last executing test programs: 15m58.063691809s ago: executing program 32 (id=251): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x4a, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0) 15m8.357501169s ago: executing program 33 (id=420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x734, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10000, 0x0) 14m23.086444185s ago: executing program 34 (id=555): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m4.97168737s ago: executing program 35 (id=835): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r1 = syz_io_uring_setup(0x2f67, &(0x7f0000000240)={0x0, 0x70ef, 0x10100, 0x0, 0x299}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_usb_disconnect(r0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 13m2.183577203s ago: executing program 36 (id=796): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000028501, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000300)) 12m43.253229877s ago: executing program 37 (id=896): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x0, r0}) 11m39.857728703s ago: executing program 38 (id=1086): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0xb54, &(0x7f0000000080)={0x0, 0x28ba1, 0x1000, 0x3, 0x1ad}) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 10m40.798195559s ago: executing program 39 (id=1270): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x82) 10m11.670990476s ago: executing program 40 (id=1377): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x7, 0x1, 0x5}) write$sndseq(r1, 0x0, 0x0) 9m22.683538113s ago: executing program 41 (id=1561): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 9m22.210637427s ago: executing program 42 (id=1564): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000000)) 9m22.150819637s ago: executing program 43 (id=1562): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) 9m21.839957878s ago: executing program 44 (id=1567): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 9m10.147394367s ago: executing program 45 (id=1587): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1000, 0x4, 0xfffc, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8m24.792521236s ago: executing program 5 (id=1678): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x41, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m22.60428745s ago: executing program 5 (id=1683): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m21.306798246s ago: executing program 5 (id=1688): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@abort}, {@data_err_ignore}, {@discard}, {@debug}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@lazytime}, {@nobh}]}, 0x1, 0x560, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) pipe2(&(0x7f0000000080), 0x0) 8m19.599242711s ago: executing program 5 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61e2, &(0x7f000000d7c0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 8m17.635691298s ago: executing program 5 (id=1698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 8m16.767493827s ago: executing program 5 (id=1702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 8m13.55251328s ago: executing program 46 (id=1702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 7m14.620705367s ago: executing program 8 (id=1889): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) 7m10.831821845s ago: executing program 8 (id=1903): unshare(0x20000400) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsmount(r1, 0x1, 0x6) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 7m10.106327245s ago: executing program 8 (id=1904): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x38a8, 0x80, 0x4, 0x1e3}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 7m9.34335432s ago: executing program 8 (id=1907): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810450, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000000780)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304c24, 0x0) 7m8.451968179s ago: executing program 8 (id=1910): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000000) 7m7.746796387s ago: executing program 8 (id=1914): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x4866, 0x0, 0xb, 0x0, 0x0) 7m4.776053183s ago: executing program 47 (id=1914): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x4866, 0x0, 0xb, 0x0, 0x0) 5m51.28143169s ago: executing program 2 (id=2233): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000000)={"09d2a59accd2c120fce0758057d1296628b32f99d8819fc197a5869283b813e1", r4}) 5m50.937829249s ago: executing program 2 (id=2235): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 5m50.203757599s ago: executing program 2 (id=2238): pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 5m48.890750032s ago: executing program 2 (id=2242): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 5m47.781847297s ago: executing program 2 (id=2248): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327b", 0xd}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 5m46.448592193s ago: executing program 2 (id=2254): unshare(0x24060400) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000006) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) 5m44.489650666s ago: executing program 48 (id=2254): unshare(0x24060400) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000006) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) 2m21.748620389s ago: executing program 9 (id=3103): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) 2m21.430478932s ago: executing program 9 (id=3104): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @mcast1}, 0x1c) 2m20.944095264s ago: executing program 9 (id=3106): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0], 0x7, 0xf11, &(0x7f0000001100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f00000021c0)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES8, @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES16=r3, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r2], 0x5, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 2m19.672089716s ago: executing program 9 (id=3111): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000004c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c646973636172642c636865636b3d7374726963742c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e39352c757365667265652c757466383d312c00f919a0fcc7601e2839a4cdeb811f202b12b52250986b6c58733273d7bcd7421b35fcf85c4503caace91f7a52eacc7502"], 0x0, 0x274, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 2m19.004000647s ago: executing program 9 (id=3115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m18.136660177s ago: executing program 9 (id=3121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2m15.828779528s ago: executing program 49 (id=3121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 44.28631361s ago: executing program 7 (id=3543): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 43.694934063s ago: executing program 7 (id=3547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x7}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 43.157683351s ago: executing program 7 (id=3551): ioperm(0x1, 0x9, 0xfffffffffffffff8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 42.390670438s ago: executing program 7 (id=3553): r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6e5, &(0x7f0000000f00)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4aa, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e04001120"], 0x7) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x9000) getpid() 40.535345879s ago: executing program 7 (id=3561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000380)="0f35baf80c66b8c2473f8c66efbafc0cb80600ef0f072ed0649e64363e0f5b8c191366b92109000066b80000000066ba000000000f30baf80c66b8847c678866efbafc0cec66b97d0300000f320fc73e9a4a640fc7a8073a", 0x58}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.847237731s ago: executing program 7 (id=3562): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x80, @mcast2, 0x3ff}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="bd", 0x1}], 0x1, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x6, 0x1, r2}}], 0x20, 0x1}], 0x1, 0x4) 37.846955952s ago: executing program 50 (id=3562): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x80, @mcast2, 0x3ff}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="bd", 0x1}], 0x1, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x6, 0x1, r2}}], 0x20, 0x1}], 0x1, 0x4) 5.616640876s ago: executing program 4 (id=3680): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0x1, 0x52e, &(0x7f0000000e00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x80000001, 0x5}]}}}}}}}, 0x0) 5.480173236s ago: executing program 6 (id=3681): io_uring_setup(0x5de1, &(0x7f0000000000)={0x0, 0x8a30, 0x1000, 0x0, 0x152}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xa0000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 4.826954496s ago: executing program 4 (id=3684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x41, 0x7fffffff, 0x68, 0x5, 0x2, 0x2000, 0x8, 0xd74c, 0x8, 0xa, 0x4, 0x5, 0x2, 0x7, 0xfffffffd, 0xb, 0x1, 0x0, 0x1ff, 0x4, 0x8, 0x5, 0x0, 0x4, 0x7fffffff, 0xf52, 0x2, 0x3, 0x9, 0x2, 0x2, 0x40, 0x1, 0x7, 0xb067, 0xd, 0x0, 0x3, 0x3, 0xb, 0x7, 0x1, 0x2, 0xff, 0x6, 0x5c, 0x400, 0x3, 0x3, 0x6, 0xda4, 0x201, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x9, 0x6, 0x0, 0x5, 0x2, 0x5, 0xc, 0x5, 0x101, 0x4, 0x9, 0xfffffffb, 0x3, 0x80000000, 0xfffffff7, 0x7ff, 0x0, 0x4, 0x499, 0x8, 0x7, 0x0, 0xffffff7f, 0x3, 0x6, 0x2, 0xf633, 0xf1, 0xa, 0x2, 0xfffffff6, 0x2, 0xff, 0x40, 0x1, 0x3, 0x8000, 0x3, 0x9, 0x456, 0x0, 0xeb, 0xffffffff, 0x9, 0x8, 0x40, 0x3, 0x9, 0xe, 0x4962, 0x5, 0x76d, 0xb, 0x54b, 0x8, 0x7, 0x1, 0x9, 0x3, 0x81, 0x6, 0x6, 0x7, 0x1, 0x2, 0x2, 0x80000001, 0x8, 0xffffffff, 0x9aba, 0x1e3, 0xc, 0x80, 0x5, 0x8000, 0x4, 0x400, 0x401, 0x90, 0xa60, 0x6, 0xffffff25, 0x0, 0x2, 0x9a, 0x80, 0x0, 0x7f, 0x5, 0x9, 0x10000, 0x618a, 0x6, 0xfffffff3, 0x0, 0x80000000, 0xf, 0x3, 0x2, 0xd, 0x7fff, 0x4, 0xffff8001, 0x5, 0x9, 0x9, 0x8001, 0x0, 0x6, 0x9, 0x10001, 0xc, 0x1, 0xb, 0x98000000, 0x5, 0xfffffff7, 0x0, 0x4, 0x2, 0x6, 0x9, 0x4, 0x6, 0x10000, 0x200, 0x4, 0x6, 0x7fffffff, 0x1ff, 0x8, 0x7b4c, 0x4b7b, 0x8, 0x7fff, 0xe66d, 0x40, 0x1, 0xfffffff7, 0x6, 0x19c, 0x3, 0x101, 0x10000, 0x6, 0x9, 0xb2, 0x7, 0xfb1, 0x6, 0x8, 0x200000, 0x81, 0x3, 0xfffffffd, 0xfffffff9, 0x2, 0x0, 0x8001, 0x7fff, 0x1000, 0x8, 0x7fe00000, 0x4, 0x8, 0x1, 0xfffffff1, 0x7, 0x4, 0x8fad, 0xbb, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x0, 0x1, 0xb, 0x3, 0x8, 0x7, 0x2, 0x82a, 0x401, 0x50b, 0xfdb4, 0x8000, 0x4, 0x3, 0x586, 0x9, 0x1c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x2, 0xd, 0x50000000, 0x1ff, 0x8530, 0x3ff, 0xc0, 0x3, 0x2, 0x8, 0x8276, 0x6, 0x9cb6, 0x44bd4947, 0x9, 0x7, 0x10001, 0x200, 0xfff, 0xffff7360, 0xf, 0xb, 0x5, 0x4, 0xfffeffff, 0xfff, 0xffff, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x2, 0xffff0000, 0x3, 0x0, 0x3, 0x6, 0x2, 0xa, 0x3, 0x6509, 0x4, 0x8, 0xd83, 0xff, 0x8000, 0x101, 0x6, 0x20000000, 0x3, 0xa77, 0xa64d, 0x8, 0x1c1a, 0x0, 0x8, 0x40, 0x0, 0x2, 0x9, 0x4c, 0xd55, 0x5068f63a, 0x7, 0x5b, 0x40, 0x9, 0xfffffffd, 0x9, 0xb6d, 0x2e, 0x31, 0x9, 0x9e4, 0x1, 0x1, 0x10000, 0x401, 0x3, 0x7ff, 0xe31d, 0x400, 0xfc40, 0x5, 0x2, 0x10, 0x7, 0x7fff, 0x3, 0x2, 0x1, 0xa, 0x6, 0x81, 0xd0, 0x1, 0xe, 0xe0, 0xc0000, 0x8, 0x6, 0x6, 0x0, 0x6, 0x2, 0x80, 0x1, 0x8, 0x0, 0x9, 0x8, 0x3, 0xfffffff8, 0x9, 0xe85, 0x8000, 0x7, 0x5, 0x1, 0x2, 0x2, 0x2, 0x3, 0x4, 0x0, 0xf274, 0x4, 0x3, 0x1, 0x8, 0x0, 0x6, 0x10, 0x5, 0x1000, 0x5, 0x4, 0x4, 0x8, 0x2, 0x0, 0x3, 0x4ef, 0x81b1c8ea, 0x1, 0x2, 0x6, 0x7, 0x1, 0x0, 0x35, 0x1, 0x401, 0x3, 0xff, 0xd7, 0x2, 0x9, 0x1, 0xba1c, 0x5, 0x0, 0x1, 0xfff, 0x3, 0x4, 0x67c36367, 0x6, 0x7, 0x2, 0x83a, 0x942, 0x10, 0x1, 0x10001, 0x8, 0x3, 0x254, 0xffffffff, 0xecdb, 0x9, 0x200, 0x1000, 0x5, 0x2, 0x8, 0x100, 0x7fffffff, 0x78, 0xfffffffa, 0x0, 0x0, 0xc, 0x1ff, 0xee48, 0x0, 0x9, 0x1, 0x1, 0x1, 0x2, 0xe, 0x8, 0x3, 0x1000, 0xd0e, 0xc6, 0x1, 0xcf5, 0xb20, 0x4, 0x9a51, 0x8bd0, 0xce, 0x80, 0x0, 0x9, 0xd6, 0xc81, 0xfff, 0x4, 0x200, 0x0, 0x6, 0x8, 0x101, 0x32, 0x9dd, 0x7, 0x100, 0x38, 0xe, 0x6, 0xe, 0x6, 0x100, 0x6, 0x8, 0xb, 0xffff3583, 0x7, 0x9, 0x5, 0xfffffff9, 0x9db, 0x80000001, 0x5, 0x6ac6, 0x1000, 0x1, 0xfb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x43a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x3, 0xc, 0x6, {0x6, 0x0, 0x3, 0xd42, 0x8, 0x4}, {0x7, 0x0, 0x5, 0x7, 0x3, 0x2}, 0x3, 0x7ff, 0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 4.742860354s ago: executing program 6 (id=3685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5faa, &(0x7f000000efc0)="$eJzs3V1vHFcZB/BnX7x+KU2jClUh4iJNobSU5j2B8taUCy4ACSSUaxK5bhVIASUB0SoirnKBuODlI8BNb7joFylfAfEBiJRwVQnKoLHPScbjddZp7J1dn99PcmaePTPeM/l7PLuemT0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3vvvj072IuPzr9MDhiM/EIKIfsVzXx6KeuZiXH0bEkdhojuciYrAYUa+/8c8zEeci4qNDEffu31qtHz6zy36cP3Xz+iff/84/fvenO0d++uZPPmi3/+izZz/8/e2Iwz987cNPbu/NtgMAAEApqqqqeult/tH0/r7fdacAgKnIx/8qyY+r1Wq1ek/rP/Znqz/qQuumarzbzSIi1pvr1K8ZnI4HgDmzHh933QU6JP+iDSPiqa47Acy0XtcdYF/cu39rtZfy7TWPB8c22/PfKbfkv957cH/HTtNJ2teYTOvn604M4tkd+rM8pT7Mkpx/v53/5c32UVpuv/Oflp3yH23e+lScnP+gnX/Llvz/HBFzm39/bP6lyvkPHyf/9cEc7//yBwAAAADg4Mt//z/c8fnfxSfflF151PnfY1PqAwAAAAAAAADstScd/+8B4/8BAADAzKrfq9f+cujhYzt9Flv9+KVexNOt5YHCpJtlVrruBwAAAAAAAAAAAACUZLh5De+lXsRCRDy9slJVVf3V1K4f15OuP+9K334oWde/5AEAYNNHh1r38vciliLiUvqsv4WVlZWqWlpeqVaq5cX8ena0uFQtN97X5mn92OJoFy+Ih6Oq/mZLjfWaJr1fntTe/n71c42qwS46Nh0dBg4AEbF5NLrniHTAVNUz0fWrHOaD/f/gsf+zG13/nAIAAAD7r6qqqpc+zvtoOuff77pTAMA0LOXjf/u8gFqtVqvV6oNXN1Xj3W4WEbHeXKd+zWA4fgCYM+vxcdddoEPyL9owIo503QlgpvW67gD74t79W6u9lG+veTxI47vna0G25L/e21gvrz9uOkn7GpNp/XzdiUE8u0N/nptSH2ZJzr/fzv/yZvsoLbff+U/LTvnX23m4g/50Lec/aOffcnDy74/Nv1Q5/+Fj5T+QPwAAAAAAzLD89//Dzv/mTQYAAAAAAACAuXPv/q3VfN9rPv//+THL9Zpz7v88MHL+vV3n7/7fgyTn32/n37ogZ9CYv/vGw/z/ff/W6gc3//W5PJ35/BcGo/q5F3r9wTBd81MtvBVX41qsxaltyw+3tJ/e1r6wpf3MhPaz29pHdftybj8Rq/GLuBZvPmhfnHBh1NKE9mpCe85/YP8vUs5/2Piq819J7b3WtHb3/f62/b45Hfc8F//23xe3713TdycGD7atqd6+4x30Z+P/5KlR/OrG2vUTv7ly8+b105EmWx49E2myx3L+C+kr5//SC5vt+fd+c3+9+/7osfOfFXdiuGP+LzTm6+19ecp960LOf5S+cv75CDR+/5/n/Hfe/1/poD8AAAAAAAAAAAAAAADwKFVVbdwiejEiLqT7f7q6NxMAmKo//CDNVEmo1Wq1Wq0+sHVTNd7rzSKWtq5zISJ+O+6bAQCz7H8R8c+uO0Fn5F+w/Hl/9fQLXXcGmKob7773syvXrq1dv9F1TwAAAAAAAACATyuP/3msMf7zxnVArXGjt4z/+kYcm9vxP/ujwcZY52mDno9Hj/99PB49/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/51PGOf+jacNKGv/1pQ7607Wc//E01nPO/0ut5Zr5V3+d5/z7W/I/efOdX5688e57r15958rba2+v/fz0qQvnzp4/d/b8+ZNvXb22dmrz3w57vL9y/nnsa9eBliXnnzOXf1ly/l9MtfzLkvN/MdXyL0vOP7/ek39Zcv75vY/8y5LzfznV8i9Lzv/LqZZ/WXL+r6Ra/mXJ+X8l1fIvS87/1VTLvyw5/xOpln9Zcv4nUy3/suT88xku+Zcl55+vbJB/WXL+Z1It/7Lk/M+mWv5lyfmfS7X8y5LzP59q+Zcl538h1fIvS87/q6mWf1ly/l9LtfzLkvN/LdXyL0vO/+upln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT8v51q+Zcl5/96quVfloef/z8XMwsxE93Yk5n//D1iBrphxsy4ma5/MwEAAAAAAAAAAAAAbdO4nLjrbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIVd73Az/7Zq8NCf6Hd+LA2hgwsHh3/QYOMZgk5E9Jm1IS0qYlNY53bTbxW73rBBAqS6EtUZCK1F7Qi6ZJlEaR2gqURmoq0Qipkdq7cpWIm6iVuLBUqByUVEoV2OrMeZ5nZ2ZnZ3ZtL5455/NB+OedOTPzzJkzs/td6zsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUG/Tx6b+tC/Lsvz/2h8bsuzi/O/rsn35l3O7L/QKAQAAgHP1Tu3Pv7sknbBvGReq2+Zfr/3378/Pz89nX3j79Lt/Pj+fzhjJsoG1WVY7L/q3X/5ivn6b4JlsuK+/7uv+Djc/0OH8wQ7nD3U4f02H89d2OH+4w/mLdsAi64rfx9SubEvtrxuKXZpdlg3VztvS4lLP9K3t74+/y6npq11mfuhQNp0dyaay8UWX6av9l2WvbMpv674s3lZ/3W1tzLLszM+ePBjX0Bf28Zas4cZq6h+7t+7JRt7+2ZMHvzP75tWtZsfdsGilWbZ1c77OZ7Ns4ddVWV+2Nu2TuM7+unVubLHOgYZ19tUul/+9eZ1nlrnOeL+Hwzpfa7POjeG0x67PsmwuW3KbZs9k/dn6pltN+3u4OCLy68gfyg9kgys6TjYt4zjJL/PG9Y3HSfMxGff/prBPBpdYQ/3D8dbTaxbt94U5X3iqzc6vk9/rbjhW8+t+IL/R4eH6X602HKv5Nk/esPQx0PKxa3EMpGO57hjY3OkY6F8zUDsG+hfWvLnhGJhYdJn+rK92W6dvaH8MjM0ePTE28/gTt00fPXB46vDUsYnx3Tt37Nq5Y9eusUPTR6bGiz9Xtkt7yPqsPx2Dm8NrTTwGb2ratv6QnP9mu+fByo7B4S55HuT3/TM35gu6uD9b4hjPt3l267k/D9L3/brnwWDd86Dla2qL58HgMp4H+TZnti7ve+Zg3f+t1rD818KV7f8NdcfAhfx+mN/mwzcv/Vq4MazruVtW+v1wYNExEO9WX3ju5aekn/eG7wj7ZfFxcU1+xkVrslMzUye3PXZgdvbkRBbGe+LSuseq+XhZX3efskXHS/+Kj5d9f/urG69pcfqGsK+Gb23/WOXb7Bxt/1jVXt0b9+earNifDaduz8I4z97r/dnqu1m+P1OWaLM/822eve3cfxZMuaTu9W+o0+vfwNBg8fo3kPbGUMPr3+KHZqC2siw7c9vyXv+Gwv/v9evfZV3y+pfvq4e3tT8G8m2eG1vpMTDY9vXv+jD7wnpuDolhuC73v1s7f644TOsey47HzeDgUDhuBuMtNh43OxZdJr+2/La3jp/dcbP1+sbHquHnlhIeN/m++ovx9sdNvs2rE+f+2rEu/rXutWNNp2NgaGBNvt6hdBAUr3fz6+IxsC07mB3PjmST6TL5o5zf1uj25R0Da8L/7/Vrx1Vdcgzk++rF7e2PgXybH+04vz87bQ2npG3qfnZq/v3CUpn/msGF62vebefzsRoM6/z4jz+VTmuVIfJt3ty50pzRfj/dGk65qMV+an7+LHVMT2bvzX66KqzzyK72v5vKt7ls9zKPp31Zlr0+8Xrt913h97vfO/Xj7zf83rfV75Rfn3j9/rEHf7KS9QMAcPberf05t6b4WbPuX6yX8+//AAAAQE+Iub8/zET+BwAAgNKIuX8gzET+BwAAgNKIuX8wzKQi+f/RO/a89E7tPcWKd4cJ7zKWOqtxNzxwV7Fd7HjPha9H5hfkp3/020MvfXWZ71HWn2XZr+7/YMvtH70rrqtwIq7zw42nL3LVdcu6/UceWtiu/v0Tzuwprj/en+UeBrGr/MrY9tr1jjw+UZuv3p/V5oNzzz1TXH/xddz+9I5i+78Kb1qy71Bfw+W3hvVsCXMkvKfMA/sW9kM+4+Ve2njtv1z62YXbi5fr2/z+2t188Q+L643vEfXCpcX28X4vtf5//tp3X8q3f+yG1ut/qr/1+k+H630jzF/uLbav3+dfrVv/H4f1x9uLl9v2rR+2XP/LVxbbvxyOi2+E2bz+e/7sQ++0erzi7ey7s7hcvP3x/9lZu1y8vnj9zesffmqiYX80X/+rbxfXs/fLPx+o3z6eHm8neuTOxuO7Lzy+DT3yLMu++ydZw37OPlJc7p+a1h+v78Sdrdd/a9M6T/RdV7v8wv3Z0HC/vv4321ve37iefX+/oeH+vHBv2H9vj/0ov97TD4bjMZz/v68V19f8XqYv39v4ehO3/8aG4nkbr2+saf0vNK1/7rp833Ve/31vF+t/+e61Devf94lwPN1XzE7rP/zXlzRc/pvfKR6Pk18ZPXZ85tT0ZN1erX8erx1et/6ii9/3/kvCa2nz1/uPzz46dXJkfGQ8y0Z68C0DV3v93wrzv4sxd/5vofCTnxfH3fOfLL5v3fSL4usXwumPhMczfn/8+l8ONRyvzY/73N3FPNf13xLWsVxXfu0/r1vWhqc//8qpf/yjN5t/Loj358Tlw7X79+KmK2rn9b1anN/8etXJf1ze+Lz+6eB4bf4g7Nf58M7Mm68obq/5+uN7kzz/6eL5G3+Si5fPmt5PZMNA4/041/X/NPwc88OrGl//4vHxg6ea3s15Q9aXL2EuvD5kc8X5cau4v58/c0XL24vvw5PNXb2SZS5p5vGZsSPTx049NjY7NTM7NvP4E/uPHj91bHZ/7b1L93+x0+UXnt/ra8/vyandO7Pas/14MVbZhV7/iYcOTt4+fuPk1KEDpw7NPnRi6uThgzMzB6cmZ248cOjQ1Fc6XX56cu/E9j07bt8+enh6cu8de/bs2DM6fex4voxiUR3sHv/S6LGT+2sXmdm7c8/Erl07x0ePHp+c2nv7+PjoqU6Xr31vGs0v/eXRk1NHDsxOH50anZl+YmrvxJ7du7d3fPfHoycOzYyMnTx1bOzUzNTJseK+jMzWTs6/93W6PNUwczy83jXpCz+df+7W3en9cXPffnrJqyo2afzxNHsrvBdU/P7W6euY+4fCTCqS/wEAAKAKYu4Pb/y/cIb8DwAAAKURc//aMBP5HwAAAEoj5v4i+Q+nj3+vSv4/X/3/p/X/a/T/9f8z/f9E/1//P9P/1//vQP9f/7+X16//r/9PZ93W/w+5P1uXZf79HwAAAEoq5v71YSbyPwAAAJRGzP0XhZnI/wAAAFAaMfdfHGZSkfxfts//H8z0//X/z2f/P26r/5/p/3dD/3/Lf+n/L6L/r/+f6f+ftQvdn+/19Xdh/3+d/j/dptv6/zH3vy/MpCL5HwAAAKog5v73h5nI/wAAAFAaMfdfEmYi/wMAAEBpxNy/IcykIvm/bP1/n/+v/+/z//X/S9z/9/n/Lej/6/9n+v9n7UL353t9/V3Y//f5/3Sdbuv/x9z//8JMKpL/AQAAoApi7v9AmIn8DwAAAKURc/+lYSbyPwAAAJRGzP2XhZlUJP+XuP//D0tv9EaWZfr/mf6//n/TOvX/9f9Xg/6//n87+v/d2/8fyPT/O9H/1/+ns27r/8fcf3mYSUXyPwAAAFRBzP1XhJnI/wAAAFAaMfdfGWYi/wMAAEBpxNx/VZhJRfJ/ifv/bfn8/4L+v/5/pv+v/7/K9P/1/9vR/+/e/r/P/9f/73R5/X+Wo9v6/zH3Xx1mUpH8DwAAAFUQc/81YSbyPwAAAJRGzP0fDDOR/wEAAKA0Yu7fGGZSkfyv/6//r/+v/6//r/+/mnqr/9+/5Dn6/wX9/0bnr/8/t7AA/f+eWb/+v/4/nXVb/z/m/g+FmVQk/wMAAEAVxNx/bZiJ/A8AAAClEXP/dWEm8j8AAACURsz9I2EmFcn/+v/6//r/+v/6//r/q6m3+v9L0/8v6P838vn/+v/6//r/tNdt/f+Y+zeFmVQk/wMAAEAVxNy/OcxE/gcAAIDSiLn/+jAT+R8AAABKI+b+LWEmFcn/+v/6//r/+v/6//r/q0n/X/+/Hf1//f9eXr/+v/4/nXVb/z/m/hvCTCqS/wEAAKAKYu6/McxE/gcAAIDSiLn/pjAT+R8AAABKI+b+rWEmFcn/+v/6//r/Pdz/H9D/z/T/u57+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/TeHmVQk/wMAAEAVxNx/S5iJ/A8AAAClEXP/rWEm8j8AAACURsz9o2EmFcn/+v/6//r/Pdz/9/n/DevX/+9O+v/6/+3o/+v/9/L69f/1/+ms2/r/MfffFmZSkfwPAAAAVRBz/7YwE/kfAAAASiPm/rEwE/kfAAAASiPm/vEwk4rkf/1//X/9f/1//X/9/9Wk/6//347+v/5/L69f/1//n866rf8fc/9EmElF8j8AAABUQcz928NM5H8AAAAojZj7d4SZyP8AAABQGjH37wwzqUj+75H+/7ZUgNL/1//X/9f/1//vKfr/+v/t6P/r//fy+vX/9f9p1N/itG7r/8fcvyvMpCL5HwAAAKog5v7dYSbyPwAAAJRGzP23h5nI/wAAAFAaMfffEWZSkfzfI/1/n/+v/6//X0f/X/+/l+j/6/+3o/+v/9/L69f/1/+ns27r/8fcvyfMpCL5HwAAAKog5v4Ph5nI/wAAAFAaMfffGWYi/wMAAEBPafU5hFHM/R8JM6lI/tf/L3v/f36t/r/+v/5/+/Xr/68u/X/9/3b0//X/e3n9+v/6/3TWbf3/mPv3hplUJP8DAABAFcTcf1eYifwPAAAApRFz/91hJvI/AAAAlEbM/fvCTCqS//X/y97/9/n/+v/6/53Wr/+/uvT/9f/b0f/vzf5/+LFF/7+L+v/5MaT/Tzfqtv5/zP33hJlUJP8DAABAFcTc/9EwE/kfAAAASiPm/o+Fmcj/AAAAUBox9388zKQi+V//X/9f/1//f+n+/2DD/dL/1/8/G/r/q9b/rz1B9f8L+v9n50L353t9/d3U//f5/3Srbuv/x9x/b5hJRfI/AAAAVEHM/Z8IM5H/AQAAoDRi7v//YSbyPwAAAJRGzP33hZlUJP/r/+v/n1v/v7HXqP/feP293//3+f/6/+dO/9/n/7ej/6//v6rrX7O669f/1/+ns27r/8fc/2thJhXJ/wAAAFAFMfffH2Yi/wMAAEBpxNz/yTAT+R8AAAB6zNLln5j7fz3MpCL5v/f6/yM92f/vT9dftv6/z//X/9f/1/9vT/9f/78d/X/9/15ev/6//j+ddVv/P+b+3wgzqUj+BwAAgCqIuf9TYSbyPwAAAJRGzP2/GWYi/wMAAEBpxNz/QJhJRfL/+e7/N1++HZ//r/+f6f/r/+v/6/+fI/1//f9M//+sXej+fK+vX/9f/5/Ouq3/H3P/b4WZVCT/AwAAQBXE3P9gmIn8DwAAAF3q0RVfIub+T4eZyP8AAABQGjH3fybMpCL5v/c+/1//X/9f/1//X/+/l+j/6/+3o/+v/9/L69f/1/+ns27r/8fc/1CYSUXyPwAAAFRBzP2fDTOR/wEAAKA0Yu7/7TAT+R8AAABKI+b+3wkzqUj+1//X/9f/1//X/9f/X036/4v7//lrmP5/Qf9f/7+X16//r/9PZ93W/4+5/3NhJhXJ/wAAAFAFMff/bpiJ/A8AAAClEXP/74WZyP8AAABQGjH3PxxmUpH8r/+v/6//r/+v/6//v5r0/33+fzv6//r/vbx+/X/9fzrrtv5/zP2fDzOpSP4HAACAKoi5//fDTOR/AAAAKI2Y+/eHmcj/AAAAUBox9z8SZlKR/K//r/+v/6//r/+v/7+a9P/1/9vR/9f/7+X16//r/9NZt/X/Y+4/EGayr/FmAAAAgN5S/8v1mPu/EGZSkX//BwAAgCqIuf9gmIn8DwAAAKURc/9kmElF8r/+v/6//r/+v/6//v9q0v/X/29H/1//v5fXr/+v/09n3db/j7l/KsykIvkfAAAAqiDm/kNhJvI/AAAAlEbM/YfDTOR/AAAAKI2Y+x8NM6lI/tf/1//X/69s//+17zWtU/9f/3816P/r/7ej/6//38vr1//X/6ezbuv/x9w/HWZSkfwPAAAAVRBz/xfDTOR/AAAAKI2Y+78UZiL/AwAAQGnE3H8kzKQi+V//X/9f/7+y/f/lff7/uoXb1f/X/z8b+v/6/+3o/+v/9/L69f/1/+ms2/r/MfcfDTOpSP4HAACAKoi5/1iYifwPAAAApRFz//EwE/kfAAAASiPm/hNhJhXJ//r/K+v/9y3RDdT/b71+/f8S9P/r6P/r/58N/X/9/3b0/0vR/08/QOv/6//r/9Os2/r/Mff/QZhJRfI/AAAAVEHM/SfDTOR/AAAAKI2Y+2fCTOR/AAAAKI2Y+2fDTCqS//X/ff6//r/+v/6//v9q0v/X/29H/78U/X+f//9/7N1nkmZXkcfhVy3XionZg7bAClgCayCCLeCdhBcehPdOeCc8CO+9994Ij0B4GwGh6sxsVKjurVbX23Xuyef5oJwpzYxOR/d8+Af6xR2k/z+r/2dAo/X/ufvvG7c02f8AAADQQe7++8Ut9j8AAABMI3f//eMW+x8AAACmkbv/AXFLk/2v/9f/6//1//p//f8+6f/1/0v0//r/Lb9/tP7f9/8Z0Wj9f+7+B8YtTfY/AAAAdJC7/0Fxi/0PAAAAW3XF4R/k7n9w3GL/AwAAwDRy9z8kbmmy//X/+n/9v/5f/6//3yf9v/5/if5f/7/l9+v/9f+sG63/z93/0Lilyf4HAACADnL3Pyxusf8BAABgGrn7Hx632P8AAAAwjdz918UtTfa//l//r//fYP9/hf5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7//q4pcn+BwAAgA5y9z8ibrH/AQAAYBq5+x8Zt9j/AAAAMI3c/Y+KW5rsf/2//l//v8H+3/f/9f8bov/X/y/R/+v/t/x+/b/+n3Wj9f+5+x8dtzTZ/wAAANBB7v7HxC32PwAAAEwjd/9j4xb7HwAAAKaRu/9xcUuT/a//1//r//X/+n/9/z7p//X/S/T/+v8tv1//r/9n3d77/3vdcHCP2//n7r8hbmmy/wEAAKCD3P2Pj1vsfwAAAJhG7v4nxC32PwAAAEwjd/8T45Ym+1//r/8/3///+zL9v/5f/3/+5/r/k6H/1/8v0f/r/7f8fv2//p91e+//V3r/w/997v4nxS1N9j8AAAB0kLv/yXGL/Q8AAADTyN3/lLjF/gcAAIBp5O5/atzSZP/r//X/vv+v/9f/6//3Sf8/bP9/+P/17kz/fyz6f/3/Uf3/PY/xfv0/HYzW/+fuf1rc0mT/AwAAQAe5+58et9j/AAAAMI3c/TfGLfY/AAAATCN3/zPilib7X/+v/9f/6//v3P+fadn/3/Ez/f9+6P+H7f+X6f+PRf+v//f9f/0/y0br/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAmEbu/mfHLfY/AAAATCN3/3Pilib7X/+v/9f/6/8v6vv/l8/R//v+//7o//X/S/T/+v8tv1//r/9n3Wj9f+7+58YtTfY/AAAATO/Mrnb/8+IW+x8AAACmkbv/+XGL/Q8AAADTyN3/grilyf7X/+v/9f/6/4vq/yf5/r/+f3/0//r/Jcft/3f6//q16P/Heb/+X//PutH6/9z9L4xbmux/AAAA6CB3/4viFvsfAAAAppG7/8Vxi/0PAAAA08jd/5K4pcn+1//r//X/p97/X5X/e/r/+H3V/+v/L4D+v0f/7/v/538t+v9x3q//1/+zbrT+P3f/S+OWJvsfAAAAOsjd/7K4xf4HAACAaeTuf3ncYv8DAADANHL3vyJuObz/z1zKV106+n/9v/7/1Pv/ov+P31f9v/7/Auj/9f+7Cfv/s0f88/T/Y71f/6//Z91o/X/u/pviliOH39XH+FUCAAAAI8nd/8q4xb//DwAAANPI3f+quMX+BwAAgGnk7n913NJk/x/V/9/+f+f+vv7/ePT/d/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/NXFLk/0PAAAAHeTuf23cYv8DAADANHL3vy5usf8BAABgGrn7Xx+3NNn/J//9/2v1//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xC3NNn/AAAA0EHu/jfGLfY/AAAATCN3/5viFvsfAAAAppG7/81xS5P9f/L9v+//6/8vsP8/o/9P+v/4fdX/6/8vgP5f/7/T/99tp93Pb/39+n/9P+tG6/9z9998MPX67X8AAADo4OaDv57dvSVusf8BAABgGrn73xq32P8AAAAwjdz9b4tbmux//b/+/9T7f9//L/r/+H3V/+v/L4D+X/+/0//fbafdz2/9/fr/o/r/O/6U6v85Z7T+P3f/2+OWJvsfAAAAOsjd/464xf4HAACAacTuP/cvv9v/AAAAMKV3Hvz17O5dcUuT/d+4/7/2Yvv/a/7rv9b/3/X79f8n0v/ffPjPnv5f/78l+n/9/xL9v/5/y+8fp/+PH1w3Sv/v+/+cN1r/n7v/3XFLk/0PAAAAHeTuf0/cYv8DAADANHL33xK32P8AAAAwjdz9741bmuz/xv3/JN//v/dt8QL9/7z9v+//x9X/6//viv5f/7/T/99tp93Pb/394/T/o33/X//PeaP1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAATCN3/wfiFvsfAAAAppG7/4NxS5P9r//fev/v+//6f/2//n9s+n/9/xL9v/5/y+/X/+v/WTda/5+7/0NxS5P9DwAAAB3k7v9w3GL/AwAAwDRy938kbrH/AQAAYBq5+z8atzTZ//p//f+++v87/iHd+//L4tc3ff9/vf5/p/8/kv5f/79E/6//3/L79f/6f9aN1v/n7v9Y3NJk/wMAAEAHufs/HrfY/wAAADCN3P2fiFvsfwAAAJhG7v5Pxg33+P/Te9LJuvKIn0dvrv+ftf+P/4M73//3/X/f/197v/5/v/T/rfv/W69Y+cfo//X/W36//l//z7rR+v/c/Z+KW/zn/wAAADCN3P2fjlvsfwAAAJhG7v7PxC32PwAAAEwjd/9n45Ym+1//P2v/f/rf/9f/773/v0b/f+f36//HpP9v3f+v0v/r/7f8fv2//p91o/X/ufs/F7c02f8AAADQQe7+z8ct9j8AAABMI3f/F+IW+x8AAACmkbv/i3FLk/2v/9f/z9T/X9Wr//f9/0Pv1/+PSf+v/1+i/9f/b/n9+n/9P+tG6/9z938pbmmy/wEAAKCD3P1fjlvsfwAAAJhG7v6vxC32PwAAAEwjd/9X45Ym+1//r/+fqf9v9v1//f+h9+v/x6T/1/8v0f/r/7f8fv2//p91o/X/ufu/Frc02f8AAADQQe7+r8ct9j8AAABMI3f/N+IW+x8AAACmkbv/m3FLk/0/c/+/9D+m/z9H/6//3+n/9f97pv/X/y/R/+v/t/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/934hb7HwAAAKaRu/+7cUuT/T9z/79E/3+O/l//v9P/6//3TP+v/1+i/9f/b/n9+n/9P+tOqf+/cndE/5+7/3txS5P9DwAAAB3k7v9+3GL/AwAAwDRy9/8gbrH/AQAAYBq5+38Yt8yz/+9zy8Lf1P+feP9/8IdI/6//3+n/9f/6/wP6f/3/kmv0/wc/1v9v8/36f/0/60b7/n/u/h/FLfPsfwAAAGgvd/+P4xb7HwAAAKaRu/8ncYv9DwAAANPI3X9r3NJk/+v/ff9f/9+q/798p//X/19i+n/9/xLf/9f/b/n9+n/9P+tG6/9z9/80bmmy/wEAAKCD3P0/i1vsfwAAAJhG7v6fxy32PwAAAEwjd/8v4pYm+1//r//X/7fq/33/X/9/yen/9f9L9P/6/y2/P/v//HOn/9f/879G6/9z9/8ybmmy/wEAAKCD3P2/ilvsfwAAAJhG7v5fxy32PwAAAEwjd/9v4pYm+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/v/+v/WTda/5+7/7a4pcn+BwAAgA5y9/82brH/AQAAYBq5+38Xt9j/AAAAMI3c/bfHLU32v/5f/z9l/3+1/l//r/8fhf5f/79E/6//3/L79f/6f9aN1v/n7v993NJk/wMAAEAHufv/ELfY/wAAADCN3P1/jFvsfwAAAJhG7v4/xS1N9r/+X/9/4f3/lfXrHrb/9/1//b/+fxjz9v9X6f/1/xfd/99407kf6/+3+X79v/6fdaP1/7n7/xy3NNn/AAAA0EHu/r/ELfY/AAAATCN3/1/jFvsfAAAAppG7/29xS5P9r//X/0/5/X/9v/5f/z+Meft/3//X//v+v/5f/6//Z81o/X/u/r/HLU32PwAAAHSQu/8fcYv9DwAAANPI3f/PuMX+BwAAgGnk7v9X3NJk/+v/9f/6f/2//l//v0/6f/3/Ev2//n/L79f/6/9ZN1r/n7v/PwEAAP//JGIvZA==") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.500112636s ago: executing program 6 (id=3690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0) 3.202740724s ago: executing program 1 (id=3691): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 3.168821655s ago: executing program 4 (id=3692): io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc0, 0xffffffffffffffff, 0x0, 0x0, 0x36, 0x0, 0x2}]) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x4048004) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c468100f009070000000000000003003e00f7ffffff8d0000000000000040000000000000005902000000000000040000008100380003000600080004000200000003000000ffffffffffffff7f77510800000000009d0b00000000000003000000000000000000000000000000f30000000000000005000000050000000700000000000000020000000000000001000080000000000300000000000000b100000000000000020000000000000003"], 0xe8) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 3.048954549s ago: executing program 3 (id=3693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 2.8329363s ago: executing program 0 (id=3694): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4b, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x1e8c}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x6, 0x1c7, 0xa4, 0x6, 0x8, 0x5, 0x0, 0x4, 0x9, 0x0, 0x80, 0x0, 0x5, 0x4, 0x1, 0x2c00, 0x6, 0x1, 0x2, 0x2, 0x1, 0x6, 0x1, 0x4, 0xbd, 0x1, 0x3, 0x7fff, 0x7, 0x7, 0x5, 0x5, 0x4, 0x2, 0xd, 0x9, 0x3, 0x1, 0x3, 0x5, 0x5, 0x4, 0x9, 0x8, 0x8, 0x9, 0xfffffff8, 0x2, 0xd, 0xffffff81, 0x3, 0x10, 0x8001, 0x7, 0x3, 0x0, 0x3, 0xfffffffb, 0xd5d, 0x9, 0x7, 0x7, 0x9, 0xc, 0x5, 0x7fff, 0x4, 0x3, 0x1d607485, 0x922f, 0x9, 0xffffff95, 0x2, 0x800, 0x5, 0x5, 0x9, 0xee, 0x7c, 0x58, 0x6, 0x1fc0, 0x101, 0x1ff, 0x0, 0x4, 0x3, 0x6, 0x6, 0x10, 0x3, 0x4b, 0x401, 0x95, 0x10000, 0x3, 0x2, 0x10001, 0x6, 0x4d, 0x3, 0x9, 0x4, 0x9, 0x1, 0xffffffff, 0x3, 0x2, 0xa4c, 0x9, 0x2, 0xffffc464, 0x178, 0x1, 0x1, 0x0, 0x831c, 0xa, 0x6, 0xffffffff, 0xfff, 0x6, 0x8, 0x9, 0x2, 0x800, 0x80000000, 0x10000, 0xffffffff, 0x6, 0x0, 0x6, 0x10001, 0xfffffffb, 0x400, 0x3, 0xc7e7, 0x0, 0x3, 0x1, 0x6, 0x828, 0xbebe, 0xae, 0xa, 0x2b80, 0x9, 0xc, 0x3, 0xfdc5, 0x7, 0x4, 0x7fffffff, 0x5, 0x400, 0x80000000, 0x80, 0x3, 0x24, 0x4d, 0xffffffff, 0xe7f2, 0x8, 0x3, 0xc, 0x10, 0x2577, 0x2, 0x6, 0x7, 0x80000, 0x400, 0x5, 0x1ff, 0x4, 0x7, 0xd, 0x5, 0x9, 0x0, 0x6, 0x9, 0x3, 0x5, 0x7fffffff, 0x3, 0x9, 0xe, 0x4, 0x2, 0x0, 0x9, 0x7, 0x3ff, 0x7, 0x5, 0x4, 0xffffffc0, 0x6, 0x10001, 0x400, 0x3, 0x1, 0x5, 0x4, 0x0, 0x0, 0x40, 0xffffffff, 0x800, 0x2, 0x0, 0x6, 0xfffff026, 0xb, 0x80, 0x5, 0x5, 0x1, 0x80000001, 0x8, 0x5, 0x3, 0x6000, 0xed6e, 0x80, 0xffffffff, 0x0, 0xda4, 0x3, 0x5, 0x8a0, 0x478, 0x9, 0xd, 0x0, 0x5, 0xfffffffd, 0xf6, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x76f7, 0x8, 0x52fc, 0x5, 0x1, 0x107, 0x8a7, 0x11, 0x5, 0x0, 0x97]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.716137375s ago: executing program 1 (id=3695): r0 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.192368881s ago: executing program 0 (id=3696): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 2.191875322s ago: executing program 4 (id=3697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x40e6, 0x0) 2.133739382s ago: executing program 3 (id=3698): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) 1.959831957s ago: executing program 1 (id=3699): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) sendto$inet_nvme_pdu(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1.761734578s ago: executing program 3 (id=3700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3d3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c0d4}, 0x4044014) 1.623404567s ago: executing program 0 (id=3701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.444281138s ago: executing program 1 (id=3702): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffffe0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.36369324s ago: executing program 6 (id=3703): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2}, 0x6}], 0x1, 0x1, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@can={{}, 0x3, 0x2, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.277145266s ago: executing program 4 (id=3704): creat(&(0x7f0000000600)='./file0\x00', 0xe5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) flock(r1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) 1.223466965s ago: executing program 3 (id=3705): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/49], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.123954678s ago: executing program 0 (id=3706): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x2ce, 0x48043440, 0x7, 0x1000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x8}}, 0x50) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r2, &(0x7f0000003100)=ANY=[], 0x10448) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 972.423185ms ago: executing program 1 (id=3707): r0 = syz_io_uring_setup(0x1f8, &(0x7f0000000140)={0x0, 0x6c0c, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x25e9, &(0x7f00000017c0)={0x0, 0x82ea, 0x1, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) r3 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0xa, 0x0, 0xffffffffffffffff, &(0x7f0000000380)={0x8000, 0x2, 0x20}, &(0x7f00000003c0)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r3, 0x5d62, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 759.477713ms ago: executing program 3 (id=3708): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800c, &(0x7f0000000080)=ANY=[], 0x1, 0x24a, &(0x7f0000000380)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 690.578084ms ago: executing program 6 (id=3709): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffff, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002440)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c108e000000000000008c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}, {&(0x7f0000000a00)="e35f7e5e5ac5e9f0cd5260605ba7cda81ba1559f17393edeb50e129851c8070000000000000005d4b034d0ce1f6e0be5b65e1ea3aab64fb19483ed222b9d51007de194d43163a764136ee239c65b382cbf2c46ced59f283332621e64913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d41fa02b2a7b3f179ac1d1c332424093c93924b0fb97f23a2ce3a5ffd46a4ca58d205e8263de6c8f35ae0bdf26e7665d4521dc583997930691d414e950900194775678184d57e2a7bfbbb812ed678dee3f02a1c54cfd4c43900000398d28b9f4f5fb8eb0290290399155c805fc6c3f6329e625d718b0215af67c4482ab8af756b973664ab0a372ecea980cf89a63de97a4f0721aab97a9bf579d40c207e46fa8ca20ae1fd97c059e5847a81b71a7a78a0c0b23383911f7ba80592807742e63e71707213f601a6c68b69cb5c82ce19d57ca649c1dcbb39e5cf97e2e83d36a606aecc66dc1c93571d8d113a42e2e289c5d1b77895bc67215979a7d1c9f629a9eb9b23cf838a31ac858a3ff4c3bcda824699d46e4f7fb911e875e90974153a23fbd81a93aa8185a4b0831e0726fbf40a8b9122b90f85f00640f029d7141485e2d3d3318e7c05f354a916ea13078a5b1", 0x1e4}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f0000000700)="ae21c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e387f629ad9defaffa365aaf37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb", 0x89}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000002500)="b85a302756b5c983924c342778e000aa1707d581478a9fc2db3eb7bb6c82e757c981749d65c93373f6549b488c1d2a4482dbbe77a836e6bd114cf72569cff1b57bc9054f77729d58073686e6fd5b1c92c883cdebfda1463120d2356e16d7cb26624ea547aea16f78ce1cd3c83041147ad2", 0x71}], 0x7}}], 0x2, 0xc044) write$binfmt_misc(r1, &(0x7f0000000300), 0x5b0) 587.917071ms ago: executing program 0 (id=3710): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 381.183657ms ago: executing program 4 (id=3711): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r1, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) 352.402079ms ago: executing program 1 (id=3712): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 141.069815ms ago: executing program 3 (id=3713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 464.042µs ago: executing program 0 (id=3714): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 0s ago: executing program 6 (id=3715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {@nocheckpoint_merge}, {@prjjquota={'prjjquota', 0x3d, 'f2fs\x00'}}, {@six_active_logs}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x17}}, {@noflush_merge}, {@acl}, {@fsync_mode_posix}, {@discard_unit_block}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}], [{@appraise_type}]}, 0x1, 0x5512, &(0x7f0000005a80)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) kernel console output (not intermixed with test programs): egistering): j1939_xtp_rx_dat: no tx connection found [ 947.402937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.411750][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.419898][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.428755][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.436994][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.445849][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.453977][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.462851][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.470863][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.479797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.488012][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.496859][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.504987][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.513817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.521831][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.530652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.538782][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.547623][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.555747][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.564541][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.572566][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.581422][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.589546][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.598367][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.606517][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.615317][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.623441][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.632137][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.640267][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.649080][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.657209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.666011][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.674141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.682956][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.690973][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.699861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.707961][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.716801][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.724916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.733740][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.741769][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.750583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.758696][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.767517][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.775637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.784462][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.792497][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.801395][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.809560][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.818422][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.826591][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.835513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.843629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.852338][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.860470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.869277][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.877407][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.886225][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.894333][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.903160][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.911178][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.919999][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.928147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.936998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.945139][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 947.967322][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 947.975452][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 948.048867][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2455'. [ 948.226499][T13679] team0 (unregistering): Port device team_slave_0 removed [ 948.288597][T13679] team0 (unregistering): Port device team_slave_1 removed [ 951.533793][T13732] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 952.124857][T13744] netlink: 'syz.9.2482': attribute type 3 has an invalid length. [ 952.133225][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2482'. [ 953.256346][T13750] loop7: detected capacity change from 0 to 32768 [ 953.421257][T13750] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 953.643950][T13755] loop9: detected capacity change from 0 to 1024 [ 953.730752][T13753] loop6: detected capacity change from 0 to 32768 [ 953.739902][T13753] btrfs: Deprecated parameter 'usebackuproot' [ 953.751255][T13753] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 953.766905][T13753] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2486 (13753) [ 953.791386][T13753] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 953.803012][T13753] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 953.811914][T13753] workqueue: max_active 65524 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 953.817922][T13750] XFS (loop7): Ending clean mount [ 953.843030][T13750] XFS (loop7): Quotacheck needed: Please wait. [ 953.856401][T13753] workqueue: max_active 65524 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 953.894452][T13753] workqueue: max_active 65524 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 953.908792][T13753] workqueue: max_active 65524 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 953.925812][T13750] XFS (loop7): Quotacheck: Done. [ 953.935824][T13753] workqueue: max_active 65524 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 953.969094][T13753] workqueue: max_active 65524 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 953.986758][T13753] workqueue: max_active 65524 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 954.018709][T13776] overlayfs: failed to clone upperpath [ 954.181750][T13142] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 954.231145][T13753] BTRFS info (device loop6): rebuilding free space tree [ 954.286640][T13753] BTRFS info (device loop6): enabling ssd optimizations [ 954.295345][T13753] BTRFS info (device loop6): using spread ssd allocation scheme [ 954.303407][T13753] BTRFS info (device loop6): enabling free space tree [ 954.310396][T13753] BTRFS info (device loop6): force clearing of disk cache [ 954.318343][T13753] BTRFS info (device loop6): enabling auto defrag [ 954.325055][T13753] BTRFS info (device loop6): doing ref verification [ 954.331835][T13753] BTRFS info (device loop6): trying to use backup root at mount time [ 954.340199][T13753] BTRFS info (device loop6): force lzo compression, level 0 [ 954.348897][T13753] BTRFS info (device loop6): max_inline set to 4096 [ 954.405294][ T4464] hfsplus: b-tree write err: -5, ino 4 [ 954.808403][T11487] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 957.156093][T13800] loop9: detected capacity change from 0 to 1024 [ 957.934903][T13806] trusted_key: syz.0.2500 sent an empty control message without MSG_MORE. [ 957.975580][T13807] netlink: 'syz.6.2494': attribute type 39 has an invalid length. [ 958.003536][T13807] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.295388][T13807] bridge_slave_0 (unregistering): left allmulticast mode [ 958.302985][T13807] bridge_slave_0 (unregistering): left promiscuous mode [ 958.310296][T13807] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.409585][T13802] loop7: detected capacity change from 0 to 32768 [ 958.447626][ T4464] hfsplus: b-tree write err: -5, ino 4 [ 958.467999][T13802] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 959.006812][T13802] XFS (loop7): Ending clean mount [ 959.018468][T13802] XFS (loop7): Quotacheck needed: Please wait. [ 959.070622][T13802] XFS (loop7): Quotacheck: Done. [ 959.265555][T13142] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 961.943855][T13852] loop7: detected capacity change from 0 to 32768 [ 962.158392][T13852] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 962.158577][T13852] allowing incompatible features above 0.0: (unknown version) [ 962.158675][T13852] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 962.204339][T13852] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 962.212882][T13852] bcachefs (loop7): initializing new filesystem [ 962.231852][T13852] bcachefs (loop7): going read-write [ 962.296858][T13852] bcachefs (loop7): marking superblocks [ 962.359227][T13852] bcachefs (loop7): initializing freespace [ 962.387754][T13852] bcachefs (loop7): done initializing freespace [ 962.408064][T13852] bcachefs (loop7): reading snapshots table [ 962.414877][T13852] bcachefs (loop7): reading snapshots done [ 962.497013][ T30] audit: type=1326 audit(1756149698.101:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2519" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e87d8ebe9 code=0x0 [ 962.564097][T13852] bcachefs (loop7): done starting filesystem [ 963.003244][T13142] bcachefs (loop7): shutting down [ 963.008514][T13142] bcachefs (loop7): going read-only [ 963.014224][T13142] bcachefs (loop7): finished waiting for writes to stop [ 963.037408][T13142] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3 [ 963.197099][T13142] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 4 [ 963.250302][T13142] bcachefs (loop7): clean shutdown complete, journal seq 5 [ 963.330111][T13142] bcachefs (loop7): marking filesystem clean [ 963.479848][T13142] bcachefs (loop7): shutdown complete [ 963.648745][T13884] overlayfs: failed to clone upperpath [ 965.244552][T13893] loop9: detected capacity change from 0 to 32768 [ 965.259364][T13893] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2529 (13893) [ 965.328975][T13893] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 965.339805][T13893] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 965.349347][T13893] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 965.600072][T13893] BTRFS info (device loop9): rebuilding free space tree [ 965.639024][T13893] BTRFS info (device loop9): disabling free space tree [ 965.646702][T13893] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 965.656723][T13893] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 965.695965][T13893] BTRFS info (device loop9): setting nodatasum [ 965.702361][T13893] BTRFS info (device loop9): setting nodatacow [ 965.709132][T13893] BTRFS info (device loop9): enabling disk space caching [ 965.718946][T13893] BTRFS info (device loop9): force clearing of disk cache [ 965.731307][T13893] BTRFS info (device loop9): doing ref verification [ 965.966775][T10931] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 966.957244][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 966.964249][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.646042][T13931] loop6: detected capacity change from 0 to 40427 [ 967.663262][T13931] F2FS-fs (loop6): build fault injection rate: 14 [ 967.673839][T13931] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 967.710683][T13931] F2FS-fs (loop6): invalid crc value [ 967.738841][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of bio_endio+0xde2/0xf30 [ 967.770569][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of bio_endio+0xde2/0xf30 [ 968.049619][T13931] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 968.058973][T13931] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 968.084411][T13931] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 968.221562][T13931] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 968.255889][T13931] F2FS-fs (loop6): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x900 [ 968.270219][T13931] F2FS-fs (loop6): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x30c/0x2fc0 [ 968.282856][T13931] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 968.537214][ C0] F2FS-fs (loop6): inject write IO error in f2fs_write_end_io of bio_endio+0xde2/0xf30 [ 968.547483][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(none) [ 968.547653][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 968.547768][ C0] Call Trace: [ 968.547829][ C0] [ 968.547885][ C0] __dump_stack+0x26/0x30 [ 968.548072][ C0] dump_stack_lvl+0x1df/0x270 [ 968.548274][ C0] dump_stack+0x1e/0x25 [ 968.548448][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 968.548697][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 968.548906][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 968.549094][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 968.549321][ C0] bio_endio+0xde2/0xf30 [ 968.549479][ C0] blk_update_request+0xf4c/0x1a90 [ 968.549737][ C0] blk_mq_end_request+0x50/0xb0 [ 968.549949][ C0] lo_complete_rq+0x188/0x3a0 [ 968.550119][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 968.550296][ C0] blk_done_softirq+0x112/0x1f0 [ 968.550484][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 968.550671][ C0] handle_softirqs+0x166/0x6e0 [ 968.550845][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 968.551009][ C0] run_ksoftirqd+0x29/0x50 [ 968.551192][ C0] smpboot_thread_fn+0x56c/0xa30 [ 968.551424][ C0] kthread+0xd59/0xf00 [ 968.551568][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 968.551792][ C0] ? __pfx_kthread+0x10/0x10 [ 968.551946][ C0] ret_from_fork+0x1e3/0x310 [ 968.552093][ C0] ? __pfx_kthread+0x10/0x10 [ 968.552263][ C0] ret_from_fork_asm+0x1a/0x30 [ 968.552497][ C0] [ 968.552552][ C0] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 968.706077][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(none) [ 968.706256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 968.706345][ C0] Call Trace: [ 968.706400][ C0] [ 968.706455][ C0] __dump_stack+0x26/0x30 [ 968.706648][ C0] dump_stack_lvl+0x1df/0x270 [ 968.706846][ C0] dump_stack+0x1e/0x25 [ 968.707017][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 968.707273][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 968.707483][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 968.707670][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 968.707889][ C0] bio_endio+0xde2/0xf30 [ 968.708055][ C0] blk_update_request+0xf4c/0x1a90 [ 968.708315][ C0] blk_mq_end_request+0x50/0xb0 [ 968.708534][ C0] lo_complete_rq+0x188/0x3a0 [ 968.708708][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 968.708882][ C0] blk_done_softirq+0x112/0x1f0 [ 968.709074][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 968.709268][ C0] handle_softirqs+0x166/0x6e0 [ 968.709449][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 968.709615][ C0] run_ksoftirqd+0x29/0x50 [ 968.709781][ C0] smpboot_thread_fn+0x56c/0xa30 [ 968.710013][ C0] kthread+0xd59/0xf00 [ 968.710163][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 968.710395][ C0] ? __pfx_kthread+0x10/0x10 [ 968.710546][ C0] ret_from_fork+0x1e3/0x310 [ 968.710696][ C0] ? __pfx_kthread+0x10/0x10 [ 968.710853][ C0] ret_from_fork_asm+0x1a/0x30 [ 968.711083][ C0] [ 968.711141][ C0] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 968.865631][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(none) [ 968.865781][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 968.865872][ C0] Call Trace: [ 968.865927][ C0] [ 968.865980][ C0] __dump_stack+0x26/0x30 [ 968.866175][ C0] dump_stack_lvl+0x1df/0x270 [ 968.866362][ C0] dump_stack+0x1e/0x25 [ 968.866527][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 968.866764][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 968.866965][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 968.867156][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 968.867391][ C0] bio_endio+0xde2/0xf30 [ 968.867555][ C0] blk_update_request+0xf4c/0x1a90 [ 968.867811][ C0] blk_mq_end_request+0x50/0xb0 [ 968.868024][ C0] lo_complete_rq+0x188/0x3a0 [ 968.868210][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 968.868383][ C0] blk_done_softirq+0x112/0x1f0 [ 968.868583][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 968.868763][ C0] handle_softirqs+0x166/0x6e0 [ 968.868931][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 968.869075][ C0] run_ksoftirqd+0x29/0x50 [ 968.869225][ C0] smpboot_thread_fn+0x56c/0xa30 [ 968.869438][ C0] kthread+0xd59/0xf00 [ 968.869573][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 968.869778][ C0] ? __pfx_kthread+0x10/0x10 [ 968.869924][ C0] ret_from_fork+0x1e3/0x310 [ 968.870060][ C0] ? __pfx_kthread+0x10/0x10 [ 968.870211][ C0] ret_from_fork_asm+0x1a/0x30 [ 968.870449][ C0] [ 968.870505][ C0] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 969.025226][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(none) [ 969.025364][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 969.025459][ C0] Call Trace: [ 969.025527][ C0] [ 969.025577][ C0] __dump_stack+0x26/0x30 [ 969.025758][ C0] dump_stack_lvl+0x1df/0x270 [ 969.025948][ C0] dump_stack+0x1e/0x25 [ 969.026108][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 969.026343][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 969.026535][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 969.026705][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 969.026908][ C0] bio_endio+0xde2/0xf30 [ 969.027055][ C0] blk_update_request+0xf4c/0x1a90 [ 969.027295][ C0] blk_mq_end_request+0x50/0xb0 [ 969.027488][ C0] lo_complete_rq+0x188/0x3a0 [ 969.027651][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 969.027810][ C0] blk_done_softirq+0x112/0x1f0 [ 969.027975][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 969.028152][ C0] handle_softirqs+0x166/0x6e0 [ 969.028322][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 969.028470][ C0] run_ksoftirqd+0x29/0x50 [ 969.028618][ C0] smpboot_thread_fn+0x56c/0xa30 [ 969.028827][ C0] kthread+0xd59/0xf00 [ 969.028969][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 969.029187][ C0] ? __pfx_kthread+0x10/0x10 [ 969.029329][ C0] ret_from_fork+0x1e3/0x310 [ 969.029470][ C0] ? __pfx_kthread+0x10/0x10 [ 969.029609][ C0] ret_from_fork_asm+0x1a/0x30 [ 969.029816][ C0] [ 969.029873][ C0] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 969.161272][T13939] loop9: detected capacity change from 0 to 1024 [ 969.164984][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(none) [ 969.165129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 969.165221][ C0] Call Trace: [ 969.165277][ C0] [ 969.165344][ C0] __dump_stack+0x26/0x30 [ 969.165548][ C0] dump_stack_lvl+0x1df/0x270 [ 969.165760][ C0] dump_stack+0x1e/0x25 [ 969.165955][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 969.166223][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 969.166455][ C0] f2fs_write_end_io+0x101c/0x1bc0 [ 969.166661][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 969.166944][ C0] bio_endio+0xde2/0xf30 [ 969.167125][ C0] blk_update_request+0xf4c/0x1a90 [ 969.167407][ C0] blk_mq_end_request+0x50/0xb0 [ 969.167636][ C0] lo_complete_rq+0x188/0x3a0 [ 969.167851][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 969.168046][ C0] blk_done_softirq+0x112/0x1f0 [ 969.168260][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 969.168483][ C0] handle_softirqs+0x166/0x6e0 [ 969.168677][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 969.168868][ C0] run_ksoftirqd+0x29/0x50 [ 969.169041][ C0] smpboot_thread_fn+0x56c/0xa30 [ 969.169292][ C0] kthread+0xd59/0xf00 [ 969.169448][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 969.169694][ C0] ? __pfx_kthread+0x10/0x10 [ 969.169863][ C0] ret_from_fork+0x1e3/0x310 [ 969.170054][ C0] ? __pfx_kthread+0x10/0x10 [ 969.170224][ C0] ret_from_fork_asm+0x1a/0x30 [ 969.170482][ C0] [ 969.170551][ C0] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 969.230736][T13939] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 969.367917][T13939] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 969.393251][T11487] F2FS-fs (loop6): do_checkpoint failed err:-5, stop checkpoint [ 969.505201][T13939] JBD2: no valid journal superblock found [ 969.511235][T13939] EXT4-fs (loop9): Could not load journal inode [ 970.243645][T13948] io-wq is not configured for unbound workers [ 970.915542][T13953] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 972.234389][T13964] loop9: detected capacity change from 0 to 32768 [ 972.264472][T13964] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 972.494879][T13964] XFS (loop9): Ending clean mount [ 972.505858][T13964] XFS (loop9): Quotacheck needed: Please wait. [ 972.550771][T13964] XFS (loop9): Quotacheck: Done. [ 972.678778][T13964] XFS (loop9): User initiated shutdown received. [ 972.686408][T13964] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x162/0x200 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 972.705112][T13964] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 972.810306][T10931] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 973.291899][T13985] smc: net device bond0 applied user defined pnetid SYZ0 [ 973.319528][T13985] smc: net device bond0 erased user defined pnetid SYZ0 [ 973.908138][T13998] batman_adv: batadv0: Adding interface: dummy0 [ 973.914751][T13998] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.944573][T13998] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 974.565068][T14004] loop6: detected capacity change from 0 to 512 [ 974.604051][T14004] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 974.711317][T14004] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2558: invalid indirect mapped block 83886080 (level 1) [ 974.744097][T14004] EXT4-fs (loop6): Remounting filesystem read-only [ 974.751694][T14004] EXT4-fs (loop6): 1 orphan inode deleted [ 974.757781][T14004] EXT4-fs (loop6): 1 truncate cleaned up [ 974.765972][T14004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.269222][T11487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.508621][T14022] overlayfs: failed to decode file handle (len=24, type=251, flags=0, err=-22) [ 976.072042][T14028] overlayfs: failed to clone upperpath [ 976.306914][T14033] loop6: detected capacity change from 0 to 512 [ 976.436289][T14033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.450231][T14033] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 976.628896][T14033] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2570: corrupted inode contents [ 976.692065][T14033] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2570: mark_inode_dirty error [ 976.729601][T14040] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 976.740865][T14033] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2570: corrupted inode contents [ 976.823665][T14033] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2570: mark_inode_dirty error [ 976.999219][T14043] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.550150][T14043] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.691106][T11487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.966176][T14057] netlink: 168864 bytes leftover after parsing attributes in process `syz.9.2577'. [ 977.976291][T14057] openvswitch: netlink: Message has 44053 unknown bytes. [ 978.067500][T14043] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.426639][T14043] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.211480][ T4232] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.367231][ T4232] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.457987][ T4232] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.496147][ T4232] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.669063][T14078] o2cb: This node has not been configured. [ 979.675200][T14078] o2cb: Cluster check failed. Fix errors before retrying. [ 979.684547][T14078] (syz.7.2585,14078,0):user_dlm_register:674 ERROR: status = -22 [ 979.692743][T14078] (syz.7.2585,14078,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 981.353474][ T42] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 981.548621][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 981.578156][ T42] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 981.588755][ T42] usb 8-1: config 0 has no interface number 0 [ 981.595810][ T42] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 981.682958][ T42] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 981.694230][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.706353][ T42] usb 8-1: Product: syz [ 981.710732][ T42] usb 8-1: Manufacturer: syz [ 981.716858][ T42] usb 8-1: SerialNumber: syz [ 981.775402][ T42] usb 8-1: config 0 descriptor?? [ 981.823197][ T42] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 981.833501][ T42] em28xx 8-1:0.132: Video interface 132 found: [ 982.236896][ T42] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 982.883716][ T42] em28xx 8-1:0.132: failed to read eeprom (err=-110) [ 982.890996][ T42] em28xx 8-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 983.136586][ T42] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 983.145177][ T42] em28xx 8-1:0.132: analog set to bulk mode. [ 983.157196][T11057] em28xx 8-1:0.132: Registering V4L2 extension [ 983.237869][ T42] usb 8-1: USB disconnect, device number 11 [ 983.246853][ T42] em28xx 8-1:0.132: Disconnecting em28xx [ 983.914024][ T30] audit: type=1326 audit(1756149719.511:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz.9.2605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5d8ebe9 code=0x0 [ 984.204842][T11057] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 984.212138][T11057] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 984.219657][T11057] em28xx 8-1:0.132: No AC97 audio processor [ 984.303646][T11057] usb 8-1: Decoder not found [ 984.308489][T11057] em28xx 8-1:0.132: failed to create media graph [ 984.315254][T11057] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 984.405537][T11057] em28xx 8-1:0.132: Remote control support is not available for this card. [ 984.459202][ T42] em28xx 8-1:0.132: Closing input extension [ 984.509274][ T42] em28xx 8-1:0.132: Freeing device [ 984.996953][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2610'. [ 986.375044][ T5863] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 986.562954][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 986.583210][ T5863] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 986.593165][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.675751][ T5863] usb 7-1: config 0 descriptor?? [ 986.693816][ T5863] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 986.703753][ T9] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 986.787062][T14165] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2618'. [ 986.914645][ T9] usb 8-1: config 0 has no interfaces? [ 986.923998][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 986.934694][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.970504][ T9] usb 8-1: config 0 descriptor?? [ 987.200845][ T9] usb 8-1: USB disconnect, device number 12 [ 988.192906][ T5863] gspca_sonixj: i2c_w8 err -71 [ 988.220162][ T5863] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 988.284577][ T5863] usb 7-1: USB disconnect, device number 21 [ 989.109695][T14184] loop9: detected capacity change from 0 to 256 [ 989.577397][T14184] exfat: Deprecated parameter 'utf8' [ 989.589592][T14184] exfat: Deprecated parameter 'utf8' [ 989.728970][T14187] loop6: detected capacity change from 0 to 256 [ 989.935141][T14184] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 991.265966][T14206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.805379][T14207] loop6: detected capacity change from 0 to 4096 [ 992.605963][T14223] loop7: detected capacity change from 0 to 256 [ 992.774212][T14223] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 992.906363][T14223] exFAT-fs (loop7): error, data size is invalid(9000) [ 993.059102][T14230] overlayfs: failed to clone upperpath [ 993.566158][T14235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 994.583701][T14248] ipip0: entered promiscuous mode [ 994.860108][T14244] loop6: detected capacity change from 0 to 32768 [ 995.067095][T14244] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 995.270654][T14244] overlayfs: upper fs does not support tmpfile. [ 995.281881][T14244] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 995.296403][T14244] overlayfs: upper fs missing required features. [ 996.095640][T11487] ocfs2: Unmounting device (7,6) on (node local) [ 998.127519][T14270] netlink: 'syz.4.2662': attribute type 1 has an invalid length. [ 998.285991][T14270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 998.666784][T14276] loop9: detected capacity change from 0 to 256 [ 998.680636][T14276] exfat: Deprecated parameter 'namecase' [ 998.689512][T14276] exfat: Deprecated parameter 'utf8' [ 998.824020][T14276] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 999.114964][ T42] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 999.293340][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 999.353401][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.364460][ T42] usb 7-1: config 0 has no interfaces? [ 999.370180][ T42] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 999.381803][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.505500][ T42] usb 7-1: config 0 descriptor?? [ 999.975822][ T42] usb 7-1: USB disconnect, device number 22 [ 1000.097558][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 1000.350598][T14293] loop9: detected capacity change from 0 to 256 [ 1000.466743][T14293] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1000.600289][T14293] exFAT-fs (loop9): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967287) [ 1000.600289][T14293] [ 1000.613260][T14293] exFAT-fs (loop9): Filesystem has been set read-only [ 1002.368486][T14320] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1002.388331][ T5786] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1003.137281][ T5863] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1003.378467][ T5863] usb 10-1: Using ep0 maxpacket: 32 [ 1003.397969][ T5863] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1003.400737][T14336] loop6: detected capacity change from 0 to 256 [ 1003.410160][ T5863] usb 10-1: config 0 has no interface number 0 [ 1003.410314][ T5863] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.410483][ T5863] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.410692][ T5863] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1003.410838][ T5863] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.498810][ T5863] usb 10-1: config 0 descriptor?? [ 1003.521450][T14336] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1003.532089][T14336] FAT-fs (loop6): Filesystem has been set read-only [ 1003.539371][T14336] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1003.549957][T14336] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1003.568024][ T30] audit: type=1800 audit(1756149739.171:233): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2690" name="file1" dev="loop6" ino=1048744 res=0 errno=0 [ 1004.280424][ T5863] uclogic 0003:28BD:0094.001B: failed retrieving string descriptor #100: -71 [ 1004.289849][ T5863] uclogic 0003:28BD:0094.001B: failed retrieving pen parameters: -71 [ 1004.298386][ T5863] uclogic 0003:28BD:0094.001B: pen probing failed: -71 [ 1004.305653][ T5863] uclogic 0003:28BD:0094.001B: failed probing parameters: -71 [ 1004.314008][ T5863] uclogic 0003:28BD:0094.001B: probe with driver uclogic failed with error -71 [ 1004.578254][ T5863] usb 10-1: USB disconnect, device number 10 [ 1006.256322][T14363] overlayfs: failed to clone upperpath [ 1008.754320][T14409] loop9: detected capacity change from 0 to 512 [ 1008.785451][T14409] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1008.792557][T14409] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1008.886911][T14409] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.2718: bad orphan inode 131083 [ 1008.945895][T14409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.066400][T14409] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1009.186647][T14409] overlayfs: upper fs needs to support d_type. [ 1009.278131][T14421] loop6: detected capacity change from 0 to 512 [ 1009.328858][T14421] EXT4-fs (loop6): DAX unsupported by block device. [ 1009.540844][T14409] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1009.615543][T14409] overlayfs: upper fs does not support tmpfile. [ 1009.635377][T14409] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1009.997505][T14432] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 1010.177811][T14432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1010.195333][T10931] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.551895][T14441] loop9: detected capacity change from 0 to 128 [ 1011.194626][T14448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2733'. [ 1011.204166][T14448] netlink: 'syz.4.2733': attribute type 7 has an invalid length. [ 1011.212099][T14448] netlink: 'syz.4.2733': attribute type 8 has an invalid length. [ 1011.220236][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'. [ 1012.800618][ T4325] Bluetooth: hci5: Frame reassembly failed (-84) [ 1014.290793][T14488] loop9: detected capacity change from 0 to 32768 [ 1014.603834][T14488] bcachefs (loop9): starting version 1.1023: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=0,compression=lz4:2,nopromote_whole_extents,nojournal_transaction_names,allocator_stuck_timeout=0 [ 1014.604010][T14488] allowing incompatible features above 0.0: (unknown version) [ 1014.604111][T14488] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1014.650710][T14488] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 1014.659314][T14488] bcachefs (loop9): initializing new filesystem [ 1014.687235][T14488] bcachefs (loop9): going read-write [ 1014.711500][T14488] bcachefs (loop9): marking superblocks [ 1014.769188][T14488] bcachefs (loop9): initializing freespace [ 1014.801996][T14488] bcachefs (loop9): done initializing freespace [ 1014.822896][T14488] bcachefs (loop9): reading snapshots table [ 1014.829214][T14488] bcachefs (loop9): reading snapshots done [ 1014.843423][ T5100] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1014.962328][T14488] bcachefs (loop9): done starting filesystem [ 1015.625789][T10931] bcachefs (loop9): shutting down [ 1015.631018][T10931] bcachefs (loop9): going read-only [ 1015.636881][T10931] bcachefs (loop9): finished waiting for writes to stop [ 1015.690275][T10931] bcachefs (loop9): flushing journal and stopping allocators, journal seq 4 [ 1016.030603][T10931] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 4 [ 1016.048268][T10931] bcachefs (loop9): clean shutdown complete, journal seq 5 [ 1016.086192][T10931] bcachefs (loop9): marking filesystem clean [ 1016.307115][T10931] bcachefs (loop9): shutdown complete [ 1017.609939][ T5863] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1017.812993][ T5863] usb 8-1: Using ep0 maxpacket: 8 [ 1017.833650][ T5863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.845159][ T5863] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1017.858630][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.917000][ T5863] usb 8-1: config 0 descriptor?? [ 1018.198724][ T5863] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1019.444662][ T5863] usb 8-1: USB disconnect, device number 13 [ 1020.262259][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 1020.599500][T14546] hsr_slave_1 (unregistering): left promiscuous mode [ 1020.743052][ T5863] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1020.975777][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.987128][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.997212][ T5863] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.010548][ T5863] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.023279][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.233859][ T5863] usb 7-1: config 0 descriptor?? [ 1021.489989][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.498321][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.506224][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.514213][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.524299][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.537221][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.546428][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.554247][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.561933][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.570536][ T42] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 1021.915452][ T5863] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1022.006680][ T42] hid-generic 0006:0004:0009.001C: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1022.258223][ T5863] usb 7-1: USB disconnect, device number 23 [ 1022.803668][T14576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2775'. [ 1023.984983][T14593] geneve2: entered promiscuous mode [ 1024.040523][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2783'. [ 1025.358075][T14611] geneve2: entered promiscuous mode [ 1026.383760][T14633] geneve2: entered promiscuous mode [ 1026.389205][T14633] geneve2: entered allmulticast mode [ 1026.423204][ T4232] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1026.432352][ T4232] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1026.534163][ T4232] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1026.602379][ T4232] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1026.722899][T14640] kernel read not supported for file /eth0 (pid: 14640 comm: syz.7.2801) [ 1026.733500][ T30] audit: type=1800 audit(1756149762.331:234): pid=14640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2801" name="eth0" dev="mqueue" ino=57841 res=0 errno=0 [ 1028.089896][T14645] loop9: detected capacity change from 0 to 32768 [ 1028.224283][T14645] (syz.9.2804,14645,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1028.239433][T14645] (syz.9.2804,14645,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1028.381258][T14645] JBD2: Ignoring recovery information on journal [ 1028.421534][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.428480][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.657305][T14645] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1028.675151][T14649] loop6: detected capacity change from 0 to 32768 [ 1028.692096][T14649] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2805 (14649) [ 1028.727505][T14649] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1028.738126][T14649] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1028.990459][T14649] BTRFS info (device loop6): rebuilding free space tree [ 1029.032575][T14649] BTRFS info (device loop6): enabling ssd optimizations [ 1029.040018][T14649] BTRFS info (device loop6): turning on sync discard [ 1029.047033][T14649] BTRFS info (device loop6): enabling free space tree [ 1029.054268][T14649] BTRFS info (device loop6): force clearing of disk cache [ 1029.061601][T14649] BTRFS info (device loop6): enabling auto defrag [ 1029.068317][T14649] BTRFS info (device loop6): max_inline set to 0 [ 1029.088142][T14669] loop7: detected capacity change from 0 to 512 [ 1029.186154][T14673] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì4 [ 1029.397328][T14669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.413173][T14669] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.535269][T10931] ocfs2: Unmounting device (7,9) on (node local) [ 1029.822203][T11487] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1030.266246][T13142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.045423][T14691] fuse: root generation should be zero [ 1033.214257][T14698] loop7: detected capacity change from 0 to 32768 [ 1033.271392][T14698] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1033.589149][T14698] XFS (loop7): Ending clean mount [ 1033.600345][T14698] XFS (loop7): Quotacheck needed: Please wait. [ 1033.658612][T14698] XFS (loop7): Quotacheck: Done. [ 1033.873954][T13142] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1034.811137][T14722] loop9: detected capacity change from 0 to 32768 [ 1034.821460][T14722] XFS: attr2 mount option is deprecated. [ 1035.012040][T14722] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1035.367618][T14722] XFS (loop9): Ending clean mount [ 1035.388871][T14722] XFS (loop9): Quotacheck needed: Please wait. [ 1035.483111][T14722] XFS (loop9): Quotacheck: Done. [ 1035.682025][T10931] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1036.563670][T14752] loop7: detected capacity change from 0 to 256 [ 1036.745460][T14752] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1036.758989][T14752] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1036.972116][T14756] overlayfs: failed to resolve './file0': -2 [ 1038.703395][T14778] overlayfs: failed to clone upperpath [ 1038.882018][T14779] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.893241][T14779] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.904141][T14779] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1039.552386][T14779] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.569154][T14779] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.581407][T14779] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1039.794384][T14780] loop6: detected capacity change from 0 to 40427 [ 1040.033594][T14779] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.044668][T14779] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.055750][T14779] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1040.611765][T14787] loop7: detected capacity change from 0 to 32768 [ 1040.706170][T14780] F2FS-fs (loop6): invalid crc value [ 1040.770131][T14779] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.783728][T14779] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.800248][T14779] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1041.041527][T14787] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1041.058265][T14780] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1041.073777][T14780] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1041.181530][T14780] syz.6.2840: attempt to access beyond end of device [ 1041.181530][T14780] loop6: rw=2049, sector=45096, nr_sectors = 136 limit=40427 [ 1041.370281][T13142] ocfs2: Unmounting device (7,7) on (node local) [ 1041.406196][T11487] syz-executor: attempt to access beyond end of device [ 1041.406196][T11487] loop6: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 1041.423622][T11487] CPU: 0 UID: 0 PID: 11487 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 1041.423780][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1041.423876][T11487] Call Trace: [ 1041.423933][T11487] [ 1041.423991][T11487] __dump_stack+0x26/0x30 [ 1041.424174][T11487] dump_stack_lvl+0x1df/0x270 [ 1041.424372][T11487] dump_stack+0x1e/0x25 [ 1041.424545][T11487] f2fs_handle_critical_error+0xa6f/0xc20 [ 1041.424803][T11487] f2fs_stop_checkpoint+0x65/0x80 [ 1041.425010][T11487] f2fs_write_end_io+0x101c/0x1bc0 [ 1041.425202][T11487] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1041.425434][T11487] bio_endio+0xde2/0xf30 [ 1041.425597][T11487] submit_bio_noacct+0x213/0x2750 [ 1041.425811][T11487] submit_bio+0x57c/0x630 [ 1041.425981][T11487] f2fs_submit_write_bio+0x92/0x250 [ 1041.426181][T11487] __submit_merged_bio+0x16f/0x6a0 [ 1041.426383][T11487] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1041.426577][T11487] __submit_merged_write_cond+0x458/0x9a0 [ 1041.426808][T11487] f2fs_write_data_pages+0x4bb2/0x5480 [ 1041.427155][T11487] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1041.427347][T11487] ? folios_put_refs+0x1/0xb10 [ 1041.427520][T11487] ? filter_irq_stacks+0x49/0x190 [ 1041.427732][T11487] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1041.427914][T11487] ? stack_depot_save_flags+0x35/0x7b0 [ 1041.428103][T11487] ? kmsan_get_metadata+0xfb/0x160 [ 1041.428287][T11487] ? kmsan_get_metadata+0xfb/0x160 [ 1041.428472][T11487] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1041.428647][T11487] ? kmsan_get_metadata+0xfb/0x160 [ 1041.428848][T11487] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1041.429025][T11487] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1041.429245][T11487] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1041.429465][T11487] do_writepages+0x3ef/0x860 [ 1041.429618][T11487] ? _raw_spin_unlock+0x30/0x50 [ 1041.429771][T11487] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1041.430000][T11487] filemap_fdatawrite+0x207/0x260 [ 1041.430265][T11487] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1041.430456][T11487] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1041.430773][T11487] kill_f2fs_super+0x2ff/0x970 [ 1041.430954][T11487] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1041.431118][T11487] deactivate_locked_super+0xcb/0x3c0 [ 1041.431326][T11487] deactivate_super+0x12f/0x140 [ 1041.431496][T11487] cleanup_mnt+0x6fb/0x780 [ 1041.431708][T11487] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1041.431876][T11487] ? __pfx___cleanup_mnt+0x10/0x10 [ 1041.432059][T11487] __cleanup_mnt+0x22/0x30 [ 1041.432279][T11487] task_work_run+0x206/0x2b0 [ 1041.432477][T11487] exit_to_user_mode_loop+0x2a6/0x330 [ 1041.432681][T11487] do_syscall_64+0x1e3/0x210 [ 1041.432873][T11487] ? irqentry_exit+0x16/0x60 [ 1041.433031][T11487] ? clear_bhb_loop+0x40/0x90 [ 1041.433196][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.433375][T11487] RIP: 0033:0x7fc0ba98ff17 [ 1041.433485][T11487] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1041.433612][T11487] RSP: 002b:00007fff665c8a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1041.433754][T11487] RAX: 0000000000000000 RBX: 00007fc0baa11c05 RCX: 00007fc0ba98ff17 [ 1041.433850][T11487] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff665c8b10 [ 1041.433962][T11487] RBP: 00007fff665c8b10 R08: 0000000000000000 R09: 0000000000000000 [ 1041.434071][T11487] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff665c9ba0 [ 1041.434166][T11487] R13: 00007fc0baa11c05 R14: 00000000000fe33b R15: 00007fff665c9be0 [ 1041.434307][T11487] [ 1041.787298][T11487] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1041.945991][ T4802] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.954959][ T4802] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1041.963692][ T4802] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1042.073019][ T4802] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.081519][ T4802] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1042.090707][ T4802] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1042.106324][ T4232] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.120432][ T4232] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1042.130459][ T4232] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1042.266020][ T4464] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.274837][ T4464] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1042.283998][ T4464] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1044.048827][T14819] loop9: detected capacity change from 0 to 40427 [ 1044.070190][T14819] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1044.078497][T14819] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1044.095934][T14819] F2FS-fs (loop9): invalid crc value [ 1044.441040][T14819] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1044.464866][T14819] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1044.476124][T14819] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1048.106289][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2871'. [ 1048.115951][T14864] netlink: 'syz.7.2871': attribute type 15 has an invalid length. [ 1048.142268][T14864] vxlan0: entered promiscuous mode [ 1048.174347][ T4464] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.201892][T14869] loop9: detected capacity change from 0 to 136 [ 1048.214155][ T4464] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.236489][ T4464] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.268942][ T4464] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.292909][T14869] iso9660: Unknown parameter 'ÿÿE²'À' [ 1049.355209][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2879'. [ 1049.365483][T14879] bridge_slave_1: left allmulticast mode [ 1049.371330][T14879] bridge_slave_1: left promiscuous mode [ 1049.378388][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.531404][T14879] bridge_slave_0: left allmulticast mode [ 1049.537745][T14879] bridge_slave_0: left promiscuous mode [ 1049.544893][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.483285][T14893] batadv_slave_1: entered promiscuous mode [ 1050.530989][T14892] batadv_slave_1: left promiscuous mode [ 1052.520011][T14903] loop9: detected capacity change from 0 to 32768 [ 1052.758846][T14903] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1052.759012][T14903] allowing incompatible features above 0.0: (unknown version) [ 1052.759113][T14903] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1052.815232][T14903] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 1052.823828][T14903] bcachefs (loop9): initializing new filesystem [ 1052.845125][T14903] bcachefs (loop9): going read-write [ 1052.884367][T14903] bcachefs (loop9): marking superblocks [ 1052.940632][T14903] bcachefs (loop9): initializing freespace [ 1052.977889][T14903] bcachefs (loop9): done initializing freespace [ 1053.032285][T14903] bcachefs (loop9): reading snapshots table [ 1053.040752][T14903] bcachefs (loop9): reading snapshots done [ 1053.152004][T14903] bcachefs (loop9): done starting filesystem [ 1053.225252][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 1053.601389][T10931] bcachefs (loop9): shutting down [ 1053.606983][T10931] bcachefs (loop9): going read-only [ 1053.653185][T10931] bcachefs (loop9): finished waiting for writes to stop [ 1053.753955][T10931] bcachefs (loop9): flushing journal and stopping allocators, journal seq 5 [ 1054.229204][T10931] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 5 [ 1054.294052][T10931] bcachefs (loop9): clean shutdown complete, journal seq 6 [ 1054.368866][T10931] bcachefs (loop9): marking filesystem clean [ 1054.396039][T14928] loop7: detected capacity change from 0 to 32768 [ 1054.435510][T14928] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1054.444115][T14928] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1054.472366][T14928] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1054.588899][T10931] bcachefs (loop9): shutdown complete [ 1054.796458][T14928] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1056.187971][T11057] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1056.436317][T11057] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.450511][T11057] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.464767][T11057] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1056.475467][T11057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.725453][T11057] usb 8-1: config 0 descriptor?? [ 1057.104952][T11057] usbhid 8-1:0.0: can't add hid device: -71 [ 1057.111736][T11057] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1057.290708][T11057] usb 8-1: USB disconnect, device number 14 [ 1058.516140][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2910'. [ 1059.138592][T14974] loop7: detected capacity change from 0 to 512 [ 1059.228032][T14974] msdos: Bad value for 'time_offset' [ 1060.747798][T14981] 9pnet_fd: Insufficient options for proto=fd [ 1061.471200][T14980] overlayfs: failed to clone lowerpath [ 1062.718714][T15000] tipc: Enabled bearer , priority 10 [ 1064.626893][T15021] loop7: detected capacity change from 0 to 256 [ 1064.879980][T15021] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1064.939319][T15027] tipc: Failed to remove unknown binding: 66,1,1/0:4123910994/4123910996 [ 1064.948491][T15027] tipc: Failed to remove unknown binding: 66,1,1/0:4123910994/4123910996 [ 1065.094092][T15021] exFAT-fs (loop7): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967287) [ 1065.094092][T15021] [ 1065.106720][T15021] exFAT-fs (loop7): Filesystem has been set read-only [ 1065.113819][T15021] exFAT-fs (loop7): error, failed to bmap (inode : ffff8880143cf170 iblock : 0, err : -5) [ 1065.307181][T15021] exFAT-fs (loop7): write: fail to zero from 0 to 1065(-5) [ 1066.008748][ T30] audit: type=1326 audit(1756149801.591:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15033 comm="syz.9.2934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5d8ebe9 code=0x0 [ 1066.932386][T15048] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1067.808118][T12078] Bluetooth: hci5: sending frame failed (-49) [ 1067.814945][ T9053] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1069.853137][T15082] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2951'. [ 1069.910864][T15082] gretap0: entered promiscuous mode [ 1069.974018][T15082] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2951'. [ 1069.984059][T15082] 0ªî{X¹¦: renamed from gretap0 [ 1070.042380][T15082] 0ªî{X¹¦: left promiscuous mode [ 1070.048156][T15082] 0ªî{X¹¦: entered allmulticast mode [ 1070.066659][T15082] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1072.186428][T15113] loop7: detected capacity change from 0 to 512 [ 1072.294874][T15113] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 1072.314403][T15113] System zones: 0-2, 18-18, 34-35 [ 1072.349100][T15113] EXT4-fs error (device loop7): ext4_quota_enable:7128: inode #4: comm syz.7.2962: iget: bad i_size value: 5910974510929920 [ 1072.380268][T15113] EXT4-fs error (device loop7): ext4_quota_enable:7131: comm syz.7.2962: Bad quota inode: 4, type: 1 [ 1072.411020][T15113] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1072.522244][T15113] EXT4-fs (loop7): mount failed [ 1072.754951][T15125] syz_tun: entered promiscuous mode [ 1072.767534][T15125] batadv_slave_0: entered promiscuous mode [ 1074.510902][T15151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2975'. [ 1076.357158][T15174] loop9: detected capacity change from 0 to 256 [ 1076.898456][T15167] loop6: detected capacity change from 0 to 65536 [ 1076.964265][T15167] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1077.217783][T15167] XFS (loop6): Ending clean mount [ 1077.325857][ T30] audit: type=1326 audit(1756149812.921:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15188 comm="syz.4.2988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcfb98ebe9 code=0x0 [ 1077.458327][T11487] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1079.105552][ T30] audit: type=1804 audit(1756149814.701:237): pid=15212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2999" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=60726 res=1 errno=0 [ 1079.912443][T15226] loop7: detected capacity change from 0 to 1024 [ 1079.968273][T15226] ext4: Unknown parameter 'context' [ 1080.844963][T15239] netlink: 'syz.9.3009': attribute type 13 has an invalid length. [ 1082.449193][T15239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.956427][T15239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.994976][T15239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.238937][T15253] loop6: detected capacity change from 0 to 4096 [ 1084.582895][T15253] ntfs3(loop6): Failed to initialize $Secure::$SDH (-22). [ 1084.590634][T15253] ntfs3(loop6): Failed to initialize $Secure (-22). [ 1084.932119][ T4298] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.942313][ T4298] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1084.951215][ T4298] netdevsim netdevsim9 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1085.044389][ T4298] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.053868][ T4298] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1085.062777][ T4298] netdevsim netdevsim9 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1085.131567][ T4298] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.140460][ T4298] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1085.149519][ T4298] netdevsim netdevsim9 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1085.179234][ T4298] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.189003][ T4298] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1085.197879][ T4298] netdevsim netdevsim9 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1085.910496][T15266] loop7: detected capacity change from 0 to 32768 [ 1086.079411][T15266] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1086.619411][T13142] ocfs2: Unmounting device (7,7) on (node local) [ 1087.412171][T15286] loop9: detected capacity change from 0 to 4096 [ 1088.343018][ T5433] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1088.350880][T15303] loop7: detected capacity change from 0 to 128 [ 1088.383587][T15303] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1088.569901][ T5433] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.580513][ T5433] usb 10-1: config 0 has no interfaces? [ 1088.684888][ T5433] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1088.694540][ T5433] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.703108][ T5433] usb 10-1: Product: syz [ 1088.710999][ T5433] usb 10-1: Manufacturer: syz [ 1088.717463][ T5433] usb 10-1: SerialNumber: syz [ 1088.826349][ T5433] usb 10-1: config 0 descriptor?? [ 1089.843972][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.850648][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.177367][T15331] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1090.312982][T15331] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1091.442057][ T5433] usb 10-1: USB disconnect, device number 11 [ 1091.947797][T15354] overlayfs: failed to decode file handle (len=2, type=0, flags=0, err=-22) [ 1092.079857][T15356] syz.7.3049 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1092.560889][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3050'. [ 1094.808904][T15379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3056'. [ 1098.047765][T15412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.095437][T15417] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3071'. [ 1098.095744][T15412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.166585][T15412] bond0 (unregistering): Released all slaves [ 1098.861377][T15418] loop7: detected capacity change from 0 to 4096 [ 1099.350045][T15431] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3079'. [ 1100.530212][T15438] loop6: detected capacity change from 0 to 32768 [ 1100.671092][T15438] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 1100.671275][T15438] allowing incompatible features above 0.9: (unknown version) [ 1100.671376][T15438] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1100.724602][T15438] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 1100.733350][T15438] bcachefs (loop6): initializing new filesystem [ 1100.773309][T15438] bcachefs (loop6): going read-write [ 1100.805400][T15438] bcachefs (loop6): marking superblocks [ 1100.854447][T15438] bcachefs (loop6): initializing freespace [ 1100.884791][T15438] bcachefs (loop6): done initializing freespace [ 1100.908323][T15438] bcachefs (loop6): reading snapshots table [ 1100.914823][T15438] bcachefs (loop6): reading snapshots done [ 1101.009777][T15438] bcachefs (loop6): done starting filesystem [ 1101.261184][T11487] bcachefs (loop6): shutting down [ 1101.266643][T11487] bcachefs (loop6): going read-only [ 1101.272058][T11487] bcachefs (loop6): finished waiting for writes to stop [ 1101.384736][T11487] bcachefs (loop6): flushing journal and stopping allocators, journal seq 7 [ 1102.266384][T11487] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 7 [ 1102.280474][T11487] bcachefs (loop6): clean shutdown complete, journal seq 8 [ 1102.309291][T11487] bcachefs (loop6): marking filesystem clean [ 1102.405515][T11487] bcachefs (loop6): shutdown complete [ 1102.546455][T12078] Bluetooth: hci4: Malformed Event: 0x02 [ 1102.989974][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3094'. [ 1103.868432][T15488] Bluetooth: MGMT ver 1.23 [ 1104.174193][ T5433] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 1104.381982][ T5433] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1104.391422][ T5433] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.434708][ T5433] usb 8-1: config 0 descriptor?? [ 1105.711501][T15508] loop9: detected capacity change from 0 to 4096 [ 1105.724054][ T5433] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1105.734440][ T5433] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1105.746197][ T5433] asix 8-1:0.0: probe with driver asix failed with error -71 [ 1105.862083][T15513] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1105.864771][ T5433] usb 8-1: USB disconnect, device number 15 [ 1106.232042][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 1106.241731][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 1106.515401][T15523] loop9: detected capacity change from 0 to 128 [ 1106.634228][T15525] overlayfs: failed to clone upperpath [ 1107.252236][T15536] netlink: 536 bytes leftover after parsing attributes in process `syz.6.3116'. [ 1107.261822][T15536] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3116'. [ 1107.517004][T13105] syz_tun (unregistering): left promiscuous mode [ 1108.318074][ T4464] bridge_slave_1: left allmulticast mode [ 1108.324361][ T4464] bridge_slave_1: left promiscuous mode [ 1108.330983][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.799810][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3123'. [ 1109.163188][ T4464] batadv_slave_0: left promiscuous mode [ 1109.210442][ T4464] hsr_slave_0: left promiscuous mode [ 1109.272189][ T4464] hsr_slave_1: left promiscuous mode [ 1109.284114][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.296723][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.898407][ T4464] team0 (unregistering): Port device team_slave_1 removed [ 1110.001821][ T4464] team0 (unregistering): Port device team_slave_0 removed [ 1111.786025][ T9053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1111.796318][ T9053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1111.806150][ T9053] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1111.819855][ T9053] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1111.831879][ T9053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1112.425318][T15582] loop6: detected capacity change from 0 to 512 [ 1112.628441][T15582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.642893][T15582] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.664975][T15572] chnl_net:caif_netlink_parms(): no params data found [ 1113.892982][ T30] audit: type=1800 audit(1756149849.431:238): pid=15582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3135" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1113.915634][ T30] audit: type=1800 audit(1756149849.431:239): pid=15595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3135" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1113.936396][ T30] audit: type=1800 audit(1756149849.441:240): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3135" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1114.019095][ T9053] Bluetooth: hci3: command tx timeout [ 1114.135659][T15606] netlink: 'syz.7.3142': attribute type 12 has an invalid length. [ 1114.203123][T11487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.179322][T15572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.187178][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.195505][T15572] bridge_slave_0: entered allmulticast mode [ 1115.205452][T15572] bridge_slave_0: entered promiscuous mode [ 1115.375699][T15572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.383510][T15572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.391328][T15572] bridge_slave_1: entered allmulticast mode [ 1115.401184][T15572] bridge_slave_1: entered promiscuous mode [ 1115.401752][T15623] loop6: detected capacity change from 0 to 128 [ 1115.584165][T15623] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1115.608697][T15623] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.694511][T15572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.718821][T15572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.023831][T15630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.038886][T15630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.056073][T15630] batman_adv: batadv0: Interface activated: dummy0 [ 1116.058955][ T9053] Bluetooth: hci3: command tx timeout [ 1116.062915][T15630] batadv0: mtu less than device minimum [ 1116.065844][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.074060][T11487] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1116.077026][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.106847][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.119977][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.133139][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.146178][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.159292][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.172371][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.185419][T15630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1116.259616][T15572] team0: Port device team_slave_0 added [ 1116.287991][T15572] team0: Port device team_slave_1 added [ 1116.607868][T15572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.615224][T15572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.642907][T15572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.780981][T15572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.788398][T15572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.815197][T15572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.419861][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.428571][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.469284][T15572] hsr_slave_0: entered promiscuous mode [ 1117.487515][T15572] hsr_slave_1: entered promiscuous mode [ 1117.496511][T15572] debugfs: 'hsr0' already exists in 'hsr' [ 1117.502525][T15572] Cannot create hsr debugfs directory [ 1118.153032][ T9053] Bluetooth: hci3: command tx timeout [ 1119.076631][ T30] audit: type=1326 audit(1756149854.671:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ba98ebe9 code=0x7fc00000 [ 1119.183327][ T30] audit: type=1326 audit(1756149854.721:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0ba98ebe9 code=0x7fc00000 [ 1119.207790][ T30] audit: type=1326 audit(1756149854.731:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ba98ebe9 code=0x7fc00000 [ 1119.728978][T15572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1119.768343][T15676] loop6: detected capacity change from 0 to 128 [ 1119.892116][T15572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1119.894211][T15676] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1119.921772][T15676] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1120.029134][T15572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1120.105240][T15682] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3166'. [ 1120.121847][T15572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1120.181470][T15676] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.3164: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1120.203141][ T9053] Bluetooth: hci3: command tx timeout [ 1120.310683][T15676] EXT4-fs (loop6): Remounting filesystem read-only [ 1120.677520][T11487] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1120.993428][T15572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.039728][T15694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1121.163851][T15572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.207224][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.215256][ T4663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.405211][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.413374][ T4663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.901008][T15572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1121.911948][T15572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1123.053807][T15718] sctp: [Deprecated]: syz.7.3177 (pid 15718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1123.053807][T15718] Use struct sctp_sack_info instead [ 1123.398119][T15572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.010950][T15572] veth0_vlan: entered promiscuous mode [ 1124.282276][T15572] veth1_vlan: entered promiscuous mode [ 1124.664950][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3182'. [ 1124.674659][T15728] netlink: 'syz.6.3182': attribute type 20 has an invalid length. [ 1124.718485][ T1095] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.785912][ T1095] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.913733][ T1095] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.961399][ T1095] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.979801][T15572] veth0_macvtap: entered promiscuous mode [ 1125.034720][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3182'. [ 1125.044603][T15728] netlink: 'syz.6.3182': attribute type 20 has an invalid length. [ 1125.091035][T15572] veth1_macvtap: entered promiscuous mode [ 1125.216957][T15722] loop7: detected capacity change from 0 to 65536 [ 1125.252212][T15722] XFS (loop7): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1125.378176][T15572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.436250][T15572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.587124][T15722] XFS (loop7): Ending clean mount [ 1125.606963][T15722] XFS (loop7): Quotacheck needed: Please wait. [ 1125.617268][ T1095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.647395][ T1095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.678750][T15722] XFS (loop7): Quotacheck: Done. [ 1125.707843][ T4232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.762382][ T4232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.855429][T13142] XFS (loop7): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1127.533905][T15743] loop6: detected capacity change from 0 to 65536 [ 1127.641907][T15743] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1127.726969][T12078] Bluetooth: hci4: command 0x0406 tx timeout [ 1127.877549][T15743] XFS (loop6): Ending clean mount [ 1127.899756][T15743] XFS (loop6): Quotacheck needed: Please wait. [ 1127.951169][T15743] XFS (loop6): Quotacheck: Done. [ 1128.261927][ T30] audit: type=1800 audit(1756149863.841:244): pid=15743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3185" name="file1" dev="loop6" ino=70 res=0 errno=0 [ 1128.405734][T11487] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1129.802082][T15784] sctp: [Deprecated]: syz.0.3197 (pid 15784) Use of int in max_burst socket option. [ 1129.802082][T15784] Use struct sctp_assoc_value instead [ 1130.408190][T15794] loop7: detected capacity change from 0 to 128 [ 1130.445626][T15794] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1130.515046][T15794] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1132.287963][T15808] loop6: detected capacity change from 0 to 32768 [ 1132.297654][T15808] BTRFS warning: excessive commit interval 2147483647, use with care [ 1132.413387][T15808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3193 (15808) [ 1132.428539][T15811] loop7: detected capacity change from 0 to 32768 [ 1132.469599][T15808] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1132.480598][T15808] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 1132.489722][T15808] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1132.530878][T15811] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 1132.591643][ T30] audit: type=1800 audit(1756149868.191:245): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3203" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 1132.655982][T15811] (syz.7.3203,15811,0):ocfs2_file_write_iter:2446 ERROR: status = -27 [ 1132.751281][T15808] BTRFS info (device loop6): rebuilding free space tree [ 1132.785692][T15808] BTRFS info (device loop6): disabling free space tree [ 1132.793161][T15808] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1132.803267][T15808] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1132.838322][T15808] BTRFS info (device loop6): enabling ssd optimizations [ 1132.848586][T15808] BTRFS info (device loop6): turning off barriers [ 1132.855519][T15808] BTRFS info (device loop6): turning on flush-on-commit [ 1132.862807][T15808] BTRFS info (device loop6): enabling disk space caching [ 1132.870037][T15808] BTRFS info (device loop6): force clearing of disk cache [ 1132.873509][T13142] ocfs2: Unmounting device (7,7) on (node local) [ 1132.877786][T15808] BTRFS info (device loop6): doing ref verification [ 1132.890630][T15808] BTRFS info (device loop6): force zlib compression, level 3 [ 1132.898451][T15808] BTRFS info (device loop6): max_inline set to 0 [ 1133.177492][T11487] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1134.115588][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.124295][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.178561][T15843] gfs2: path_lookup on squashfs returned error -2 [ 1134.334214][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.342258][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.441179][T15863] loop3: detected capacity change from 0 to 256 [ 1139.308273][ T30] audit: type=1800 audit(1756149874.901:246): pid=15912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3238" name="file1" dev="overlay" ino=962 res=0 errno=0 [ 1139.515172][T15916] overlayfs: failed to clone upperpath [ 1140.488463][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1140.498041][T15935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1140.507517][T15935] netlink: 'syz.3.3248': attribute type 5 has an invalid length. [ 1142.327904][T15964] net_ratelimit: 13 callbacks suppressed [ 1142.328007][T15964] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 1142.359884][T15955] loop7: detected capacity change from 0 to 32768 [ 1142.383274][T15955] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3255 (15955) [ 1142.405746][T15955] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1142.416403][T15955] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1142.586201][T15955] BTRFS info (device loop7): rebuilding free space tree [ 1142.624123][T15955] BTRFS info (device loop7): allowing degraded mounts [ 1142.631303][T15955] BTRFS info (device loop7): enabling ssd optimizations [ 1142.638693][T15955] BTRFS info (device loop7): enabling free space tree [ 1142.645960][T15955] BTRFS info (device loop7): force clearing of disk cache [ 1142.653406][T15955] BTRFS info (device loop7): use zstd compression, level 3 [ 1142.660894][T15955] BTRFS info (device loop7): max_inline set to 0 [ 1143.111853][T15986] loop3: detected capacity change from 0 to 164 [ 1143.361096][T13142] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1144.066516][T15995] tipc: Started in network mode [ 1144.071604][T15995] tipc: Node identity 4, cluster identity 4711 [ 1144.078336][T15995] tipc: Node number set to 4 [ 1145.077927][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'. [ 1145.544235][ C0] Unknown status report in ack skb [ 1146.140595][T16014] loop3: detected capacity change from 0 to 4096 [ 1146.511983][ T30] audit: type=1800 audit(1756149882.111:247): pid=16014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3273" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 1147.590826][T16042] netlink: 'syz.3.3281': attribute type 4 has an invalid length. [ 1147.838958][T16042] netlink: 'syz.3.3281': attribute type 4 has an invalid length. [ 1148.015910][T16037] loop7: detected capacity change from 0 to 32768 [ 1148.027429][T16037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3282 (16037) [ 1148.072038][T16037] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1148.082827][T16037] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1148.239221][T16037] BTRFS info (device loop7): enabling ssd optimizations [ 1148.246843][T16037] BTRFS info (device loop7): enabling free space tree [ 1148.840273][T13142] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1150.152361][T16079] batman_adv: batadv0: Adding interface: dummy0 [ 1150.158985][T16079] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.184819][T16079] batman_adv: batadv0: Interface activated: dummy0 [ 1150.344926][T16079] batadv0: mtu less than device minimum [ 1150.355686][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1150.368789][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1150.381929][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1150.395059][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1150.408145][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1150.421182][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1150.434312][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1150.447479][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1150.460482][T16079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1151.329729][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.336879][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.892318][T16095] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1151.933483][T11057] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1152.183654][T11057] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.200066][T11057] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1152.274234][T11057] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.283866][T11057] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.296292][T11057] usb 8-1: Product: syz [ 1152.300686][T11057] usb 8-1: Manufacturer: syz [ 1152.307761][T11057] usb 8-1: SerialNumber: syz [ 1152.377799][T11057] cdc_ncm 8-1:1.0: skipping garbage [ 1152.383391][T11057] cdc_ncm 8-1:1.0: NCM or ECM functional descriptors missing [ 1152.397144][T11057] cdc_ncm 8-1:1.0: bind() failure [ 1152.418701][T11057] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1152.426132][T11057] cdc_ncm 8-1:1.1: bind() failure [ 1152.655142][ T5863] usb 8-1: USB disconnect, device number 16 [ 1153.263827][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1154.894579][T16125] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96 [ 1155.264021][T16127] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3310'. [ 1155.278891][T16127] unsupported nlmsg_type 40 [ 1155.513010][T16131] loop7: detected capacity change from 0 to 128 [ 1157.353717][ T5863] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1157.570909][ T5863] usb 8-1: config 0 has no interfaces? [ 1157.577181][ T5863] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1157.586598][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.646938][ T5863] usb 8-1: config 0 descriptor?? [ 1157.888296][ T5863] usb 8-1: USB disconnect, device number 17 [ 1159.651432][T16177] input: syz0 as /devices/virtual/input/input31 [ 1159.982213][ T9053] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 1160.863859][T16200] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1160.884626][T16200] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1160.896228][T16200] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.926483][T16200] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1160.934287][T16200] net_ratelimit: 10 callbacks suppressed [ 1160.934365][T16200] batadv0: mtu less than device minimum [ 1160.948390][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.961589][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.974747][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.987742][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1161.000788][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1161.013933][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1161.027220][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1161.040197][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1161.053512][T16200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.093835][T16236] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 1164.369286][T16238] loop7: detected capacity change from 0 to 4096 [ 1164.436358][T16238] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1164.546940][T16238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1164.771868][ T30] audit: type=1800 audit(1756149900.371:248): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3353" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1165.135577][T13142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.720258][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3362'. [ 1166.242357][T16274] loop3: detected capacity change from 0 to 128 [ 1166.336049][T16274] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1166.394387][T16274] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.594716][T16278] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3369'. [ 1166.901003][T15572] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1167.282279][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3373'. [ 1168.003464][T16298] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 1168.016513][T16298] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1168.024778][T16298] gretap0: entered promiscuous mode [ 1168.030185][T16298] gretap0: entered allmulticast mode [ 1169.257400][T16311] loop6: detected capacity change from 0 to 1024 [ 1169.289526][T16311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1169.405976][T16311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.747459][T16319] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1169.845882][T11487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.265673][T16326] ipvlan2: entered promiscuous mode [ 1170.276644][T16326] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1170.289063][T16326] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1171.153708][T16340] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3394'. [ 1172.717470][T16361] loop3: detected capacity change from 0 to 1024 [ 1172.968603][T16363] loop7: detected capacity change from 0 to 512 [ 1173.073123][T16363] EXT4-fs (loop7): blocks per group (34) and clusters per group (32768) inconsistent [ 1173.102320][ T30] audit: type=1800 audit(1756149908.701:249): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3403" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 1173.344491][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 1174.451888][T16384] loop3: detected capacity change from 0 to 256 [ 1174.869789][T16384] FAT-fs (loop3): Directory bread(block 64) failed [ 1174.876834][T16384] FAT-fs (loop3): Directory bread(block 65) failed [ 1174.884496][T16384] FAT-fs (loop3): Directory bread(block 66) failed [ 1174.891227][T16384] FAT-fs (loop3): Directory bread(block 67) failed [ 1174.898338][T16384] FAT-fs (loop3): Directory bread(block 68) failed [ 1174.905530][T16384] FAT-fs (loop3): Directory bread(block 69) failed [ 1174.912415][T16384] FAT-fs (loop3): Directory bread(block 70) failed [ 1174.924292][T16384] FAT-fs (loop3): Directory bread(block 71) failed [ 1174.934822][T16384] FAT-fs (loop3): Directory bread(block 72) failed [ 1174.941566][T16384] FAT-fs (loop3): Directory bread(block 73) failed [ 1174.995770][T16390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.102936][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3421'. [ 1176.140026][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3421'. [ 1176.797542][T16418] 9pnet_fd: Insufficient options for proto=fd [ 1176.806556][T16417] sctp: [Deprecated]: syz.4.3425 (pid 16417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1176.806556][T16417] Use struct sctp_sack_info instead [ 1176.813802][ T5863] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1177.051823][ T5863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.066589][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1177.116234][ T5863] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1177.126107][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1177.135256][ T5863] usb 4-1: SerialNumber: syz [ 1177.248074][T16425] netlink: 'syz.0.3429': attribute type 1 has an invalid length. [ 1177.419328][T16427] bond3: (slave bridge1): making interface the new active one [ 1177.429658][T16427] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1177.476357][ T5863] usb 4-1: 0:2 : does not exist [ 1177.579813][ T5863] usb 4-1: USB disconnect, device number 10 [ 1178.357777][T16429] loop6: detected capacity change from 0 to 32768 [ 1178.458667][T16429] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1178.645330][T16442] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 1178.794344][T11487] ocfs2: Unmounting device (7,6) on (node local) [ 1179.174975][T16446] overlayfs: failed to clone lowerpath [ 1179.472328][ T30] audit: type=1326 audit(1756149915.061:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e18ebe9 code=0x7ffc0000 [ 1179.499359][ T30] audit: type=1326 audit(1756149915.071:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f276e18ebe9 code=0x7ffc0000 [ 1179.708532][ T30] audit: type=1326 audit(1756149915.151:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e18ebe9 code=0x7ffc0000 [ 1179.735511][ T30] audit: type=1326 audit(1756149915.151:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e18ebe9 code=0x7ffc0000 [ 1180.126280][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3443'. [ 1184.654011][T16523] netlink: 'syz.3.3467': attribute type 1 has an invalid length. [ 1184.892399][T16528] bond1: (slave bridge1): making interface the new active one [ 1184.903003][T16528] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1186.048489][T16541] can0: slcan on pts0. [ 1186.779888][T16536] can0 (unregistered): slcan off pts0. [ 1188.266153][T16557] loop3: detected capacity change from 0 to 32768 [ 1190.103961][T16577] loop6: detected capacity change from 0 to 4096 [ 1190.707559][ T30] audit: type=1800 audit(1756149926.311:254): pid=16577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3491" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 1191.634567][T16601] netlink: 'syz.6.3499': attribute type 4 has an invalid length. [ 1192.001845][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 1192.011511][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 1192.390590][T16608] loop6: detected capacity change from 0 to 8 [ 1193.042918][T16609] loop3: detected capacity change from 0 to 32768 [ 1193.082321][T16609] (syz.3.3503,16609,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1193.098882][T16609] (syz.3.3503,16609,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1193.137020][T16609] JBD2: Ignoring recovery information on journal [ 1193.242195][T16609] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1193.617292][T16626] loop6: detected capacity change from 0 to 16 [ 1193.706551][T16626] erofs (device loop6): mounted with root inode @ nid 36. [ 1193.794670][ T5433] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1193.858505][T15572] ocfs2: Unmounting device (7,3) on (node local) [ 1193.865967][T16626] 9pnet: p9_errstr2errno: server reported unknown error Xðèá×½N!: < * ìPq$5LHì;3Kµ§ÚºÎÙt{é‘<¾Ú]èæq’h?ȾŽÌ % SXàâ?ÿC€ [ 1193.865967][T16626] ˜Ç [ 1194.003018][ T5433] usb 8-1: Using ep0 maxpacket: 32 [ 1194.067458][ T5433] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.081584][ T5433] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1194.149247][ T30] audit: type=1326 audit(1756149929.741:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.0.3512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e87d8ebe9 code=0x0 [ 1194.191020][ T5433] usb 8-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 1194.200549][ T5433] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.209054][ T5433] usb 8-1: Product: syz [ 1194.213551][ T5433] usb 8-1: Manufacturer: syz [ 1194.218348][ T5433] usb 8-1: SerialNumber: syz [ 1194.273152][ T5433] usb 8-1: config 0 descriptor?? [ 1194.549079][ T5433] usb 8-1: USB disconnect, device number 18 [ 1197.320324][T16654] loop7: detected capacity change from 0 to 32768 [ 1197.410171][T16654] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1197.613857][T16654] XFS (loop7): Ending clean mount [ 1197.627394][T16654] XFS (loop7): Quotacheck needed: Please wait. [ 1197.675040][T16654] XFS (loop7): Quotacheck: Done. [ 1197.701227][T16654] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1198.158338][ T42] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1199.341740][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 1199.714617][ T42] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1199.723279][ T42] usb 7-1: config 0 has no interface number 0 [ 1199.831339][ T42] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1199.841172][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.849543][ T42] usb 7-1: Product: syz [ 1199.854031][ T42] usb 7-1: Manufacturer: syz [ 1199.858823][ T42] usb 7-1: SerialNumber: syz [ 1199.890017][ T42] usb 7-1: config 0 descriptor?? [ 1199.919586][ T42] smsc95xx v2.0.0 [ 1200.388689][ T42] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1200.400062][ T42] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1200.599164][T16690] loop3: detected capacity change from 0 to 4096 [ 1200.660927][T16690] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1201.260928][ T42] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1201.274140][ T42] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1201.302156][ T42] usb 7-1: USB disconnect, device number 24 [ 1202.294009][T16719] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1202.718095][T16718] loop6: detected capacity change from 0 to 4096 [ 1202.750752][T16718] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1203.996509][T16734] loop3: detected capacity change from 0 to 40427 [ 1204.031980][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1204.057705][T16734] F2FS-fs (loop3): build fault injection rate: 14 [ 1204.066204][T16734] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 1204.082985][T16734] F2FS-fs (loop3): invalid crc value [ 1204.117858][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xde2/0xf30 [ 1204.151477][T16740] loop7: detected capacity change from 0 to 1024 [ 1204.168804][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xde2/0xf30 [ 1204.454582][T16734] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1204.463984][T16734] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 1204.488119][T16734] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1204.699413][ T9053] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 1206.267087][ T1086] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.277842][ T1086] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.550485][ T1086] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.561227][ T1086] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.772124][ T1086] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.786408][ T1086] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.941921][ T1086] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.952694][ T1086] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.852976][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.890394][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.918112][ T1086] bond0 (unregistering): Released all slaves [ 1208.040544][ T1086] tipc: Disabling bearer [ 1208.056401][ T1086] tipc: Disabling bearer [ 1208.062207][ T1086] tipc: Left network mode [ 1208.916394][ T1086] hsr_slave_0: left promiscuous mode [ 1208.960846][ T1086] hsr_slave_1: left promiscuous mode [ 1208.970044][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.977832][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.051005][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.058855][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.161447][ T1086] veth1_macvtap: left promiscuous mode [ 1209.167460][ T1086] veth0_macvtap: left promiscuous mode [ 1209.174011][ T1086] veth1_vlan: left promiscuous mode [ 1209.179600][ T1086] veth0_vlan: left promiscuous mode [ 1209.525856][T12078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1209.556971][T12078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1209.611939][T12078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1209.696849][T12078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1209.805728][T12078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1210.910356][T16786] loop6: detected capacity change from 0 to 32768 [ 1211.204625][T16786] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1211.649054][T16786] XFS (loop6): Ending clean mount [ 1211.657952][T16803] nbd3: detected capacity change from 0 to 63 [ 1211.669888][T16786] XFS (loop6): Quotacheck needed: Please wait. [ 1211.686217][T16810] block nbd3: NBD_DISCONNECT [ 1211.694534][T16810] block nbd3: Disconnected due to user request. [ 1211.701045][T16810] block nbd3: shutting down sockets [ 1211.729855][T16786] XFS (loop6): Quotacheck: Done. [ 1211.798597][T16777] chnl_net:caif_netlink_parms(): no params data found [ 1211.907909][T12078] Bluetooth: hci4: command tx timeout [ 1212.020665][T11487] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1212.374428][T16818] loop3: detected capacity change from 0 to 512 [ 1212.409756][T16818] EXT4-fs: Ignoring removed i_version option [ 1212.493802][T16818] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3580: bg 0: block 131: padding at end of block bitmap is not set [ 1212.586386][T16818] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1212.654649][T16818] EXT4-fs (loop3): 1 truncate cleaned up [ 1212.664466][T16818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.715557][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.722334][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.859650][T16777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.870841][T16777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.879660][T16777] bridge_slave_0: entered allmulticast mode [ 1212.895880][T16777] bridge_slave_0: entered promiscuous mode [ 1212.985639][T16777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.993456][T16777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.001288][T16777] bridge_slave_1: entered allmulticast mode [ 1213.014555][T16777] bridge_slave_1: entered promiscuous mode [ 1213.659144][T16777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.759608][T15572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.809946][T16777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.964641][T12078] Bluetooth: hci4: command tx timeout [ 1214.019745][T15258] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1214.065718][T16777] team0: Port device team_slave_0 added [ 1214.091516][T16777] team0: Port device team_slave_1 added [ 1214.224046][T15258] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1214.234543][T15258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1214.267571][T15258] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1214.277169][T15258] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1214.286051][T15258] usb 7-1: Product: syz [ 1214.290402][T15258] usb 7-1: Manufacturer: syz [ 1214.295337][T15258] usb 7-1: SerialNumber: syz [ 1214.314935][T16777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.322252][T16777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.351613][T16777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.371859][T15258] usb 7-1: config 0 descriptor?? [ 1214.394422][T15258] usb 7-1: selecting invalid altsetting 0 [ 1214.420658][T16777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.428076][T16777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.457948][T16777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.644788][ T5433] usb 7-1: USB disconnect, device number 25 [ 1214.740946][T16777] hsr_slave_0: entered promiscuous mode [ 1214.755755][T16777] hsr_slave_1: entered promiscuous mode [ 1214.766259][T16777] debugfs: 'hsr0' already exists in 'hsr' [ 1214.772188][T16777] Cannot create hsr debugfs directory [ 1216.044917][T12078] Bluetooth: hci4: command tx timeout [ 1216.321500][T16856] loop3: detected capacity change from 0 to 512 [ 1216.351574][T16777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1216.384793][T16777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1216.404606][T16856] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1216.470273][T16854] loop6: detected capacity change from 0 to 4096 [ 1216.524375][T16854] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1216.533220][T16854] NILFS (loop6): trying rollback from an earlier position [ 1216.658441][T16854] NILFS (loop6): recovery complete [ 1217.147454][T16864] netlink: 'syz.0.3598': attribute type 10 has an invalid length. [ 1217.179645][ T30] audit: type=1326 audit(1756149952.781:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16863 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e87d8ebe9 code=0x7ffc0000 [ 1217.245835][T16864] bond0: entered promiscuous mode [ 1217.251315][T16864] bond_slave_0: entered promiscuous mode [ 1217.258420][T16864] bond_slave_1: entered promiscuous mode [ 1217.287915][ T30] audit: type=1326 audit(1756149952.831:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16863 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0e87d8ebe9 code=0x7ffc0000 [ 1217.311332][ T30] audit: type=1326 audit(1756149952.831:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16863 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e87d8ebe9 code=0x7ffc0000 [ 1217.336942][ T30] audit: type=1326 audit(1756149952.841:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16863 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0e87d8ebe9 code=0x7ffc0000 [ 1217.426136][T16777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1217.447233][T16866] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1217.449779][T16856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0002] [ 1217.470967][T16777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1217.503511][ T30] audit: type=1326 audit(1756149952.991:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16863 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e87d8ebe9 code=0x7ffc0000 [ 1217.528934][ T30] audit: type=1326 audit(1756149952.991:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16863 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e87d8ebe9 code=0x7ffc0000 [ 1217.564721][T16856] EXT4-fs (loop3): 1 truncate cleaned up [ 1217.573104][T16856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.124562][T12078] Bluetooth: hci4: command tx timeout [ 1218.232278][T15572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.807156][T16879] netlink: 'syz.6.3600': attribute type 3 has an invalid length. [ 1218.816883][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3600'. [ 1219.169330][T16777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.258064][T16777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.274039][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3603'. [ 1219.380528][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.388208][ T4663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.487865][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.495525][ T4663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.258153][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1220.351986][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1221.337269][T16907] block device autoloading is deprecated and will be removed. [ 1222.437019][T16777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.642386][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3619'. [ 1222.710464][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3619'. [ 1222.924933][T16777] veth0_vlan: entered promiscuous mode [ 1223.054253][T16777] veth1_vlan: entered promiscuous mode [ 1223.324293][T16777] veth0_macvtap: entered promiscuous mode [ 1223.378615][T16777] veth1_macvtap: entered promiscuous mode [ 1223.655274][T16777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.688656][T15258] libceph: connect (1)[c::]:6789 error -101 [ 1223.695202][T15258] libceph: mon0 (1)[c::]:6789 connect error [ 1223.714701][T16939] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3623'. [ 1223.785243][T16941] ceph: No mds server is up or the cluster is laggy [ 1223.849595][T16777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.940523][ T1086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.996037][ T4298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.058944][ T4298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.146141][ T4298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.404540][T16950] raw_sendmsg: syz.0.3626 forgot to set AF_INET. Fix it! [ 1224.606963][T16955] overlayfs: failed to clone upperpath [ 1225.603624][ T24] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1225.853032][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1225.864773][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.874992][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1225.884465][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.173222][ T24] usb 7-1: config 0 descriptor?? [ 1226.193552][T16972] loop3: detected capacity change from 0 to 32768 [ 1226.208558][T16972] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3634 (16972) [ 1226.272102][T16972] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1226.282810][T16972] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1226.502785][T16972] BTRFS info (device loop3): setting nodatasum [ 1226.509486][T16972] BTRFS info (device loop3): enabling free space tree [ 1226.516806][T16972] BTRFS info (device loop3): use zlib compression, level 3 [ 1226.524355][T16972] BTRFS info (device loop3): max_inline set to 0 [ 1226.666817][ T24] savu 0003:1E7D:2D5A.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1226.914795][ T24] usb 7-1: USB disconnect, device number 26 [ 1228.103461][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1228.170784][T15572] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1228.327643][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.339350][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.349565][ T24] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1228.359172][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.475733][ T24] usb 7-1: config 0 descriptor?? [ 1229.634423][ T24] uclogic 0003:256C:006D.001F: interface is invalid, ignoring [ 1229.851858][ T24] usb 7-1: USB disconnect, device number 27 [ 1232.221796][ T4663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.230144][ T4663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.339755][ T4663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.348071][ T4663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.822971][ T30] audit: type=1326 audit(1756149968.421:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.1.3563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6118ebe9 code=0x0 [ 1235.273756][ T9053] Bluetooth: hci3: command 0x0406 tx timeout [ 1236.020243][T17072] loop3: detected capacity change from 0 to 32768 [ 1236.117947][T17072] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1236.290748][T17078] loop1: detected capacity change from 0 to 32768 [ 1236.303885][T17078] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3662 (17078) [ 1236.348327][T17078] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1236.363367][T17078] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1236.419381][T17072] XFS (loop3): Ending clean mount [ 1236.439356][T17072] XFS (loop3): Quotacheck needed: Please wait. [ 1236.488529][T17072] XFS (loop3): Quotacheck: Done. [ 1236.553600][T17078] BTRFS info (device loop1): enabling ssd optimizations [ 1236.560890][T17078] BTRFS info (device loop1): enabling free space tree [ 1236.720862][T15572] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1236.873507][T16777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1239.126342][T17131] gtp0: entered promiscuous mode [ 1239.257924][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3673'. [ 1240.393847][T17147] loop3: detected capacity change from 0 to 128 [ 1240.631634][T17147] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1240.693845][T17147] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1240.773639][T17157] netlink: 'syz.0.3682': attribute type 39 has an invalid length. [ 1240.802234][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.909852][T17157] bridge_slave_0 (unregistering): left allmulticast mode [ 1240.914038][ T30] audit: type=1804 audit(1756149976.491:263): pid=17147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3679" name="/newroot/95/mnt/file0" dev="loop3" ino=12 res=1 errno=0 [ 1240.917225][T17157] bridge_slave_0 (unregistering): left promiscuous mode [ 1240.946568][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.985946][T15572] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1242.151278][T17161] loop6: detected capacity change from 0 to 32768 [ 1243.295720][T17183] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1243.338915][T17183] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1243.372987][T17183] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1243.463015][T17185] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1243.470318][T17185] overlayfs: failed to set xattr on upper [ 1243.476465][T17185] overlayfs: ...falling back to redirect_dir=nofollow. [ 1243.483659][T17185] overlayfs: ...falling back to index=off. [ 1243.489635][T17185] overlayfs: ...falling back to uuid=null. [ 1243.495750][T17185] overlayfs: maximum fs stacking depth exceeded [ 1245.339816][T17219] loop3: detected capacity change from 0 to 256 [ 1245.443961][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 1245.507667][T17222] tipc: Started in network mode [ 1245.512970][T17222] tipc: Node identity 4, cluster identity 4711 [ 1245.519407][T17222] tipc: Node number set to 4 [ 1245.978664][T17228] ===================================================== [ 1245.986329][T17228] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 1245.996783][T17228] _copy_to_iter+0xef3/0x33f0 [ 1246.001708][T17228] __skb_datagram_iter+0x196/0x12c0 [ 1246.008201][T17228] skb_copy_datagram_iter+0x5b/0x1e0 [ 1246.013948][T17228] tun_do_read+0x3a71/0x4100 [ 1246.018745][T17228] tun_chr_read_iter+0x393/0x6b0 [ 1246.023966][T17228] vfs_read+0x8ed/0xf90 [ 1246.028306][T17228] __x64_sys_read+0x1fb/0x4d0 [ 1246.033397][T17228] x64_sys_call+0x2f9c/0x3e20 [ 1246.038319][T17228] do_syscall_64+0xd9/0x210 [ 1246.043154][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.049259][T17228] [ 1246.051684][T17228] Uninit was stored to memory at: [ 1246.057223][T17228] pskb_expand_head+0x310/0x1610 [ 1246.062401][T17228] erspan_xmit+0x952/0x1ce0 [ 1246.067234][T17228] dev_hard_start_xmit+0x22f/0xa30 [ 1246.072773][T17228] sch_direct_xmit+0x3b2/0xcf0 [ 1246.077706][T17228] __dev_queue_xmit+0x3588/0x5e60 [ 1246.083218][T17228] neigh_resolve_output+0x9c5/0xaf0 [ 1246.088645][T17228] ip_finish_output2+0x1abc/0x1d50 [ 1246.094143][T17228] ip_do_fragment+0x20ac/0x27e0 [ 1246.102348][T17228] ip_fragment+0x1ad/0x2c0 [ 1246.108017][T17228] ip_finish_output+0x5c3/0x8e0 [ 1246.113190][T17228] ip_output+0x14f/0x3e0 [ 1246.117631][T17228] ip_send_skb+0x344/0x420 [ 1246.122259][T17228] udp_send_skb+0x1375/0x1cb0 [ 1246.127284][T17228] udp_sendmsg+0x9d7/0x3370 [ 1246.131980][T17228] inet_sendmsg+0x1ef/0x2a0 [ 1246.136898][T17228] __sock_sendmsg+0x278/0x3d0 [ 1246.141811][T17228] sock_write_iter+0x318/0x390 [ 1246.146962][T17228] vfs_write+0xbe2/0x15d0 [ 1246.151483][T17228] __x64_sys_write+0x1fb/0x4d0 [ 1246.156705][T17228] x64_sys_call+0x3014/0x3e20 [ 1246.161599][T17228] do_syscall_64+0xd9/0x210 [ 1246.166565][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.172780][T17228] [ 1246.175208][T17228] Uninit was created at: [ 1246.179723][T17228] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1246.186005][T17228] kmalloc_reserve+0x13c/0x4b0 [ 1246.190952][T17228] __alloc_skb+0x347/0x7d0 [ 1246.196119][T17228] alloc_skb_with_frags+0xc5/0xa60 [ 1246.204432][T17228] sock_alloc_send_pskb+0xad8/0xc70 [ 1246.209849][T17228] __ip_append_data+0x4e9f/0x7160 [ 1246.216143][T17228] ip_append_data+0x145/0x220 [ 1246.221054][T17228] udp_sendmsg+0x4e2/0x3370 [ 1246.225969][T17228] inet_sendmsg+0x1ef/0x2a0 [ 1246.230659][T17228] __sock_sendmsg+0x278/0x3d0 [ 1246.235752][T17228] ____sys_sendmsg+0x893/0xd80 [ 1246.240709][T17228] ___sys_sendmsg+0x271/0x3b0 [ 1246.245757][T17228] __sys_sendmmsg+0x2d9/0x7c0 [ 1246.250640][T17228] __x64_sys_sendmmsg+0xc6/0x150 [ 1246.255887][T17228] x64_sys_call+0x21de/0x3e20 [ 1246.260774][T17228] do_syscall_64+0xd9/0x210 [ 1246.265598][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.271689][T17228] [ 1246.274234][T17228] Bytes 38-41 of 92 are uninitialized [ 1246.279733][T17228] Memory access of size 92 starts at ffff888026ef0b80 [ 1246.286882][T17228] Data copied to user address 00007fff665c9750 [ 1246.293283][T17228] [ 1246.295735][T17228] CPU: 0 UID: 0 PID: 17228 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 1246.308608][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1246.319844][T17228] ===================================================== [ 1246.327028][T17228] Disabling lock debugging due to kernel taint [ 1246.333497][T17228] Kernel panic - not syncing: kmsan.panic set ... [ 1246.340083][T17228] CPU: 0 UID: 0 PID: 17228 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(none) [ 1246.351419][T17228] Tainted: [B]=BAD_PAGE [ 1246.355675][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1246.365871][T17228] Call Trace: [ 1246.369269][T17228] [ 1246.372319][T17228] __dump_stack+0x26/0x30 [ 1246.376871][T17228] dump_stack_lvl+0x53/0x270 [ 1246.381683][T17228] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1246.387706][T17228] dump_stack+0x1e/0x25 [ 1246.392062][T17228] vpanic+0x361/0xc50 [ 1246.396273][T17228] panic+0x15d/0x160 [ 1246.400518][T17228] kmsan_report+0x31c/0x320 [ 1246.405233][T17228] ? kmsan_internal_check_memory+0x16c/0x230 [ 1246.411439][T17228] ? kmsan_copy_to_user+0xf1/0x190 [ 1246.416744][T17228] ? _copy_to_iter+0xef3/0x33f0 [ 1246.421826][T17228] ? __skb_datagram_iter+0x196/0x12c0 [ 1246.427413][T17228] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1246.433085][T17228] ? tun_do_read+0x3a71/0x4100 [ 1246.438026][T17228] ? tun_chr_read_iter+0x393/0x6b0 [ 1246.443319][T17228] ? vfs_read+0x8ed/0xf90 [ 1246.447879][T17228] ? __x64_sys_read+0x1fb/0x4d0 [ 1246.452933][T17228] ? x64_sys_call+0x2f9c/0x3e20 [ 1246.458021][T17228] ? do_syscall_64+0xd9/0x210 [ 1246.462915][T17228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.469188][T17228] ? ima_match_policy+0x2e00/0x2e60 [ 1246.474675][T17228] ? kmsan_get_metadata+0xfb/0x160 [ 1246.479979][T17228] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1246.486493][T17228] ? kmsan_get_metadata+0xfb/0x160 [ 1246.491813][T17228] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1246.497848][T17228] kmsan_internal_check_memory+0x16c/0x230 [ 1246.503878][T17228] kmsan_copy_to_user+0xf1/0x190 [ 1246.509030][T17228] _copy_to_iter+0xef3/0x33f0 [ 1246.513942][T17228] ? is_module_text_address+0x1f4/0x240 [ 1246.519703][T17228] ? kmsan_get_metadata+0xfb/0x160 [ 1246.525054][T17228] __skb_datagram_iter+0x196/0x12c0 [ 1246.530461][T17228] ? filter_irq_stacks+0x49/0x190 [ 1246.535742][T17228] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1246.541598][T17228] ? stack_depot_save_flags+0x35/0x7b0 [ 1246.547297][T17228] ? kmsan_get_metadata+0xfb/0x160 [ 1246.552629][T17228] skb_copy_datagram_iter+0x5b/0x1e0 [ 1246.558217][T17228] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1246.564249][T17228] tun_do_read+0x3a71/0x4100 [ 1246.569018][T17228] ? kmsan_get_metadata+0xfb/0x160 [ 1246.574340][T17228] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1246.580880][T17228] ? __pfx_default_wake_function+0x10/0x10 [ 1246.586938][T17228] ? __x64_sys_read+0x1fb/0x4d0 [ 1246.592035][T17228] tun_chr_read_iter+0x393/0x6b0 [ 1246.597206][T17228] vfs_read+0x8ed/0xf90 [ 1246.601587][T17228] ? __pfx_tun_chr_read_iter+0x10/0x10 [ 1246.607265][T17228] __x64_sys_read+0x1fb/0x4d0 [ 1246.612170][T17228] x64_sys_call+0x2f9c/0x3e20 [ 1246.617080][T17228] do_syscall_64+0xd9/0x210 [ 1246.621830][T17228] ? irqentry_exit+0x16/0x60 [ 1246.626619][T17228] ? clear_bhb_loop+0x40/0x90 [ 1246.631499][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.637596][T17228] RIP: 0033:0x7fc0ba98d5fc [ 1246.642149][T17228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1246.661941][T17228] RSP: 002b:00007fff665c9720 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1246.670562][T17228] RAX: ffffffffffffffda RBX: 00007fff665c9750 RCX: 00007fc0ba98d5fc [ 1246.678694][T17228] RDX: 00000000000003e8 RSI: 00007fff665c9750 RDI: 00000000000000c8 [ 1246.686805][T17228] RBP: 00007fff665c9b8c R08: 0000000000000000 R09: 0000000000000000 [ 1246.694917][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000015d [ 1246.703114][T17228] R13: 00000000000927c0 R14: 0000000000130170 R15: 00007fff665c9be0 [ 1246.711352][T17228] [ 1246.714872][T17228] Kernel Offset: disabled [ 1246.719401][T17228] Rebooting in 86400 seconds..