0: hardware error 0x00 [ 440.428843][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.435633][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.473080][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 440.490628][ T8491] F2FS-fs (loop3): Found nat_bits in checkpoint [ 440.713826][ T8491] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 440.850544][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 440.860353][ T8538] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 442.502297][ T8553] loop3: detected capacity change from 0 to 1024 [ 442.536371][ T8553] hfsplus: unable to parse mount options [ 442.592263][ T3655] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 442.628002][ T8533] loop1: detected capacity change from 0 to 32768 [ 443.858269][ T3655] Bluetooth: hci1: command tx timeout [ 443.907258][ T8561] loop4: detected capacity change from 0 to 1024 [ 443.975671][ T8561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 444.076285][ C1] eth0: bad gso: type: 1, size: 1408 [ 444.107612][ T6281] EXT4-fs (loop4): unmounting filesystem. [ 446.031672][ T8574] loop1: detected capacity change from 0 to 1024 [ 446.039152][ T8574] hfsplus: unable to parse mount options [ 446.114778][ T8576] : renamed from pim6reg1 [ 446.130201][ T7005] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.459182][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 446.470854][ T8584] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 449.079035][ T8594] trusted_key: encrypted_key: insufficient parameters specified [ 449.923788][ T8608] loop2: detected capacity change from 0 to 128 [ 449.959510][ T8608] FAT-fs (loop2): Unrecognized mount option "nf" or missing value [ 450.348239][ T4713] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 450.392448][ T8601] loop1: detected capacity change from 0 to 32768 [ 450.538565][ T8612] loop3: detected capacity change from 0 to 256 [ 450.628114][ T8612] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 450.875208][ T4713] usb 3-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 450.885596][ T4713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.084497][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1317'. [ 451.259234][ T4713] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.287464][ T4713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.330120][ T4713] usb 3-1: SerialNumber: syz [ 451.721661][ T8625] loop4: detected capacity change from 0 to 164 [ 451.819885][ T8626] loop1: detected capacity change from 0 to 2048 [ 451.821315][ T7027] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 451.870961][ T4713] usb 3-1: 0:2 : does not exist [ 451.876152][ T4713] usb 3-1: unit 255 not found! [ 451.884741][ T8625] loop4: detected capacity change from 0 to 1024 [ 451.902118][ T7027] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.925332][ T8626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 451.944936][ T7027] Buffer I/O error on dev loop4, logical block 0, async page read [ 452.145847][ T4713] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 452.916767][ C1] eth0: bad gso: type: 1, size: 1408 [ 452.976647][ T4713] usb 3-1: USB disconnect, device number 22 [ 453.254909][ T6809] EXT4-fs (loop1): unmounting filesystem. [ 453.437571][ T46] hfsplus: b-tree write err: -5, ino 4 [ 453.459080][ T7005] udevd[7005]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.540869][ T8645] loop3: detected capacity change from 0 to 16 [ 453.579197][ T8649] loop2: detected capacity change from 0 to 512 [ 453.602802][ T8645] erofs: (device loop3): mounted with root inode @ nid 36. [ 453.625001][ T8649] EXT4-fs (loop2): Test dummy encryption mode enabled [ 453.644014][ T8651] loop4: detected capacity change from 0 to 256 [ 453.832489][ T8649] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.1328: invalid block [ 453.867959][ T8649] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1328: couldn't read orphan inode 11 (err -117) [ 454.126219][ T8649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 455.753951][ T8672] --map-set only usable from mangle table [ 455.890837][ T8669] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1328: Directory hole found for htree leaf block 0 [ 456.892857][ T8671] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1328: Directory hole found for htree leaf block 0 [ 457.118008][ T7869] EXT4-fs (loop2): unmounting filesystem. [ 457.503322][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 457.512498][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1336'. [ 458.436826][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 458.447569][ T8692] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 459.694738][ T4871] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 460.255765][ T4871] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=4b.d6 [ 460.290234][ T4871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.339891][ T4871] usb 4-1: Product: syz [ 460.358282][ T3642] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 460.384577][ T4871] usb 4-1: Manufacturer: syz [ 460.456440][ T4871] usb 4-1: SerialNumber: syz [ 460.482249][ T4871] usb 4-1: config 0 descriptor?? [ 460.510548][ T8707] loop4: detected capacity change from 0 to 256 [ 460.514386][ T8705] loop2: detected capacity change from 0 to 16 [ 460.545173][ T8705] erofs: (device loop2): mounted with root inode @ nid 36. [ 460.552862][ T4871] usb 4-1: can't set config #0, error -71 [ 460.575814][ T8709] loop1: detected capacity change from 0 to 1024 [ 460.588802][ T4871] usb 4-1: USB disconnect, device number 9 [ 460.650820][ T8707] FAT-fs (loop4): Directory bread(block 64) failed [ 460.679784][ T8707] FAT-fs (loop4): Directory bread(block 65) failed [ 460.701273][ T8707] FAT-fs (loop4): Directory bread(block 66) failed [ 460.707868][ T8707] FAT-fs (loop4): Directory bread(block 67) failed [ 460.765332][ T8707] FAT-fs (loop4): Directory bread(block 68) failed [ 460.847513][ T8707] FAT-fs (loop4): Directory bread(block 69) failed [ 460.871551][ T8714] loop3: detected capacity change from 0 to 256 [ 460.893577][ T8707] FAT-fs (loop4): Directory bread(block 70) failed [ 460.930813][ T8707] FAT-fs (loop4): Directory bread(block 71) failed [ 460.957737][ T8707] FAT-fs (loop4): Directory bread(block 72) failed [ 460.998305][ T8707] FAT-fs (loop4): Directory bread(block 73) failed [ 462.344468][ T8728] loop3: detected capacity change from 0 to 8192 [ 462.372138][ T8728] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 462.398484][ T8728] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 463.838479][ T8728] REISERFS (device loop3): using ordered data mode [ 463.854400][ T8728] reiserfs: using flush barriers [ 463.929796][ T8728] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 464.025708][ T8728] REISERFS (device loop3): checking transaction log (loop3) [ 464.052189][ T8728] REISERFS (device loop3): Using r5 hash to sort names [ 464.069431][ T8728] REISERFS (device loop3): using 3.5.x disk format [ 464.076986][ T8728] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 464.458622][ T8728] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 464.663837][ T8728] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 545. Fsck? [ 464.977642][ T8728] REISERFS (device loop3): Remounting filesystem read-only [ 464.985631][ T8728] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 465.032559][ T8748] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 465.056291][ T8748] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 545. Fsck? [ 465.068017][ T8748] ================================================================== [ 465.076115][ T8748] BUG: KASAN: null-ptr-deref in fix_nodes+0x44d/0x8c70 [ 465.083018][ T8748] Read of size 8 at addr 0000000000000000 by task syz.3.1352/8748 [ 465.090851][ T8748] [ 465.093218][ T8748] CPU: 0 PID: 8748 Comm: syz.3.1352 Not tainted 6.1.104-syzkaller #0 [ 465.101398][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 465.111566][ T8748] Call Trace: [ 465.114884][ T8748] [ 465.117838][ T8748] dump_stack_lvl+0x1e3/0x2cb [ 465.122564][ T8748] ? nf_tcp_handle_invalid+0x642/0x642 [ 465.128072][ T8748] ? panic+0x764/0x764 [ 465.132177][ T8748] ? _printk+0xd1/0x111 [ 465.136359][ T8748] ? _raw_spin_lock_irqsave+0xac/0x120 [ 465.141854][ T8748] print_report+0xe6/0x4f0 [ 465.146294][ T8748] ? __virt_addr_valid+0x54/0x530 [ 465.151357][ T8748] ? fix_nodes+0x44d/0x8c70 [ 465.155892][ T8748] kasan_report+0x136/0x160 [ 465.160423][ T8748] ? fix_nodes+0x44d/0x8c70 [ 465.164958][ T8748] kasan_check_range+0x27f/0x290 [ 465.169924][ T8748] fix_nodes+0x44d/0x8c70 [ 465.174290][ T8748] ? reiserfs_restore_prepared_buffer+0x2de/0x300 [ 465.180841][ T8748] ? prepare_for_delete_or_cut+0x166c/0x2250 [ 465.186860][ T8748] ? print_irqtrace_events+0x210/0x210 [ 465.192372][ T8748] ? make_empty_dir_item+0x7f0/0x7f0 [ 465.197694][ T8748] ? reiserfs_delete_item+0x1030/0x1030 [ 465.203283][ T8748] ? kasan_check_range+0x169/0x290 [ 465.208432][ T8748] reiserfs_cut_from_item+0x463/0x2580 [ 465.213954][ T8748] ? reiserfs_do_truncate+0x15b0/0x15b0 [ 465.219533][ T8748] ? search_by_key+0x478a/0x4b60 [ 465.224510][ T8748] ? do_journal_begin_r+0xdc9/0x1020 [ 465.229874][ T8748] ? search_by_key+0x4b60/0x4b60 [ 465.234936][ T8748] ? journal_begin+0x1ef/0x350 [ 465.239736][ T8748] reiserfs_do_truncate+0xa12/0x15b0 [ 465.245066][ T8748] ? reiserfs_delete_object+0x1a0/0x1a0 [ 465.250661][ T8748] ? journal_begin+0x1ef/0x350 [ 465.255552][ T8748] reiserfs_truncate_file+0x4d6/0x810 [ 465.260941][ T8748] ? reiserfs_new_symlink+0x760/0x760 [ 465.266317][ T8748] ? unmap_mapping_range+0xf4/0x280 [ 465.271625][ T8748] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 465.277452][ T8748] ? truncate_setsize+0xcb/0xf0 [ 465.282313][ T8748] reiserfs_setattr+0xc57/0x11c0 [ 465.287259][ T8748] ? reiserfs_commit_write+0x5a0/0x5a0 [ 465.292723][ T8748] ? rcu_is_watching+0x11/0xb0 [ 465.297491][ T8748] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 465.303133][ T8748] ? lockdep_hardirqs_on+0x94/0x130 [ 465.308338][ T8748] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 465.313988][ T8748] ? security_inode_setattr+0xd3/0x130 [ 465.319459][ T8748] ? reiserfs_commit_write+0x5a0/0x5a0 [ 465.324919][ T8748] notify_change+0xce3/0xfc0 [ 465.329620][ T8748] do_truncate+0x21c/0x300 [ 465.334044][ T8748] ? put_page_bootmem+0x2e0/0x2e0 [ 465.339083][ T8748] ? bpf_lsm_path_truncate+0x5/0x10 [ 465.344284][ T8748] path_openat+0x27e2/0x2e60 [ 465.348884][ T8748] ? finish_task_switch+0x1ca/0x810 [ 465.354096][ T8748] ? __schedule+0x1447/0x4570 [ 465.358797][ T8748] ? do_filp_open+0x480/0x480 [ 465.363485][ T8748] ? release_firmware_map_entry+0x186/0x186 [ 465.369388][ T8748] do_filp_open+0x230/0x480 [ 465.373896][ T8748] ? vfs_tmpfile+0x4a0/0x4a0 [ 465.378499][ T8748] ? preempt_schedule_common+0xa6/0xd0 [ 465.383996][ T8748] ? _raw_spin_unlock+0x36/0x40 [ 465.388861][ T8748] ? alloc_fd+0x5a0/0x640 [ 465.393199][ T8748] do_sys_openat2+0x13b/0x4f0 [ 465.397890][ T8748] ? preempt_schedule_irq+0x136/0x1c0 [ 465.403278][ T8748] ? do_sys_open+0x220/0x220 [ 465.407894][ T8748] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 465.413906][ T8748] ? print_irqtrace_events+0x210/0x210 [ 465.419374][ T8748] ? rcu_is_watching+0x11/0xb0 [ 465.424138][ T8748] __x64_sys_openat+0x243/0x290 [ 465.428999][ T8748] ? __ia32_sys_open+0x270/0x270 [ 465.433953][ T8748] do_syscall_64+0x3b/0xb0 [ 465.438375][ T8748] ? clear_bhb_loop+0x45/0xa0 [ 465.443067][ T8748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.449111][ T8748] RIP: 0033:0x7f19857799f9 [ 465.453547][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.473169][ T8748] RSP: 002b:00007f1986606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.481592][ T8748] RAX: ffffffffffffffda RBX: 00007f1985916058 RCX: 00007f19857799f9 [ 465.489571][ T8748] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 465.497550][ T8748] RBP: 00007f19857e78ee R08: 0000000000000000 R09: 0000000000000000 [ 465.505527][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.513539][ T8748] R13: 0000000000000001 R14: 00007f1985916058 R15: 00007ffdc4900988 [ 465.521526][ T8748] [ 465.524544][ T8748] ================================================================== [ 465.532652][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.560426][ T8748] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 465.567660][ T8748] CPU: 0 PID: 8748 Comm: syz.3.1352 Not tainted 6.1.104-syzkaller #0 [ 465.575745][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 465.585824][ T8748] Call Trace: [ 465.589121][ T8748] [ 465.592062][ T8748] dump_stack_lvl+0x1e3/0x2cb [ 465.596767][ T8748] ? nf_tcp_handle_invalid+0x642/0x642 [ 465.601620][ T8744] loop4: detected capacity change from 0 to 32768 [ 465.608663][ T8748] ? panic+0x764/0x764 [ 465.612778][ T8748] ? preempt_schedule_common+0xa6/0xd0 [ 465.618360][ T8748] ? vscnprintf+0x59/0x80 [ 465.622699][ T8748] panic+0x318/0x764 [ 465.626601][ T8748] ? check_panic_on_warn+0x1d/0xa0 [ 465.631721][ T8748] ? memcpy_page_flushcache+0xfc/0xfc [ 465.637097][ T8748] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 465.643080][ T8748] ? _raw_spin_unlock+0x40/0x40 [ 465.647934][ T8748] ? print_report+0xe6/0x4f0 [ 465.652525][ T8748] check_panic_on_warn+0x7e/0xa0 [ 465.657470][ T8748] ? fix_nodes+0x44d/0x8c70 [ 465.661978][ T8748] end_report+0x66/0x110 [ 465.666220][ T8748] kasan_report+0x143/0x160 [ 465.670727][ T8748] ? fix_nodes+0x44d/0x8c70 [ 465.675251][ T8748] kasan_check_range+0x27f/0x290 [ 465.680192][ T8748] fix_nodes+0x44d/0x8c70 [ 465.684528][ T8748] ? reiserfs_restore_prepared_buffer+0x2de/0x300 [ 465.690959][ T8748] ? prepare_for_delete_or_cut+0x166c/0x2250 [ 465.696957][ T8748] ? print_irqtrace_events+0x210/0x210 [ 465.702439][ T8748] ? make_empty_dir_item+0x7f0/0x7f0 [ 465.707729][ T8748] ? reiserfs_delete_item+0x1030/0x1030 [ 465.713373][ T8748] ? kasan_check_range+0x169/0x290 [ 465.718510][ T8748] reiserfs_cut_from_item+0x463/0x2580 [ 465.724004][ T8748] ? reiserfs_do_truncate+0x15b0/0x15b0 [ 465.729565][ T8748] ? search_by_key+0x478a/0x4b60 [ 465.734507][ T8748] ? do_journal_begin_r+0xdc9/0x1020 [ 465.739840][ T8748] ? search_by_key+0x4b60/0x4b60 [ 465.744833][ T8748] ? journal_begin+0x1ef/0x350 [ 465.749611][ T8748] reiserfs_do_truncate+0xa12/0x15b0 [ 465.754915][ T8748] ? reiserfs_delete_object+0x1a0/0x1a0 [ 465.760509][ T8748] ? journal_begin+0x1ef/0x350 [ 465.765285][ T8748] reiserfs_truncate_file+0x4d6/0x810 [ 465.770662][ T8748] ? reiserfs_new_symlink+0x760/0x760 [ 465.776060][ T8748] ? unmap_mapping_range+0xf4/0x280 [ 465.781265][ T8748] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 465.787116][ T8748] ? truncate_setsize+0xcb/0xf0 [ 465.791998][ T8748] reiserfs_setattr+0xc57/0x11c0 [ 465.796946][ T8748] ? reiserfs_commit_write+0x5a0/0x5a0 [ 465.802427][ T8748] ? rcu_is_watching+0x11/0xb0 [ 465.807199][ T8748] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 465.812937][ T8748] ? lockdep_hardirqs_on+0x94/0x130 [ 465.818150][ T8748] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 465.823802][ T8748] ? security_inode_setattr+0xd3/0x130 [ 465.829262][ T8748] ? reiserfs_commit_write+0x5a0/0x5a0 [ 465.834724][ T8748] notify_change+0xce3/0xfc0 [ 465.839342][ T8748] do_truncate+0x21c/0x300 [ 465.843763][ T8748] ? put_page_bootmem+0x2e0/0x2e0 [ 465.848797][ T8748] ? bpf_lsm_path_truncate+0x5/0x10 [ 465.853996][ T8748] path_openat+0x27e2/0x2e60 [ 465.858603][ T8748] ? finish_task_switch+0x1ca/0x810 [ 465.863829][ T8748] ? __schedule+0x1447/0x4570 [ 465.868541][ T8748] ? do_filp_open+0x480/0x480 [ 465.873240][ T8748] ? release_firmware_map_entry+0x186/0x186 [ 465.879147][ T8748] do_filp_open+0x230/0x480 [ 465.883656][ T8748] ? vfs_tmpfile+0x4a0/0x4a0 [ 465.888247][ T8748] ? preempt_schedule_common+0xa6/0xd0 [ 465.893725][ T8748] ? _raw_spin_unlock+0x36/0x40 [ 465.898574][ T8748] ? alloc_fd+0x5a0/0x640 [ 465.902912][ T8748] do_sys_openat2+0x13b/0x4f0 [ 465.907595][ T8748] ? preempt_schedule_irq+0x136/0x1c0 [ 465.912974][ T8748] ? do_sys_open+0x220/0x220 [ 465.917567][ T8748] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 465.923578][ T8748] ? print_irqtrace_events+0x210/0x210 [ 465.929045][ T8748] ? rcu_is_watching+0x11/0xb0 [ 465.933807][ T8748] __x64_sys_openat+0x243/0x290 [ 465.938671][ T8748] ? __ia32_sys_open+0x270/0x270 [ 465.943626][ T8748] do_syscall_64+0x3b/0xb0 [ 465.948049][ T8748] ? clear_bhb_loop+0x45/0xa0 [ 465.952731][ T8748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.958631][ T8748] RIP: 0033:0x7f19857799f9 [ 465.963065][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.982670][ T8748] RSP: 002b:00007f1986606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.991083][ T8748] RAX: ffffffffffffffda RBX: 00007f1985916058 RCX: 00007f19857799f9 [ 465.999078][ T8748] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 466.007050][ T8748] RBP: 00007f19857e78ee R08: 0000000000000000 R09: 0000000000000000 [ 466.015020][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.022990][ T8748] R13: 0000000000000001 R14: 00007f1985916058 R15: 00007ffdc4900988 [ 466.031063][ T8748] [ 466.034394][ T8748] Kernel Offset: disabled [ 466.038716][ T8748] Rebooting in 86400 seconds..