last executing test programs: 14m2.015126413s ago: executing program 2 (id=135): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) 14m0.956000549s ago: executing program 2 (id=139): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @remote, 0x0, 0x0, 'veth0_to_hsr\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bond0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 14m0.738873481s ago: executing program 2 (id=140): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) 13m57.641267491s ago: executing program 2 (id=151): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 13m56.008888165s ago: executing program 2 (id=161): quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 13m55.85888755s ago: executing program 1 (id=162): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x6, 0xdda, 0x648, 0x8, 0x8}, 0x14) 13m55.626923933s ago: executing program 1 (id=165): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='+w', 0x2}], 0x1) sendfile(r0, r0, 0x0, 0xcc0) 13m55.606947195s ago: executing program 1 (id=167): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 13m55.510453155s ago: executing program 2 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 13m55.509879995s ago: executing program 1 (id=169): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 13m55.127746883s ago: executing program 32 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 13m55.114869134s ago: executing program 1 (id=171): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010142, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, 0x0, 0x0, 0x0) 13m54.478928218s ago: executing program 1 (id=173): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) pipe2$9p(&(0x7f00000005c0), 0x800) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000002540), 0x2, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 13m53.708624145s ago: executing program 33 (id=173): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) pipe2$9p(&(0x7f00000005c0), 0x800) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000002540), 0x2, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 12m53.365403751s ago: executing program 0 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f00000000c0)={[{@usrjquota}, {@nombcache}, {@nodiscard}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x6}}]}, 0x9, 0x61d, &(0x7f0000000700)="$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") 12m48.168581422s ago: executing program 0 (id=474): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) truncate(&(0x7f0000000000)='./file1\x00', 0x1) 12m46.982882561s ago: executing program 0 (id=488): syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 12m46.798131299s ago: executing program 0 (id=491): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 12m46.481255971s ago: executing program 0 (id=496): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x8e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 12m45.906902289s ago: executing program 0 (id=503): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r1, @ANYRESOCT], 0x20) 12m45.49433801s ago: executing program 34 (id=503): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r1, @ANYRESOCT], 0x20) 7m6.918641913s ago: executing program 5 (id=2797): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x8, 0x4, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x65, 0x0, 0x8, 0x7b, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0xc, 0xd0, 0x0, 0xd, [0x10001, 0x3]}]}}}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000001040)='memory.numa_stat\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m6.375016537s ago: executing program 5 (id=2800): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 7m5.375409647s ago: executing program 5 (id=2807): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=ANY=[@ANYBLOB="740000001000010027bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b00"], 0x74}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f712b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdf342a1ff9feeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc11cb13c558cc210be334af3813630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f68146444c7780798266feb5927fb3ebd9f7501b07316484f0100b83b7f87a550adddff1c808da6d5d909d9585f844f473c4ab93aa90dafee831ce0aa9c9d402e7b48c06712b4c0a398472364c1a3570029caefd9f3230e792c66e380c296249265a56dedbf5c2ac74cd667c6eb430819f69360d3ff5190adfb2bc669f9a2020264c57aa15e1cc144e9431a457ef86c0d03b32ac0a14d88a48c6a7dda45195c3a7fdfa083715ab572d66a654d68d9116aad0def05a606be11d288cef68e4b13bcc55ef5ae5054c06cebdf221c2b43d388f34e6725cd67e5cff513852fdb8d5bdaa5f4f4038fb8ed5ba9d34079d70d36398d6a88909a32be918fedd03ffd3ac801d45393ed59e007c932f5363e114cb01f50a5b2d445a781d1eb265bc3d3615fd4b5166e01e657cf331580a1b508ba10cfb0dedad4b5ac451b40a7f0df7567fa862a5c1e38a7c5a985e87a1082dfab4a105abf52fd4cab16fded0b7e72b376c5f8ad3c5c15f28304cef5ca6452c4663c961fc38b0c495eb749f9625f51a6b3ccea3db17fb5e2a8e9c815abc956e6a287660909f58c45163d7ea1cb2c3f13724", 0x3d6}], 0x1}}], 0x1, 0x4) 7m1.430821832s ago: executing program 5 (id=2823): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x414, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESHEX], 0x1, 0x2ca, &(0x7f0000000b80)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 7m1.208551885s ago: executing program 5 (id=2825): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0xf9c1, 0x16, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r4 = syz_open_pts(r0, 0x80) dup3(r4, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\x93\xea%\xf4e\r\xf9\xb0\x1f\'\x133\xfcJM\xfaK\xdd\x16\x03=0\xd0 \fI\xdb[1+\xb7\xcf\x00z\xb8I\xf7\x00gS\xdbN\x9f\x0e\xa5\xdb\xc1^K\xf4\xea[\xadg\xc3\xeb\x86\xc1U(\x82v[x\xca\x83M\x1b~@T\x17X\xb4~\x83B\xa7\xc1*?\x82d\x9a\xce\x1a\xfb\xa0M\xc3\x02}\\\xb1\xf5+\x11H\xf3\xc0B\tU\xfe\xdelk\x11\x96\x96y\x94\xe3\x03&[\x85\xf0Z\x06\xed\xf2\xaal:g\xef\xd8\a\xd3:\xf3^M4#\xf0\x18\xachl\xb9\x8d\x8b\xd5e\xd3x \x179gE\xf7\xb5n\x89\xd0\xc2\x01U\x05\x9a)\xe1\")\xac\b\x18\x80\xacu@\xfe\xac\x06\xeb\xeb\xeb\xf3h\xd4+k\xf7\xd1\xb7\xee\x1fk\xa0kE\xddR\xad\x03\xb1k\x15\x8c\x904\xb8\xac\xa1m\x85ZY{o\xd0\xbd\xd9/\x0fqcm{\xfb\xba\xc7=\x8e}c\xff9g|\x9d\xd5\xfcT#\x8dY}\xf4\xca\\E e\xba\xff\xbc\xf4^\xf1\xfe\x8e\xaa*\xe0L\xad\tk\xb6-\xd6\xb8\x02\xda\xab\x02\xa0,<]\xda\x82&\xfb\xecD\x97\x10\x02\x861/\x10.\x82\x7f\xa7\xe2\xbc\xbf\xbd4\xc6B\xdc\xcf\x1f\x86\xc3(\xfan!\xd5\x8f\xb2(6~2\x97'}]}, 0x147) 6m59.785304068s ago: executing program 5 (id=2834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r2, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc002}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000140)}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m59.367666279s ago: executing program 35 (id=2834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r2, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc002}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000140)}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m23.834673353s ago: executing program 7 (id=3859): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x6, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m23.55876057s ago: executing program 7 (id=3862): socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20) 4m23.396428277s ago: executing program 7 (id=3864): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000008c0)=""/31, 0x1f) 4m23.133586343s ago: executing program 7 (id=3866): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 4m22.9653762s ago: executing program 7 (id=3868): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/4, 0x0, 0x4, 0x1, 0x35c}, 0x28) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x3, 0x10000000000, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x8, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r2, 0x401870cc, &(0x7f0000000000)) 4m21.991350587s ago: executing program 7 (id=3875): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000001c0), 0x1, 0x440c5) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000280)="a0", 0x1}]) 4m21.649298632s ago: executing program 36 (id=3875): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000001c0), 0x1, 0x440c5) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000280)="a0", 0x1}]) 5.308810009s ago: executing program 8 (id=5228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0xd200000000000000, 0x8000000, 0x3fe, 0xc}) 4.352940395s ago: executing program 3 (id=5231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) 4.352149045s ago: executing program 4 (id=5232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.574514143s ago: executing program 8 (id=5234): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 3.544103076s ago: executing program 4 (id=5235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) 3.342865886s ago: executing program 4 (id=5236): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@orlov}, {@nodioread_nolock}, {@dioread_lock}, {@barrier}, {@dioread_lock}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) writev(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/95, 0x5f}], 0x2, 0x1, 0x80000000) 3.251701335s ago: executing program 6 (id=5237): truncate(&(0x7f0000000000)='./file1\x00', 0x100003) truncate(&(0x7f0000001c40)='./file1\x00', 0xe4a0) 2.947845096s ago: executing program 6 (id=5238): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000000)={[{@file_umask={'file_umask', 0x3d, 0x1}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@codepage={'codepage', 0x3d, 'iso8859-4'}}, {@creator={'creator', 0x3d, "32c9459b"}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x1, 0x30e, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 2.730825627s ago: executing program 4 (id=5239): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x55a7, &(0x7f0000005680)="$eJzs3X9slHcdB/DnWqCV6trBphiSSZPp2OpInQtudIOmbm6Ugbc108xstgUj7odLh8axRV2lzP2AsboGYpXhmFNHSLCECWbIGE2kREmmf8gmCJWF1Tk62zERhgqmd/ccd8/R9oZzndvrRdrnvvd5vt/ne0+eP+599PtcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEQ/Oi7f5rV+GrPlIq9H7x8YdXKWWPO/t1F//z3989+8dg53T+su3/5JbUHr3qts6atJd7TfWzFA/VBEEv0i6X619dcfd2X6+pnF4cDNlyb3JaVDXbIZNc/Jxtjsp4c6Jf90xgEwejIAIWp7ZWFGe1Y9ADBgtwBhzSv6qbO4r01Mx7p7Zs8Z/G+bbkvnQHFIz2BkZK6rg6cvJaqE78LInuk2xmXXizrEk32j15wb8uLAADelMp4YpN+O5p6i5tuN0frkXZ1pN0aaYfvEFozG6cjOe6YweY5KVofoXlWJ6NC0aDzjNRT5z/djkf7R9qRqPEm5pm9ayrSFA82z6ZIfaTmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBO8nhP36xPbyldVLBr9vTPbGydVv/LzpXzOw5X7v7H9qNHtxa9fkntwate66xpa4n3dB9b8UB9EJQl+sWS3WPrJzz1g+9snr3059Vzji/8yJPPF6bGDbejMnYOXggfXFoaBHMzKgfCYf96RhDEswuJZtCeW7g58WBmWAAAAODd5MOJ3wXpdjIOjs5qxxJpMpb4F0qGxXlVN3UW762Z8Uhv3+Q5i/dtO/3x4oOMV33K8dLtspM/sYxgHMbf6Hgn6+GuC3LGGVp0xGieL1g+sfKCe/d8fOqN665f+ImPvfDElyoP3TV2/agFf+/a/a/Hv3UoJ/+XDZ3/wzMn/wMAAPDfkP+j4wxtuPzf/swbt58Yv6v38+dveemj085c/KnVH7ijJFh+/1OFN66f3959YU7+n5R1yJz8H844zP8FwenlfwAAAHgn+1/n/+qccYY2XP7/xdpD9wX7a8t379mwbPmiih3nz/3cFfFDd6+f17rq+fmN+8tz8n9lfvl/VOa0wyd3hhO+tTQIKvM/qQAAAECW8P/dT360EOb15CcH0bw++cWmo1N+dmdJ9aYTE1ZdsOic2v77Vixrv6ex/7K2I1cX3b4hJ/9X55f/R789LxcAAADIQ8evyh4+a9a3f9pw5yuNn+w9vmHrWUfG7Vxw6WXTlx3c1fLbVTty8n88v/xfNDIvBwAAADiFP1aXH6nbtuvR909tf+nAQ9f8beba8V/ZXnN89bjNX7j3liW3NeXk/4b88v/Y1Da18iHZaXv4VwhtpUFQPPCgKVnoClpnpAsAAADAWyTM6U9ffOGSK/u6b/7mc4++UvHMxh93zH153dKlh8978n1b96x5tflATv5vGvr+/+GdDsL1/1n3/8tZ/59RSN71r8qNAQAAAHgvyl3PH94eP/nNBYN9/36+6//vOffpb9TFL768d/yDW7r6nyj5ffPGvZvHTTpaP6anff9Dt3Xl5P/m/PJ/Yeb2rfz+PwAAADgN/2/f/3dDzjhDG+7+/3/5w3lr22656zdfn/hgy9ivvbFv2blVdTfcMe3ukq+u7vpi5fcqcvJ/a375P9yWZL68Z8Pz01IaBBMGHqTuJrgmnO6tkULH6IxC8sRHetSFPVKFjqKMQkJTpMdFpUFQPvCgOVI4Myy0Rgr9Z6QKj0UKz4WF1PWQLqyLFJ4Nr7QVZ6SmGy1sCgupBRYd4QqKkvSSiEiP1wfrMVA4ZY896YMDAAC8p4ThOZVlR2c3g2iU7YgNt8PY4XYoGG6HwuF2GBXZIbrjYM8HDdmF8Pm+hytmXn94y5raD03ffsXKqRNP7Nj5k1+/XD5l0zUbij573bWrcvL/Y/nl//BUjEluBlv/H4Tr/1Pfa5he/98QFsoihY6wEI/eMSAeHiMZdpeExyiLp3r0T0gXAAAA4F0t/FygcITnAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9h797jpKruBIGfftPQdDdGV+NmhYRAwhiaBmTUiYkNmRWHrKRNnExmTdZGaEiHJiCCI050EHASPz5ZlfjRTEATNjgioGZFjRv4qMHoQEJ0fIwSNb5fWTUa10cc99N96xRVt7roQmi1ne/3j65T9TvPW7eq69x76xQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAfw5jTr371gTHPDTvrn+7+4/1PPftvz6yY9al121877MxX77++bfryLx825fnJL9866aKlrU898uaKs08IobW7XFlSvOzaA3562Zk/O+bc9S1T//3UoWvur87Um4mHQV1/yjN3lsVWnxgcwsayECrTgdF1SaAqc78u1vexuhCGhJ2BbIn2gUmJdMPhF7UhrAo7A9mqbqoNoS4ncNzdt246rytxcW0II0IINek2fluTtFGbDoysTgID04G5lUng/72TyAZuLE8CsMfiiyG7029ozc/Q2HO5Ivtf1V7r2PsrPbyKmGgsnu/3E/u4Uzmq0w+07tHTVlAdfaLg5bHZq60fvNoKtvOFnrbcD1KZTyjv7AzVhPIZ7TOnLexcEB8pD01NFcVq6qPn+cGXvzN9d9L9Zj+MHWjcK/vhkJkXvFB96cQVNy9Z+dL6o2YdtKfdLLZ5+1pNyOxz/eZ5jFq8n/SDl1/Bp6RhPnSFEMY/MfiMJ1evX3HdJad880ef/t933nDot/9y2Xe/ue2szyzc9+1vXLiwYP7fuOv5f9yd4215Xu7Y6lv1ydw8PlIXEy/WJ3NzAAAA6Df6w1HTzraHti2eOnT0iFmf7DjynnsP/qtTL/9RTXM46+aLJ7xyUPX2KQXz/2Glnf+Pp/zrcke7OYSW7sTShhAO6H48CVwVu3NiQwgf70615gcmpgKbQ/hod2JUtqpUiQGxxLBU4On6TKAlFdgSA62pwOoYuDAVWBYDG1KB6TGwORWYFAOhI38cf1afGUfJgdoYaEs24oZ4FcIr9bG11LZ6KFsVAADAXpKZHVbl38251mFPM8Tp5Yba3jLEK7CLZqhJ1ZCewWanVUVrqOythvLeasiOe/Guh19Qc1lvNRdchlGWn2HwKZ+cVTtzxzErLxu69PaTNgyuu/bsY7afvujxN3++6bI7V33u9wXz/+Zdz/9reuhIWcH5/xCO7f4bc5dnIp3ZeFtrXgYAAABgDxzZMLRh9ZNHTnv7/sp3/tvr911z9ANf/cvW4XcPePYTf37XwtdaLiqY/7eUdv1/PCZSkZM5bI2HIWY3hNCcH0iq/WxhIDnrPSgTAAAAgP4gez4+ey68I3ObXKKdnk8X5m/dzfzxxH9Lj/m3HfXG517/68+cf2XHoI/+9NwH/vSNtfc9MfRLZ+434tQ3/tfl/3r16QXz/9bSrv8fmH+bdGJL7MVFDSEMyAncEXvZFeg2LAYePTI/kBn/lrgBzolVZS5MyFZ1TizRFgPNqcCqYiW2Z0sckB/IPFnZxpdmx9GRKZETAAAAgPdcPBwQz8vH6/+Xbp3UOnPZg9+bdMKYH1w1b33blxu3rz7+b4+eM/NHt3bsd/Ck2wrm/227d/1/9zy44PL+zkEhjKkMoSL9xYCtA5OFAWOgriyT+D8Dk7oq0lUtGRjCZ7sGlq7qscz6/5XpNQbvqU2qioEDPrHm5ZFdiR/XhjAmN3Df8VdM6EosTAWyjX+1NoShXaNNN37DgKTxqnTjlw4I4aCcQLaq6QNC6GqsOl3VbTWZ3zFIV7WhJoSP5ASyVR1aE8KiAEB/Ff+Xzsh98ORFp82e1tnZPr8PE/Egfm2Y2dHZ3jR9bueMmiJ9mpHqc946RmcWjqm8xLHvyKxRtHZKU0Mp6ewXBZtz+5I5kF9w5WDmfvwwVNU9znFVeXfHp4f86eGFTaSH9H4MeWBuJTufxIL6Y/7qMCgMWHhy+/ymU6ctWDB/bPK31Ozjkr/xPFOyrcamt9XAnvpWwu5R6rLa73ZbjcytZMyCOfPGnLzotNEdc6bNap/V/u0JEw45ZNz4CeMOGdM1qObkby8jHdlTzamRvnNF4Qj6eq84sDKnkvfiTUNCQqK/Je79wo2HnfV/r1//+KjfnfNM85Zfnb127bxR21748pp1n1q/7cSN2wrm//N2Pf+P7zrxjT+zPkOx8/+N8TR/8vjO0/xtMbCq1PP/jcXO5mcvDBiWCiyOgcVO8wMAAPDhEA9HxqOZ8fBj7eWjb/nzdVMrp26q+vGvHp7ytX88/dyN49es/srRX5q3/b/v8/YxBfP/xaV9/38vrf+fXbp+SrFl/kfFEs3F1v9PL/OfXf9/cbH1/9PL/GfX/1/1Pqz/vzAbSG2SV6z/DwAAfBi8d+v/97q8f/oHAgoy9Lq8f/oHAgoy9LqMf6k/ELDb6///4PuHH3rgsZcc+tpjNy49Y9q0uw+/6o0fjvvtP0959a5bv9D+4/WvFMz/Lyxt/m/hfgAAAPjguODgHW/NuX7TJQ/8+oHXbz9j+6ZrOy8b8evJF/zwT1+cNWz91u++VTD/X1Xa/P+9X/8vFLv+f1ixQGuxhQGt/wcAAEA/VWz9v62bly/f9Nzgx9/+/NBTOtuue3LU5QffdO3i65/9+xW3/N0zRzV8vmD+v6G0+X+87KI8L3fszVv1yZp2Ib2m3Yv12a8MAAAAQP9QHpqaqkrMm7cw6sR33+aDmaVAd5XOteCVt+ccseSI39z+Pz6+fuxTM1b+9cUzvvbo4f/YOfRnEx9d99xl3y2Y/28ubf6f972MITMveKH60okr3rp5ycqX1h8166Cd5/8BAACAvlPqcQkAAAAAAAAAAAAAAOD9d/orw/eZfOPKcSO+37x84VnN+z3yy183Vk5+7pd/O70jPPSduV8q+P5/OLa7XLHv/8ff/YvfL9g3L3dstff1/zL3j/viukXdSxZurQ9heG5g9pLZQ0Lmt/k/lRvY9I1R+3cllqRL3PLwpCe7EiekA0eP3ue1rsQRqUBbXCTxo+lA/FXF1wanAnF5xXvSgbg9NqQD1ZnA2YOTcZSlt9Wzdcm2KktvqwfrQmjICWS31ca6pI2y9AAvTgWyAzwpHYgDnJoJlKd7tW5Q0qsYqItFVw5KegUAwAdW/BRYFWZ2dLY3x4/w8fbAyvzbKG/JsjOLV9ubHZmlydZOaWooJV2R/iy687fGq0JN1xDGFnxczc1S1j3KvVNLL5tu3yJD7m21t77adNXFR1SbjKhp+tzOGVW9Dnx871nGVfaaZWzBZCc3S3n3Ji2hlhL6UsKIStw2JXQ53i8PTU0VqVx/EYONIU9ve0Sp39fPXeev2F6Qm+fnB//FKc/XLN/3jOPvGzB/vxF3vnXsSV9/5eP7jjt78juj/uGZK+8omP83ljb/r8kd12uZHwNYHH9Z77MNIbSVOCIAAAD48Pvmtx/+n9+7bfnTj7aOfHLumOWbHlh06WmV9Vct+68P3nLKH48//4Q9jV/zi68/9MVfvXr+Po9dVPb0lkuPGjLzpQf/8OTSh15+fficj33+sfkF8/9hpc3/4xGszKng5GjH5vj7/0sbQuj+af3GJHBVHO6JDSF8vDvVGkskP6g/JZZoTgJXxQMmo2KJttb8qgbEwIZU4On6TGBzKrAlBjJHKdaEzKGc5fUhTOhOHZtfYl4s0ZgKfCkGhqUCTTHQnAoMjoGWVOCFwZlAayrwLzEQOvK31fWDM9sKAABgd2TmWVX5d0N6nrehsrcMZb1lGNhbhvLeMtT0lqHYKOL962KGqtzz8ZkM8aGqdK21qVoKMsQfw9/tfhVkCNvzc6YLFjQdrz/IXm9Qlp+hdeUzt+34VvUzUwZPW7Gh7q4bT7rhjMVXTt5v0k/uOu38R3731eEF8//m0ub/A/Nvk9a3xPn/zt//SwJ3xO5dFC8dHxYDjx6ZH8gcGNgSJ7vnZKtqzZTITNrPiSVaYmBYKjAvBlpSgbZjM4FV++cHMjPtbONLs413ZErkBAAAAOA9Fw8QxMM0cf5ff+/Xrtl61rKfHLn14LVr7t226sDRR9csf/PKKVO3bZy7Zd2J2wrm/y2lzf9je4NyG1sWe/PE4BA2lu3sTTYwui4JxOMYdfHr8R+rC2FIzgGObIn2gUmJ6lTD4Re1yTfUq9NV3VSbrDEQ7x93962bzutKXFwbwoicoy/ZNn5bk7RRmw6MrE4CA9OBuZVJIB75yQZuLE8CsMeyRwXjDpW51CWrsedyRfa/D8tvgqaHV3AMtId8PX3nqq/UpB/IHFPN2r2nraA6+kTBy2OzV1t/fLU1erXlfpDKfEJ5Z2eoJpTPaJ85bWHngvhI7jdZC/TR85z7LdVS0nthP1z87nvbu5p0B5pTbx/NPZfreT8si9UNmXnBC9WXTlxx85KVL60/atZBJXejiPhF4dWf26cxd/P2tZqQ2ef63ftJq/eT/vhvYJinLYRw17+O3f+qlsrht//TvHs2/9umLdfdfcMvj/nhdX/VsbHzkRseDs8XzP9bS5v/V6Zuu70RN+bJDSF8Omfjbo2b/wsNyftgTiB5l/xIYSA55f54fdF3TgAAANjbsoc7sscLOjK3yQXh6XlyYf7W3cwfj1e09Ji/1H7fcdzXXrxm6Ijl229b9jdX73io4guVnz/n3CGPf+/0lrU/P/Toc/65YP7ftuv5/4BUN53/d/6fPuL8f48+6IeiB6QfWLxHh6ILqqNPOP/fow/6q835/x45/+/8f0+c/++F8/89+qA/bQWfkub50BVC+JsBnznv+rtemL/mmKub/rD01Iqnn7jrtpv+/vzvDr+k4rj/cnHFGQXz/3mlzf+t/9fzon3Z9f/aiq3/N6/Y+n+Lrf8HAAD0qSILzaXneQWr9xVkSK/eV5Ch1wUCe11i0Pp/u73+3z5XD2z4xGGXrz5u9fOPjDl8+qTftB3e+P3fVD2z4w9DO5dNDfsXzP8Xlzb/j7vDoNzW+8v6f8OOLVLVhTEwz8KAAAAAfBAVO0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA++uOT848aP6fzTzigL/7yn86ae6/fG/jiU9/fULL1wf+afa39pv1u0EPHDbl+ckv3zrpoqWtTz3y5oqzTwiho7tcWVK87NoDfnrZmT875tz1LVP//dSha+6vydRblbn9z3m5Y6tv1YewKueRuph4sb7rzs7AcV9ct6iyK7G1PoThuYHZS2YP6Uqsrg/hU7mBTd8YtX9XYkm6xC0PT3qyK3FCOnD06H1e60ockQmUpbv7g8FJd8vS3T1vcAgNOYFsd781OL+qbBuTM4HydBs/qUvaiIG6WPTSuqSNGOiMJToGhDCmMoSKdFV31iRVVaSrurkmqaoiXdU/1ITw2RBCZbqqR6qTqirTI99enVQVAwd8Ys3LI7sSV1SHMCY3cN/xV0zoSsxPBbKNf6U6hKFdu0y68eurksar0o1fUhXCQSGE6nSJP1YmJarTJR6rDOEjOYGdG7EyhEWBD4f47jMj98GTF502e1pnZ/v8PkxUZ9qqDTM7Otubps/tnFGT6lMxZTnpd87cdXxXdrz8neldt2unNDWUkq7MlKvq7vK4qry74/dW70u1u72P/RqYW8nO56Og/pi/OgwKAxae3D6/6dRpCxbMH5v8LTX7uORvRSaabKuxe2tbVfRSPnq322pkbiVjFsyZN+bkRaeN7pgzbVb7rPZvT5hwyCHjxk8Yd8iYrkE1J3/3xkivKIyX9/FID6zMqeS9eP1LSEj0t0R53rtb8wf9P3bBB/2dHa0KNd1v0AXTitwsZd2j3BuDnljiCHuw2x9Teh3R2IKJQ0GWcb1nGV8wmdiZpTbJ0v2xrmBymFtTefcmjffLQ1NT0f/pjfl3czfv7/dg8z6Y2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//85ImBv") r0 = open(&(0x7f0000000180)='./file1\x00', 0x64842, 0x8) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x7a00, 0x0, 0x9) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) 2.604702169s ago: executing program 3 (id=5240): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="481bbd0b8a3dfd", 0x7}], 0x1) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='size=']) 2.59558497s ago: executing program 6 (id=5241): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.345334426s ago: executing program 3 (id=5242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000700000000000000fdffffff850000002700000085000000a00000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742d123e8680d85ff0082762f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.344381616s ago: executing program 6 (id=5243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.09489904s ago: executing program 3 (id=5244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) 1.954763684s ago: executing program 8 (id=5245): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1.881936642s ago: executing program 3 (id=5246): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000200)={[{@acl}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@space_cache_v1}, {@clear_cache}, {@nobarrier}, {@noenospc_debug}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") truncate(0x0, 0x100003) truncate(&(0x7f0000001c40)='./file1\x00', 0xe4a0) 1.526103997s ago: executing program 6 (id=5247): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(r2, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 1.258564504s ago: executing program 8 (id=5248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) 795.289ms ago: executing program 6 (id=5249): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r1, 0x0, 0x1, 0x2000406) fallocate(r0, 0x8, 0x4000, 0x4000) 678.631122ms ago: executing program 4 (id=5250): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1, 0x1, 0x3ff, 0xfffffffffffffffa}) 677.697162ms ago: executing program 8 (id=5251): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000000480)="$eJzs3U9rE0EYx/HfbNIabalrWxHEg1QLnsTWi3gRpO/AiydRmwjFUEErqBerZ/EFePctePAleBLPQm6e9J5bZP7EbNJsNo2Jk8TvBxI2yTw7z2RnOzO7lAjAf+v2TuPj9R/2YaSSSpJuSomkilSWdFbnKs/3D/YO6rXqoB2VXIR9GPlIc6TM7n6tX6iNcxFBal+VtZx9D5NR+R47A0wDd/Z7v7LvJ9KJcHa6zytRshu/w9gJRGaaauqFVmLnAQCIK4z/SRjnl8P8PUmkzTDsd4//Mz6ANmMnEFlm/HerrJaxx/e0+6iz3jN+9meFVeIodS3K96xSVwJFq0qXS3Ly0V69dnX3Sb2a6K1uBZli6+656rtuWyOT7Zuju97oszYdoDFy25dcGxZsG7Zz8l8bb43FzBfz1dwzqT6o+mf+V24Ze5jckUp7jpTP/1r+Hl0rU18qp5VnXCXnQw3BwFaW1JNG1mLYZ9cFgrQoTxe12hPlW7dVELXWN2q7IGq9N6rTm/MjJ828N3fNhn7qk3Yy8//EftubGubMtGVcydAzBran7EqmbjwxF91bhxf6lkxGbhKO750e6oZWnr189fhBvV57ysYIG6/Dlzkt+Qy70e4E05LP3G7YLzlK7eW/7plR/irhH+sc9GMGcm9mXth5l/Hrv/Z65fNCuH1nn9IB8/RW0c4zK6CtnLXBqns+lb+C62LcpYclmbxbEcOuuS5dkS4PU6OXhjznhNnRN93n+j8AAAAAAAAAAAAAAAAAAMCsGd+/HFSU91HsNgIAAAAAAAAAAAAAAAAAAAAAMOum7vd/78i/4vd/gYn7HQAA//8NSnOZ") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 143.677066ms ago: executing program 3 (id=5252): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000080)='./file1\x00', 0xc0, &(0x7f0000004000)=ANY=[@ANYBLOB="626172726965722c747970653d6b9329bc2c626172726965722c756d61736b3d3030303000003131136e6f646563036d706f73652c7569643d000000000000000000000000000000d80e81e7af", @ANYRESHEX=0x0, @ANYBLOB=',nls=koi8-u,\x00'], 0x44, 0x706, &(0x7f0000020780)="$eJzs3U1sHGcZAOB31uu1N5Xc7U/agpBiNSKCBhLbS0mQkAgVQj5UKBKXXpfEaSyv3ch2kRMh4gKFI5xQDj0UIXPoCfWAVMQBUc5ISEicUO6RuEccWDSzM+v9sXfXjX+S8DzS7Hwz8/2883bm8+5sow3g/9biWzG5HUksnn9zK92+v1Nv3t+prxbliJiKiFJEub2KZC0i+TTiSrSX+Fy6M+8u2W+c1x988sG5ex/V21vlfMnql4a129UaMsJ2vsRsREzk65H+2bNV3q+/a/HGQH93x+m/I+nEnSbsbJE4OGmtAdt7Vavs03yM+xZ43N2NmJjcY38t4lRETOfvAyKfHUrHHN6h23OWAwAAgCfLxKgKzz6Mh7EVM8cTDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwdkvZvBib5UirKs5EUv/9fyfelKpUTjne4r4w4/v6NYwoEAAAAAAAAAI7Ex/kX92cexsPYiplifyvJvvN/Ndt4MXt9Jt6NjViK9bgQW9GIzdiM9ZiPmJzp6rCy1djcXJ8fbPnrSFu2Wq27ecuFiKgNtFzYJ9DSIZ84AAAAAAAAADydfhKLMXPSQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLckYqK9ypYXi3ItSuWImI6ISlpvO+JPRflJ9ueTDgAAAACOXjVfzyT/bRdaSfaZ/6Xsc/90vBtrsRnLsRnNWIrr2bOA9qf+0t+36837O/XVdBns+Nv/PlAcWY8RMRHv7TPyXFbjdKfFYnw3vh/nYzauxnosxw+jEZuxFLNRTU8iGpFErdp+elEr4tw73is9W1f7YzvTt/1KFkk1bsRyFtuFuFaJ9mOT7BzSMV/pGu0PlYi+Ed9Ls5N8Kzdmjq53/ff6Vf5cJtd6dsw+jkYtO/PJTkbm0tzn2XhueO4PeJ30jzQfpc4zqBd3R0k3+0cqcv6Dg+T8VHs1nb78vDfnh+2Aj9L6M7EQpfzqi3ipN+e3vnjv+d7GX/7HX67eLK2t3Lyxcf4IT+lRzI6qMFkU+jNR78rEy8OvvjwTzTQT2+NnYrJ/x/S4LY9WJc9GNhWNOVt+Jys14tWuS/CduB5LcSnmYj4ux1x8Ixai3rnC0uV0T17L9dXenGT3WmlwfqsOCf7sl7oq/WJE5eOV5uW5rrx2z3S17Fi+58ovY67r6nt++NV34L8C6fifz8vpGD/t/MV5HPRkIp+bi+heGJ6J37TS143m2sr6zcatMcc7l6/T2/b93rn5t+NH3f/X/TCk10s645azrSwn1eJ6SY+90Im2N1+V/BuXdrvSwLHTnWO1mInl+N6+d2olfw832FP72Mvdx/61O3NW8vc3xbGedznxTjSzdyF9Rk7VAByzU6+dqlQfVP9W/bD6s+rN6pvTb0xdnvpCJSb/Wv7jxO9Lvyt9M3ktPowfx8xJRwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+Djdt3VhrN5tJ6pxDT/XsetVDZd6zhhSiNrLPzzHgdRi1i+FhJXqgc7rk/iYVq9O0pfmHpUXv+OCKG1Kk8cvDJga+xAxfSPBxKh61WO6nZntbEAZqXi1Z71ynHxnSsNJLyHnfc1O5dELWVRvM/rZ7m1ei6ZYCn3MXN1VsXN27f+eryauPtpbeX1hYuX7p8qf71+a9dvLHcXJprv550lMBR2Lh9Z2KP3QO/dAsAAAAAAAAAAAA8PvL/+3/zM/9jhvKIOpX1jb1HPnPcpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8oRbfisntSGJ+7sJcun1/p95Ml6K8W7McEaWISH4UkXwacSXaS9S6ukv2G+f1B598cO7eR/XdvspF/dKwduPZzpeYjYiJfD3a1B7dDPZ3rau/7c8UXtI5wzRhZ4vEwUn7XwAAAP//dc333g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) fdatasync(r0) 25.595197ms ago: executing program 4 (id=5253): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x3, 0x16e, &(0x7f0000000300)="$eJzs27GKE1EUBuAzJqujNluLxYCNVVCfQJEVxAFFSaGVwmqzKwummd3GgC/iCwqyVborcULUmISMMklIvq/JgX9uuKdIDnfgvr398eT4bPDh7MVl5FkW3YdRxCiLw7gSnagNAwDYJaOU4ntKKV0bxvWvkVL665HPG9kYANCaFeY/ALBjzH8A2D/mPwDsn1ev3zx7VJZHL4sij/g2rPpVv/6s8ydPy6N7xU+Hv1ZdVlW/M83v13nxZ34QNyb5g7n51bh7p87H2ePn5Ux+M47bbx8AAAD2Qq+Ymnu+7/UW5XX12/uBmfN7N25119YGANDA4Pzi5N3p6ftPjYqIf1nVrIjsf3bYWnEQEW1887jbrWhQ0bT4sjBKnXX8UtopNv3PBLRtcH6RT+YtAAAAAAAAAAAAAACwpVa+D5Qvf3iUltzkAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC3zIwAA//99F0kY") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=5254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) kernel console output (not intermixed with test programs): lk endpoint 0x82 has invalid maxpacket 1024 [ 754.223325][T14839] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 754.232838][T14839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.254957][T14839] usb 9-1: Product: syz [ 754.259272][T14839] usb 9-1: Manufacturer: syz [ 754.276339][T14839] usb 9-1: SerialNumber: syz [ 754.292758][T14839] cdc_mbim 9-1:1.0: skipping garbage [ 754.523264][T19365] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 755.161108][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.195298][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.223720][T19365] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 755.267663][T14839] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 755.285153][T14839] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 755.470938][T14839] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 755.498711][T14839] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 755.533305][T14839] wwan wwan0: port wwan0mbim0 attached [ 755.578510][T14839] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 22:b0:49:cf:2b:9f [ 755.700841][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.767348][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.804521][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.852601][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.922305][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4302'. [ 756.541266][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.575423][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.814169][T19415] warning: `syz.3.4309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 756.827211][T14839] usb 9-1: USB disconnect, device number 3 [ 756.834129][T14839] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 756.927383][T14839] wwan wwan0: port wwan0mbim0 disconnected [ 758.430386][T19457] loop8: detected capacity change from 0 to 512 [ 758.482034][T19457] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 758.520664][T19457] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 758.583275][T19457] EXT4-fs (loop8): 1 truncate cleaned up [ 758.613521][T19457] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.187617][T19473] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.4320: invalid block [ 759.381175][T19474] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.4320: invalid block [ 759.496992][T19472] syzkaller0: entered promiscuous mode [ 759.536527][T19472] syzkaller0: entered allmulticast mode [ 760.791040][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.961514][T19495] fuse: Bad value for 'group_id' [ 761.432288][T19502] netlink: 'syz.4.4333': attribute type 10 has an invalid length. [ 761.465504][T19502] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.472952][T19502] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.561842][T19502] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.569121][T19502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.578681][T19502] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.585939][T19502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.668314][T19502] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 761.702469][T19504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4333'. [ 762.464959][T19532] fuse: Bad value for 'group_id' [ 762.491456][T19534] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4341'. [ 762.748235][T19540] overlayfs: missing 'lowerdir' [ 763.464391][T19557] fuse: Bad value for 'group_id' [ 763.575222][ T5856] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 763.684695][T19558] netlink: 'syz.6.4349': attribute type 10 has an invalid length. [ 763.745135][T19558] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.762609][T19558] bond0: (slave team0): Enslaving as an active interface with an up link [ 763.810912][ T5856] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.875696][ T5856] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 763.937462][ T5856] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.995268][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.046376][ T5856] usb 9-1: Product: syz [ 764.050595][ T5856] usb 9-1: Manufacturer: syz [ 764.086695][ T5856] usb 9-1: SerialNumber: syz [ 764.138228][ T5856] cdc_mbim 9-1:1.0: skipping garbage [ 764.214787][T19571] syzkaller0: entered promiscuous mode [ 764.231014][T19571] syzkaller0: entered allmulticast mode [ 764.249796][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'. [ 764.339400][T19552] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 764.466259][T19573] netlink: set zone limit has 8 unknown bytes [ 765.000070][T19552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.031752][T19552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.050831][T19552] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 765.081978][ T5856] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 765.096222][ T5856] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 765.295059][ T5856] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 765.320641][ T5856] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 765.373181][ T5856] wwan wwan0: port wwan0mbim0 attached [ 765.573221][T19552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.629659][T19552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.680053][T19552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.711438][T19552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.365676][T19552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.378364][T19552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.076176][ T5856] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, c2:ab:84:11:3d:52 [ 770.087378][T19586] netem: change failed [ 770.163252][ T5856] usb 9-1: USB disconnect, device number 4 [ 770.192689][ T5856] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 770.387148][ T5856] wwan wwan0: port wwan0mbim0 disconnected [ 770.866868][ T5856] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 771.083420][T19638] Bluetooth: MGMT ver 1.22 [ 771.118373][ T5856] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.134521][T19638] netlink: get zone limit has 8 unknown bytes [ 771.162726][ T5856] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 771.230140][ T5856] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.270200][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.309560][ T5856] usb 9-1: Product: syz [ 771.313779][ T5856] usb 9-1: Manufacturer: syz [ 771.340188][ T5856] usb 9-1: SerialNumber: syz [ 771.375257][ T5856] cdc_mbim 9-1:1.0: skipping garbage [ 771.628909][T19607] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 771.898585][T19665] tipc: Started in network mode [ 771.903705][T19665] tipc: Node identity 3ac524dc809c, cluster identity 4711 [ 771.941543][T19665] tipc: Enabled bearer , priority 0 [ 771.995923][T19667] syzkaller0: entered promiscuous mode [ 772.001457][T19667] syzkaller0: entered allmulticast mode [ 772.098502][T19667] tipc: Resetting bearer [ 772.162135][T19661] tipc: Resetting bearer [ 772.251905][T19661] tipc: Disabling bearer [ 772.291148][T19607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.349835][T19607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.388052][T19607] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 772.441230][ T5856] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 772.485021][ T5856] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 772.657505][ T5856] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 772.690090][T19685] loop6: detected capacity change from 0 to 256 [ 772.695276][ T5856] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 772.745855][ T5856] wwan wwan0: port wwan0mbim0 attached [ 772.796383][ T5856] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 4a:c2:11:d8:e6:c4 [ 772.893730][T19607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.981522][T19607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.020092][T19607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.083556][T19607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.305890][T19704] fuse: Unknown parameter 'grou00000000000000000000' [ 773.743937][T19607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.791369][T19607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.069876][ T9] usb 9-1: USB disconnect, device number 5 [ 774.088165][ T9] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 774.297941][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 774.749141][T19732] loop8: detected capacity change from 0 to 256 [ 775.158623][T19739] fuse: Unknown parameter 'grou00000000000000000000' [ 776.325004][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 776.545958][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.625018][ T9] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 776.705756][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 776.755078][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.763129][ T9] usb 9-1: Product: syz [ 776.818085][ T9] usb 9-1: Manufacturer: syz [ 776.822744][ T9] usb 9-1: SerialNumber: syz [ 776.834616][T19767] fuse: Unknown parameter 'grou00000000000000000000' [ 776.889262][ T9] cdc_mbim 9-1:1.0: skipping garbage [ 777.065418][T19769] loop6: detected capacity change from 0 to 256 [ 777.098350][T19754] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 777.257107][T19775] fuse: Bad value for 'fd' [ 777.761747][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.825732][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.845126][T19754] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 777.853029][ T9] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 777.888136][ T9] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 778.096338][ T9] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 778.146901][ T9] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 778.245061][ T9] wwan wwan0: port wwan0mbim0 attached [ 778.296211][ T9] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 7e:0f:f2:a9:0a:9c [ 778.307972][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.308349][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.429549][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.486614][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.762550][T19789] syz.4.4428 (19789) used greatest stack depth: 17448 bytes left [ 779.188197][T19801] overlayfs: missing 'lowerdir' [ 779.252817][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.256228][T19802] overlayfs: overlapping lowerdir path [ 779.312463][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.475760][T19806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 779.488535][T19806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 779.505217][T19806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.517907][T19806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.538113][T19806] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 779.550302][T19806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 779.579961][ T9] usb 9-1: USB disconnect, device number 6 [ 779.665795][ T9] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 779.837629][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'. [ 779.904982][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 780.248435][T19815] loop4: detected capacity change from 0 to 256 [ 780.617566][ T5856] hid-generic 0005:0002:5508.0007: item fetching failed at offset 3/6 [ 780.668319][ T5856] hid-generic: probe of 0005:0002:5508.0007 failed with error -22 [ 780.985318][T19806] Bluetooth: hci1: link tx timeout [ 780.991637][T19806] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 781.174202][T19803] chnl_net:caif_netlink_parms(): no params data found [ 781.578725][T19842] overlayfs: missing 'lowerdir' [ 781.598363][T19842] overlayfs: overlapping lowerdir path [ 781.688717][T12541] Bluetooth: hci3: command tx timeout [ 781.764418][T19803] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.809964][T19803] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.825385][T19803] bridge_slave_0: entered allmulticast mode [ 781.832878][T19803] bridge_slave_0: entered promiscuous mode [ 781.896652][T19803] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.916350][T19803] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.923667][T19803] bridge_slave_1: entered allmulticast mode [ 781.998649][T19803] bridge_slave_1: entered promiscuous mode [ 782.141169][T19856] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 782.168839][T19856] overlayfs: failed to set xattr on upper [ 782.174619][T19856] overlayfs: ...falling back to redirect_dir=nofollow. [ 782.180813][T19803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.211133][T19856] overlayfs: ...falling back to index=off. [ 782.231080][T19861] loop8: detected capacity change from 0 to 512 [ 782.233509][T19803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.244770][T19856] overlayfs: ...falling back to uuid=null. [ 782.255741][T19856] overlayfs: ...falling back to xino=off. [ 782.269178][T19856] overlayfs: maximum fs stacking depth exceeded [ 782.278064][T19861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 782.316528][T19861] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 782.377362][T19861] EXT4-fs (loop8): 1 truncate cleaned up [ 782.391184][T19861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.509853][T19803] team0: Port device team_slave_0 added [ 782.557326][T19803] team0: Port device team_slave_1 added [ 782.815107][T19874] syz.8.4445[19874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.815753][T19874] syz.8.4445[19874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.085261][T12541] Bluetooth: hci1: command 0x0406 tx timeout [ 783.179003][T19874] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.4445: invalid block [ 783.236452][T19875] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.4445: invalid block [ 783.659443][T19803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.689329][T19881] overlayfs: missing 'lowerdir' [ 783.718167][T19803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.754961][T19881] overlayfs: overlapping lowerdir path [ 783.786050][T19806] Bluetooth: hci3: command tx timeout [ 783.914079][T19803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.061210][T19803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.119174][T19803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.255078][T19886] fuse: Invalid rootmode [ 784.305947][T19803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.504009][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.777090][T19803] hsr_slave_0: entered promiscuous mode [ 784.859128][T19803] hsr_slave_1: entered promiscuous mode [ 784.882078][T19803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.915367][T19803] Cannot create hsr debugfs directory [ 784.935607][T19898] tipc: Started in network mode [ 784.940521][T19898] tipc: Node identity 62b37cf02301, cluster identity 4711 [ 784.975649][T19898] tipc: Enabled bearer , priority 0 [ 784.986002][T19901] syzkaller0: entered promiscuous mode [ 785.035407][T19901] syzkaller0: entered allmulticast mode [ 785.107211][T19895] tipc: Resetting bearer [ 785.143794][T19894] tipc: Resetting bearer [ 785.192490][T19894] tipc: Disabling bearer [ 785.736465][T19913] overlayfs: missing 'lowerdir' [ 785.809229][T19914] overlayfs: overlapping lowerdir path [ 785.835110][T19806] Bluetooth: hci3: command tx timeout [ 785.860555][T19803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.149473][T19918] loop6: detected capacity change from 0 to 512 [ 786.210495][T19918] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 786.249275][T19918] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 786.268055][T19803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.318453][T19918] EXT4-fs (loop6): 1 truncate cleaned up [ 786.406008][T19918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.750004][T19803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.857880][T19929] syz.6.4459[19929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.858577][T19929] syz.6.4459[19929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.997021][T19929] EXT4-fs error (device loop6): __ext4_iget:5067: inode #15: block 1803188595: comm syz.6.4459: invalid block [ 787.227701][T19930] EXT4-fs error (device loop6): __ext4_iget:5067: inode #15: block 1803188595: comm syz.6.4459: invalid block [ 787.580761][T19803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.719584][T19936] overlayfs: missing 'workdir' [ 787.787527][T19936] overlayfs: overlapping lowerdir path [ 787.918862][T12541] Bluetooth: hci3: command tx timeout [ 788.515404][T17831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.529877][T19803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 788.634127][T19803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 788.678833][T19803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 788.736235][T19803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 789.123599][T19803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.279530][T19803] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.348946][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.356151][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.443212][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.450424][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.558735][T19963] overlayfs: missing 'workdir' [ 789.611242][T19965] overlayfs: overlapping lowerdir path [ 790.616248][T19803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.877487][T19986] fuse: Bad value for 'rootmode' [ 790.939651][T19803] veth0_vlan: entered promiscuous mode [ 791.011537][T19803] veth1_vlan: entered promiscuous mode [ 791.213084][T19803] veth0_macvtap: entered promiscuous mode [ 791.289276][T19803] veth1_macvtap: entered promiscuous mode [ 791.400771][T19995] loop8: detected capacity change from 0 to 256 [ 791.445111][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.510179][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.572583][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.611141][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.656430][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.695770][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.731771][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.772751][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.803104][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.844906][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.869261][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.902150][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.955338][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.985321][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.015663][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.034882][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.071947][T19803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.106011][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.165276][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.195148][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.225130][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.264920][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.286528][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.305055][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.325568][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.355045][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.374942][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.384804][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.426008][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.444922][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.464991][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.504998][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.536120][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.577197][T19803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.651000][T19803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.696746][T19803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.734988][T19803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.764995][T19803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.934261][T20004] overlayfs: missing 'workdir' [ 793.018686][T20005] overlayfs: overlapping lowerdir path [ 793.183431][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.207252][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.301972][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.344002][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.593083][T20033] fuse: Bad value for 'fd' [ 795.598295][T19806] Bluetooth: hci4: command 0x0406 tx timeout [ 795.794035][T20046] overlayfs: missing 'lowerdir' [ 795.842368][T20046] overlayfs: overlapping lowerdir path [ 797.027917][T20069] fuse: Bad value for 'fd' [ 797.163382][T20060] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.625488][T20060] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.257546][T20060] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.826897][T20060] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.910332][T20097] overlayfs: missing 'lowerdir' [ 798.947455][T20097] overlayfs: overlapping lowerdir path [ 799.135047][T14839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 799.263992][T20060] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.375642][T20060] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.386378][T14839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.418178][T14839] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 799.475685][T20060] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.506220][T14839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.536810][T14839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.591288][T14839] usb 5-1: Product: syz [ 799.597907][T20060] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.615535][T14839] usb 5-1: Manufacturer: syz [ 799.628259][T14839] usb 5-1: SerialNumber: syz [ 799.671036][T14839] cdc_mbim 5-1:1.0: skipping garbage [ 799.882730][T20095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 800.566581][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.635424][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.689830][T20095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 800.728747][T14839] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 800.765366][T14839] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 800.955302][T14839] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 800.997205][T14839] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 801.054063][T14839] wwan wwan0: port wwan0mbim0 attached [ 801.091175][T14839] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, be:83:aa:84:4c:81 [ 801.147831][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.162607][T20128] fuse: Bad value for 'fd' [ 801.190573][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.246233][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.305431][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.961412][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.038625][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.339038][ T788] usb 5-1: USB disconnect, device number 7 [ 802.398504][ T788] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 802.484767][T20152] overlayfs: missing 'lowerdir' [ 802.563853][T20155] overlayfs: overlapping lowerdir path [ 802.670751][ T788] wwan wwan0: port wwan0mbim0 disconnected [ 803.209520][T20169] fuse: Bad value for 'fd' [ 803.552013][T20179] netlink: 'syz.6.4520': attribute type 9 has an invalid length. [ 803.643598][T20176] veth0_to_team: entered promiscuous mode [ 803.996427][T20186] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 804.039297][T20186] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 804.056453][T20189] overlayfs: overlapping lowerdir path [ 805.182716][T20210] fuse: Bad value for 'fd' [ 806.058855][T20234] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 806.105000][T20234] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 806.113776][T20237] overlayfs: overlapping lowerdir path [ 806.418769][T20242] fuse: Bad value for 'fd' [ 808.270300][T19806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 808.288016][T19806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 808.297116][T19806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 808.335066][T19806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 808.355098][T19806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 808.366488][T19806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 808.565817][T20267] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 808.574593][T20267] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 808.619749][T20270] overlayfs: overlapping lowerdir path [ 808.895557][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.902993][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.167123][T20280] fuse: Invalid rootmode [ 809.307695][T20261] chnl_net:caif_netlink_parms(): no params data found [ 809.569511][T20290] fuse: Bad value for 'fd' [ 809.614257][T20261] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.642586][T20261] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.650417][T20261] bridge_slave_0: entered allmulticast mode [ 809.658240][T20261] bridge_slave_0: entered promiscuous mode [ 809.668077][T20261] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.676160][T20261] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.683595][T20261] bridge_slave_1: entered allmulticast mode [ 809.691413][T20261] bridge_slave_1: entered promiscuous mode [ 809.739904][T20261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.759197][T20261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.912572][T20261] team0: Port device team_slave_0 added [ 809.970923][T20261] team0: Port device team_slave_1 added [ 810.055717][T20297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4549'. [ 810.130282][T20261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.150366][T20261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.211961][T20261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.226258][T20261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.243824][T20261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.302599][T20261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.454174][T20261] hsr_slave_0: entered promiscuous mode [ 810.476117][T12541] Bluetooth: hci0: command tx timeout [ 810.486519][T20261] hsr_slave_1: entered promiscuous mode [ 810.496887][T20261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 810.504477][T20261] Cannot create hsr debugfs directory [ 810.938960][T20261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.959744][T20316] fuse: Invalid rootmode [ 811.124272][T20261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.238636][T20321] fuse: Bad value for 'fd' [ 811.331380][T20261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.511975][T20261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.839203][T20261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 811.862001][T20261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 811.905928][T20261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 811.946496][T20261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 812.187236][T20261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.261426][T20261] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.293479][T20342] fuse: Invalid rootmode [ 812.300739][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.305510][T20344] Bluetooth: MGMT ver 1.22 [ 812.307924][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.379820][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.387046][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.555830][T12541] Bluetooth: hci0: command tx timeout [ 812.579648][T20350] fuse: Bad value for 'fd' [ 813.205536][T20261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.341958][T20374] fuse: Bad value for 'rootmode' [ 814.304431][T20261] veth0_vlan: entered promiscuous mode [ 814.371320][T20261] veth1_vlan: entered promiscuous mode [ 814.524632][T20403] fuse: Bad value for 'rootmode' [ 814.588562][T20261] veth0_macvtap: entered promiscuous mode [ 814.635849][T20401] tipc: Enabled bearer , priority 0 [ 814.646120][T12541] Bluetooth: hci0: command tx timeout [ 814.659449][T20404] syzkaller0: entered promiscuous mode [ 814.700386][T20404] syzkaller0: entered allmulticast mode [ 814.748005][T20261] veth1_macvtap: entered promiscuous mode [ 814.880859][T20408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 814.926936][T20401] tipc: Resetting bearer [ 814.998546][T20399] tipc: Resetting bearer [ 815.178752][T20399] tipc: Disabling bearer [ 815.323393][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.407152][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.461386][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.528161][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.568315][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.595237][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.614996][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.650061][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.682590][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.714109][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.746657][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.779480][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.821394][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.865343][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.904973][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.937183][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.999345][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.034183][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.088791][T20261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.183070][T20421] tipc: Enabled bearer , priority 0 [ 816.226519][T20422] syzkaller0: entered promiscuous mode [ 816.237682][T20422] syzkaller0: entered allmulticast mode [ 816.306623][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.359675][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.415010][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.465029][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.495268][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.529635][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.562433][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.595656][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.633702][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.666036][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.698862][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.726830][T12541] Bluetooth: hci0: command tx timeout [ 816.749341][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.782075][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.820676][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.854936][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.885262][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.921489][T20261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.947361][T20261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.962188][T20261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.005208][T20430] tipc: Resetting bearer [ 817.109026][T20430] tipc: Disabling bearer [ 817.283049][T20261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.325386][T20441] fuse: Bad value for 'rootmode' [ 817.335406][T20261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.367947][T20261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.395327][T20261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.777674][ T4488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.807398][ T4488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.983329][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.014891][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.028610][T20456] fuse: Unknown parameter '0x0000000000000004' [ 818.616186][T20468] fuse: Unknown parameter 'use00000000000000000000' [ 818.694629][T20470] tipc: Started in network mode [ 818.710075][T20470] tipc: Node identity 768de5ca155e, cluster identity 4711 [ 818.749577][T20470] tipc: Enabled bearer , priority 0 [ 818.797363][T20471] syzkaller0: entered promiscuous mode [ 818.825218][T20471] syzkaller0: entered allmulticast mode [ 818.921878][T20476] loop6: detected capacity change from 0 to 256 [ 819.016588][T20471] tipc: Resetting bearer [ 819.085127][T20469] tipc: Resetting bearer [ 819.316321][T20469] tipc: Disabling bearer [ 819.579251][T20486] fuse: Unknown parameter '0x0000000000000004' [ 819.610727][T20487] lo speed is unknown, defaulting to 1000 [ 819.641207][T20487] lo speed is unknown, defaulting to 1000 [ 819.692439][T20487] lo speed is unknown, defaulting to 1000 [ 819.760971][T20490] IPv6: Can't replace route, no match found [ 819.865530][T20487] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 819.946711][T20487] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 820.068775][T20498] fuse: Unknown parameter 'use00000000000000000000' [ 820.162081][T20487] lo speed is unknown, defaulting to 1000 [ 820.206550][T20487] lo speed is unknown, defaulting to 1000 [ 820.475316][T20508] overlayfs: missing 'lowerdir' [ 820.635219][T20487] lo speed is unknown, defaulting to 1000 [ 820.666380][T20487] lo speed is unknown, defaulting to 1000 [ 820.706598][T20487] lo speed is unknown, defaulting to 1000 [ 820.746090][T20487] lo speed is unknown, defaulting to 1000 [ 820.753444][T20487] lo speed is unknown, defaulting to 1000 [ 820.842943][T20487] lo speed is unknown, defaulting to 1000 [ 820.886400][T20487] lo speed is unknown, defaulting to 1000 [ 820.936391][T20487] lo speed is unknown, defaulting to 1000 [ 820.986935][T20487] lo speed is unknown, defaulting to 1000 [ 821.020799][T20487] lo speed is unknown, defaulting to 1000 [ 821.069188][T20487] lo speed is unknown, defaulting to 1000 [ 821.135487][T20487] lo speed is unknown, defaulting to 1000 [ 821.142730][T20487] lo speed is unknown, defaulting to 1000 [ 821.201078][T20487] lo speed is unknown, defaulting to 1000 [ 821.719949][T20531] fuse: Unknown parameter 'use00000000000000000000' [ 822.326433][T20544] loop6: detected capacity change from 0 to 256 [ 823.416052][T20562] tipc: Enabled bearer , priority 0 [ 823.459107][T20562] tipc: Resetting bearer [ 823.561238][T20565] tipc: Started in network mode [ 823.595649][T20565] tipc: Node identity aae32f197efa, cluster identity 4711 [ 823.608125][T20565] tipc: Enabled bearer , priority 0 [ 823.647865][T20570] syzkaller0: entered promiscuous mode [ 823.653384][T20570] syzkaller0: entered allmulticast mode [ 823.821154][T20560] tipc: Disabling bearer [ 824.012409][T20574] tipc: Resetting bearer [ 824.351163][T20580] bridge0: port 3(syz_tun) entered blocking state [ 824.399629][T20580] bridge0: port 3(syz_tun) entered disabled state [ 824.406254][T20587] loop8: detected capacity change from 0 to 256 [ 824.474383][T20580] syz_tun: entered allmulticast mode [ 824.500181][T20580] syz_tun: entered promiscuous mode [ 824.535050][T20580] bridge0: port 3(syz_tun) entered blocking state [ 824.543476][T20580] bridge0: port 3(syz_tun) entered forwarding state [ 824.618816][T14839] tipc: Node number set to 3558420249 [ 824.697046][T20561] tipc: Resetting bearer [ 824.895782][T20561] tipc: Disabling bearer [ 825.091285][T20584] netlink: 'syz.3.4636': attribute type 10 has an invalid length. [ 825.223121][T20584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 825.856037][T20604] fuse: Bad value for 'fd' [ 826.178778][T20614] loop6: detected capacity change from 0 to 256 [ 826.489788][T20620] tipc: Enabled bearer , priority 0 [ 826.577201][T20620] tipc: Resetting bearer [ 826.836231][T20617] tipc: Disabling bearer [ 827.216373][T20628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.311123][T20628] bond0: (slave rose0): Enslaving as an active interface with an up link [ 827.905659][T20649] fuse: Bad value for 'fd' [ 828.330078][T20663] loop4: detected capacity change from 0 to 256 [ 829.148172][T20682] fuse: Unknown parameter 'user_id00000000000000000000' [ 829.556267][T20693] fuse: Bad value for 'fd' [ 830.190139][T20711] loop8: detected capacity change from 0 to 256 [ 830.255519][T20713] fuse: Unknown parameter 'user_id00000000000000000000' [ 831.177291][T20735] syzkaller0: entered promiscuous mode [ 831.197103][T20735] syzkaller0: entered allmulticast mode [ 831.464125][T20746] fuse: Unknown parameter 'user_id00000000000000000000' [ 831.728699][T20751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4687'. [ 831.743186][T20756] loop6: detected capacity change from 0 to 256 [ 831.766643][T20751] netlink: 'syz.4.4687': attribute type 12 has an invalid length. [ 831.848255][T20751] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.858199][T20751] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.868623][T20751] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.877628][T20751] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.090238][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4687'. [ 833.175030][T20789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4697'. [ 833.374484][T20799] loop4: detected capacity change from 0 to 256 [ 834.120242][T20814] tipc: Enabled bearer , priority 0 [ 834.179215][T20818] syzkaller0: entered promiscuous mode [ 834.184738][T20818] syzkaller0: entered allmulticast mode [ 834.453648][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4703'. [ 834.494331][T20818] tipc: Resetting bearer [ 834.560746][T20813] tipc: Resetting bearer [ 834.705439][T20813] tipc: Disabling bearer [ 835.380400][T20846] loop6: detected capacity change from 0 to 256 [ 835.413858][T20847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4713'. [ 835.447144][T20850] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4711'. [ 835.483811][T20847] team_slave_0: entered promiscuous mode [ 835.490181][T20847] team_slave_1: entered promiscuous mode [ 835.542149][T20847] macvtap1: entered promiscuous mode [ 835.568696][T20847] team0: entered promiscuous mode [ 835.582383][T20847] macvtap1: entered allmulticast mode [ 835.594941][T20847] team0: entered allmulticast mode [ 835.607478][T20847] team_slave_0: entered allmulticast mode [ 835.676586][T20847] team_slave_1: entered allmulticast mode [ 835.708950][T20847] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 835.814239][T20851] macvtap1: left promiscuous mode [ 835.836362][T20851] team0: left promiscuous mode [ 835.862593][T20851] macvtap1: left allmulticast mode [ 835.881953][T20851] team0: left allmulticast mode [ 835.943892][T20851] team_slave_0: left allmulticast mode [ 835.973583][T20851] team_slave_1: left allmulticast mode [ 836.620787][T20870] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4717'. [ 837.663168][T20894] netlink: 'syz.3.4722': attribute type 2 has an invalid length. [ 837.671749][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4722'. [ 838.113188][T20905] tipc: Enabled bearer , priority 0 [ 838.143357][T20905] syzkaller0: entered promiscuous mode [ 838.165047][T20905] syzkaller0: entered allmulticast mode [ 838.212287][T20905] tipc: Resetting bearer [ 838.282884][T20904] tipc: Resetting bearer [ 838.386123][T20904] tipc: Disabling bearer [ 838.965661][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4740'. [ 839.380860][T20937] lo speed is unknown, defaulting to 1000 [ 840.475251][T20967] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 840.582605][T20937] lo speed is unknown, defaulting to 1000 [ 841.378630][T20972] batadv_slave_1: entered promiscuous mode [ 841.592341][T20986] fuse: Unknown parameter '0x0000000000000004' [ 841.669671][T20971] batadv_slave_1: left promiscuous mode [ 842.313695][T21002] syz.3.4762 (21002) used obsolete PPPIOCDETACH ioctl [ 842.322012][T21004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4763'. [ 842.362386][T21004] erspan0: entered promiscuous mode [ 842.414034][T21004] macvtap1: entered promiscuous mode [ 842.445409][T21004] macvtap1: entered allmulticast mode [ 842.473455][T21004] erspan0: entered allmulticast mode [ 842.480035][T21013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4764'. [ 842.537509][T21007] macvtap1: left promiscuous mode [ 842.577215][T21007] macvtap1: left allmulticast mode [ 842.592430][T21007] erspan0: left allmulticast mode [ 843.300682][T21027] fuse: Unknown parameter '0x0000000000000004' [ 843.339710][T21029] tc_dump_action: action bad kind [ 843.731550][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 843.786155][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 843.856384][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 843.922731][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 844.008128][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 844.060558][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 844.090824][T21041] sctp: [Deprecated]: syz.6.4771 (pid 21041) Use of int in max_burst socket option. [ 844.090824][T21041] Use struct sctp_assoc_value instead [ 844.146313][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 844.233614][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 844.313253][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 844.374380][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 844.497504][T21054] fuse: Unknown parameter '0x0000000000000004' [ 844.527741][T21034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 845.761110][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046a53c00: rx timeout, send abort [ 845.773173][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888046a53c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 845.863488][T21076] tipc: Enabled bearer , priority 0 [ 845.918158][T21076] tipc: Resetting bearer [ 846.086558][T21075] tipc: Disabling bearer [ 847.279271][T21106] sctp: [Deprecated]: syz.8.4798 (pid 21106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 847.279271][T21106] Use struct sctp_sack_info instead [ 848.598971][T21142] loop4: detected capacity change from 0 to 256 [ 849.965235][T12541] Bluetooth: hci1: link tx timeout [ 849.970480][T12541] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 850.164972][T14847] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 850.196193][T21188] loop4: detected capacity change from 0 to 256 [ 850.410699][T14847] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.427811][T14847] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 850.467635][T14847] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.509765][T14847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.538871][T14847] usb 9-1: Product: syz [ 850.554943][T14847] usb 9-1: Manufacturer: syz [ 850.576784][T14847] usb 9-1: SerialNumber: syz [ 850.614021][T14847] cdc_mbim 9-1:1.0: skipping garbage [ 850.826406][T21181] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 850.851509][T21203] loop3: detected capacity change from 0 to 128 [ 851.785091][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.995100][T19806] Bluetooth: hci1: command 0x0406 tx timeout [ 852.060668][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.165135][T21181] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 852.245742][T14847] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 852.304888][T14847] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 852.454511][T14847] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 852.489993][T21219] __nla_validate_parse: 11 callbacks suppressed [ 852.490010][T21219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4830'. [ 852.493324][T14847] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 852.505551][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4830'. [ 852.546354][T21219] netlink: 'syz.4.4830': attribute type 12 has an invalid length. [ 852.566768][T14847] wwan wwan0: port wwan0mbim0 attached [ 852.598539][T21219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4830'. [ 852.623397][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4830'. [ 852.662980][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.716034][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.762418][T14847] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 8a:d1:0e:f9:70:b6 [ 852.780123][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.875050][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.947031][T21235] loop4: detected capacity change from 0 to 256 [ 853.307711][T21242] sctp: [Deprecated]: syz.6.4833 (pid 21242) Use of int in max_burst socket option. [ 853.307711][T21242] Use struct sctp_assoc_value instead [ 853.538863][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.596381][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.887079][ T5856] usb 9-1: USB disconnect, device number 7 [ 853.893851][ T5856] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 854.058517][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4840'. [ 854.097211][ T5856] wwan wwan0: port wwan0mbim0 disconnected [ 854.108418][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4840'. [ 854.137984][T21264] netlink: 'syz.3.4840': attribute type 12 has an invalid length. [ 854.194564][T21264] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.203517][T21264] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.212418][T21264] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.223089][T21264] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.349635][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4840'. [ 854.369979][T21264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4840'. [ 854.417667][T21274] loop4: detected capacity change from 0 to 256 [ 854.625382][T21278] sctp: [Deprecated]: syz.6.4845 (pid 21278) Use of int in max_burst socket option. [ 854.625382][T21278] Use struct sctp_assoc_value instead [ 855.438850][T21309] fuse: Bad value for 'group_id' [ 856.082110][T21326] sctp: [Deprecated]: syz.4.4859 (pid 21326) Use of int in max_burst socket option. [ 856.082110][T21326] Use struct sctp_assoc_value instead [ 856.576656][T21338] tipc: Enabled bearer , priority 0 [ 856.599934][T21338] syzkaller0: entered promiscuous mode [ 856.620443][T21338] syzkaller0: entered allmulticast mode [ 856.686274][T21338] tipc: Resetting bearer [ 856.775099][T21337] tipc: Resetting bearer [ 856.889636][T21337] tipc: Disabling bearer [ 856.912286][T21346] loop4: detected capacity change from 0 to 128 [ 856.936191][T21346] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ" or missing value [ 857.268748][T21355] fuse: Bad value for 'group_id' [ 857.450434][T21361] loop6: detected capacity change from 0 to 512 [ 857.524781][T21361] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000) [ 857.569040][T21361] FAT-fs (loop6): Filesystem has been set read-only [ 857.616299][T21361] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000) [ 857.675597][T21361] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000) [ 857.745271][ T28] audit: type=1800 audit(1763201231.738:339): pid=21361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4868" name="file1" dev="loop6" ino=1048685 res=0 errno=0 [ 857.883333][T21368] sctp: [Deprecated]: syz.3.4870 (pid 21368) Use of int in max_burst socket option. [ 857.883333][T21368] Use struct sctp_assoc_value instead [ 858.216765][T21383] syzkaller0: create flow: hash 4109568300 index 1 [ 858.735780][ T6018] syzkaller0: tun_net_xmit 76 [ 858.764496][ T6018] syzkaller0: tun_net_xmit 48 [ 858.770348][ T5175] syzkaller0: tun_net_xmit 76 [ 858.825843][T21372] syzkaller0: delete flow: hash 4109568300 index 1 [ 859.705144][T21420] sctp: [Deprecated]: syz.3.4882 (pid 21420) Use of int in max_burst socket option. [ 859.705144][T21420] Use struct sctp_assoc_value instead [ 864.692688][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4885'. [ 864.978393][T21445] sctp: [Deprecated]: syz.4.4891 (pid 21445) Use of int in max_burst socket option. [ 864.978393][T21445] Use struct sctp_assoc_value instead [ 865.138460][T21453] loop6: detected capacity change from 0 to 128 [ 865.347265][ T1187] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 865.561474][ T1187] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.589565][ T1187] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 865.621232][ T1187] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.644990][ T1187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.671516][ T1187] usb 9-1: Product: syz [ 865.682177][ T1187] usb 9-1: Manufacturer: syz [ 865.706161][ T1187] usb 9-1: SerialNumber: syz [ 865.751055][ T1187] cdc_mbim 9-1:1.0: skipping garbage [ 865.940651][T21451] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 866.328763][T21486] sctp: [Deprecated]: syz.6.4904 (pid 21486) Use of int in max_burst socket option. [ 866.328763][T21486] Use struct sctp_assoc_value instead [ 866.574375][T21451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.617177][T21451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.656777][T21451] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 866.709149][ T1187] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 866.737606][ T1187] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 866.915575][ T1187] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 866.954697][ T1187] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 867.024568][ T1187] wwan wwan0: port wwan0mbim0 attached [ 867.066739][ T1187] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 52:a9:e8:ed:c8:55 [ 867.120750][T21451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.227619][T21451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.287308][T21451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.336994][T21451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.936117][T12541] Bluetooth: hci0: link tx timeout [ 867.942061][T12541] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 868.025208][T21451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.034024][T21451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.058657][T19806] Bluetooth: hci0: link tx timeout [ 868.063816][T19806] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 868.092344][T19806] Bluetooth: hci0: link tx timeout [ 868.100401][T19806] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 868.286702][T21545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4923'. [ 868.319297][T21545] netlink: 'syz.3.4923': attribute type 12 has an invalid length. [ 868.337601][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4923'. [ 868.407933][T14839] usb 9-1: USB disconnect, device number 8 [ 868.426759][T14839] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 868.600563][T21559] ªªªªª»: renamed from vlan0 (while UP) [ 868.647221][T14839] wwan wwan0: port wwan0mbim0 disconnected [ 868.719757][T19806] Bluetooth: hci0: link tx timeout [ 868.726733][T19806] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 868.750929][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4930'. [ 868.845052][T21563] tipc: Enabled bearer , priority 0 [ 868.865347][T21563] syzkaller0: entered promiscuous mode [ 868.870880][T21563] syzkaller0: entered allmulticast mode [ 868.877208][T19806] Bluetooth: hci0: link tx timeout [ 868.882622][T19806] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 869.093610][T21569] tipc: Resetting bearer [ 869.168199][T21562] tipc: Resetting bearer [ 869.312504][T21562] tipc: Disabling bearer [ 869.760237][T19806] Bluetooth: hci0: link tx timeout [ 869.765675][T19806] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 869.773708][T19806] Bluetooth: hci0: link tx timeout [ 869.779056][T19806] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 869.948644][T21596] tipc: Started in network mode [ 869.965397][T21596] tipc: Node identity d2637fb7fba3, cluster identity 4711 [ 869.986545][T19806] Bluetooth: hci0: link tx timeout [ 869.992908][T19806] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 870.002350][T19806] Bluetooth: hci0: command 0x0406 tx timeout [ 870.008325][T21596] tipc: Enabled bearer , priority 0 [ 870.077262][T21596] tipc: Resetting bearer [ 870.198949][T21595] tipc: Disabling bearer [ 871.617070][T21650] fuse: Unknown parameter 'grou00000000000000000000' [ 872.265054][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4964'. [ 872.755322][T21678] tipc: Enabled bearer , priority 0 [ 872.813384][T21684] syzkaller0: entered promiscuous mode [ 872.855122][T21684] syzkaller0: entered allmulticast mode [ 873.069618][T21691] fuse: Unknown parameter 'grou00000000000000000000' [ 873.092577][T21684] tipc: Resetting bearer [ 873.160787][T21675] tipc: Resetting bearer [ 873.318635][T21675] tipc: Disabling bearer [ 874.903680][T21730] fuse: Unknown parameter 'group_i00000000000000000000' [ 874.996785][T21731] tap0: tun_chr_ioctl cmd 2147767507 [ 877.395652][T21788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5000'. [ 877.719680][T21801] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5002'. [ 877.936477][T21805] tipc: Enabled bearer , priority 0 [ 877.998007][T21808] syzkaller0: entered promiscuous mode [ 878.036215][T21808] syzkaller0: entered allmulticast mode [ 878.231769][T21803] tipc: Resetting bearer [ 878.467895][T21803] tipc: Disabling bearer [ 879.185568][T21829] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.5009'. [ 879.246140][T21830] tipc: Enabling of bearer rejected, failed to enable media [ 879.631633][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5012'. [ 879.992067][T21850] loop4: detected capacity change from 0 to 512 [ 880.050824][T21850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 880.111723][T21850] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 880.173855][T21850] EXT4-fs (loop4): 1 truncate cleaned up [ 880.189483][T21857] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5015'. [ 880.218580][T21850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.667959][T21869] syz.4.5014[21869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 880.668679][T21869] syz.4.5014[21869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 881.071581][T21869] EXT4-fs error (device loop4): __ext4_iget:5067: inode #15: block 1803188595: comm syz.4.5014: invalid block [ 881.156523][T21870] EXT4-fs error (device loop4): __ext4_iget:5067: inode #15: block 1803188595: comm syz.4.5014: invalid block [ 881.860376][T21878] fuse: Unknown parameter 'group_id00000000000000000000' [ 882.346391][T21883] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5020'. [ 882.408614][T21883] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5020'. [ 882.416256][T20261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.419250][T21884] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5020'. [ 882.475503][T21883] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5020'. [ 882.520123][T21883] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5020'. [ 882.789732][T21896] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5022'. [ 882.860237][T21899] tipc: Enabling of bearer rejected, failed to enable media [ 882.896573][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 883.153406][T21910] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5026'. [ 883.451367][T21918] loop3: detected capacity change from 0 to 512 [ 883.505025][T21918] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 883.546682][T21918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 883.618770][T21918] EXT4-fs (loop3): 1 truncate cleaned up [ 883.664692][T21918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.104461][T21939] syz.3.5029[21939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 884.104905][T21939] syz.3.5029[21939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 884.532464][T21939] EXT4-fs error (device loop3): __ext4_iget:5067: inode #15: block 1803188595: comm syz.3.5029: invalid block [ 884.579583][T21940] EXT4-fs error (device loop3): __ext4_iget:5067: inode #15: block 1803188595: comm syz.3.5029: invalid block [ 885.678249][T21950] tipc: Enabled bearer , priority 0 [ 885.769986][T21951] syzkaller0: entered promiscuous mode [ 885.820182][T21951] syzkaller0: entered allmulticast mode [ 885.847789][T19803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.019168][T21954] tipc: Resetting bearer [ 886.085670][T21949] tipc: Resetting bearer [ 886.286729][T21949] tipc: Disabling bearer [ 886.941767][T21973] fuse: Bad value for 'user_id' [ 887.309588][T21975] loop6: detected capacity change from 0 to 512 [ 887.341124][T21975] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 887.394925][T21975] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 887.466883][T21975] EXT4-fs (loop6): 1 truncate cleaned up [ 887.513187][T21975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.960974][T21993] syz.6.5050[21993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 887.961680][T21993] syz.6.5050[21993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 888.407838][T21993] EXT4-fs error (device loop6): __ext4_iget:5067: inode #15: block 1803188595: comm syz.6.5050: invalid block [ 888.462236][T21994] EXT4-fs error (device loop6): __ext4_iget:5067: inode #15: block 1803188595: comm syz.6.5050: invalid block [ 888.818578][T21998] loop3: detected capacity change from 0 to 1024 [ 888.871109][T21998] EXT4-fs: Ignoring removed orlov option [ 888.995275][T22004] fuse: Bad value for 'user_id' [ 889.013392][T21998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 889.082049][T21998] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.323551][T19803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 889.756523][T17831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.205617][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5065'. [ 890.227168][T22026] gretap0: entered promiscuous mode [ 890.236320][T22026] macvtap1: entered promiscuous mode [ 890.241899][T22026] macvtap1: entered allmulticast mode [ 890.249615][T22026] gretap0: entered allmulticast mode [ 890.760829][T22034] loop6: detected capacity change from 0 to 1024 [ 890.793696][T22034] EXT4-fs: Ignoring removed orlov option [ 890.852194][T22034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 890.881358][T22038] loop4: detected capacity change from 0 to 512 [ 890.901348][T22034] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.975094][T22038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 891.036194][T22038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 891.039566][T22034] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: comm syz.6.5069: lblock 0 mapped to illegal pblock 0 (length 6) [ 891.048111][ T28] audit: type=1800 audit(1763201265.028:340): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5069" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 891.125512][T22048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5074'. [ 891.161834][T22038] EXT4-fs (loop4): 1 truncate cleaned up [ 891.166225][T22034] EXT4-fs error (device loop6): ext4_ext_remove_space:2929: inode #15: comm syz.6.5069: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 891.168963][T22038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.327088][T22048] macvtap2: entered promiscuous mode [ 891.352293][T22048] macvtap2: entered allmulticast mode [ 891.395875][ T28] audit: type=1800 audit(1763201265.378:341): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5069" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 891.539415][T22053] syz.4.5071[22053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 891.540116][T22053] syz.4.5071[22053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 891.888620][T17831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 892.921326][T22066] syzkaller0: entered promiscuous mode [ 892.941055][T22066] syzkaller0: entered allmulticast mode [ 893.204055][T20261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.363621][T22071] loop6: detected capacity change from 0 to 256 [ 893.444640][T22071] FAT-fs (loop6): Directory bread(block 64) failed [ 893.474353][T22071] FAT-fs (loop6): Directory bread(block 65) failed [ 893.509220][T22071] FAT-fs (loop6): Directory bread(block 66) failed [ 893.545294][T22071] FAT-fs (loop6): Directory bread(block 67) failed [ 893.579089][T22071] FAT-fs (loop6): Directory bread(block 68) failed [ 893.593325][T22071] FAT-fs (loop6): Directory bread(block 69) failed [ 893.611045][T22071] FAT-fs (loop6): Directory bread(block 70) failed [ 893.626355][T22071] FAT-fs (loop6): Directory bread(block 71) failed [ 893.641182][T22071] FAT-fs (loop6): Directory bread(block 72) failed [ 893.655888][T22071] FAT-fs (loop6): Directory bread(block 73) failed [ 893.667550][T22078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5083'. [ 893.738118][T22078] erspan0: entered promiscuous mode [ 893.762948][T22078] macvtap3: entered promiscuous mode [ 893.776916][T22078] macvtap3: entered allmulticast mode [ 893.824858][T22078] erspan0: entered allmulticast mode [ 894.271329][T22095] loop8: detected capacity change from 0 to 512 [ 894.295384][T22095] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 894.332088][T22095] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 894.391926][T22095] EXT4-fs (loop8): 1 truncate cleaned up [ 894.410281][T22095] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.892707][T22109] syz.8.5088[22109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.893410][T22109] syz.8.5088[22109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 895.837586][T22119] loop4: detected capacity change from 0 to 512 [ 895.889663][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5094'. [ 895.982459][T22119] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.999367][T22121] erspan0: entered promiscuous mode [ 896.046419][T22121] macvtap1: entered promiscuous mode [ 896.084123][T22121] macvtap1: entered allmulticast mode [ 896.122351][T22121] erspan0: entered allmulticast mode [ 896.387871][T20261] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 896.571978][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.976850][T22142] loop3: detected capacity change from 0 to 32768 [ 898.104978][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5104'. [ 898.162873][T22163] erspan0: entered promiscuous mode [ 898.199898][T22163] macvtap2: entered promiscuous mode [ 898.210848][T22142] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 898.210848][T22142] [ 898.222649][T22149] loop6: detected capacity change from 0 to 32768 [ 898.226851][T22163] macvtap2: entered allmulticast mode [ 898.277806][T22163] erspan0: entered allmulticast mode [ 898.389201][T22142] ERROR: (device loop3): remounting filesystem as read-only [ 898.415801][T22149] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 898.500699][T22149] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 898.521317][T22173] loop8: detected capacity change from 0 to 512 [ 898.640824][T22173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 898.687935][T22173] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 898.731920][T22149] XFS (loop6): Ending clean mount [ 898.769350][T22173] EXT4-fs (loop8): 1 truncate cleaned up [ 898.782901][T22173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.911186][T22149] XFS (loop6): Quotacheck needed: Please wait. [ 899.070628][ T6694] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 899.161294][T22186] syz.8.5105[22186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 899.161981][T22186] syz.8.5105[22186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 900.190971][T22197] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5110'. [ 900.797909][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.801474][ T6694] XFS (loop6): Unmount and run xfs_repair [ 900.813017][ T6694] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 900.820460][ T6694] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 900.829407][ T6694] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 900.838378][ T6694] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 900.847773][ T6694] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 900.857311][ T6694] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 900.866313][ T6694] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 900.884987][ T6694] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 900.908329][ T6694] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 900.965348][T21211] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 901.013444][T22149] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 901.206394][T17831] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 901.873428][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5114'. [ 901.926898][T22217] macvtap2: entered promiscuous mode [ 901.932343][T22217] macvtap2: entered allmulticast mode [ 901.961300][T22217] erspan0: entered allmulticast mode [ 901.971327][T22205] loop4: detected capacity change from 0 to 32768 [ 901.978680][ T5856] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 902.121943][T22205] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 902.202984][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.239816][T22205] OCFS2: ERROR (device loop4): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 902.275310][ T5856] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 902.308570][ T5856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 902.343255][T22205] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 902.345525][T22229] loop6: detected capacity change from 0 to 1024 [ 902.359601][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.376329][T22205] OCFS2: Returning error to the calling process. [ 902.382868][ T5856] usb 4-1: Product: syz [ 902.393907][ T5856] usb 4-1: Manufacturer: syz [ 902.402026][T22205] (syz.4.5112,22205,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 902.425060][ T5856] usb 4-1: SerialNumber: syz [ 902.432565][T22229] hfsplus: bad catalog entry type [ 902.464899][T22205] (syz.4.5112,22205,1):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 902.473301][T22205] (syz.4.5112,22205,1):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 902.493864][ T5856] cdc_mbim 4-1:1.0: skipping garbage [ 902.508622][T22205] (syz.4.5112,22205,1):ocfs2_mknod:306 ERROR: status = -5 [ 902.521173][T13544] hfsplus: b-tree write err: -5, ino 4 [ 902.527495][T22205] (syz.4.5112,22205,1):ocfs2_mknod:502 ERROR: status = -5 [ 902.534681][T22205] (syz.4.5112,22205,1):ocfs2_mkdir:659 ERROR: status = -5 [ 902.594745][T20261] ocfs2: Unmounting device (7,4) on (node local) [ 902.711086][T22215] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 902.783465][T22234] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5120'. [ 903.060595][T22240] loop8: detected capacity change from 0 to 512 [ 903.088321][T22240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 903.180171][T22240] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.233676][T22240] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 903.346190][T22215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.382094][T22240] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 903.418119][T22215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.434939][T22240] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 903.462186][T22215] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 903.485172][T22240] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.5122: Failed to acquire dquot type 1 [ 903.513708][ T5856] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 903.527266][ T5856] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 903.652656][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.725979][ T5856] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 903.753659][ T5856] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 903.791441][ T5856] wwan wwan0: port wwan0mbim0 attached [ 903.843204][ T5856] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 76:18:d9:96:6f:26 [ 903.865981][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5126'. [ 903.946739][T22215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.968110][T22256] macvtap4: entered promiscuous mode [ 903.970583][T22215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.973585][T22256] macvtap4: entered allmulticast mode [ 904.020908][T22215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.057175][T22215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.330802][T22263] loop8: detected capacity change from 0 to 2048 [ 904.431065][T22263] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 904.468816][T22263] UDF-fs: Scanning with blocksize 512 failed [ 904.602808][T22263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.725440][T22215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.744266][ T28] audit: type=1800 audit(1763201278.728:342): pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5129" name="file1" dev="loop8" ino=818 res=0 errno=0 [ 904.773030][T22215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.996850][T14847] usb 4-1: USB disconnect, device number 9 [ 905.013857][T14847] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 905.124679][T14847] wwan wwan0: port wwan0mbim0 disconnected [ 905.163246][T22260] loop6: detected capacity change from 0 to 40427 [ 905.253577][T22260] F2FS-fs (loop6): heap/no_heap options were deprecated [ 905.297244][T22260] F2FS-fs (loop6): build fault injection attr: rate: 19, type: 0x7ffff [ 905.409090][T22286] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5132'. [ 906.102049][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5137'. [ 906.141918][T22305] macvtap3: entered promiscuous mode [ 906.159260][T22305] macvtap3: entered allmulticast mode [ 907.149435][T22298] loop3: detected capacity change from 0 to 32768 [ 907.187128][T22308] loop8: detected capacity change from 0 to 32768 [ 907.230073][T22308] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.5138 (22308) [ 907.302815][T22298] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 907.352631][T22311] loop4: detected capacity change from 0 to 32768 [ 907.365374][T22308] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 907.406173][T22308] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 907.436024][T22308] BTRFS info (device loop8): enabling ssd optimizations [ 907.443887][T22308] BTRFS info (device loop8): turning on sync discard [ 907.453361][T22308] BTRFS info (device loop8): using free space tree [ 907.505299][T22311] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 907.563099][T22315] loop6: detected capacity change from 0 to 32768 [ 907.637934][T22315] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.5140 (22315) [ 907.707716][T22298] XFS (loop3): Ending clean mount [ 907.763956][T22298] XFS (loop3): Quotacheck needed: Please wait. [ 907.766677][T22315] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 907.819103][T22315] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 907.866986][T22315] BTRFS info (device loop6): enabling disk space caching [ 907.881296][T22311] XFS (loop4): Ending clean mount [ 907.914251][T22315] BTRFS info (device loop6): force clearing of disk cache [ 907.935386][T22311] XFS (loop4): Quotacheck needed: Please wait. [ 907.938974][T22315] BTRFS info (device loop6): turning off barriers [ 907.955877][T22298] XFS (loop3): Quotacheck: Done. [ 907.961431][T22308] BTRFS error (device loop8): balance: invalid convert data profile raid1c4 [ 908.053366][T22315] BTRFS info (device loop6): setting nodatasum [ 908.088445][T22315] BTRFS info (device loop6): enabling ssd optimizations [ 908.093912][T22311] XFS (loop4): Quotacheck: Done. [ 908.115726][T22315] BTRFS info (device loop6): using spread ssd allocation scheme [ 908.126339][T22315] BTRFS info (device loop6): disk space caching is enabled [ 908.195584][T19803] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 908.245635][T18090] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 908.348759][T22311] XFS (loop4): User initiated shutdown received. [ 908.388208][T22311] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 908.402944][T22311] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 908.448114][T22315] BTRFS info (device loop6): rebuilding free space tree [ 908.536080][T20261] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 908.677361][T21439] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop8 scanned by udevd (21439) [ 908.687138][T22315] BTRFS info (device loop6): disabling free space tree [ 908.725030][T22315] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 908.759003][T22315] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 909.304268][T17831] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 909.496134][T14839] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 909.730385][T14839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.782188][T14839] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 909.825625][T14839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 909.834709][T14839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.877650][T22375] loop8: detected capacity change from 0 to 32768 [ 909.877828][T14839] usb 5-1: Product: syz [ 909.912153][T14839] usb 5-1: Manufacturer: syz [ 909.965801][T14839] usb 5-1: SerialNumber: syz [ 909.983877][T14839] cdc_mbim 5-1:1.0: skipping garbage [ 910.195192][T22379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 910.354164][T22391] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5146'. [ 910.866154][T22379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.883137][T22379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.898985][T22379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 910.906933][T14839] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 910.918216][T14839] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 910.945383][T22402] loop8: detected capacity change from 0 to 512 [ 910.982093][T22402] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 911.020905][T22402] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 911.106714][T22402] EXT4-fs (loop8): 1 truncate cleaned up [ 911.140781][T22402] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.153891][T14839] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 911.206015][T14839] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 911.261669][T14839] wwan wwan0: port wwan0mbim0 attached [ 911.378937][T22379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.415450][T22379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.478970][T14839] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, e6:3a:fa:dd:0a:77 [ 911.489628][T22379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.490042][T22379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.593668][T22411] syz.8.5148[22411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 911.594386][T22411] syz.8.5148[22411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 911.791463][T22411] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.5148: invalid block [ 912.045387][T22412] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.5148: invalid block [ 912.506413][T22379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.569263][T22379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.841911][T14839] usb 5-1: USB disconnect, device number 8 [ 912.887063][T14839] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 913.075400][T22404] loop3: detected capacity change from 0 to 32768 [ 913.088923][T14839] wwan wwan0: port wwan0mbim0 disconnected [ 913.311075][T22404] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 913.375802][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.644549][T22433] syzkaller0: entered promiscuous mode [ 913.656472][T22433] syzkaller0: entered allmulticast mode [ 913.674955][T22404] XFS (loop3): Ending clean mount [ 913.737206][T22404] XFS (loop3): Quotacheck needed: Please wait. [ 913.778453][T22414] loop6: detected capacity change from 0 to 32768 [ 913.895559][T22404] XFS (loop3): Quotacheck: Done. [ 913.902650][T22414] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 914.040953][T19803] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 914.275903][T22414] XFS (loop6): Ending clean mount [ 914.478299][T22414] syz.6.5151: attempt to access beyond end of device [ 914.478299][T22414] loop6: rw=4096, sector=17179869179, nr_sectors = 1 limit=32768 [ 914.703948][T17831] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 914.854639][T22431] loop4: detected capacity change from 0 to 32768 [ 914.899559][T22431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5153 (22431) [ 914.977840][T22431] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 915.012555][T22431] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 915.062237][T22431] BTRFS info (device loop4): turning on sync discard [ 915.124950][T22431] BTRFS info (device loop4): setting nodatacow, compression disabled [ 915.141983][T22468] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5157'. [ 915.194596][T22431] BTRFS info (device loop4): turning off barriers [ 915.244169][T22431] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 915.297241][T22431] BTRFS info (device loop4): trying to use backup root at mount time [ 915.342923][T22431] BTRFS info (device loop4): metadata ratio 6 [ 915.372265][T22431] BTRFS info (device loop4): enabling auto defrag [ 915.399502][T22431] BTRFS info (device loop4): enabling disk space caching [ 915.451485][T22431] BTRFS info (device loop4): max_inline at 0 [ 915.489835][T22431] BTRFS error (device loop4): cannot disable free space tree [ 915.577341][T22431] BTRFS error (device loop4): open_ctree failed: -22 [ 915.641023][T22484] loop8: detected capacity change from 0 to 512 [ 915.695304][T22484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 915.755218][T22484] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 915.835621][T22484] EXT4-fs (loop8): 1 truncate cleaned up [ 915.862878][T22484] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.313066][T22498] syz.8.5160[22498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 916.313810][T22498] syz.8.5160[22498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 916.729376][T22498] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.5160: invalid block [ 916.813279][T22499] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.5160: invalid block [ 917.142383][T22502] loop6: detected capacity change from 0 to 256 [ 917.329431][T22502] FAT-fs (loop6): Directory bread(block 64) failed [ 917.386172][T22502] FAT-fs (loop6): Directory bread(block 65) failed [ 917.392862][T22502] FAT-fs (loop6): Directory bread(block 66) failed [ 917.498318][T22502] FAT-fs (loop6): Directory bread(block 67) failed [ 917.564597][T22502] FAT-fs (loop6): Directory bread(block 68) failed [ 917.655366][T22502] FAT-fs (loop6): Directory bread(block 69) failed [ 917.662066][T22502] FAT-fs (loop6): Directory bread(block 70) failed [ 917.741586][T22502] FAT-fs (loop6): Directory bread(block 71) failed [ 917.796473][T22502] FAT-fs (loop6): Directory bread(block 72) failed [ 917.844060][T22502] FAT-fs (loop6): Directory bread(block 73) failed [ 917.960994][T22502] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 917.988043][T22502] FAT-fs (loop6): Filesystem has been set read-only [ 917.997502][T22502] syz.6.5165: attempt to access beyond end of device [ 917.997502][T22502] loop6: rw=2051, sector=1128, nr_sectors = 32 limit=256 [ 918.085531][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.341696][T22511] loop8: detected capacity change from 0 to 16 [ 918.371579][T22511] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 918.549422][T22497] loop4: detected capacity change from 0 to 32768 [ 918.622755][T22497] (syz.4.5163,22497,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 918.655917][T22497] (syz.4.5163,22497,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 918.775032][T22497] JBD2: Ignoring recovery information on journal [ 918.775775][T22517] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5170'. [ 918.947576][T22497] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 918.962049][T22507] loop3: detected capacity change from 0 to 32768 [ 919.091226][T22507] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 919.482694][T19803] ocfs2: Unmounting device (7,3) on (node local) [ 919.568979][T20261] ocfs2: Unmounting device (7,4) on (node local) [ 919.591119][T22528] loop8: detected capacity change from 0 to 128 [ 919.620689][T22528] FAT-fs (loop8): Unrecognized mount option "ÿÿÿÿ" or missing value [ 919.632416][T22509] loop6: detected capacity change from 0 to 32768 [ 919.698507][T21514] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 919.777373][T22509] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 920.030080][T22509] XFS (loop6): Ending clean mount [ 920.067555][T22509] XFS (loop6): Quotacheck needed: Please wait. [ 920.208649][T22509] XFS (loop6): Quotacheck: Done. [ 920.559239][T17831] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 920.704591][T22546] loop8: detected capacity change from 0 to 512 [ 920.713886][T22546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 920.777720][T22546] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 920.861399][T22546] EXT4-fs (loop8): 1 truncate cleaned up [ 920.902619][T22530] loop3: detected capacity change from 0 to 32768 [ 920.912066][T22546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.925114][T22530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5171 (22530) [ 920.973354][T22530] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 921.000819][T22542] loop4: detected capacity change from 0 to 32768 [ 921.061002][T22542] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.5173 (22542) [ 921.073707][T22530] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 921.165840][T22530] BTRFS info (device loop3): using free space tree [ 921.242412][T22542] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 921.317003][T22551] syz.8.5176[22551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 921.317678][T22551] syz.8.5176[22551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 921.742742][T22551] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.5176: invalid block [ 921.832322][T22552] EXT4-fs error (device loop8): __ext4_iget:5067: inode #15: block 1803188595: comm syz.8.5176: invalid block [ 921.889018][T22542] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 921.986586][T22542] BTRFS info (device loop4): using free space tree [ 922.175064][T22530] BTRFS info (device loop3): enabling ssd optimizations [ 922.257063][T22530] BTRFS info (device loop3): auto enabling async discard [ 922.390605][T22542] BTRFS info (device loop4): enabling ssd optimizations [ 922.449170][T22542] BTRFS info (device loop4): auto enabling async discard [ 922.657522][T22581] loop6: detected capacity change from 0 to 4096 [ 922.811738][T19803] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 923.120833][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.423432][T22592] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5178'. [ 924.059230][T20261] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 924.480390][T22603] loop4: detected capacity change from 0 to 128 [ 924.518645][T22603] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ" or missing value [ 924.685087][T22595] loop6: detected capacity change from 0 to 32768 [ 924.707067][T22595] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 924.966437][T21439] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 924.998990][T22600] loop8: detected capacity change from 0 to 32768 [ 925.040980][T22600] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.5181 (22600) [ 925.081516][T22598] loop3: detected capacity change from 0 to 40427 [ 925.160614][T22598] F2FS-fs (loop3): heap/no_heap options were deprecated [ 925.197289][T22600] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 925.201462][T22598] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 925.235783][T22600] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 925.265556][T22600] BTRFS info (device loop8): setting nodatacow, compression disabled [ 925.314281][T22600] BTRFS info (device loop8): force clearing of disk cache [ 925.373524][T22600] BTRFS info (device loop8): enabling ssd optimizations [ 925.422070][T22600] BTRFS info (device loop8): using spread ssd allocation scheme [ 925.472736][T22600] BTRFS info (device loop8): turning off barriers [ 925.526516][T22600] BTRFS info (device loop8): disabling free space tree [ 925.533453][T22600] BTRFS info (device loop8): not using ssd optimizations [ 925.575002][T22600] BTRFS info (device loop8): not using spread ssd allocation scheme [ 925.586887][T22610] loop4: detected capacity change from 0 to 64 [ 925.703040][T22610] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 925.714847][T22610] hfs: filesystem is marked locked, mounting read-only. [ 925.941224][T22600] BTRFS info (device loop8): rebuilding free space tree [ 926.017590][T22600] BTRFS info (device loop8): disabling free space tree [ 926.046469][T22600] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 926.095123][T22600] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 926.337271][T22633] loop4: detected capacity change from 0 to 4096 [ 926.415968][T18090] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 926.469560][T22633] EXT4-fs (loop4): Test dummy encryption mode enabled [ 926.547860][T22633] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 926.607335][T22633] System zones: 0-5 [ 926.634128][T22607] loop6: detected capacity change from 0 to 32768 [ 926.688613][T22633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.690918][T22638] fuse: Unknown parameter 'use00000000000000000000' [ 926.847561][T22629] loop3: detected capacity change from 0 to 32768 [ 927.003295][T22629] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 927.327354][T22633] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 927.413045][T22629] XFS (loop3): Ending clean mount [ 927.458805][T22629] XFS (loop3): Quotacheck needed: Please wait. [ 927.507612][T22655] loop6: detected capacity change from 0 to 128 [ 927.558097][T22655] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ" or missing value [ 927.580169][T22629] XFS (loop3): Quotacheck: Done. [ 927.638449][T20261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.009527][T19803] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 928.235722][T22662] loop4: detected capacity change from 0 to 4096 [ 928.325564][T22662] NILFS (loop4): invalid segment: Checksum error in segment payload [ 928.352638][T22662] NILFS (loop4): trying rollback from an earlier position [ 928.486188][T22662] NILFS (loop4): recovery complete [ 928.517715][T22664] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 928.560016][T22652] loop8: detected capacity change from 0 to 32768 [ 928.562114][T22665] loop6: detected capacity change from 0 to 256 [ 928.607609][T22665] exfat: Deprecated parameter 'utf8' [ 928.618336][T22652] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.5191 (22652) [ 928.700107][T22652] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 928.725797][T19806] Bluetooth: hci3: command 0x0406 tx timeout [ 928.750248][T22665] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 928.799235][T22652] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 928.871180][T22652] BTRFS info (device loop8): enabling ssd optimizations [ 928.919426][T22652] BTRFS info (device loop8): turning on sync discard [ 928.960784][T22652] BTRFS info (device loop8): using free space tree [ 929.347635][T18090] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 929.366400][T22687] loop6: detected capacity change from 0 to 512 [ 929.408136][T22687] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 929.446182][T22687] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 929.589697][T22687] EXT4-fs (loop6): 1 truncate cleaned up [ 929.640699][T22687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.762093][T22691] fuse: Unknown parameter 'use00000000000000000000' [ 930.076545][T22693] syz.6.5198[22693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.077223][T22693] syz.6.5198[22693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.528845][T22693] EXT4-fs error (device loop6): __ext4_iget:5067: inode #15: block 1803188595: comm syz.6.5198: invalid block [ 930.621117][T22694] EXT4-fs error (device loop6): __ext4_iget:5067: inode #15: block 1803188595: comm syz.6.5198: invalid block [ 931.684376][T22674] loop3: detected capacity change from 0 to 32768 [ 931.834991][T22674] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 931.853663][T22674] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 931.894308][T17831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.993324][T22674] XFS (loop3): Ending clean mount [ 932.057695][T22674] XFS (loop3): Quotacheck needed: Please wait. [ 932.150203][ T4488] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 932.236988][ T4488] XFS (loop3): Unmount and run xfs_repair [ 932.246261][ T4488] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 932.253679][ T4488] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 932.271060][T22698] loop8: detected capacity change from 0 to 32768 [ 932.298058][T22698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.5201 (22698) [ 932.321561][ T4488] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 932.357163][ T4488] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 932.389146][T22698] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 932.404593][ T4488] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 932.428260][T22698] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 932.445816][ T4488] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 932.455745][ T4488] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 932.475241][ T4488] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 932.484479][T22698] BTRFS info (device loop8): using free space tree [ 932.497025][ T4488] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 932.517268][ T4488] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 932.567096][T22674] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 932.716746][T22698] BTRFS info (device loop8): enabling ssd optimizations [ 932.769780][T19803] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 932.800299][T22698] BTRFS info (device loop8): auto enabling async discard [ 933.175676][T18090] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 933.535613][T22734] fuse: Bad value for 'fd' [ 933.751307][T22722] loop4: detected capacity change from 0 to 32768 [ 933.947734][T22722] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 934.067550][T22712] loop6: detected capacity change from 0 to 40427 [ 934.165605][ T28] audit: type=1800 audit(1763201308.158:343): pid=22722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5205" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 934.222462][T22712] F2FS-fs (loop6): invalid crc value [ 934.308570][T22712] F2FS-fs (loop6): Found nat_bits in checkpoint [ 934.581481][T20261] ocfs2: Unmounting device (7,4) on (node local) [ 934.776727][T22712] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 935.155184][T22749] tipc: Enabling of bearer rejected, failed to enable media [ 935.333161][T22741] loop8: detected capacity change from 0 to 32768 [ 935.430789][T22741] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 935.439193][T22738] loop3: detected capacity change from 0 to 40427 [ 935.470634][T22738] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 935.482276][T22738] F2FS-fs (loop3): invalid crc value [ 935.550515][T22738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 935.641706][T22738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 935.692482][T22741] XFS (loop8): Ending clean mount [ 935.744377][T22741] XFS (loop8): Quotacheck needed: Please wait. [ 935.775629][T22770] loop6: detected capacity change from 0 to 512 [ 935.831641][T22770] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 935.842256][T14839] XFS (loop8): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 935.889655][T22766] f2fs_ckpt-7:3: attempt to access beyond end of device [ 935.889655][T22766] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 935.905826][T14839] XFS (loop8): Unmount and run xfs_repair [ 935.905846][T14839] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 935.905861][T14839] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 935.934062][T22770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 936.004160][T14839] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 936.030399][T22766] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 936.031393][T14839] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 936.038218][T22770] EXT4-fs (loop6): 1 truncate cleaned up [ 936.046334][T14839] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 936.061389][T14839] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 936.071487][T14839] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 936.080646][T14839] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 936.089900][T14839] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 936.114903][T13544] XFS (loop8): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 936.129582][T22770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.252813][T22741] XFS (loop8): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 936.445061][T22778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5213'. [ 936.575025][T22782] syz.6.5211[22782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.575729][T22782] syz.6.5211[22782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.745771][T22782] EXT4-fs error (device loop6): __ext4_iget:5067: inode #15: block 1803188595: comm syz.6.5211: invalid block [ 937.030374][T22783] EXT4-fs error (device loop6): __ext4_iget:5067: inode #15: block 1803188595: comm syz.6.5211: invalid block [ 937.421015][T18090] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 937.682817][T22786] tipc: Enabled bearer , priority 0 [ 937.728215][T22786] syzkaller0: entered promiscuous mode [ 937.794608][T22786] syzkaller0: entered allmulticast mode [ 937.830086][T22787] tipc: Resetting bearer [ 937.945178][T22785] tipc: Resetting bearer [ 938.268684][T22785] tipc: Disabling bearer [ 938.396282][T17831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.862773][T22800] loop8: detected capacity change from 0 to 512 [ 938.906229][T22800] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 939.186745][ T28] audit: type=1800 audit(1763201313.178:344): pid=22803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5215" name="file1" dev="loop8" ino=1048689 res=0 errno=0 [ 939.515515][T22805] tipc: Enabling of bearer rejected, failed to enable media [ 939.919684][T22794] loop3: detected capacity change from 0 to 32768 [ 939.942570][T22799] loop4: detected capacity change from 0 to 32768 [ 939.980738][T22794] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 940.024009][T22799] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 940.070041][T22794] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 940.312605][T22799] XFS (loop4): Ending clean mount [ 940.319543][T22794] XFS (loop3): Ending clean mount [ 940.340198][T22799] XFS (loop4): Quotacheck needed: Please wait. [ 940.360402][T22794] XFS (loop3): Quotacheck needed: Please wait. [ 940.442715][ T5856] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 940.487481][T22802] loop6: detected capacity change from 0 to 32768 [ 940.501959][ T5856] XFS (loop3): Unmount and run xfs_repair [ 940.522844][T22799] XFS (loop4): Quotacheck: Done. [ 940.530476][T22802] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.5219 (22802) [ 940.546390][ T5856] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 940.590129][ T5856] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 940.629278][T22802] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 940.639968][ T5856] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 940.666195][ T28] audit: type=1800 audit(1763201314.648:345): pid=22799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5218" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 940.675790][ T5856] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 940.705941][T22802] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 940.749059][T22802] BTRFS info (device loop6): enabling auto defrag [ 940.779533][T22802] BTRFS info (device loop6): use no compression [ 940.789748][ T5856] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 940.804741][T22802] BTRFS info (device loop6): max_inline at 4096 [ 940.819416][T22802] BTRFS info (device loop6): using free space tree [ 940.828166][ T5856] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 940.846711][ T5856] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 940.865823][ T5856] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 940.910875][ T5856] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 940.945026][ T9553] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 941.088794][T20261] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 941.115687][T22794] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 941.125933][T22802] BTRFS info (device loop6): enabling ssd optimizations [ 941.132915][T22802] BTRFS info (device loop6): auto enabling async discard [ 941.418501][T19803] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 941.537980][T17831] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 942.222800][T22851] loop8: detected capacity change from 0 to 40427 [ 942.326164][T22851] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 942.333948][T22851] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 942.456989][T22851] F2FS-fs (loop8): invalid crc value [ 942.526406][T22851] F2FS-fs (loop8): Found nat_bits in checkpoint [ 942.827315][T22851] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 942.845152][T22851] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 942.937369][T22856] loop6: detected capacity change from 0 to 32768 [ 942.970580][T22866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5224'. [ 942.995229][T22856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.5225 (22856) [ 943.120209][T22856] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 943.161053][T22856] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 943.207013][T22856] BTRFS info (device loop6): force clearing of disk cache [ 943.237383][T22856] BTRFS info (device loop6): enabling auto defrag [ 943.294311][T22856] BTRFS info (device loop6): enabling ssd optimizations [ 943.320685][T22856] BTRFS info (device loop6): max_inline at 0 [ 943.357503][T22856] BTRFS info (device loop6): enabling disk space caching [ 943.364599][T22856] BTRFS info (device loop6): disk space caching is enabled [ 943.668936][T22886] tipc: Enabling of bearer rejected, failed to enable media [ 943.691032][T22860] loop3: detected capacity change from 0 to 40427 [ 943.697096][T22856] BTRFS info (device loop6): rebuilding free space tree [ 943.784310][T22856] BTRFS info (device loop6): disabling free space tree [ 943.791834][T22856] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 943.804276][T22856] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 943.818185][T22860] F2FS-fs (loop3): Found nat_bits in checkpoint [ 944.025318][T22860] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 944.320063][T17831] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 944.372853][T19803] syz-executor: attempt to access beyond end of device [ 944.372853][T19803] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 944.419792][T19803] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 944.573548][T22904] tipc: Enabled bearer , priority 0 [ 944.581638][T22904] syzkaller0: entered promiscuous mode [ 944.587594][T22904] syzkaller0: entered allmulticast mode [ 944.801792][T22903] tipc: Resetting bearer [ 944.992366][T22903] tipc: Disabling bearer [ 945.097501][T22913] loop6: detected capacity change from 0 to 512 [ 945.150212][T22913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 945.210171][T22913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.242538][T22913] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 945.489470][T17831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.557709][T22922] loop4: detected capacity change from 0 to 1024 [ 945.586729][T22922] EXT4-fs: Ignoring removed orlov option [ 945.681464][T22922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 945.754998][T22922] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.827703][ T28] audit: type=1800 audit(1763201319.818:346): pid=22922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5236" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 945.938986][T22931] loop6: detected capacity change from 0 to 64 [ 945.957575][T20261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 946.265731][T22936] tmpfs: Bad value for 'size' [ 946.497175][T22941] tipc: Enabled bearer , priority 0 [ 946.515990][T22941] syzkaller0: entered promiscuous mode [ 946.521625][T22941] syzkaller0: entered allmulticast mode [ 946.528265][T22920] loop8: detected capacity change from 0 to 32768 [ 946.628026][T22920] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 946.708623][T22940] tipc: Resetting bearer [ 946.880187][T18090] ocfs2: Unmounting device (7,8) on (node local) [ 946.939961][T22940] tipc: Disabling bearer [ 947.023531][T22934] loop4: detected capacity change from 0 to 32768 [ 947.032469][T22952] loop8: detected capacity change from 0 to 512 [ 947.048397][T22934] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop4 scanned by syz.4.5239 (22934) [ 947.094360][T22952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 947.199414][T22952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.268591][T22934] BTRFS info (device loop4): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 947.345004][T22952] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 947.360649][T22934] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 947.427169][T22934] BTRFS info (device loop4): using free space tree [ 947.446149][T22960] fuse: Bad value for 'fd' [ 947.479959][T18090] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.558408][T22950] loop3: detected capacity change from 0 to 32768 [ 947.567699][T22950] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.5246 (22950) [ 947.589737][T22950] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 947.602821][T22950] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 947.612967][T22950] BTRFS info (device loop3): enabling disk space caching [ 947.620091][T22950] BTRFS info (device loop3): force clearing of disk cache [ 947.635016][T12541] Bluetooth: hci0: link tx timeout [ 947.640245][T12541] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 947.716238][T22950] BTRFS info (device loop3): turning off barriers [ 947.722850][T22950] BTRFS info (device loop3): setting nodatasum [ 947.729195][T22950] BTRFS info (device loop3): enabling ssd optimizations [ 947.736543][T22950] BTRFS info (device loop3): using spread ssd allocation scheme [ 947.743338][T22934] BTRFS info (device loop4): enabling ssd optimizations [ 947.744192][T22950] BTRFS info (device loop3): disk space caching is enabled [ 947.811600][T22934] BTRFS info (device loop4): auto enabling async discard [ 947.945198][ T28] audit: type=1800 audit(1763201321.938:347): pid=22934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5239" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 948.014216][T22950] BTRFS info (device loop3): rebuilding free space tree [ 948.043075][T20261] BTRFS info (device loop4): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 948.142582][T22950] BTRFS info (device loop3): disabling free space tree [ 948.167371][T22950] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 948.201497][T22999] loop8: detected capacity change from 0 to 64 [ 948.235351][T22950] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 948.252437][T22998] loop6: detected capacity change from 0 to 1024 [ 948.265192][T21514] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 9 /dev/loop4 scanned by udevd (21514) [ 948.309888][T22998] EXT4-fs: Ignoring removed nobh option [ 948.344964][T22998] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 948.356614][ T28] audit: type=1800 audit(1763201322.338:348): pid=22999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5251" name="file1" dev="loop8" ino=21 res=0 errno=0 [ 948.424721][T22999] hfs: request for non-existent node 237 in B*Tree [ 948.472416][T22998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.485466][T22999] hfs: request for non-existent node 237 in B*Tree [ 948.666555][T22998] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4031: comm syz.6.5249: Allocating blocks 497-513 which overlap fs metadata [ 948.739782][ T2942] hfs: request for non-existent node 237 in B*Tree [ 948.748289][T19803] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 948.759330][ T2942] hfs: request for non-existent node 237 in B*Tree [ 948.776148][T23007] EXT4-fs (loop6): pa ffff888079e54000: logic 16, phys. 129, len 24 [ 948.785210][T23007] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 948.832097][ T2942] ------------[ cut here ]------------ [ 948.838044][ T2942] kernel BUG at fs/hfs/inode.c:449! [ 948.856630][ T2942] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 948.862759][ T2942] CPU: 0 PID: 2942 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 948.870313][ T2942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 948.880376][ T2942] Workqueue: writeback wb_workfn (flush-7:8) [ 948.886400][ T2942] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 948.892232][ T2942] Code: c7 c1 00 23 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 23 ef 96 e8 86 c2 85 ff e9 6c fe ff ff e8 4c 67 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 948.911853][ T2942] RSP: 0018:ffffc9000c49f360 EFLAGS: 00010293 [ 948.917931][ T2942] RAX: ffffffff82572844 RBX: ffff888024cea228 RCX: ffff88802bb5da00 [ 948.925913][ T2942] RDX: 0000000000000000 RSI: ffffffff8cf36e80 RDI: 0000000000000000 [ 948.933893][ T2942] RBP: ffffc9000c49f4f0 R08: ffff88802bb5da00 R09: 0000000000000003 [ 948.941880][ T2942] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 948.949861][ T2942] R13: 1ffff92001893e70 R14: ffff888024cea1d8 R15: 0000000000000000 [ 948.957844][ T2942] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 948.966788][ T2942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.973383][ T2942] CR2: 00007f8035063f99 CR3: 000000002427d000 CR4: 00000000003506f0 [ 948.981371][ T2942] Call Trace: [ 948.984656][ T2942] [ 948.987597][ T2942] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 948.992989][ T2942] ? __rwlock_init+0x150/0x150 [ 948.997775][ T2942] __writeback_single_inode+0x705/0xee0 [ 949.003341][ T2942] writeback_sb_inodes+0x77c/0xef0 [ 949.008480][ T2942] ? queue_io+0x560/0x560 [ 949.012830][ T2942] ? rcu_is_watching+0x15/0xb0 [ 949.017608][ T2942] wb_writeback+0x450/0xba0 [ 949.022128][ T2942] ? queue_io+0x381/0x560 [ 949.026476][ T2942] ? percpu_ref_tryget+0x250/0x250 [ 949.031597][ T2942] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 949.037573][ T2942] ? rcu_read_lock_sched_held+0x8a/0x100 [ 949.043199][ T2942] ? _raw_spin_unlock_irq+0x23/0x50 [ 949.048385][ T2942] wb_workfn+0x3ff/0xe20 [ 949.052707][ T2942] ? inode_wait_for_writeback+0x200/0x200 [ 949.058416][ T2942] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 949.064386][ T2942] ? read_lock_is_recursive+0x20/0x20 [ 949.069750][ T2942] ? _raw_spin_unlock_irq+0x23/0x50 [ 949.074935][ T2942] ? process_scheduled_works+0x957/0x15b0 [ 949.080642][ T2942] ? process_scheduled_works+0x957/0x15b0 [ 949.086349][ T2942] process_scheduled_works+0xa45/0x15b0 [ 949.091893][ T2942] ? assign_work+0x400/0x400 [ 949.096472][ T2942] ? assign_work+0x39e/0x400 [ 949.101053][ T2942] worker_thread+0xa55/0xfc0 [ 949.105631][ T2942] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 949.111512][ T2942] ? _raw_spin_unlock+0x40/0x40 [ 949.116351][ T2942] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 949.122244][ T2942] kthread+0x2fa/0x390 [ 949.126303][ T2942] ? pr_cont_work+0x560/0x560 [ 949.130970][ T2942] ? kthread_blkcg+0xd0/0xd0 [ 949.135546][ T2942] ret_from_fork+0x48/0x80 [ 949.139954][ T2942] ? kthread_blkcg+0xd0/0xd0 [ 949.144526][ T2942] ret_from_fork_asm+0x11/0x20 [ 949.149282][ T2942] [ 949.152300][ T2942] Modules linked in: [ 949.186476][T23011] tipc: Enabling of bearer rejected, failed to enable media [ 949.231542][T17831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.240784][ T2942] ---[ end trace 0000000000000000 ]--- [ 949.253429][ T2942] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 949.293221][ T2942] Code: c7 c1 00 23 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 23 ef 96 e8 86 c2 85 ff e9 6c fe ff ff e8 4c 67 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 949.353014][ T2942] RSP: 0018:ffffc9000c49f360 EFLAGS: 00010293 [ 949.401102][ T2942] RAX: ffffffff82572844 RBX: ffff888024cea228 RCX: ffff88802bb5da00 [ 949.438774][ T2942] RDX: 0000000000000000 RSI: ffffffff8cf36e80 RDI: 0000000000000000 [ 949.454612][ T2942] RBP: ffffc9000c49f4f0 R08: ffff88802bb5da00 R09: 0000000000000003 [ 949.466584][ T2942] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 949.493335][ T2942] R13: 1ffff92001893e70 R14: ffff888024cea1d8 R15: 0000000000000000 [ 949.525464][ T2942] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 949.566781][ T2942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.573412][ T2942] CR2: 00007f5002bb12f8 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 949.617813][ T2942] Kernel panic - not syncing: Fatal exception [ 949.624345][ T2942] Kernel Offset: disabled [ 949.628662][ T2942] Rebooting in 86400 seconds..