last executing test programs: 6m59.937094029s ago: executing program 2 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0xfffffffd, 0x25dfdbff, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 6m59.713620747s ago: executing program 2 (id=207): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m59.531809807s ago: executing program 2 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x25dfdbfc, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x8010) 6m59.324436312s ago: executing program 2 (id=210): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24000080) socket$unix(0x1, 0x1, 0x0) 6m58.889868705s ago: executing program 2 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, 0x0}, 0x4) 6m58.216524977s ago: executing program 2 (id=219): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24000080) socket$unix(0x1, 0x1, 0x0) 6m57.805855936s ago: executing program 32 (id=219): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24000080) socket$unix(0x1, 0x1, 0x0) 7.699814183s ago: executing program 1 (id=2128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4) 7.643014603s ago: executing program 3 (id=2136): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 4.028411497s ago: executing program 1 (id=2133): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000040), 0x1, 0x51b, &(0x7f00000001c0)="$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") lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v1={0x1000000, [{0xaeaf, 0x2}]}, 0xc, 0x1) openat(0xffffffffffffff9c, 0x0, 0x142, 0x6e) 4.028035657s ago: executing program 4 (id=2134): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 3.474229379s ago: executing program 3 (id=2135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 3.473876889s ago: executing program 4 (id=2137): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) sendfile(r0, 0xffffffffffffffff, 0x0, 0xbc44) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) chmod(0x0, 0x122) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) sendfile(r0, r1, 0x0, 0xe3aa6e6) 2.851447543s ago: executing program 3 (id=2138): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000005140)={{}, 0x0, 0x10, @unused=[0x32, 0x389b9809, 0x0, 0x95], @subvolid=0x4}) 2.819393558s ago: executing program 1 (id=2139): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047452, 0x0) 2.68859418s ago: executing program 1 (id=2141): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1}) 2.499359672s ago: executing program 1 (id=2142): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x40, &(0x7f000001f500)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"bd2af2adfb5b061c3ca5dae01a134486c194089195a326cff7bf41d5486235b0604a0d1bcaa1d4c9cf948b7da2ba910eadba18e098f2782dec4aaed64e07696a1f388d897cea87ef8fde32a7b91c76a2334aeffa19ab9e7a870245585d624a4d0ac2fd315a05a8fe7988ad70d72f1d40e1c050bd113ed1f7517f6e8555ad7ce65f8dc986194a72c5c4cbbf7bb37865a73a159e5b950de92c0e5b4ef4c9fda68a19991f2490925979ac04da692e39e73d025299e57ee7ef7a117427de7245a04884f71bf5759890eef09d562e8444de3316e5ab99903057fbf1ecbd7ba093cb3cdf25f8ad6092ce24dad55c63fd5b589b8c1cdd04651be0229404986ade51c29af05a53d764ad854a11f9a2fbc3bb1f21fa282af73cae0607de434cfd9a4899a979f70c807044239aac67cbafaecca42dc1553612c220ede0cae19d30f15d2513ad1f96aaaf51054d5b9b0ba1b55762d65d6f1a61a4f7a4a738b0a037f017e6a24db2ac63f5f5b114b5899df2ad132432c75fde2438efe6b7af8f9c15ef0186ea703b3b3225a2f27f50e6b3031d2ca8e416cf64ca442b5700a2aae18a873b7fbae430f1625fc16a99c0a0e5dd38cc0bb5964349c8fe7f9b1f5e37d6e91fd6c476a46aba077e1b0569e71d52e763f13936a9f3857b866e22ecab499f4185badc8620599b5ab2e2f5232286ef72f8eda0287f0cb3c9e41a1cca48b44f2deb5237852bf9831ee8dca86c5e62a12b5a81e526dfc176646f203b116e118c040bbfd1a89cfa0430a8dd9ea7c120c7091991f866f9814adf5df7ce76278b3b4a2a91829df21c609021dcb35a83f0dbe786fff33b2bb0384938204ac7b43f78ac4806fa2000501d15bdaa14e14c1391bb4b359da837564442061bc5a9d3f75ee655e2c3857dd57aa8c50cb8b54b3b0c3fd0811033a4881bd4249dd0decaffbd010a8796c71da358e1b5cb1be7ded4529aa7feddb304d32a0b0efd3cf29b06f9433f821a16779374a4cea67e14a80ca7ad183d17a537f428cc454f1357e956a2a794dfd899c4737a9ec5f934e7b86bc552b9ea62179bbeb531689b0e047f707ab9709e77bac19e31445b3d93c8ce221e7d66d29039d7c4de0106d856b9e086401371fbca691dfab7ebfcff0f2cafc4401049e9f2e88e47949560ffd88f937e9b689ce4cdd78cf12faa712c1ba94c83ef39a5822d0ebad020c5ac01ff485e1c5aba394999e3957f889df6be6a5cc0573a3c686728f5492a4759c4c3b2f32499102b04e5de169f43d6b5872ab671109fa60db3f90f85dab3e73dc9b3ec8396e96bfe9df695be533a33cb2529eb2c79d6a172596d5df4373705fdd85a7253977f0c43b18da12b65b1361f00bf11f27b39f8a65664b4e27555b8ac93b45e2ea3452297af9f2788e072274e6f37cf643e9c5ac0d43dc4ee69293dbeca1df9d69199f54d8e39a546478c2114f2d235cfa5644db3867c530dfd0b6730c4f75cf200a40c3d542a4935a492cc5d1d0b413ed6326da405ab31745da2753d5a1fecbb754e05c6cb256f134229a247775623fa1683f093553d0d4de43fbb13c58df7645e9bb1da8bdd0758083dee09a2556d5daaff47b43b1e6f78a50be3f7bd32d0d86e4d5b45fb3a10c4f04e5aef36626a7313eca229bcfc4bd798e92334ac56a1ddfd4cead19f359701a23a4309197c0d707371d0f2fe9031c06e8c836ceb70f1a06bf182e979538d5d44544dc2a7ec3bbf66293b57784e35d882a9f43d3bc568e5e9da1f4e891ae931b7effe7eb94c6aa969b084f218c0d3cb11fc474beb3f169963fb9d64486b05e191c20af38ae504d8aae3349d4c6cecaa1971982f112fc4d0d59ea88d35a092cba171af35d7430c05fea852257a6cd08029cd5e12ac31622a9579d90283dd44f6e7d7413b368e06a4263ba1bfb12d3c0ad1f75a0ae2865aa26a913c6132cdf7cfec168417515956c5867c1917ad1c17df1de73ff4e1f90f4ee4eb13b8b006888d735df7e0f7cd5e7f9daf5da42fed239e0c84e3bbef0ef2fef1ae543f0e8ad4d7c9c8939461c8ffed61ed859053cc4451d2c300f00b18c56b8dce2b093c9774c740f6297a2b56cdb2f7a62deb51a249d6888cae11855ae0605877543f3c5665d41c585e7b68f137798590e8d347989fc4e49f2cc731a6cf0192d5af22e8ad7e260644c76d75d76b8f70056ef7d2a55f3c1896bfe34dfc399c58b626e52aed98515b509198ee23214009ce45fef2ea830820591d43ea3571af4a203f01c4a2f5b1f3501bcd4a7c95a1c7ef3aae4047ccae2025960b583064983d1c892ff956738497f20b4ddd17550007b844c3dd86daf4db5446490fae4b566a93ba6e42f651bb71e9445d002337e581528f1964e17ae52fe99a5100e388d4cea37528ca9e0165c8afcb5a1212090881e242a97d1bd7b91785dc5922582c5d8912c7106d5b254c8fc0cca2457976706bd4836728ab101ad224eee7adfc2f3bff52eb282661663924e37ce574f0cdf34cfba0113c882efebd3f8c0bd109cf35c56f618809de9a41ff28a946443e16437363c8adb31a6eedb289b1b2dd6677d780f2efe74a6003a491655967d088bc9fc5930e9f3460c51afb4f8ecd5e57090b1b291cce18db1b3bf71fd8d78f54dedb60cf1258c1976d06ad3a9c070d6016f99c6554821945295d702a1820f05c080e7c71b9d59be5018df62f221d7da2e82a9faf4679646f517c658a891d8c1bb349ffbcb835db12767a89cffcf18e634ecd5f5b5413f7a8d862bd7125d1e00788af106f63275607a9d25c23b9aee06db57499be43757774ebc3cf9c9d2db2781db3daa32a752c843a4233ceb5ae9b54c75b5b7f8d336eb0388477ca05e5b40b7cccea5cf71b16490073be089e6bf467eebfa1a03bae9c115ff8c751d4edd3d0f731224affb5554d306c04ff19b45f09a9a4129f6d044527e1afe4dc04dc09aa186e7daede408994378b303f77dec1b0e815171ad34bf69a34e27259cbf6be96d08e9b03fd6367b8a000da24e6097d5f5671b00ff1fb053fbe734a74a711df78ef86fe0a5c2728788142f42f0e661d2af960c5a357e4c234375ddd88c810419fe3f2f8e4ad3864e77772d683ce7452fdcbfd693ebe7dd7d0c369cba59c466d230415bd9a09945bc356f887537c7d01449fc6cb999f5c7eca8b40c5687197c6366dbc2ddd8120fb5169c61716e5acdbfdcf884694116c6b7d40ab2c782bb6d2d33a49adeb98f115e996686e121c05c93de04a706085c1b917afc9228a62b17efd6f70a1e44ab8ca73ca777da3aaf646002e8144ea5b6c107a9abf2dd1a15f2dd67a1578950795b05642b4d4d2c3b1d838e617c169d704a2f0cd5c6fac24eccf8ea33511b72c0fd32499f221ff649d008ecb96fdfd8b064201f99f29836b2b4894a3c9d579bda416742d70fdfc27857856507079edf2a7872b1c12a74d97deeedac9bef4d3428c44884e32ad6b5527684aaafe1b14b3c6147f226f91ae5a5ec931d82bcc7c96801445d671a368ada9a6831ca07b121c22da8421c7239f746dda0a531c38856f3b427f578170e885ee39ae600c6b7357e5904ccece51a13471c78e46ce45ffcaec7ee1f8ca7b2869b91921a09aa402ff909aed4b54d993e3fc0d51ecf1bad387dbc863ea0beddc39431e3372092ee559c12db5379a131ad15c6f64b408246e5f88f14bbdce8de3803db3f531d69406c87546e8daba7ed9b878bd5405d174b884ee4ea3638c640e181853be4d45d54c66c820331c6044f5ed386df7bfede1fdb2e153726efe9f4238ca34f238b568427d02ccf724114c01d8303090c5cd1f572e7b3bbeb74c521f2c588ed7efe0d9c71e3826796ac08c786213bd39d9460218781a7eb480fd9477b8d8bd1fa3893bbd789cc0d3b921e64b7a8c2296091babd739459b5bc615f631059197d36b18bf8f6a316f79dc350a39f8c68e1ca059f119abbbcc08bea4521f16876e928cb00d037ca1bd424bc46f176fd6dd1d365e34ad975a53f1e6d2a85610e540ad18b88a593005a554a4b0735e73ff798cf09fe7af065413967b4fb0f8c6ac593fecfb9c36daca0631f7ea46b9995210ee3edfc12cf8de5fdc5149cc9bde82b59d9f7531fa7a3e06fd6c8616c7bf9616c32eef292005313bebaa9a03eeec33389c7903d73d6ac35bed319bd040a166a1af07b14b70d72e590eabf8e310b3b16916a88636f65bd06b091a26f9760cfbe7320d019805d7f25dbf6b8cc0f11562a288cfd6448d1eba1b7854aa81ffa2006c61e97802f8628e11ed43b71d0dd0f2e2720782089d7ec170b76e6e628d10f46b61925fec011baebabdac89a15f606011381bbc6ea4e0c03bef784f53ad7ddfb847bd582ca38491e793b4ef2d1dc11659f9beb17051d071df74b80a721cc4ebf093c9503dfa957284fdd61498f94dadadda985c123f9596a1e165ccf0e4698e3ba00d32fa672359acfffb7212af72b373b188e3e1c0bc93ccaa312bdcb097ecd4a18f5949b9d543a1f10859634f0addca88cd5dd483e232e77285bdb5d44b5b97eca49d7236c55b0f19bcbf7f507e555bd2859bb814e61e1634c92ad19c8870066ee71d3fbbe4aa74cf957e34118e60ba3477e24dffcdf7257a20af81ad29835a6176b1d4f76f722d8a76f3edb9cad7f2a51652ba80fb2e8535fe90b8f63e0083a84026d93719ba7f2804c08e8ee69ecc5b426b270b3a4227257e380203731d9aea7f1dd5e6bf5e75bced0cc70b853bff5cd1f916a4404464a0b49a3aa7aae4ac63146a89aa966bcda589af3c77ad5cbf5bac88dfa72b04eb6132e04e91c0dbca4e348a76befa629f6086b7ec066bd820c7501b367608e09cf8c46b8a828650d1aa0fbd91781b1084b37cd981ed96d899ec5919b379bf7b9745a27cb8d64e8469ba27b40cdad8f5c863c236b67b81a49a84e741d34d01cc8c0603027818a38e439ab146c8b0f245fb687d95c6b01e3e0da6e41917baf9eba7e056ac45f4a7a424e824a103533008e3cf14239e6de1621fd3654eee3ebaca605f2547348e206b86fa5662c292ae543d312de1a06ba7a7162c2e771c350785c49a4ffe379b89cdd1d95cdb70fefd970293b13e2a176615a669c1c3abf4a1dad6c9666e0c6a0cf29ce8d4d4f278335131a857d2a70a9a8d56b4e51d08086b07233b14ec3d4c6c19be51bb988afb56e6c298ead33faef2d113e50ba22f567e365117b0d96469e62420de207dbfba07f07350e7f1894b98e049905c800f61eafa853dbdeef546d9866c623c971448ec44786d5a3b760584fc5f021739f4a27179d72e30b21b2009bc45a8b6e2a8f7a6aecb887816b2ebcb173fcc7e93078543beef2c935a465d9cf2df9d002dd3edfd9bdcb03ab9fc50d2722df146f924e586187b688dc9f8e9c9794fc371d885b399c9e31c1fa597b2e47c3e0b950e76a8b0c588065cff7e29dcae16fe4a6e3201df7b545918840fc6fb430248bcaada3ef62212224333ec549ac0771d1b96ba1a67cf654dbd5328d642fe97b33b8f55eea6b9872f3810c8e60a1d3597dabf5421c3eb2f27fca37a23eb397400bde3a3c53e7e0b40d1edd7b2cc8cbc9302e088eeb4f3f23f2477e4eaa5e581f1d73621fffe6c9028ea2199332f45435efae52ba5ccb7a00fecfa66a3a298e118eb1c3f3f4dd7a5aa4ea9cc36e04e4b938d8df8ee0411d95de51cb987f82a8495c3ec58b1d743a68ff30298383b9dc14f8a0f0c2395c8716c051448dc3535de39b6b3a7926895e17e2df2904bd53b2d54a653d3fcdb4f7b3d9f43457a8e63fd37044525868026cfe71f97", 0x1000}}, 0x1006) 2.282682878s ago: executing program 0 (id=2144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/igmp\x00') read$dsp(r2, &(0x7f0000000340)=""/89, 0x59) 1.930132147s ago: executing program 4 (id=2145): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 1.637920396s ago: executing program 4 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 1.220722495s ago: executing program 0 (id=2147): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)="33ac206b", 0x4, 0x4, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}, 0x1c) 1.219770486s ago: executing program 4 (id=2148): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) 1.217395576s ago: executing program 3 (id=2149): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047452, 0x0) 1.098009166s ago: executing program 1 (id=2150): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x1018056, &(0x7f0000006680)=ANY=[@ANYBLOB="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"], 0x24, 0x6260, &(0x7f0000000340)="$eJzs3c1vHGcdB/DfvvolNIl6qEqEkNuGl1Ka1xICBdoe4MCFA8oVJXLdKiIFlASUVhFx5QsS/BEgJI4IceTEH9ADV278AURKkEA9oE419vM44+2u147jnXWez0dyZn77zHifyXdnXzwz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PdyLi6q/SDScjPhe9iG7EUl2vRMTSysnmOs/HZnM8FxGDhYh6/c1/TkS8FhEfHY948PDuan3zhT324/t/+ecff3LsR//48+Ds//56u/f6pOXu3Pndf/927/G3FwAAAEpUVVXVSR/zT0VEP322BwCefvn1v0ry7eq5q9fnrD9qtVqtPoJ1UzXevWYREevNder3DA7HA8ARsx4ft90FWiT/ovUj4ljbnQDmWqftDnAoHjy8u9pJ+XaarwcrW+35XJAd+a93tq/vmDSdZvQck1k9vjaiF89O6M/SjPowT3L+3dH8r261D9Nyh53/rEzKf7h16VNxcv690fxHPD35d8fmX6qcf39f+ffkDwAAAAAAcyz//f9ky8d/Fw6+KXuy2/HflRn1AQAAAAAAAACetP2O/9cfGf9vm/H/AAAAYG7Vn9Vrvz/+6LZJ38VW336lE/HMyPJAYdLFMstt9wMAAAAAAAAAAAAAStLfOof3SidiEBHPLC9XVVX/NI3W+3XQ9Y+60rcfStb2kzwAAGz56PjItfydiMWIuJK+62+wvLxcVYtLy9VytbSQ388OFxarpcbn2jytb1sY7uENcX9Y1b9ssbFe07TPy9PaR39ffV/DqreHjs1Gi4EDQERsvRo9mPSK9H+vV0dTVZ2Ilt/kcETssv9zRNn/2Yu2H6cAAADA4auqquqkr/M+lY75d9vuFAAwE/n1f/S4gFqtVqvV6qevbqrGu9csImK9uU79nsFw/ABwxKzHx213gRbJv2j9iHi+7U4Ac63Tdgc4FA8e3l3tpHw7zdeDNL57PhdkR/7rnc318vrjptOMnmMyq8fXRvTi2Qn9eW5GfZgnOf/uaP5Xt9qHabmD51/t+DNhW+cYTcq/3s6TLfSnbTn/3mj+Iw57/5+VjeiOzb9UOf/+vvLvyR8AAAAAAOZY/vv/ybk6/jt83M2Zarfjvytj1zi8vgAAAAAAAADAk/Lg4d3VfN1rPv7/hTHLuf7z6ZTz78i/SDn/7kj+Xx1ZrteYv//Wo/z/8/Du6p9u//vzebrX/BfyTCc9sjrpEdFJ99Tpp+lBtu6zNga9YX1Pg06310/n/FSDd+J63Ii1OLdj2W76/3jUfn5He93TwWZ71dtqv7Cjvb/dnte/uKN9kM4uqpZy+5lYjZ/HjXh7s71uW5iy/YtT2qsp7Tn/nv2/SDn/fuOnzn85tXdGprX7H3Y/s983p+Pu583rX/zNucPfnKk2ore9bU319r3YQn82/0+ODeOXt9Zunrlz7fbtm+cjTXbceiHS5AnL+Q/Sz/bz/0tb7fl5v7m/3v9wuO/858VG9Cfm/1Jjvt7el2fctzbk/IfpJ+f/dmofv/8f5fwn7/+vtNAfAAAAAAAAAAAAAAAA2E1VVZuXiL4ZEZfS9T9tXZsJAMxWfv2vknz7rOrejO9PrT7idWfO+jPT+pNqvvqjVh/Fuqka741mERF/b65Tv2f49bhfBgDMs08i4l9td4LWyL9g+fv+6unptjsDzNSt9z/46bUbN9Zu3mq7JwAAAAAAAADA48rjf640xn8+XVXVvZHldoz/+lasHHT8z36e2R5gdMJA1b39b9NuNrrDXrcx3PgLMWn878H23G7jf/en3N9gSvtwSvvClPbFKe1jL/RoyPm/0Bjv/HREnBoZfr2E8V9Hx7wvQc7/xcbjuc7/KyPLNfOv/nCU8+/uyP/s7fd+cfbW+x+8ev29a++uvbv2s4vnz5+7eOnS5cuXz75z/cbaua1/W+zx4cr557GvnQdalpx/zlz+Zcn5fynV8i9Lzv/LqZZ/WXL++f2e/MuS88+ffeRflpz/y6mWf1ly/l9LtfzLkvN/JdXyL0vO/+upln9Zcv6vplr+Zcn5n0m1/MuS8z+b6j3mv3TY/WI2cv75CJf9vyw5/3xmg/zLkvO/kGr5lyXnfzHV8i9Lzv+1VMu/LDn/b6Ra/mXJ+V9KtfzLkvP/ZqrlX5ac/+VUy78sOf9vpVr+Zcn5fzvV8i9Lzv/1VMu/LDn/76Ra/mXJ+X831fIvS87/e6mWf1ly/m+kWv5lefT9/web+e2JJ/N7zBQ7M5iPbpjZmmn7mQkAAAAAAAAAAAAAGDWL04nb3kYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4lB04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn9k3r52QGAj5O/kb2DgmhGSTXb/EL7QuJrw2vJVAKPQF2/WuzYLf8Nol0Eg2DZRIGBVVtA0XbQGhNjcVvuCCVoBygVohVSLtBb1BVKhcRFVAAakSrSBbzTnP8+zM7OzMrne8O3PO5yPZP+/MmXOeOfOcs/Pb9XcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uuMNs5+pZVlW/5P/tTXLbqz/e/PE1vy21270CAEAAIC1+lX+9/M3pxsOr+BBDcv88yu+9/WFhYWF7P3Dfz76hYWFdMdElo1uyrL8vujqjz5Qa1wmeDwbrw01fD3UZfPDXe4f6XL/aJf7x7rcv6nL/eNd7l+yA5bYXPw8Jl/ZzvyfW4tdmt2Sjeb37WzzqMdrm4aG4s9ycrX8MQujJ7K57FQ2m003LV8sW8uX/+Yd9W29NYvbGmrY1vb6DPnZY8fjGGphH+9s2tbiOqOfvD6b+PnPHjv+txeeu61d7bobmtZXjPPuHfVxfircUoy1lm1K+ySOc6hhnNvbvCbDTeOs5Y+r/7t1nM+vcJzDi8NcV62v+Xg2lP/7mXw/jTT+WC/tp+3htl/cmWXZ5cVhty6zZFvZULal6ZahxddnvJiR9XXUp9JLspFVzdM7VjBP63VmZ/M8bT0m4ut/R3jcyDJjaHyZfvLJsYbX/ZcL1zJPo/qzLsawMLx4WzGG1jnY62OlX+ZgnBfP5E/6ibZzcGd4/o/dtfwcbDt32szB9Lwb5uCObnNwaGw4H3N6EWr5Yxbn4K6m5YfzLdXy+uxdnefg1IXT56bmP/6J++ZOHzs5e3L2zJ5du6b37Nt34MCBqRNzp2ani7+vcW/3vy3ZUDoOd4R9F4+BV7cs2zhVF748tuT8e63H4Xg6Dpd+z9rasmyvj8OR1idXW58DcumcLo6N99Z3+viVoWyZYyx/fe5Z+3GYnnfDcTjScBy2/Z7S5jgcWcFxWF/m3D0re88y0vCn3RiW/16wtjm4tWEOtr4faZ2DvX4/0i9zcDzMix/cs/z3gu1hvE9Mrvb9yPCSOZiebjj31G9J7/fHD+Sl3by8vX7HDWPZxfnZ8/c/euzChfO7slDWxUsb5krrfN3S8JyyJfN1aNXz9fDcK564vc3tW8O+Gr+v/tf4sq9VfZm993d+rfLvbu33Z9Otu7NQemy992e77+b1/TmWZV/8zicf/tZjX3zDsvuz3m9+amrt78VTX9pw/h1d5vwb+/4Xiu2lVT0+PDpSHL/Dae+MNp2Pm1+qkfzcVcu3/fzUys7Ho+HPep+Pb+lwPt7Wsmyvz8ejrU8uno9r3X7asTatr+d4mCenpjufj+vLbNu92jk50vF8fGeotbD/XxM6hdQXNcyd5eZt2tbIyGh4XiNxC83zdE/T8qOhN6tv66nd4U1hGuXK5unddxbLDzc8LlqveTrRsmyv52n62ddy87TW7adv16b19RwP8+KWPZ3naX2Zp/eu/dy5Of6z4dw51m0Ojg6P1cc8miZhfr7PFjbHOXh/djw7m53KZvJ7x/L5VMu3NfnAys6VY+HPep8rt3WYg3e3LNvrOZi+jy0392ojS598D7S+nuNhXjz5QOc5WF/mjft7+9717nBLWqbhvWvrz9eW+5nX7S276XrNlZEwzu/s7/yz2foypw6sts/svJ/uDbfc0GY/tR6/yx1TM9n67KdtYZzPHVh+P9XHU1/mCwdXOJ8OZ1l26aMP5j/vDb9fuXTx+19v+r1Lu9/pXProgz990Yl/Ws34ARh8LxRlS/G9ruE3Uyv5/T8AAACw8br9B/X0M+7x8DtM/T8AAACUUez74/8KT/T/AAAAUBqx7x8JNSlD///H3RfZ9sbn5l64lKVk/kIQ70+74aFiuZhxnQ5fTywsqt/+4Fdn//sfL61seENZlv3yoT9qu/y2h+K4ChNhnFff1Hz7El+/b0XbPvrIpbTdxvz6l8L64/NZ6TRoF8GdzrLsmzd/Lt/OxAeu5PXph47m9eHLTzxeX+b5g8XX8fHPvrRY/q/C/105fOJY0+OfDfvhx6FOv639/oiP+9qV12zf/77F7cXH1XbclD/tJz9YrDd+Ts7nHy+Wj/t5ufF/67NPfa2+/KOvaj/+S0Ptx/9UWO9XQ/2flxfLN74G9a/j4z4dxh+3Fx93/1e+3Xb8Vz9TLH/uzcVyR0ON2787fL3zzc/NNe6vR2vHmp5X9pZiubj96e//aX5/XF9cf+v4x49cadofrfPj6X8r1jPVsny8PW4n+oeW7dfX0zg/4/af+pOjTfu52/avPvzsy+vrbd3+vS3LnfvoPfn2F9fX/IlNf/3pz7XdXhzP4b8/1/R8Dr87HMdh+09+MMzHcP//Xi3W1/rpCkff3Xz+ict/aeulpucTvfXnxfavvu5kXjeNb95yw40vuunyu+r7Lsue2VSsr9v2T/7N2abxf/nWYn/E++N/MWvd/nIuv7LY/vmPTZ45O39xbibt1cduzj875+3FeOJ4bw7n1tavj5y98KHZ8xPTE9NZNlHej9C7Zl8J9adFudx56YUlZ9B7Hgmv5+1/+c0td/3rZ+Pt//7e4vYrbyu+b706LPf5cPvW8PqtbvtLPXnHrfnxXXs6jHBh6ecFr8X2nf91YEULhuff+r4gzvdzL/tQvh/q9+XfN+Jxvcbx/3CmWM83wn5dCJ/MvOPWxe01Lh8/G+HKe4rjfc37L5zm4uv6d+H1fsePi/XHccXn+8PwPubb25rPd3F+fOPSUOv680/xuBzOJ9nl4v64VNzfV56/te3w4ueQZJdvy7/+s7Se21b1NJcz//H5qVNzZy4+OnVhdv7C1PzHP3Hk9NmLZy4cyT/L88iHuz1+8fy0JT8/zczu25vlZ6uzRbnONnr85x45PrN/+q6Z2RPHLp648Mi52fMnj8/PH5+dmb/r2IkTsx/r9vi5mUO7dh/cs3/35Mm5mUMHDh7cc3By7szZ+jCKQXWxb/ojk2fOH8kfMn9o78FdDzywd3ry9NmZ2UP7p6cnL3Z7fP69abL+6D+cPD976tiFudOzk/Nzn5g9tOvgvn27u34a4OlzJ+Ynps5fPDN1cX72/FTxXCYu5DfXv/d1ezzlNP8fxfvZVrXig/iyd927L30+a91XP7nsqopFWj5A9LnwWTTfffG5Ayv5Ovb9o6EmZej/AQAAgFzs+8dCTfT/AAAAUBqx798UaqL/BwAAgNKIff94qOm/BFSk/y9d/n/bpRVtX/5/I/P/+dWf5f/l/9c//x/y98+8p9/y/8X5Qv6/N9aav5f/D+T/5f/l/+X/5f/pgX7L/8e+f3OW+f0/AAAAlFTs+7eEmuj/AQAAoDRi339DqIn+HwAAAEoj9v03hppUpP+X/5f/d/1/+X/5//bbl/8fTPL/ncn/dyH/P5VVK/9/uZfj34D8/+bGL+T/6Uf9lv+Pff+LQk0q0v8DAABAFcS+/6ZQE/0/AAAAlEbs+28ONdH/AwAAQGnEvn9rqElF+n/5/zXl/1PmSv6/efzy/83k/8N8kP+X/18H8v+dyf93If/v+v+Dlf9vIv9PP+q3/H/s+18calKR/h8AAACqIPb9Lwk10f8DAABA/xm5tofFvv+loSZL+v9r3AAAAACw4WLff0vWEgSvyO//5f9d/1/+X/5f/r/99lee/x/O5P/7h/x/Z/L/Xcj/y//L/8v/01P9lv/P+/5sPHtZqElF+n8AAACogtj33xpqsoL+f9N1GxUAAADQS7Hv/3+hJn7/DwAAAKUR+/5toSYV6f/l/0uT//9F40sn/y//32n78v+u/19m8v+dyf93If8v/y//L/9PT/Vb/j/2/beFmlSk/wcAAIAqiH3/7aEm+n8AAAAojdj3//9QE/0/AAAAlEbs+7eHmlSk/5f/7/P8f0yOuv6//L/8f1/m/8fl//uO/H9n8v9drCT/f6P8/3Lk/+X/5f9p1W/5/9j3vzzUpCL9PwAAAFRB7PtfEWqi/wcAAIDSiH3/K0NN9P8AAABQGrHvnwg1qUj/v5r8f+2y/P9yrvP1/8dWcP3/JvL/8v+dti//7/r/ZSb/35n8fxeu/y//L/8v/09P9Vv+P/b9d4SaVKT/BwAAgCqIff+OUBP9PwAAAJRG7PvvDDXR/wMAAEBpxL5/Z6hJRfp/1/8fiPx/Jv8v/y//L/8v/78y8v+dyf93If8v/y//L/9PT/Vb/j/2/a8KNalI/w8AAABVEPv+u0JN9P8AAABQGrHvf3Woif4fAAAASiP2/XeHmlSk/5f/l/+X/5f/l/9vv335/8Ek/9+Z/H8X8v/y//L/8v/0VL/l/2Pf/5pQk4r0/wAAAFAFse+/J9RE/w8AAAClEfv+e0NN9P8AAABQGrHvnww1qUj/L/8v/y//L/8v/99++/L/g0n+vzP5/y7k/+X/5f/l/+mpfsv/x77/vlCTivT/AAAAUAWx778/1ET/DwAAAKUR+/6pUBP9PwAAAJRG7PunQ00q0v/L/8v/y//L/68q///KxfXK/xfk//uL/H9n8v9dyP/L/294/n9U/p9S6bf8f+z7d4WaVKT/BwAAgCqIff/uUBP9PwAAAJRG7Pv3hJro/wEAAKA0Yt+/N9SkIv2//L/8v/x/T/P/tXbzoVT5/wby/wX5//4i/99Z7/P/8SnK/8v/y/+7/r/8P0v1W/4/9v0PhJpUpP8HAACAKoh9/75QE/0/AAAAlEbs+/eHmuj/AQAAoDRi338g1KQi/b/8v/y//L/r/8v/t9++/P9gkv/vzPX/u5D/l/8f4Px/fW7J/9Nv+i3/H/v+g6EmFen/AQAAoApi3//aUBP9PwAAAJRG7Pt/LdRE/w8AAAClEfv+Xw81qUj/L/8v/y//L//f7/n/Mfl/+f9VkP/vTP6/C/l/+f8Bzv+7/j/9qN/y/7HvPxRqUpH+HwAAAKog9v2/EWqi/wcAAIDSiH3/60JN9P8AAABQGrHvPxxqUpH+X/5/nfL/8Ub5f/l/+X/X/5f/v67k/zuT/+9C/l/+X/5f/p+e6rf8f+z7Xx9qUpH+HwAAAKog9v0Phpro/wEAAKA0Yt//hlAT/T8AAACURuz73xhqUpH+X/7f9f83Pv8/2jR2+f/Fx8n/F+T/5f9XQ/6/M/n/LuT/5f/l/+X/6al+y//Hvv9NoSYV6f8BAACgCmLf/+ZQE/0/AAAAlEbs+98SaqL/BwAAgNKIff9bQ00q0v/L/8v/b3z+3/X/5f8L8v/y/70g/9+Z/H8Xvc//j7asX/7/Otro8cv/y/+zVL/l/2Pf/5uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bws10f8DAABAacS+/+2hJhXp/+X/5f/l/+X/5f/bb1/+fzDJ/3c2YPn/X90Ubh/g/H/r+uX/r6ONHv9q8/8jLV9fl/z/j5bL/y9san28/D/XQ7/l/2Pf/45Qk4r0/wAAAFAFse9/Z6iJ/h8AAABKI/b97wo10f8DAABAacS+/7dCTSrS/8v/18exmF6W/5f/z2+Q/5f/l/8fWPL/nQ1Y/r8M1/9vXb/8/3W00eN3/X/5f5bqt/x/7PvfHWpSkf4fAAAAqiD2/Q+Hmuj/AQAAoDRi3/+eUBP9PwAAAJRG7PvfG2pSkf5f/t/1/+X/5f/l/9tvX/5/MMn/dyb/34X8v/x/v+X//1P+n8HWb/n/2Pc/EmpSkf4fAAAAqiD2/e8LNdH/AwAAQGnEvv+3Q030/wAAAFAase9/f6hJRfp/+f9Byf9PyP+vMv8/Fm6T/5f/l/+vFvn/zuT/u5D/l//vt/y/6/8z4Pot/x/7/g+Emqy8/x9f8ZIAAADAhoh9/++EmlTk9/8AAABQBbHv/91QE/0/AAAAlEbs+38v1KQi/b/8/6Dk/13/P3P9f/n/ludTyvz/kPz/Wq1f/j+eeeT/5f/l/yP5f/l/+X9a9Vv+P/b9vx9qUpH+HwAAAKog9v0fDDXR/wMAAMBAaPd/slvFvv9IqIn+HwAAAEoj9v1HQ00q0v/L/8v/y/9fU/4/X+y65v//Yse//OB77zy6S/6/Wvl/1/9fs3W9/n/94Hf9f/l/+f9E/l/+X/6fVv2W/499/7FQk8XG7+0u8A8AAACDLfb9fxBqUpHf/wMAAEAVxL7/eKiJ/h8AAABKI/b9M6EmFen/5f/l/+X/Xf+/1/n/uD8GKf8/uWmA8v/xpCv/39a65v/ft5gTl/9fbf5/rO2trfn/mvx/E/n/VY//u1mWyf/L/7OB+i3/H/v+2VCTivT/AAAAUAWh7x86UdTFO/T/AAAAUBqx7z8ZaqL/BwAAgNKIff+HQk0q0v/L/8v/y//L/7v+f/vt923+3/X/O5L/76x/8v/tuf6//P8gj1/+X/6fpfot/x/7/rlQk4r0/wAAAFAFse//cKiJ/h8AAABKI/b9Hwk10f8DAABAacS+/1SoSUX6f/l/+X/5f/l/+f/225f/H0zy///H3n08aVqWexx/Bxpmpqg6dXZncRaH/fkTWMhad25csHGhVZZVgoo5MYg5YM4BsxgwoYgJcwITillUzDlgRq2xmLmua7qnn37e7pm3+32e+/58FufCxvFtTlHij+E79zj9/xL6f/2//l//z0pNrf/P3f+guKWT/Q8AAAA9yN1/adxi/wMAAEAzcvdfFrfY/wAAANCM3P0Pjls62f/6f/1/s/3/PfT/O32+/l//3zL9/zj9/5DzTv2m/l//r//X/7NSU+v/c/c/JG7pZP8DAABAD3L3PzRusf8BAACgGbn7L49b7H8AAABoRu7+h8Utnez/0/r/Q4v19P/nb/u+Drb/z4xX/99S/+/9/x0/X/+v/2/Zwfb/V97933z6/9n3/5vo//X/+n/9Pys1tf4/d//D45ZO9j8AAAD0IHf/I+IW+x8AAACakbv/kXGL/Q8AAADNyN3/qLilk/3v/X/v/+v/9f/6/+HP1//Pk/f/x/XU/19+2wWX3nnD/964l8/X/+v/9f/6f1Zrav1/7v5Hxy2d7H8AAADoQe7+x8Qt9j8AAAA0I3f/Y+MW+x8AAABm6OjgV3P3Py5u6WT/6//1//r/6P+P6P/1//r/Fuj/x/XU/5/J5+v/9f/6f/0/qzW1/j93/+Pjlk72PwAAAPQgd/8T4hb7HwAAAKZr6B/EHpG7/4q4xf4HAACAZuTuPxa3dLL/9f/73///W/8/j/7f+//6f/1/E/T/4/T/S+j/9f/6f/0/KzW1/j93/5VxSyf7HwAAAHqQu/+JcYv9DwAAAM3I3X9V3GL/AwAAQDNy9z8pbulk/+v/vf+v/9f/6/+HP1//P0/T7v83ln6+/l//P/P+/zz9v/5f/89me+z/7xr5r+2V9P+5+58ct3Sy/wEAAKAHufufErfY/wAAANCM3P1PjVvsfwAAAGhG7v6nxS2d7H/9v/5f/6//P+P+f/ufeifo/4fp/w/GtPv/5brp/w8N/1oI+v/Z9//e/9f/6//ZYmrv/+fuf3rc0sn+BwAAgB7k7n9G3DKy//f8N/MBAACAtcrd/8y4xc//AwAAwOxldZa7/1lxSyf7X/+v/9f/6/+9/z/8+WP9/42bvj/9/7To/8dNpv/fgf5f/z/n71//r/9nu6n1/7n7nx23dLL/AQAAoAe5+6+OW+x/AAAAaEbu/ufELfY/AAAANCN3/3Pjlk72/3D/f+r36/93R/+/9fvX/w//+bGq/j//E/X/o/3/xd7/75P+f5z+f4kt/f+9NxYL/b/+X/8f/f/RZT9e/8+QqfX/ufufF7d0sv8BAACgB7n7nx+32P8AAADQjNz9L4hb7H8AAABoRu7+F8Ytnex/7//r//X/8+v/vf9/0jrf/18ceP+/of/fJf3/OP3/Et7/1//r/8ff/x/5VQD0/wyZWv+fu/9FcUsn+x8AAAB6kLv/xXGL/Q8AAADzsPmfHTj9HygNuftfErfY/wAAANCM3P0vjVva2f+jb3Xq//X/+n/9v/5/+POn1f97/3+39P/j9P9L6P/3o5/faKz/v2anHz+F/v+K/e7/R+j/GbKl/7/p1NfX1f/n7n9Z3NLO/gcAAIDu5e5/edxi/wMAAEAzcve/Im6x/wEAAKAZuftfGbd0sv/3vf8f+dUH9P/6f/2//l//r/9fNf3/OP3/Evp/7/97/1//z0pt6f83WVf/n7v/VXFLJ/sfAAAAepC7/9Vxi/0PAAAAzcjdf03cYv8DAABAM3L3vyZu6WT/e/9f/6//1//r/4c/X/8/T2fV35+j/y/6f/2//l//r/9nBabW/+fuf23c0sn+BwAAgB7k7n9d3GL/AwAAwJwcHvuduftfH7fY/wAAANCM3P1viFs62f/6//3t//Pr+n/9/0L/r//X/x+Ibt//PzT0V6Ltduj/b3nAsXtt/Yr+X/+v/9f/6//Zpf8e+X2T6P+Pn/pfl7n73xi3dLL/AQAAoAe5+98Ut9j/AAAA0Izc/W+OW+x/AAAAaEbu/mvjlj3u/7HmYcr0/97/1//r//X/w5+v/5+nbvv/XfL+/xL6f/2//l//z0pNov/f9K9z978lbvHz/wAAANCM3P1vjVvsfwAAAGhG7v63xS32PwAAADQjd//b45ZO9r/+X/+v/9f/6/+HP1//P0/6/3H6/yXm1P9fexb9/8bwl9fdz5+tdX//+n/9P9tNrf/P3X9d3NLJ/gcAAIAe5O5/R9xi/wMAAEAzcve/M26x/wEAAKAZufvfFbd0sv/1//p//b/+X/8//Pn6/3nS/4/T/y8Wi/eMfAND/f/xw9Ps/73/P7nvX/+v/2e7qfX/ufvfHbd0sv8BAACgAxcePXGOxN8Ktv8BAACgRbn7r49b7H8AAABoRu7+98Ytnex//b/+X/9/qv+vPxL9v/5f/z9b+v9x+v8l5vT+v/5/ct+//l//z3ZT6/9z978vbulk/wMAAEAPcvffELfY/wAAANCM3P3vj1vsfwAAAGhG7v4b45ZO9r/+X/+v//f+v/5/+PP1//O0f/3/Qv+v/9f/L6H/1//r/znd1Pr/3P0fiFs62f8AAADQg9z9H4xb7H8AAABoRu7+D8Ut9j8AAAA0I3f/h+OWTva//l//r//X/+v/hz9f/z9P3v8fp/9fQv+v/9f/6/9ZqeH+/4q19f+5+z8St3Sy/wEAAKAHuftvilvsfwAAAGhG7v6Pxi32PwAAADQjd//H4pZO9r/+X/+/tf9fLPT/+v/d9/9X6v/Prv8/stD/r5z+f5z+fwn9f5v9/zmLhvr/ozv+eP0/UzS19/9z9388bulk/wMAAEAPcvd/Im6x/wEAAKAZufs/GbfY/wAAANCM3P2fils62f/6f/2/9//1/97/H/587//Pk/5/nP5/Cf3/WfX/+dfjyfX/3v/X/7M2U+v/c/d/Om7pZP8DAABAD3L3fyZusf8BAACgGbn7Pxu32P8AAADQjNz9n4tbOtn/+n/9v/5f/6//H/58/f886f/H6f+X0P+3+f5/H/3/0YX+nwmaWv+fu//zcUsn+x8AAAB6kLv/5rjF/gcAAIBm5O6/JW6x/wEAAKAZufu/ELd0sv/1//p//f88+/8j+n/9v/5/0FT6/4suuuet+n/9v/5f/+/9f/1/76bW/+fu/2Lc0sn+BwAAgB7k7v9S3GL/AwAAQDNy9385brH/AQAAoBm5+78St3Sy/7f3/+ctThaqJw31/9Gozb7/P7zp+0j6f/3/iS/MoP9f6P/1//r/QVPp/73/f2bfv/5f/z/n739P/f+F23+8/p8WTa3/z91/a9zSyf4HAACAHuTu/2rcYv8DAABAM3L3fy1usf8BAACgGbn7b4tbOtn/3v/X/+v/9f/6/+HP1//Pk/5/nP5/Cf2//t/7/5fd71z9P6sztf4/d//X45ZO9j8AAAD0IHf/N+IW+x8AAACakbv/m3GL/Q8AAADNyN3/rbilk/2v/z+Y/v+/4mv6f/2//l//r//fX/r/cfr/cvof2kn99P9Hhr647n7+bK37+2+m//f+Pys0tf4/d/+345ZO9j8AAAD0IHf/d+IW+x8AAACakbv/u3GL/Q8AAADNyN3/vbilk/2v/+/m/f87zu+2/7+v/v+0z9f/6/9bpv/Pv6IP0/8v0U//P2jd/fzcv3/9v/6f7abW/+fuvz1u6WT/AwAAQA9y938/brH/AQAAoBm5+38Qt9j/AAAA0Izc/T+MWzrZ//r/bvr/q05+nz32/97/1//r/3ui/x+n/19C/6//b7//P3+nH6//Zz9Mrf/P3X/HoY0u9z8AAADM1X3+/4G37/bfe8eJ/3tk8aO45eLF8V3+NDYAAAAwcXfv/kMbi8WPT/wrP/8PAAAALcrd/5O4pZP9r//vq//v8/1//b/+X//fE/3/OP3/Evp//X/7/f+O9P/sh6n1/7n7fxq3bBp+G3v+owQAAACmJHf/z+KWTn7+HwAAAHqQu//nccu2/e+XAwQAAIC5yt3/i7ilk5//X2f/f67+f3n/v9in/j/+ffr/k/T/+v+hz9f/z5P+f9xZ9v/HD+n/9f8j9P/6f/0/p5ta/5+7/5dxSyf7HwAAABq15e8o5O7/Vdxi/wMAAEAzcvf/Om6x/wEAAKAZuft/E7d0sv+9/7/P/f/d/wFb+/lM1ffx/f+j9Vve/++8/7/6yODn6//1/y3T/4/z/v8S+v9W+v/D+n/9P9Mwtf4/d/9v45ZO9j8AAAD0IHf/7+IW+x8AAACakbv/93GL/Q8AAADNyN3/h7ilk/2v/5/4+/9n1P/v4v1//X8f/f8On99O//8/Fxy7+ZL7X3+d/p9TDrL/zz8X9P/6f/3/SRPq/73/r/9nIlbf/29s+eJe+//c/X+MWzrZ/wAAANCD3P13xi32PwAAADQjd/+f4hb7HwAAAJqRu//PcUsn+1//r/+fSv+f/79eQ/9/7Iz7/6OLxWIt/X82xb33/97/1/9v5/3/cfr/JfT/+n/9v/6flVp9/7/1i3vt/3P3/yVu6WT/AwAAQA9y9/81bsn9f2jPf+seAAAAmJjc/X+LW/z8PwAAADQjd//f45ZO9r/+X/8/lf4/ef//1I9r6/3/SypO7bP//7/6Lf3//tL/j9P/L6H/1//r//X/rNTU+v/c/f+IWzrZ/wAAANCD3P13xS32PwAAADQjd/8/4xb7HwAAAJqRu/9fcUsn+1//32r/n0W8/l//P5X+3/v/3v8/GPr/cfr/JfT/+n/9v/6flZpa/5+7/z8BAAD//1KlYrM=") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6ba) truncate(&(0x7f0000000040)='./file2\x00', 0x10003) 1.093007857s ago: executing program 0 (id=2151): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1}) 1.059600032s ago: executing program 3 (id=2152): quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@nullb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r2, 0x1) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x250, 0x120, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'gre0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000240)={0x0, 0x1, @raw_data=[0x368, 0xfffff001, 0x6, 0x2, 0x8, 0x7, 0x60, 0xc4, 0x4, 0x2, 0x59, 0x4, 0x8, 0x7ff, 0x7, 0x2]}) 969.661067ms ago: executing program 0 (id=2153): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x65) 577.224013ms ago: executing program 0 (id=2154): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 479.436089ms ago: executing program 0 (id=2155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0xa9d) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x1, @sdr={0x34325842, 0x7}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r4, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) dup2(r5, r2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 226.205472ms ago: executing program 4 (id=2156): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8f1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 3 (id=2157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 69.238748][ T5755] cgroup: Unknown subsys name 'net' [ 69.339606][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.078859][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.765298][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.771944][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.218638][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.231767][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.242048][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.256767][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.265958][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.273972][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.315521][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.325610][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.332629][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.334035][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.342293][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.347817][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.355041][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.368082][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.369229][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.383011][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.384226][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.399043][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.407923][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.415719][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.422636][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.450644][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.459029][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.466516][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.964254][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 74.044707][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 74.082326][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 74.099551][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 74.188087][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.195891][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.203781][ T5772] bridge_slave_0: entered allmulticast mode [ 74.210681][ T5772] bridge_slave_0: entered promiscuous mode [ 74.236002][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.245512][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.252810][ T5772] bridge_slave_1: entered allmulticast mode [ 74.259643][ T5772] bridge_slave_1: entered promiscuous mode [ 74.355907][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.365565][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.373105][ T5777] bridge_slave_0: entered allmulticast mode [ 74.379961][ T5777] bridge_slave_0: entered promiscuous mode [ 74.388894][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.396093][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.403682][ T5777] bridge_slave_1: entered allmulticast mode [ 74.410839][ T5777] bridge_slave_1: entered promiscuous mode [ 74.430112][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.443036][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.452450][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.459574][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.469830][ T5775] bridge_slave_0: entered allmulticast mode [ 74.477010][ T5775] bridge_slave_0: entered promiscuous mode [ 74.496482][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.503812][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.510960][ T5768] bridge_slave_0: entered allmulticast mode [ 74.518002][ T5768] bridge_slave_0: entered promiscuous mode [ 74.537220][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.544636][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.552036][ T5775] bridge_slave_1: entered allmulticast mode [ 74.559067][ T5775] bridge_slave_1: entered promiscuous mode [ 74.586459][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.593919][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.601087][ T5768] bridge_slave_1: entered allmulticast mode [ 74.608247][ T5768] bridge_slave_1: entered promiscuous mode [ 74.637680][ T5772] team0: Port device team_slave_0 added [ 74.647064][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.668316][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.679977][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.690970][ T5772] team0: Port device team_slave_1 added [ 74.717976][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.739989][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.772661][ T5777] team0: Port device team_slave_0 added [ 74.790510][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.813223][ T5777] team0: Port device team_slave_1 added [ 74.819909][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.827018][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.853505][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.878279][ T5775] team0: Port device team_slave_0 added [ 74.896977][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.905300][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.931878][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.964544][ T5775] team0: Port device team_slave_1 added [ 74.987521][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.994906][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.020991][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.035386][ T5768] team0: Port device team_slave_0 added [ 75.051729][ T5768] team0: Port device team_slave_1 added [ 75.079718][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.086788][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.112979][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.125491][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.132874][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.160009][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.189793][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.197174][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.223361][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.297668][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.304805][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.331234][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.367754][ T5777] hsr_slave_0: entered promiscuous mode [ 75.374866][ T5777] hsr_slave_1: entered promiscuous mode [ 75.387963][ T5772] hsr_slave_0: entered promiscuous mode [ 75.395360][ T5772] hsr_slave_1: entered promiscuous mode [ 75.401894][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.409646][ T5772] Cannot create hsr debugfs directory [ 75.425054][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.432634][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.459078][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.484084][ T5775] hsr_slave_0: entered promiscuous mode [ 75.490489][ T5775] hsr_slave_1: entered promiscuous mode [ 75.496872][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.504611][ T5775] Cannot create hsr debugfs directory [ 75.522381][ T5771] Bluetooth: hci0: command tx timeout [ 75.528273][ T5771] Bluetooth: hci1: command tx timeout [ 75.534083][ T5781] Bluetooth: hci2: command tx timeout [ 75.534103][ T5084] Bluetooth: hci3: command tx timeout [ 75.682363][ T5768] hsr_slave_0: entered promiscuous mode [ 75.688838][ T5768] hsr_slave_1: entered promiscuous mode [ 75.695546][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.703633][ T5768] Cannot create hsr debugfs directory [ 75.998830][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.010674][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.028409][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.038884][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.137875][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.150430][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.160947][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.176947][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.279468][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.292117][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.304763][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.319323][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.329589][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.407401][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.418391][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.444287][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.451194][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.472052][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.501968][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.509468][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.533716][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.540953][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.689537][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.729123][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.756923][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.778552][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.820922][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.828175][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.838837][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.846020][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.881224][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.888528][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.937558][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.952870][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.960099][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.037382][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.066867][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.074130][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.094652][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.139571][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.146793][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.276213][ T5772] veth0_vlan: entered promiscuous mode [ 77.335370][ T5772] veth1_vlan: entered promiscuous mode [ 77.436233][ T5772] veth0_macvtap: entered promiscuous mode [ 77.506809][ T5772] veth1_macvtap: entered promiscuous mode [ 77.577742][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.601729][ T5781] Bluetooth: hci3: command tx timeout [ 77.607366][ T5781] Bluetooth: hci0: command tx timeout [ 77.613334][ T5771] Bluetooth: hci2: command tx timeout [ 77.613391][ T5771] Bluetooth: hci1: command tx timeout [ 77.640948][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.659779][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.720767][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.738938][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.750179][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.760732][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.812635][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.895003][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.919220][ T5775] veth0_vlan: entered promiscuous mode [ 77.978176][ T5775] veth1_vlan: entered promiscuous mode [ 77.986528][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.997417][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.063367][ T5777] veth0_vlan: entered promiscuous mode [ 78.089578][ T5768] veth0_vlan: entered promiscuous mode [ 78.090263][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.104715][ T5777] veth1_vlan: entered promiscuous mode [ 78.139425][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.144798][ T5768] veth1_vlan: entered promiscuous mode [ 78.176129][ T5775] veth0_macvtap: entered promiscuous mode [ 78.237534][ T5775] veth1_macvtap: entered promiscuous mode [ 78.268275][ T5777] veth0_macvtap: entered promiscuous mode [ 78.282772][ T5768] veth0_macvtap: entered promiscuous mode [ 78.304661][ T5777] veth1_macvtap: entered promiscuous mode [ 78.330196][ T5768] veth1_macvtap: entered promiscuous mode [ 78.368274][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.385238][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.398473][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.439703][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.452495][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.462925][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.473963][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.487251][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.507031][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.529125][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.546689][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.558407][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.581796][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.593028][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.613729][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.645976][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.668699][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.680687][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.690421][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 78.692159][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.716039][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.729589][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.752529][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.770079][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.780288][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.792852][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.809104][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.820076][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.830626][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.842305][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.854664][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.900229][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.911020][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.921335][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.930477][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.945056][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.955395][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.965234][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.974218][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.008675][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.019220][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.028205][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.037025][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.298651][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.308851][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.373209][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.381115][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.457077][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.478848][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.497317][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.516679][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.561276][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.581522][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.650453][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.680264][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.688307][ T51] Bluetooth: hci2: command tx timeout [ 79.688350][ T51] Bluetooth: hci3: command tx timeout [ 79.688531][ T5781] Bluetooth: hci1: command tx timeout [ 79.695916][ T5781] Bluetooth: hci0: command tx timeout [ 79.905374][ T5841] syz.0.7[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.920805][ T5839] xt_hashlimit: size too large, truncated to 1048576 [ 79.997578][ T5841] loop0: detected capacity change from 0 to 512 [ 80.031013][ T5841] ======================================================= [ 80.031013][ T5841] WARNING: The mand mount option has been deprecated and [ 80.031013][ T5841] and is ignored by this kernel. Remove the mand [ 80.031013][ T5841] option from the mount to silence this warning. [ 80.031013][ T5841] ======================================================= [ 80.153875][ T5846] loop1: detected capacity change from 0 to 1764 [ 80.332098][ T5846] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 80.829843][ T5859] loop3: detected capacity change from 0 to 256 [ 81.118363][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 81.809276][ T5771] Bluetooth: hci1: command tx timeout [ 81.809662][ T51] Bluetooth: hci3: command tx timeout [ 81.815544][ T5771] Bluetooth: hci2: command tx timeout [ 81.826289][ T5781] Bluetooth: hci0: command tx timeout [ 84.326558][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 86.268189][ T5948] loop1: detected capacity change from 0 to 512 [ 86.410062][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.527612][ T5948] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.961633][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 87.147629][ T27] cfg80211: failed to load regulatory.db [ 88.105531][ T5980] loop2: detected capacity change from 0 to 512 [ 88.194152][ T5980] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.61: inode has both inline data and extents flags [ 88.321863][ T5980] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.61: couldn't read orphan inode 15 (err -117) [ 88.452651][ T5987] loop0: detected capacity change from 0 to 512 [ 88.463404][ T5980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.483219][ T5987] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.526312][ T5987] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.566508][ T5987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.606709][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.631272][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.648349][ T5987] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.711339][ T28] audit: type=1800 audit(1775989210.754:2): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 88.827516][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.833292][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.104915][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.371742][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.380541][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.303115][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.352850][ T5811] IPVS: starting estimator thread 0... [ 91.385237][ T6017] netlink: 'syz.0.74': attribute type 6 has an invalid length. [ 91.392496][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.464973][ T6016] IPVS: using max 18 ests per chain, 43200 per kthread [ 92.761405][ C0] sched: RT throttling activated [ 92.797329][ T5993] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.806508][ T5993] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.816475][ T5993] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.825768][ T5993] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.049593][ T6006] netlink: 'syz.3.70': attribute type 39 has an invalid length. [ 93.696898][ T6035] fuse: Bad value for 'group_id' [ 93.816469][ T6040] loop3: detected capacity change from 0 to 512 [ 94.725608][ T6068] loop3: detected capacity change from 0 to 512 [ 94.746692][ T6068] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.96: inode has both inline data and extents flags [ 94.796099][ T6068] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.96: couldn't read orphan inode 15 (err -117) [ 94.817017][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 94.823831][ T6068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.003900][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.138535][ T6077] loop3: detected capacity change from 0 to 2048 [ 95.160596][ T6078] loop1: detected capacity change from 0 to 512 [ 95.192781][ T6077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.229982][ T6077] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.250714][ T6078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.344395][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.499589][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.849976][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 95.977018][ T6097] loop1: detected capacity change from 0 to 512 [ 96.030377][ T6097] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.107: inode has both inline data and extents flags [ 96.061160][ T6097] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.107: couldn't read orphan inode 15 (err -117) [ 96.126875][ T6097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.358180][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.386791][ T6121] syz.0.116 uses obsolete (PF_INET,SOCK_PACKET) [ 97.630517][ T6129] loop2: detected capacity change from 0 to 1024 [ 97.671072][ T6129] EXT4-fs: Ignoring removed orlov option [ 97.742479][ T6131] xt_hashlimit: size too large, truncated to 1048576 [ 98.464066][ T6129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 98.503913][ T6129] System zones: 0-1, 3-12 [ 98.510211][ T6129] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.723322][ T6136] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 98.989780][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 99.098497][ T6142] loop3: detected capacity change from 0 to 164 [ 99.177082][ T6142] Unsupported NM flag settings (240) [ 99.426706][ T6142] Unsupported NM flag settings (240) [ 99.451347][ T6142] Unsupported NM flag settings (240) [ 99.796829][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 99.953086][ T6158] loop0: detected capacity change from 0 to 1024 [ 99.972807][ T6158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.028381][ T6158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.144412][ T6163] loop1: detected capacity change from 0 to 764 [ 101.444073][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.009667][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 103.090293][ T6205] netlink: 'syz.3.149': attribute type 4 has an invalid length. [ 103.127046][ T6205] netlink: 152 bytes leftover after parsing attributes in process `syz.3.149'. [ 103.173838][ T6205] .`: renamed from bond0 (while UP) [ 103.415809][ T6213] loop3: detected capacity change from 0 to 128 [ 103.482087][ T6215] syzkaller0: entered promiscuous mode [ 103.493043][ T6215] syzkaller0: entered allmulticast mode [ 103.542868][ T5809] Process accounting resumed [ 103.629227][ T34] kworker/u4:2: attempt to access beyond end of device [ 103.629227][ T34] loop3: rw=1, sector=145, nr_sectors = 352 limit=128 [ 103.897703][ T6225] loop3: detected capacity change from 0 to 512 [ 103.998831][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.032496][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 104.087799][ T6225] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.296432][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.320606][ T6238] loop0: detected capacity change from 0 to 512 [ 104.815873][ T6247] syzkaller0: entered promiscuous mode [ 104.825375][ T6247] syzkaller0: entered allmulticast mode [ 105.244001][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 105.627857][ T6261] loop3: detected capacity change from 0 to 764 [ 106.543279][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 106.672063][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 106.711182][ T6285] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 106.711182][ T6285] program syz.0.184 not setting count and/or reply_len properly [ 107.391254][ T6306] netlink: 'syz.2.194': attribute type 6 has an invalid length. [ 107.615183][ T6310] loop1: detected capacity change from 0 to 128 [ 107.742366][ T6310] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 107.769880][ T6310] FAT-fs (loop1): Filesystem has been set read-only [ 107.944178][ T6317] syzkaller0: entered promiscuous mode [ 107.954004][ T6317] syzkaller0: entered allmulticast mode [ 108.569415][ T6331] loop2: detected capacity change from 0 to 512 [ 109.370436][ T6343] loop2: detected capacity change from 0 to 512 [ 109.406103][ T6343] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.210: inode has both inline data and extents flags [ 109.428089][ T6343] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.210: couldn't read orphan inode 15 (err -117) [ 109.466803][ T6343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.582543][ T6343] loop2: detected capacity change from 512 to 0 [ 109.690959][ T5777] syz-executor: attempt to access beyond end of device [ 109.690959][ T5777] loop2: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 109.707933][ T5777] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 109.758564][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.758564][ T1087] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 109.797150][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.797150][ T1087] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 109.822393][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.822393][ T1087] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 109.848250][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.848250][ T1087] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 109.874835][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.874835][ T1087] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 109.904198][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.904198][ T1087] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 109.927597][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.927597][ T1087] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 109.941833][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.941833][ T1087] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 109.963367][ T1087] kworker/u4:7: attempt to access beyond end of device [ 109.963367][ T1087] loop2: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 109.996373][ T1087] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4619: inode #2: block 5: comm kworker/u4:7: unable to read itable block [ 110.021001][ T1087] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 110.032321][ T1087] EXT4-fs (loop2): I/O error while writing superblock [ 110.044720][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.062629][ T5777] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 110.072145][ T5777] EXT4-fs (loop2): I/O error while writing superblock [ 111.489306][ T6377] syzkaller0: entered promiscuous mode [ 111.544070][ T6377] syzkaller0: entered allmulticast mode [ 112.025783][ T6389] loop1: detected capacity change from 0 to 1024 [ 112.052898][ T6389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.125417][ T6389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.193584][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.204579][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.214632][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.225984][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.235439][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.281784][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.455787][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.555617][ T6406] loop0: detected capacity change from 0 to 128 [ 114.401632][ T5781] Bluetooth: hci2: command tx timeout [ 114.457909][ T6393] chnl_net:caif_netlink_parms(): no params data found [ 114.793250][ T6442] loop1: detected capacity change from 0 to 512 [ 114.820375][ T6442] EXT4-fs: inline encryption not supported [ 114.895908][ T6442] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.929769][ T1099] hsr_slave_0: left promiscuous mode [ 114.950365][ T6442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.976880][ T1099] hsr_slave_1: left promiscuous mode [ 114.990235][ T6442] EXT4-fs (loop1): 1 truncate cleaned up [ 115.000990][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.005278][ T6442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.042158][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.077254][ T6447] loop3: detected capacity change from 0 to 1024 [ 115.081265][ T1099] bridge_slave_1: left allmulticast mode [ 115.112511][ T6447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.115490][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.150196][ T1099] bridge_slave_1: left promiscuous mode [ 115.179247][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.192991][ T6447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.208973][ T1099] bridge_slave_0: left allmulticast mode [ 115.215023][ T1099] bridge_slave_0: left promiscuous mode [ 115.220827][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.493641][ T5781] Bluetooth: hci2: command tx timeout [ 116.538283][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.385915][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 117.510306][ T6474] loop1: detected capacity change from 0 to 512 [ 117.517920][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 117.700108][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.799015][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.210498][ T1099] bond0 (unregistering): Released all slaves [ 118.450906][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.482218][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.507027][ T6393] bridge_slave_0: entered allmulticast mode [ 118.530085][ T6393] bridge_slave_0: entered promiscuous mode [ 118.562189][ T5781] Bluetooth: hci2: command tx timeout [ 118.573272][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.580652][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.589134][ T6393] bridge_slave_1: entered allmulticast mode [ 118.597467][ T6393] bridge_slave_1: entered promiscuous mode [ 118.680520][ T6492] loop1: detected capacity change from 0 to 764 [ 118.727608][ T6492] Symlink component flag not implemented [ 118.731245][ T6481] syzkaller0: entered promiscuous mode [ 118.734597][ T6492] Symlink component flag not implemented (122) [ 118.755662][ T6481] syzkaller0: entered allmulticast mode [ 118.806110][ T6393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.477057][ T6516] netlink: 'syz.0.259': attribute type 6 has an invalid length. [ 120.646408][ T5781] Bluetooth: hci2: command tx timeout [ 120.987895][ T6393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.194036][ T6393] team0: Port device team_slave_0 added [ 121.248320][ T6393] team0: Port device team_slave_1 added [ 121.381786][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.404007][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.437509][ T6393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.452700][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 121.467003][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.488082][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.518206][ T6533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 121.559058][ T6393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.777172][ T6393] hsr_slave_0: entered promiscuous mode [ 121.819311][ T6393] hsr_slave_1: entered promiscuous mode [ 122.134472][ T6548] syzkaller0: entered promiscuous mode [ 122.140028][ T6548] syzkaller0: entered allmulticast mode [ 122.477150][ T6559] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.751353][ T6393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.790493][ T6393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.839637][ T6393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.880007][ T6393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.948738][ T6576] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 122.980302][ T6576] syz_tun: entered promiscuous mode [ 123.040774][ T6576] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 123.255909][ T6393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.326096][ T6393] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.386239][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.393510][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.400837][ T6592] loop3: detected capacity change from 0 to 512 [ 123.421464][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.428770][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.523597][ T6592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.590491][ T6592] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.894295][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.221001][ T6606] syzkaller0: entered promiscuous mode [ 124.239582][ T6606] syzkaller0: entered allmulticast mode [ 124.770241][ T6393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.960851][ T6622] netlink: 104 bytes leftover after parsing attributes in process `syz.3.283'. [ 125.502452][ T6639] netlink: 'syz.0.287': attribute type 10 has an invalid length. [ 125.516279][ T6641] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.522213][ T59] bond0: (slave bond_slave_0): interface is now down [ 125.581021][ T59] bond0: (slave bond_slave_1): interface is now down [ 125.612610][ T6639] syz_tun: entered promiscuous mode [ 125.649463][ T59] bond0: (slave bond_slave_0): interface is now down [ 125.670939][ T6639] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.688590][ T59] bond0: (slave bond_slave_1): interface is now down [ 125.727090][ T59] bond0: (slave syz_tun): interface is now down [ 125.754398][ T59] bond0: now running without any active interface! [ 125.825306][ T6393] veth0_vlan: entered promiscuous mode [ 125.878843][ T6393] veth1_vlan: entered promiscuous mode [ 125.988536][ T6393] veth0_macvtap: entered promiscuous mode [ 126.025875][ T6393] veth1_macvtap: entered promiscuous mode [ 126.089603][ T6651] syzkaller0: entered promiscuous mode [ 126.096290][ T6651] syzkaller0: entered allmulticast mode [ 126.109509][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.134067][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.146277][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.161183][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.178441][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.189567][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.208238][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.342652][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.353849][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.364184][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.375033][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.385261][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.396010][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.408081][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.426801][ T6393] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.441106][ T6393] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.455759][ T6393] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.471897][ T6393] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.606302][ T6662] loop3: detected capacity change from 0 to 2048 [ 126.704343][ T6662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.770924][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.805131][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.898044][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.902548][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.906840][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.124296][ T6675] loop3: detected capacity change from 0 to 1024 [ 127.144924][ T6675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.217334][ T6675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.267640][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 127.390006][ T6688] loop4: detected capacity change from 0 to 2048 [ 127.423790][ T6688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.506890][ T28] audit: type=1800 audit(1775989249.554:3): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.299" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 127.549400][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.616035][ T28] audit: type=1804 audit(1775989249.594:4): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.299" name="/newroot/2/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 127.986279][ T6688] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 128.032032][ T6688] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.066096][ T6688] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.066096][ T6688] [ 128.087956][ T6704] syzkaller0: entered promiscuous mode [ 128.112137][ T6704] syzkaller0: entered allmulticast mode [ 128.123484][ T6688] EXT4-fs (loop4): Total free blocks count 0 [ 128.163759][ T6688] EXT4-fs (loop4): Free/Dirty block details [ 128.211695][ T6688] EXT4-fs (loop4): free_blocks=66060288 [ 128.281602][ T6688] EXT4-fs (loop4): dirty_blocks=16 [ 128.286804][ T6688] EXT4-fs (loop4): Block reservation details [ 128.363212][ T6688] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 128.538150][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.966903][ T6721] loop1: detected capacity change from 0 to 1024 [ 129.068807][ T6721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.306037][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.606623][ T6738] loop4: detected capacity change from 0 to 512 [ 129.659308][ T6738] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.311: corrupted in-inode xattr: e_value out of bounds [ 129.725259][ T6738] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.311: couldn't read orphan inode 15 (err -117) [ 129.777142][ T6738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.060402][ T6750] syzkaller0: entered promiscuous mode [ 130.079060][ T6750] syzkaller0: entered allmulticast mode [ 130.099475][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.850396][ T6770] Zero length message leads to an empty skb [ 131.009888][ T6757] loop0: detected capacity change from 0 to 128 [ 131.031699][ T6757] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.094354][ T6757] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.190573][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.082306][ T6798] syzkaller0: entered promiscuous mode [ 132.107425][ T6798] syzkaller0: entered allmulticast mode [ 132.914302][ T6808] loop3: detected capacity change from 0 to 4096 [ 133.010033][ T6808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.057696][ T28] audit: type=1800 audit(1775989255.104:5): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.330" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 133.229485][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.236040][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.357914][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.499689][ T6820] loop1: detected capacity change from 0 to 4096 [ 133.582991][ T6820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.714077][ T28] audit: type=1800 audit(1775989255.764:6): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.332" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 133.880887][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.877140][ T6838] vlan2: entered promiscuous mode [ 135.882471][ T6838] bridge0: entered promiscuous mode [ 135.979324][ T6841] loop3: detected capacity change from 0 to 512 [ 136.039534][ T6841] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.340: inode has both inline data and extents flags [ 136.107310][ T6841] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.340: couldn't read orphan inode 15 (err -117) [ 136.195959][ T6841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.355303][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.609605][ T6858] loop3: detected capacity change from 0 to 512 [ 136.700110][ T6277] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.957737][ T6864] loop3: detected capacity change from 0 to 128 [ 137.003441][ T6864] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 137.271578][ T1002] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 137.537290][ T6882] loop4: detected capacity change from 0 to 128 [ 137.640256][ T6882] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 137.673881][ T6882] FAT-fs (loop4): Filesystem has been set read-only [ 137.696658][ T6882] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52) [ 137.719757][ T6882] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52) [ 138.573843][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.582806][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.590886][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.599135][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.607339][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.615399][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.634674][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.643560][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.651759][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 138.659712][ T6912] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 139.436745][ T6922] syzkaller0: entered promiscuous mode [ 139.443007][ T6922] syzkaller0: entered allmulticast mode [ 140.404463][ T6875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.100594][ T6956] loop3: detected capacity change from 0 to 512 [ 141.167578][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.329007][ T6963] loop4: detected capacity change from 0 to 512 [ 141.626510][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.295361][ T6980] loop3: detected capacity change from 0 to 128 [ 142.848646][ T6998] loop3: detected capacity change from 0 to 1024 [ 142.866270][ T6998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.986766][ T6998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.390313][ T7014] loop4: detected capacity change from 0 to 512 [ 144.749739][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.190250][ T7046] loop3: detected capacity change from 0 to 512 [ 146.487769][ T28] audit: type=1326 audit(1775989268.534:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 146.531460][ T28] audit: type=1326 audit(1775989268.534:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 146.609611][ T28] audit: type=1326 audit(1775989268.534:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 146.680751][ T28] audit: type=1326 audit(1775989268.534:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 146.761684][ T28] audit: type=1326 audit(1775989268.534:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 146.836744][ T28] audit: type=1326 audit(1775989268.534:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 146.899881][ T28] audit: type=1326 audit(1775989268.534:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 146.951573][ T28] audit: type=1326 audit(1775989268.534:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 147.010743][ T28] audit: type=1326 audit(1775989268.534:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 147.111531][ T28] audit: type=1326 audit(1775989268.534:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f34c319c819 code=0x7ffc0000 [ 147.505335][ T7083] loop3: detected capacity change from 0 to 1024 [ 147.539212][ T7083] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.634207][ T7083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.794358][ T7097] loop1: detected capacity change from 0 to 1024 [ 147.856472][ T7097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.858761][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.912866][ T7097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.282236][ T7112] loop3: detected capacity change from 0 to 512 [ 148.640972][ T7097] syz.1.426 (7097) used greatest stack depth: 20720 bytes left [ 149.000548][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.714314][ T7143] loop4: detected capacity change from 0 to 1024 [ 149.732687][ T7143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.882676][ T7143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.158496][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 150.789623][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 151.129519][ T7143] syz.4.442 (7143) used greatest stack depth: 20584 bytes left [ 151.501328][ T7172] loop1: detected capacity change from 0 to 8192 [ 152.625237][ T7208] loop3: detected capacity change from 0 to 512 [ 153.192962][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.916303][ T7239] tmpfs: Bad value for 'mpol' [ 156.901203][ T7267] loop3: detected capacity change from 0 to 512 [ 156.959793][ T7267] EXT4-fs: inline encryption not supported [ 157.037709][ T7267] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.476: bad orphan inode 15 [ 157.103150][ T7273] fuse: Unknown parameter 'group_i00000000000000000000' [ 157.147463][ T7267] ext4_test_bit(bit=14, block=5) = 0 [ 157.219192][ T7267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.334481][ T7267] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.476: reserved inode found cleared - inode=1 [ 157.644742][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.990131][ T7288] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 158.087810][ T7285] netlink: 348 bytes leftover after parsing attributes in process `syz.3.480'. [ 158.994181][ T7285] ªªªªªª: renamed from dummy0 (while UP) [ 160.403046][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 164.107090][ T7350] fuse: Unknown parameter 'group_i00000000000000000000' [ 167.891618][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.504'. [ 169.013767][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 169.016790][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 169.667606][ T7415] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 170.755713][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 171.005331][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 171.015651][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.216875][ T7464] loop3: detected capacity change from 0 to 512 [ 173.296146][ T7464] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.528: corrupted in-inode xattr: e_value out of bounds [ 173.516987][ T7464] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.528: couldn't read orphan inode 15 (err -117) [ 173.830102][ T7464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.028846][ T7475] xt_hashlimit: size too large, truncated to 1048576 [ 174.156518][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.215978][ T7478] loop1: detected capacity change from 0 to 1024 [ 174.252688][ T7478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.421999][ T7478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.661034][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.650905][ T7518] futex_wake_op: syz.1.547 tries to shift op by 32; fix this program [ 178.654740][ T7516] netlink: 348 bytes leftover after parsing attributes in process `syz.3.546'. [ 179.666473][ T7551] futex_wake_op: syz.0.557 tries to shift op by 32; fix this program [ 179.735501][ T7553] validate_nla: 44 callbacks suppressed [ 179.735519][ T7553] netlink: 'syz.3.558': attribute type 1 has an invalid length. [ 184.054075][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 184.328705][ T7661] netlink: 172 bytes leftover after parsing attributes in process `syz.3.602'. [ 184.459261][ T6663] kernel write not supported for file /ppp (pid: 6663 comm: kworker/0:6) [ 185.202230][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 185.393584][ T7686] loop4: detected capacity change from 0 to 1024 [ 185.427413][ T7689] fuse: Bad value for 'user_id' [ 185.442338][ T7686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.500150][ T7686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.996438][ T7701] 9pnet_fd: Insufficient options for proto=fd [ 186.337999][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.575966][ T7725] loop3: detected capacity change from 0 to 1024 [ 187.583922][ T7725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.626365][ T7725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.738794][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.311968][ T7756] netlink: 104 bytes leftover after parsing attributes in process `syz.3.641'. [ 189.743093][ T7763] fuse: Bad value for 'user_id' [ 189.769997][ T7762] loop4: detected capacity change from 0 to 512 [ 189.860640][ T7762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.957332][ T7762] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.258880][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.999948][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 191.129960][ T7781] loop1: detected capacity change from 0 to 164 [ 191.439359][ T7790] 9pnet_fd: Insufficient options for proto=fd [ 192.406836][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 192.787261][ T7821] loop4: detected capacity change from 0 to 512 [ 192.813526][ T7821] EXT4-fs: Ignoring removed orlov option [ 192.911713][ T7821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.951838][ T7830] netlink: 348 bytes leftover after parsing attributes in process `syz.0.671'. [ 193.008310][ T7821] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.108463][ T7836] 9pnet_fd: Insufficient options for proto=fd [ 193.249692][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.363760][ T7842] loop1: detected capacity change from 0 to 1024 [ 193.380306][ T7842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.472449][ T7842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.628339][ T7854] fuse: Bad value for 'user_id' [ 194.072804][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 194.369357][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.392072][ T7864] loop4: detected capacity change from 0 to 1024 [ 194.484284][ T7864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.521634][ T7864] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.570261][ T7864] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.615655][ T7872] 9pnet_fd: Insufficient options for proto=fd [ 194.617345][ T7864] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 194.637607][ T7864] EXT4-fs (loop4): This should not happen!! Data will be lost [ 194.637607][ T7864] [ 194.658772][ T7873] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.663771][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.681611][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.698660][ T7863] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.783304][ T7873] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.811992][ T7863] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.908912][ T7873] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.947722][ T7863] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.975179][ T7873] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 195.011060][ T7863] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 195.039395][ T7873] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.681: lblock 0 mapped to illegal pblock 0 (length 1) [ 195.155978][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 195.666722][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.754227][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 195.917930][ T7899] 9pnet_fd: Insufficient options for proto=fd [ 196.117553][ T7903] loop3: detected capacity change from 0 to 8192 [ 196.347282][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 196.725498][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 196.725509][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 196.737970][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 196.917234][ T7916] loop1: detected capacity change from 0 to 512 [ 197.001601][ T7918] 9pnet_fd: Insufficient options for proto=fd [ 197.048306][ T7916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.480092][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.669707][ T7937] support for cryptoloop has been removed. Use dm-crypt instead. [ 197.831656][ T7944] 9pnet_fd: Insufficient options for proto=fd [ 198.073888][ T7951] loop3: detected capacity change from 0 to 512 [ 198.122743][ T7951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.228378][ T7951] EXT4-fs error (device loop3): ext4_validate_block_bitmap:421: comm syz.3.715: bg 0: bad block bitmap checksum [ 198.290123][ T7951] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Filesystem failed CRC [ 198.436409][ T7961] loop1: detected capacity change from 0 to 512 [ 198.445915][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.554013][ T7961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.014152][ T7978] 9pnet_fd: Insufficient options for proto=fd [ 199.162827][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.436522][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.444172][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.818249][ T7976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.858965][ T7976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.449040][ T7976] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.458624][ T7976] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.469430][ T7976] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.478432][ T7976] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.745621][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 201.228609][ T8024] netlink: 348 bytes leftover after parsing attributes in process `syz.0.743'. [ 202.040889][ T8059] netlink: 348 bytes leftover after parsing attributes in process `syz.0.755'. [ 202.931754][ T8088] tipc: Started in network mode [ 202.941538][ T8088] tipc: Node identity e283d9889ccd, cluster identity 4711 [ 202.964190][ T8088] tipc: Enabled bearer , priority 0 [ 203.003468][ T8089] syzkaller0: entered promiscuous mode [ 203.021721][ T8089] syzkaller0: entered allmulticast mode [ 203.105296][ T8088] tipc: Resetting bearer [ 203.135702][ T8087] tipc: Resetting bearer [ 203.182564][ T8087] tipc: Disabling bearer [ 203.215907][ T8078] loop1: detected capacity change from 0 to 32768 [ 203.290340][ T8078] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.409788][ T8086] loop3: detected capacity change from 0 to 32768 [ 203.440305][ T8086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.765 (8086) [ 203.453528][ T8078] XFS (loop1): Ending clean mount [ 203.514225][ T8086] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.545847][ T8086] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 203.594176][ T8086] BTRFS info (device loop3): setting nodatasum [ 203.600455][ T8086] BTRFS info (device loop3): force zlib compression, level 3 [ 203.673617][ T8086] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 203.708816][ T8086] BTRFS info (device loop3): use lzo compression, level 0 [ 203.749208][ T8086] BTRFS info (device loop3): turning on flush-on-commit [ 203.780853][ T8086] BTRFS info (device loop3): enabling auto defrag [ 203.807873][ T8086] BTRFS info (device loop3): max_inline at 4096 [ 203.846190][ T8107] netlink: 348 bytes leftover after parsing attributes in process `syz.0.768'. [ 203.865558][ T8086] BTRFS info (device loop3): using free space tree [ 204.248849][ T8125] loop4: detected capacity change from 0 to 2048 [ 204.349170][ T8125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.751806][ T8086] BTRFS info (device loop3): enabling ssd optimizations [ 204.801653][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.568948][ T8139] fuse: Bad value for 'fd' [ 205.754701][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.023158][ T8149] loop1: detected capacity change from 0 to 64 [ 206.495783][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 206.613892][ T8152] loop3: detected capacity change from 0 to 4096 [ 206.727311][ T8152] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 206.893097][ T8152] syz.3.775 (8152) used greatest stack depth: 20432 bytes left [ 207.949311][ T8173] loop1: detected capacity change from 0 to 512 [ 207.992957][ T8173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.095585][ T8173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.113446][ T8173] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.509794][ T8182] loop4: detected capacity change from 0 to 4096 [ 208.677198][ T8178] loop3: detected capacity change from 0 to 32768 [ 208.781644][ T8178] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.863542][ T8173] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 209.056388][ T8178] XFS (loop3): Ending clean mount [ 209.108711][ T8178] XFS (loop3): Quotacheck needed: Please wait. [ 209.222080][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.247034][ T8178] XFS (loop3): Quotacheck: Done. [ 209.256811][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.789'. [ 209.459925][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.906074][ T8215] netlink: 348 bytes leftover after parsing attributes in process `syz.0.796'. [ 211.018685][ T8228] loop3: detected capacity change from 0 to 512 [ 212.341714][ T8251] netlink: 348 bytes leftover after parsing attributes in process `syz.4.808'. [ 212.729626][ T8254] loop3: detected capacity change from 0 to 32768 [ 212.799601][ T8254] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.809 (8254) [ 212.845167][ T8254] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 212.855692][ T8254] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 212.864558][ T8254] BTRFS info (device loop3): force zlib compression, level 3 [ 212.872223][ T8254] BTRFS info (device loop3): force clearing of disk cache [ 212.880132][ T8254] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 212.889708][ T8254] BTRFS info (device loop3): use zstd compression, level 3 [ 212.897043][ T8254] BTRFS info (device loop3): using free space tree [ 213.417993][ T8254] BTRFS info (device loop3): enabling ssd optimizations [ 213.425117][ T8254] BTRFS info (device loop3): auto enabling async discard [ 213.467633][ T8254] BTRFS info (device loop3): rebuilding free space tree [ 213.970771][ T8276] fs-verity: sha512 using implementation "sha512-avx2" [ 214.037926][ T8276] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 215.097934][ T8249] loop1: detected capacity change from 0 to 32768 [ 215.115552][ T5775] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 215.181988][ T8249] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.807 (8249) [ 216.304422][ T8305] fuse: Bad value for 'fd' [ 216.872754][ T8309] netlink: 'syz.1.821': attribute type 8 has an invalid length. [ 216.890217][ T8313] netlink: 'syz.4.822': attribute type 10 has an invalid length. [ 216.901083][ T8313] syz_tun: entered promiscuous mode [ 216.926586][ T8313] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.810979][ T8366] bridge0: port 3(syz_tun) entered blocking state [ 218.822490][ T8366] bridge0: port 3(syz_tun) entered disabled state [ 218.835595][ T8366] syz_tun: entered allmulticast mode [ 218.848517][ T8366] syz_tun: entered promiscuous mode [ 218.858221][ T8366] bridge0: port 3(syz_tun) entered blocking state [ 218.865327][ T8366] bridge0: port 3(syz_tun) entered forwarding state [ 219.111735][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 219.699070][ T8385] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 219.755916][ T8385] loop4: detected capacity change from 0 to 128 [ 220.848284][ T8384] loop3: detected capacity change from 0 to 8192 [ 220.971302][ T8384] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 221.004597][ T8393] netlink: 136 bytes leftover after parsing attributes in process `syz.0.856'. [ 221.042603][ T8384] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 221.074483][ T8393] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 221.111264][ T8384] REISERFS (device loop3): using ordered data mode [ 221.149025][ T8384] reiserfs: using flush barriers [ 221.182357][ T8384] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.318884][ T8384] REISERFS (device loop3): checking transaction log (loop3) [ 222.619953][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 222.729404][ T8384] REISERFS (device loop3): Using tea hash to sort names [ 222.740193][ T8384] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 222.821218][ T8414] netlink: 188 bytes leftover after parsing attributes in process `syz.4.861'. [ 223.796498][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'. [ 224.084552][ T8437] loop4: detected capacity change from 0 to 64 [ 224.166141][ T8436] netlink: 'syz.1.870': attribute type 10 has an invalid length. [ 224.300160][ T8436] bridge0: port 3(syz_tun) entered disabled state [ 224.310934][ T8436] syz_tun: left allmulticast mode [ 224.325635][ T8436] bridge0: port 3(syz_tun) entered disabled state [ 224.466346][ T8437] overlayfs: upper fs needs to support d_type. [ 224.564835][ T8436] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 224.610134][ T8437] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 224.651959][ T8437] overlayfs: failed to set xattr on upper [ 224.670557][ T8437] overlayfs: ...falling back to redirect_dir=nofollow. [ 224.701993][ T8437] overlayfs: ...falling back to index=off. [ 224.735573][ T8437] overlayfs: ...falling back to uuid=null. [ 225.043366][ T6393] Trying to free block not in datazone [ 225.071265][ T6393] Trying to free block not in datazone [ 225.094519][ T6393] Trying to free block not in datazone [ 225.413327][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 225.961777][ T8465] netlink: 'syz.0.880': attribute type 10 has an invalid length. [ 225.970533][ T8465] batman_adv: batadv0: Adding interface: netdevsim0 [ 225.991804][ T8465] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.023414][ T8451] loop1: detected capacity change from 0 to 32768 [ 226.038819][ T8451] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.876 (8451) [ 226.062598][ T8465] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 226.088475][ T8469] loop3: detected capacity change from 0 to 512 [ 226.095089][ T8451] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 226.105482][ T8451] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 226.171491][ T8451] BTRFS info (device loop1): using free space tree [ 226.608826][ T8451] BTRFS info (device loop1): enabling ssd optimizations [ 226.625959][ T8488] loop4: detected capacity change from 0 to 32768 [ 226.639632][ T8488] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.883 (8488) [ 226.659649][ T8488] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 226.662183][ T8451] BTRFS info (device loop1): auto enabling async discard [ 226.669925][ T8488] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 226.685707][ T8488] BTRFS info (device loop4): force zlib compression, level 3 [ 226.693274][ T8488] BTRFS info (device loop4): force clearing of disk cache [ 226.700531][ T8488] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 226.710756][ T8488] BTRFS info (device loop4): use zstd compression, level 3 [ 226.718219][ T8488] BTRFS info (device loop4): using free space tree [ 226.819113][ T8495] netlink: 'syz.3.885': attribute type 10 has an invalid length. [ 226.982982][ T8488] BTRFS info (device loop4): enabling ssd optimizations [ 226.990012][ T8488] BTRFS info (device loop4): auto enabling async discard [ 226.998471][ T8488] BTRFS info (device loop4): rebuilding free space tree [ 227.493865][ T8516] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 228.038224][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'. [ 228.066470][ T5768] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 228.083119][ T6393] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 228.307484][ T5769] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop4 scanned by udevd (5769) [ 228.581758][ T8530] syzkaller0: entered promiscuous mode [ 228.611635][ T8530] syzkaller0: entered allmulticast mode [ 229.865812][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 230.377164][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 231.192077][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 231.502114][ T8572] loop4: detected capacity change from 0 to 32768 [ 232.000972][ T8577] 9pnet_fd: Insufficient options for proto=fd [ 233.530112][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 233.673559][ T8618] loop4: detected capacity change from 0 to 8 [ 233.698501][ T8618] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 233.730079][ T6277] udevd[6277]: incorrect cramfs checksum on /dev/loop4 [ 233.811935][ T6277] udevd[6277]: incorrect cramfs checksum on /dev/loop4 [ 233.965524][ T8622] fuse: Invalid rootmode [ 236.648254][ T8645] netlink: 56 bytes leftover after parsing attributes in process `syz.1.933'. [ 236.778811][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.934'. [ 237.395512][ T8659] capability: warning: `syz.3.939' uses deprecated v2 capabilities in a way that may be insecure [ 237.686033][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 237.790080][ T8669] loop4: detected capacity change from 0 to 64 [ 240.791175][ T8685] fuse: Invalid rootmode [ 248.538144][ T8765] netlink: 44 bytes leftover after parsing attributes in process `syz.0.971'. [ 250.589784][ T8794] loop4: detected capacity change from 0 to 32768 [ 250.604412][ T8794] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.980 (8794) [ 250.646198][ T8794] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 250.671952][ T8794] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 250.694980][ T8794] BTRFS info (device loop4): turning on sync discard [ 250.709353][ T8794] BTRFS info (device loop4): turning on async discard [ 250.736505][ T8794] BTRFS info (device loop4): using free space tree [ 250.857265][ T8794] BTRFS info (device loop4): enabling ssd optimizations [ 251.507122][ T6393] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 251.577391][ T8838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 251.716680][ T8840] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 254.711542][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 255.163315][ T8889] loop4: detected capacity change from 0 to 1024 [ 255.174991][ T8889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.199927][ T8889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.567351][ T8907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'. [ 255.856253][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'. [ 256.095289][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.101911][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.316265][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.327949][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1022'. [ 256.815451][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1025'. [ 257.005483][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 257.328537][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 258.333244][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 258.718814][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 259.370138][ T8989] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1044'. [ 259.498772][ T8995] loop4: detected capacity change from 0 to 128 [ 259.587117][ T8995] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 259.615761][ T8995] hpfs: filesystem error: improperly stopped [ 259.627246][ T8995] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 259.635827][ T8995] hpfs: You really don't want any checks? You are crazy... [ 259.648487][ T8995] hpfs: hpfs_map_sector(): read error [ 259.656200][ T8995] hpfs: code page support is disabled [ 259.665918][ T8995] hpfs: hpfs_map_4sectors(): unaligned read [ 259.677264][ T8995] hpfs: hpfs_map_4sectors(): unaligned read [ 259.690584][ T8995] hpfs: filesystem error: unable to find root dir [ 259.923711][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 260.496277][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'. [ 261.196457][ T9023] loop4: detected capacity change from 0 to 4096 [ 261.647509][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 263.654539][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 264.190313][ T9079] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 264.949056][ T9089] loop4: detected capacity change from 0 to 128 [ 265.031088][ T9089] bio_check_eod: 2 callbacks suppressed [ 265.031109][ T9089] syz.4.1084: attempt to access beyond end of device [ 265.031109][ T9089] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 265.311989][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'. [ 266.581725][ T9115] netlink: 'syz.1.1096': attribute type 10 has an invalid length. [ 268.945936][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 270.445146][ T9142] fuse: Unknown parameter 'user00000000000000000000' [ 270.966368][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 272.740110][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 274.364187][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1125'. [ 275.744640][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 275.855020][ T9211] fuse: Unknown parameter 'user00000000000000000000' [ 276.557973][ T9224] netlink: 'syz.0.1137': attribute type 10 has an invalid length. [ 276.767841][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 278.114898][ T9250] netlink: 'syz.1.1148': attribute type 10 has an invalid length. [ 278.953722][ T9262] loop4: detected capacity change from 0 to 2048 [ 279.059034][ T9262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.258179][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 281.614210][ T9294] fuse: Unknown parameter 'user00000000000000000000' [ 282.707165][ T9308] loop4: detected capacity change from 0 to 1024 [ 282.732575][ T9308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.768334][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'. [ 282.786369][ T9308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.864783][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.915470][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 290.137046][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1189'. [ 294.154956][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1202'. [ 294.161967][ T9454] fuse: Unknown parameter 'user_i00000000000000000000' [ 303.318873][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1214'. [ 303.548206][ T9497] fuse: Unknown parameter 'user_i00000000000000000000' [ 304.103138][ T9490] loop4: detected capacity change from 0 to 32768 [ 304.159936][ T9490] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.1213 (9490) [ 304.663638][ T9490] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 304.724139][ T9490] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 304.791695][ T9490] BTRFS info (device loop4): using free space tree [ 305.025923][ T9490] BTRFS info (device loop4): enabling ssd optimizations [ 305.059644][ T9490] BTRFS info (device loop4): auto enabling async discard [ 305.330642][ T6393] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 305.968391][ T9531] 9pnet_fd: Insufficient options for proto=fd [ 306.287931][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 306.306596][ T9486] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 10 /dev/loop4 scanned by udevd (9486) [ 307.854413][ T9550] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1229'. [ 308.840049][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 308.948572][ T9575] fuse: Unknown parameter 'user_id00000000000000000000' [ 313.502543][ T9626] loop4: detected capacity change from 0 to 256 [ 314.588681][ T9638] netlink: 'syz.1.1254': attribute type 10 has an invalid length. [ 314.601219][ T9638] team0: Device vxcan1 is of different type [ 318.114754][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.128410][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.776561][ T9694] loop4: detected capacity change from 0 to 1024 [ 320.805219][ T9694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.903342][ T9694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.636076][ T9710] fuse: Unknown parameter 'user_id00000000000000000000' [ 321.972906][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.874158][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 324.900398][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 329.321655][ T9772] fuse: Bad value for 'fd' [ 329.972665][ T9760] loop4: detected capacity change from 0 to 32768 [ 330.011164][ T9760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1298 (9760) [ 333.375058][ T9815] loop4: detected capacity change from 0 to 1764 [ 333.404995][ T9815] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 333.673549][ T9820] loop4: detected capacity change from 0 to 1024 [ 333.682150][ T9820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.721540][ T9820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.902517][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.164239][ T9835] fuse: Bad value for 'fd' [ 337.266296][ T9854] loop4: detected capacity change from 0 to 32768 [ 337.352808][ T9854] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 337.466615][ T9854] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 337.606840][ T9854] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 337.637146][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 337.690896][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 338.496192][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 805ms [ 338.531108][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 338.568101][ T9854] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 339.005015][ T9854] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 339.029891][ T9854] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 339.029891][ T9854] inode = 12 2341 [ 339.029891][ T9854] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 339.057291][ T9854] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 339.070393][ T9854] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9854 [syz.4.1328] __gfs2_lookup+0xad/0x2a0 [ 339.083426][ T9854] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 339.094065][ T9854] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 339.102054][ T9854] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 339.110997][ T9854] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 339.121173][ T9854] gfs2: fsid=syz:syz.0: File system withdrawn [ 339.129694][ T9854] CPU: 1 PID: 9854 Comm: syz.4.1328 Not tainted syzkaller #0 [ 339.137262][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.147395][ T9854] Call Trace: [ 339.150719][ T9854] [ 339.153689][ T9854] dump_stack_lvl+0x18c/0x250 [ 339.158428][ T9854] ? kobject_uevent_env+0x363/0x8b0 [ 339.163701][ T9854] ? show_regs_print_info+0x20/0x20 [ 339.168977][ T9854] ? load_image+0x420/0x420 [ 339.173548][ T9854] ? kobject_uevent_env+0x363/0x8b0 [ 339.178822][ T9854] gfs2_withdraw+0xb24/0x13d0 [ 339.183756][ T9854] ? gfs2_lm+0x240/0x240 [ 339.188055][ T9854] ? load_image+0x420/0x420 [ 339.192713][ T9854] ? gfs2_consist_inode_i+0xf5/0x110 [ 339.198058][ T9854] gfs2_dirent_scan+0x538/0x670 [ 339.203131][ T9854] ? gfs2_dirent_search+0x7f0/0x7f0 [ 339.208388][ T9854] gfs2_dirent_search+0x2ed/0x7f0 [ 339.213556][ T9854] ? gfs2_dirent_search+0x7f0/0x7f0 [ 339.218812][ T9854] ? gfs2_permission+0x384/0x460 [ 339.223806][ T9854] ? __might_sleep+0xe0/0xe0 [ 339.228448][ T9854] ? gfs2_dir_search+0x220/0x220 [ 339.233431][ T9854] ? gfs2_lookupi+0x640/0x640 [ 339.238159][ T9854] ? do_raw_spin_lock+0x11f/0x2c0 [ 339.243288][ T9854] gfs2_dir_search+0x4d/0x220 [ 339.248048][ T9854] gfs2_lookupi+0x45c/0x640 [ 339.252621][ T9854] ? gfs2_lookup_meta+0x180/0x180 [ 339.257703][ T9854] ? __gfs2_lookup+0xad/0x2a0 [ 339.262523][ T9854] __gfs2_lookup+0xad/0x2a0 [ 339.267069][ T9854] ? gfs2_atomic_open+0x220/0x220 [ 339.272239][ T9854] ? do_raw_spin_unlock+0x121/0x230 [ 339.277637][ T9854] ? _raw_spin_unlock+0x28/0x40 [ 339.282532][ T9854] ? d_alloc+0x1eb/0x250 [ 339.286829][ T9854] lookup_one_qstr_excl+0x112/0x250 [ 339.292143][ T9854] filename_create+0x23e/0x480 [ 339.296962][ T9854] ? kern_path_create+0x50/0x50 [ 339.302236][ T9854] ? __virt_addr_valid+0x18c/0x540 [ 339.307486][ T9854] ? __virt_addr_valid+0x469/0x540 [ 339.312654][ T9854] do_mkdirat+0xa9/0x450 [ 339.316936][ T9854] ? vfs_mkdir+0x440/0x440 [ 339.321419][ T9854] __x64_sys_mkdirat+0x89/0xa0 [ 339.326232][ T9854] do_syscall_64+0x55/0xa0 [ 339.330682][ T9854] ? clear_bhb_loop+0x40/0x90 [ 339.335400][ T9854] ? clear_bhb_loop+0x40/0x90 [ 339.340135][ T9854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.346069][ T9854] RIP: 0033:0x7f34c319c819 [ 339.350901][ T9854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.370737][ T9854] RSP: 002b:00007f34c401a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 339.379228][ T9854] RAX: ffffffffffffffda RBX: 00007f34c3415fa0 RCX: 00007f34c319c819 [ 339.387248][ T9854] RDX: 000000000000011f RSI: 0000200000000100 RDI: ffffffffffffff9c [ 339.395328][ T9854] RBP: 00007f34c3232c91 R08: 0000000000000000 R09: 0000000000000000 [ 339.403694][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.411706][ T9854] R13: 00007f34c3416038 R14: 00007f34c3415fa0 R15: 00007fffe46d9248 [ 339.419748][ T9854] [ 339.868053][ T9897] fuse: Bad value for 'fd' [ 340.013965][ T9900] loop4: detected capacity change from 0 to 1024 [ 340.034080][ T9900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.099214][ T9900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.197990][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.199884][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 341.399951][ T9918] loop4: detected capacity change from 0 to 128 [ 341.448296][ T9918] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 341.536150][ T6393] sysv_free_block: flc_count > flc_size [ 341.547731][ T6393] sysv_free_block: flc_count > flc_size [ 341.557080][ T6393] sysv_free_block: flc_count > flc_size [ 341.590738][ T6393] sysv_free_block: flc_count > flc_size [ 341.608264][ T6393] sysv_free_block: flc_count > flc_size [ 341.631505][ T6393] sysv_free_block: flc_count > flc_size [ 341.645001][ T6393] sysv_free_block: flc_count > flc_size [ 341.660849][ T6393] sysv_free_block: flc_count > flc_size [ 341.670970][ T6393] sysv_free_block: flc_count > flc_size [ 341.688700][ T6393] sysv_free_block: flc_count > flc_size [ 341.705342][ T6393] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 343.737969][ T9947] loop4: detected capacity change from 0 to 1024 [ 343.757912][ T9947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.849833][ T9947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.990200][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.601259][ T9990] fuse: Unknown parameter '0x0000000000000007' [ 348.095083][ T9989] loop4: detected capacity change from 0 to 32768 [ 348.180474][ T9989] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 348.275233][T10007] bridge1: entered promiscuous mode [ 348.294585][T10007] bridge1: entered allmulticast mode [ 348.305447][ T9989] XFS (loop4): Ending clean mount [ 348.317411][T10007] team0: Port device bridge1 added [ 348.583103][ T6393] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 353.661658][T10062] fuse: Unknown parameter '0x0000000000000007' [ 358.096577][T10129] fuse: Unknown parameter '0x0000000000000007' [ 362.683058][T10175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1420'. [ 364.815893][T10198] syzkaller1: entered promiscuous mode [ 364.825318][T10198] syzkaller1: entered allmulticast mode [ 366.739781][T10210] loop4: detected capacity change from 0 to 32768 [ 366.767985][T10210] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.1429 (10210) [ 366.828406][T10210] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 366.847241][T10210] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 366.857347][T10210] BTRFS info (device loop4): using free space tree [ 366.997330][T10210] BTRFS info (device loop4): enabling ssd optimizations [ 367.008967][T10210] BTRFS info (device loop4): auto enabling async discard [ 367.239799][ T6393] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 378.972331][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.978948][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.219926][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1475'. [ 385.071884][T10415] fuse: Unknown parameter 'fd0x0000000000000007' [ 386.353295][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1488'. [ 388.059718][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 390.587538][T10492] loop4: detected capacity change from 0 to 16 [ 390.682292][T10492] erofs: (device loop4): mounted with root inode @ nid 36. [ 390.773752][T10492] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 391.709374][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 392.627350][T10516] 9pnet_fd: Insufficient options for proto=fd [ 393.623258][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 394.425656][T10548] loop4: detected capacity change from 0 to 32768 [ 394.451802][T10548] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.1521 (10548) [ 394.508711][T10548] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 394.537741][T10548] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 394.561598][T10548] BTRFS info (device loop4): using free space tree [ 395.542670][T10548] BTRFS info (device loop4): enabling ssd optimizations [ 395.571414][T10548] BTRFS info (device loop4): auto enabling async discard [ 396.068066][ T6393] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 397.529715][T10480] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 10 /dev/loop4 scanned by udevd (10480) [ 397.755428][T10604] netlink: 'syz.4.1534': attribute type 39 has an invalid length. [ 397.872146][T10604] bond0: (slave syz_tun): Releasing backup interface [ 398.212920][T10609] bond0: (slave syz_tun): Releasing backup interface [ 398.230550][T10609] bridge_slave_0: left allmulticast mode [ 398.258747][T10609] bridge_slave_0: left promiscuous mode [ 398.285919][T10609] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.312359][T10609] bridge_slave_1: left allmulticast mode [ 398.321427][T10609] bridge_slave_1: left promiscuous mode [ 398.328044][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.371091][T10609] bond0: (slave bond_slave_0): Releasing backup interface [ 398.383781][T10609] bond0: (slave bond_slave_1): Releasing backup interface [ 398.432960][T10609] team0: Port device team_slave_0 removed [ 398.464351][T10609] team0: Port device team_slave_1 removed [ 398.482070][T10609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.505998][T10609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.542287][T10609] batman_adv: batadv0: Removing interface: netdevsim0 [ 398.571032][T10612] team0: Mode changed to "activebackup" [ 400.077958][T10620] loop4: detected capacity change from 0 to 32768 [ 400.111610][T10620] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 400.169968][T10620] XFS (loop4): Ending clean mount [ 400.386299][ T6393] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 401.970556][T10661] bond0: (slave syz_tun): Releasing backup interface [ 402.836513][T10661] bridge_slave_0: left allmulticast mode [ 402.863313][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1553'. [ 402.877049][T10661] bridge_slave_0: left promiscuous mode [ 402.892768][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.948456][T10661] bridge_slave_1: left allmulticast mode [ 402.960064][T10661] bridge_slave_1: left promiscuous mode [ 402.969541][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.990087][T10661] bond0: (slave bond_slave_0): Releasing backup interface [ 403.024575][T10661] bond0: (slave bond_slave_1): Releasing backup interface [ 403.133268][T10661] team0: Port device team_slave_0 removed [ 403.246409][T10661] team0: Port device team_slave_1 removed [ 403.346012][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.444475][T10661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.478193][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.485797][T10661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.595030][T10661] team0: Port device bridge1 removed [ 403.624815][T10665] team0: Mode changed to "activebackup" [ 408.650163][T10745] loop4: detected capacity change from 0 to 256 [ 410.303419][T10769] loop4: detected capacity change from 0 to 2048 [ 410.922461][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 411.037062][T10773] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.060640][T10794] warning: `syz.0.1592' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 417.895461][T10813] loop4: detected capacity change from 0 to 32768 [ 417.945996][T10813] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 417.971582][T10813] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 418.121831][T10813] XFS (loop4): Ending clean mount [ 418.154274][T10813] XFS (loop4): Quotacheck needed: Please wait. [ 418.316884][T10813] XFS (loop4): Quotacheck: Done. [ 418.562763][ T6393] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 423.547912][T10865] loop4: detected capacity change from 0 to 2048 [ 423.613111][T10865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 423.920081][T10865] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #12: comm syz.4.1614: corrupted in-inode xattr: e_value size too large [ 424.034352][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 424.151196][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 424.187848][T10882] loop4: detected capacity change from 0 to 1024 [ 424.204726][T10882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.248611][T10882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.450851][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.417572][T10907] loop4: detected capacity change from 0 to 32768 [ 428.453329][T10907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1627 (10907) [ 428.490715][T10907] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 428.518345][T10907] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 428.531549][T10907] BTRFS info (device loop4): setting nodatasum [ 428.537852][T10907] BTRFS info (device loop4): force zlib compression, level 3 [ 428.551390][T10907] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 428.560790][T10907] BTRFS info (device loop4): use lzo compression, level 0 [ 428.576720][T10907] BTRFS info (device loop4): turning on flush-on-commit [ 428.591436][T10907] BTRFS info (device loop4): enabling auto defrag [ 428.598000][T10907] BTRFS info (device loop4): max_inline at 4096 [ 428.621517][T10907] BTRFS info (device loop4): using free space tree [ 428.828901][T10907] BTRFS info (device loop4): enabling ssd optimizations [ 429.364649][ T6393] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 429.664622][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 431.779681][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 435.668278][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'. [ 437.232320][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1669'. [ 438.127688][T11056] loop4: detected capacity change from 0 to 1024 [ 438.142388][T11056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.318397][T11056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.327475][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1682'. [ 439.351445][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.593951][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1692'. [ 439.710115][T11093] capability: warning: `syz.4.1694' uses 32-bit capabilities (legacy support in use) [ 439.908646][T11096] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1695'. [ 440.415636][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.428639][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.295975][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 442.627858][T11127] loop4: detected capacity change from 0 to 1024 [ 442.771484][T11127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.232899][T11127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.088483][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 444.357359][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.550404][T11151] 9pnet_fd: Insufficient options for proto=fd [ 446.640228][T11185] loop4: detected capacity change from 0 to 32768 [ 446.746558][T11185] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 446.879683][T11185] XFS (loop4): Ending clean mount [ 446.961536][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 447.193499][ T6393] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 452.960293][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 454.485668][T11293] loop4: detected capacity change from 0 to 256 [ 454.601856][T11293] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.772983][T11293] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 454.826684][T11298] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1772'. [ 454.949722][T11293] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 455.656574][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 456.124041][T11323] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1781'. [ 458.614632][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 460.339911][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 462.681577][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1808'. [ 462.895515][T11410] loop4: detected capacity change from 0 to 128 [ 462.972765][T11410] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 463.021545][T11410] hpfs: filesystem error: improperly stopped [ 463.027630][T11410] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 463.057117][T11410] hpfs: You really don't want any checks? You are crazy... [ 463.072860][T11410] hpfs: hpfs_map_sector(): read error [ 463.078423][T11410] hpfs: code page support is disabled [ 463.089822][T11410] hpfs: hpfs_map_4sectors(): unaligned read [ 463.106750][T11410] hpfs: hpfs_map_4sectors(): unaligned read [ 463.115503][T11410] hpfs: filesystem error: unable to find root dir [ 465.321493][T11432] hpfs: hpfs_map_4sectors(): unaligned read [ 465.885143][T11445] loop4: detected capacity change from 0 to 256 [ 465.897363][T11445] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 465.919343][T11445] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 465.933799][T11445] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 466.272205][T11451] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1826'. [ 468.925376][T11465] loop4: detected capacity change from 0 to 32768 [ 468.955196][T11465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1831 (11465) [ 469.331635][T11465] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 469.361425][T11465] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 469.370224][T11465] BTRFS info (device loop4): setting nodatasum [ 469.431751][T11465] BTRFS info (device loop4): force zlib compression, level 3 [ 469.453755][T11465] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 469.478887][T11465] BTRFS info (device loop4): use lzo compression, level 0 [ 469.497717][T11465] BTRFS info (device loop4): turning on flush-on-commit [ 469.531708][T11465] BTRFS info (device loop4): enabling auto defrag [ 469.551660][T11465] BTRFS info (device loop4): max_inline at 4096 [ 469.557987][T11465] BTRFS info (device loop4): using free space tree [ 469.666307][T11465] BTRFS info (device loop4): enabling ssd optimizations [ 470.453279][T11506] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1839'. [ 471.560778][ T6393] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.647115][T11528] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 472.052672][T11536] loop4: detected capacity change from 0 to 2048 [ 472.074052][T11536] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 472.098987][T11536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.787396][T11617] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1881'. [ 480.400861][T11645] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1890'. [ 482.111459][ T5771] Bluetooth: hci1: hcon ffff88802fa6e000 sent 1 < count 3 [ 482.118813][ T5771] Bluetooth: hci1: hcon ffff88802fa6e000 sent 0 < count 1948 [ 483.053965][T11683] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1904'. [ 484.387172][T11701] loop4: detected capacity change from 0 to 1024 [ 484.408498][T11707] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 484.589397][ T145] hfsplus: b-tree write err: -5, ino 25 [ 484.598285][ T145] hfsplus: b-tree write err: -5, ino 4 [ 484.608550][ T145] hfsplus: b-tree write err: -5, ino 2 [ 484.719254][T11717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1916'. [ 485.017643][T11722] loop4: detected capacity change from 0 to 2048 [ 485.055186][T11722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 485.175153][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 485.409015][T11735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.237315][T11743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1926'. [ 487.221727][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1938'. [ 488.675168][ T5771] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 489.569676][ T5771] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 491.209512][T11837] binder: 11836:11837 ioctl 4018620d 0 returned -22 [ 491.312403][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1962'. [ 491.569910][T11852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1973'. [ 491.606339][T11846] loop4: detected capacity change from 0 to 4096 [ 491.660779][T11846] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 492.040294][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 493.752281][T11879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1984'. [ 495.906686][T11893] loop4: detected capacity change from 0 to 32768 [ 495.972365][T11893] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 496.127878][T11913] tipc: Enabling of bearer rejected, failed to enable media [ 496.287308][T11893] XFS (loop4): Ending clean mount [ 496.349314][T11893] XFS (loop4): Quotacheck needed: Please wait. [ 496.540992][T11893] XFS (loop4): Quotacheck: Done. [ 496.633867][ T6393] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 498.735358][T11972] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2015'. [ 499.744983][T11996] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2025'. [ 501.361056][T12037] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2036'. [ 501.846782][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.854451][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.950736][T12059] could not allocate digest TFM handle sm3-generic [ 502.982027][T12066] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2047'. [ 505.166358][T12077] loop4: detected capacity change from 0 to 32768 [ 505.191905][T12077] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2051 (12077) [ 505.226699][T12077] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 505.263825][T12077] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 505.311441][T12077] BTRFS info (device loop4): using free space tree [ 505.499135][T12077] BTRFS info (device loop4): enabling ssd optimizations [ 505.533685][T12077] BTRFS info (device loop4): auto enabling async discard [ 506.089041][ T1140] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 506.144181][T12108] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2056'. [ 507.898204][T12135] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2066'. [ 507.987798][ T6393] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 510.288813][T12152] loop4: detected capacity change from 0 to 32768 [ 510.321182][T12152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2063 (12152) [ 511.161833][T12152] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 511.203765][T12152] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 511.232864][T12152] BTRFS info (device loop4): setting nodatasum [ 511.239132][T12152] BTRFS info (device loop4): force zlib compression, level 3 [ 511.253096][T12177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2077'. [ 511.266746][T12152] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 511.305449][T12152] BTRFS info (device loop4): use lzo compression, level 0 [ 511.321578][T12152] BTRFS info (device loop4): turning on flush-on-commit [ 511.356323][T12152] BTRFS info (device loop4): enabling auto defrag [ 511.386886][T12152] BTRFS info (device loop4): max_inline at 4096 [ 511.405020][T12152] BTRFS info (device loop4): using free space tree [ 511.471733][T12152] BTRFS info (device loop4): enabling ssd optimizations [ 511.633504][ T6393] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 512.062029][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2085'. [ 512.385322][T12212] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 512.997920][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 513.065705][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 513.109875][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 513.368572][T12222] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2090'. [ 513.402321][T12224] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 513.423463][T12224] netlink: 'syz.3.2091': attribute type 10 has an invalid length. [ 513.892225][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 514.874532][T12237] loop4: detected capacity change from 0 to 32768 [ 514.923105][T12237] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 515.091381][T12237] XFS (loop4): Ending clean mount [ 515.123774][T12237] XFS (loop4): Quotacheck needed: Please wait. [ 515.200432][T12237] XFS (loop4): Quotacheck: Done. [ 515.297778][T12259] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2103'. [ 515.436325][ T6393] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 515.860135][T12268] loop4: detected capacity change from 0 to 1024 [ 515.888574][T12268] EXT4-fs: Ignoring removed mblk_io_submit option [ 515.938791][T12268] EXT4-fs: Ignoring removed oldalloc option [ 516.006222][T12268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 516.066033][T12268] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.158743][T12268] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.2106: Freeing blocks not in datazone - block = 0, count = 16 [ 516.193592][T12268] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2106: bg 0: block 112: padding at end of block bitmap is not set [ 516.246902][T12268] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 516.614256][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 516.643837][T12284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2113'. [ 518.089046][T12290] loop4: detected capacity change from 0 to 32768 [ 518.144600][T12290] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.366006][T12290] XFS (loop4): Ending clean mount [ 518.396791][T12290] XFS (loop4): Quotacheck needed: Please wait. [ 518.509376][T12290] XFS (loop4): Quotacheck: Done. [ 518.699192][ T6393] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 520.560499][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 525.834280][T12361] loop4: detected capacity change from 0 to 1024 [ 525.845928][T12361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.900377][T12361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.705008][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.182979][T12389] loop4: detected capacity change from 0 to 32768 [ 528.311106][T12389] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 528.357585][T12389] VFS: Lookup of '' in ocfs2 loop4 would have caused loop [ 528.535994][ T6393] ocfs2: Unmounting device (7,4) on (node local) [ 528.578939][ T6393] VFS: Busy inodes after unmount of loop4 (ocfs2) [ 528.579134][ T6393] ------------[ cut here ]------------ [ 528.591762][ T6393] kernel BUG at fs/super.c:697! [ 528.641959][ T6393] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 528.648119][ T6393] CPU: 0 PID: 6393 Comm: syz-executor Not tainted syzkaller #0 [ 528.655676][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 528.666180][ T6393] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 528.672353][ T6393] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ac 59 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 20 ad d7 8a 48 89 de e8 93 cc 8b 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 528.692062][ T6393] RSP: 0018:ffffc90003ba7d20 EFLAGS: 00010246 [ 528.698141][ T6393] RAX: 000000000000002f RBX: ffff88802a4a8660 RCX: 4f4953bd86de3000 [ 528.706218][ T6393] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 528.714219][ T6393] RBP: 1ffff110054950f2 R08: ffffc90003ba7a27 R09: 1ffff92000774f44 [ 528.722208][ T6393] R10: dffffc0000000000 R11: fffff52000774f45 R12: 0000000000000000 [ 528.730195][ T6393] R13: dffffc0000000000 R14: ffffffff8d635000 R15: ffff88802a4a8790 [ 528.738178][ T6393] FS: 000055556982f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 528.747115][ T6393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.753819][ T6393] CR2: 00007f91373456b8 CR3: 0000000063eb5000 CR4: 00000000003506f0 [ 528.761829][ T6393] Call Trace: [ 528.765118][ T6393] [ 528.768150][ T6393] kill_block_super+0x44/0x90 [ 528.772842][ T6393] deactivate_locked_super+0x97/0x100 [ 528.778221][ T6393] cleanup_mnt+0x43b/0x4d0 [ 528.782653][ T6393] task_work_run+0x1d4/0x260 [ 528.787267][ T6393] ? task_work_cancel+0x220/0x220 [ 528.792306][ T6393] ? exit_to_user_mode_loop+0x3b/0x110 [ 528.797782][ T6393] exit_to_user_mode_loop+0xe6/0x110 [ 528.803083][ T6393] exit_to_user_mode_prepare+0xee/0x180 [ 528.808640][ T6393] syscall_exit_to_user_mode+0x1a/0x50 [ 528.814109][ T6393] do_syscall_64+0x61/0xa0 [ 528.818537][ T6393] ? clear_bhb_loop+0x40/0x90 [ 528.823229][ T6393] ? clear_bhb_loop+0x40/0x90 [ 528.827927][ T6393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.833832][ T6393] RIP: 0033:0x7f34c319da57 [ 528.838257][ T6393] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 528.857959][ T6393] RSP: 002b:00007fffe46d84b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 528.866384][ T6393] RAX: 0000000000000000 RBX: 00007f34c3232048 RCX: 00007f34c319da57 [ 528.874362][ T6393] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe46d8570 [ 528.882341][ T6393] RBP: 00007fffe46d8570 R08: 00007fffe46d9570 R09: 00000000ffffffff [ 528.890328][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe46d9600 [ 528.898311][ T6393] R13: 00007f34c3232048 R14: 0000000000080fc6 R15: 00007fffe46d9640 [ 528.906302][ T6393] [ 528.909326][ T6393] Modules linked in: [ 528.924945][ T6393] ---[ end trace 0000000000000000 ]--- [ 528.930634][ T6393] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 528.939844][ T6393] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ac 59 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 20 ad d7 8a 48 89 de e8 93 cc 8b 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 528.970174][ T6393] RSP: 0018:ffffc90003ba7d20 EFLAGS: 00010246 [ 528.977352][ T6393] RAX: 000000000000002f RBX: ffff88802a4a8660 RCX: 4f4953bd86de3000 [ 528.985618][ T6393] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 528.996467][ T6393] RBP: 1ffff110054950f2 R08: ffffc90003ba7a27 R09: 1ffff92000774f44 [ 529.004589][ T6393] R10: dffffc0000000000 R11: fffff52000774f45 R12: 0000000000000000 [ 529.014184][ T6393] R13: dffffc0000000000 R14: ffffffff8d635000 R15: ffff88802a4a8790 [ 529.022405][ T6393] FS: 000055556982f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 529.032927][ T6393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.039551][ T6393] CR2: 000000110c2a1b82 CR3: 0000000063eb5000 CR4: 00000000003506f0 [ 529.063517][ T6393] Kernel panic - not syncing: Fatal exception [ 529.069856][ T6393] Kernel Offset: disabled [ 529.074190][ T6393] Rebooting in 86400 seconds..