last executing test programs: 1m2.295234199s ago: executing program 0 (id=1439): socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000001840)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0xf9, 0x1213, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181840, 0x57) r0 = syz_io_uring_setup(0x48ee, &(0x7f0000000400)={0x0, 0xbeee, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) 1m1.464365248s ago: executing program 0 (id=1444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000280)=""/159, 0x9f}, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x48, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1m0.200626436s ago: executing program 0 (id=1450): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$incfs_size(&(0x7f0000000380)='./file0/file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f00000003c0), 0x0, 0x1400) 1m0.05670686s ago: executing program 0 (id=1452): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f00000001c0), 0x3, 0x45e, &(0x7f0000000980)="$eJzs3M2PE2UYAPBnpttFBNwV8YMPdRWNGz92WUDl4EGNJh4wMdGDHje7hSCFVXZNhBAFY/BkjIl349F/wZNejPFk4lXvhoQYLoCnmmln2La0he12LdLfLxl43vngfZ/OvO0787YEMLKmsj+SiK0R8UdETDSKrTtMNf66evnswrXLZxeSqNXe/jup73fl8tmFYtfiuC15YTqNSD9PYneHepdPnzk+X61WTuXl2ZUTH8wunz7z3LET80crRysn9x86dPDA3Isv7H9+IHlmbbqy65OlPTvfeO/rNw9/2ZJ/Wx4DMtVr45O12oCrG65tTXEyNsSGsCaliMhOV7ne/yeiFKsnbyJe/2yojQM2VK1Wq23pvvlcDbiDJdFa1uVhVBQf9Nn9b7G0DwJe3rjhx9BdeqVxA5TlfTVfGlvGIs33Kbfd3w7SVES8e+6fb7MlNuY5BABAix+z8c+zncZ/aTzQtN89+dzQZETcGxHbI+K+iNgREfdH1Pd9MCIeWmP97ZMkN45/0ot9JXaLsvHfS/ncVuv4rxj9xWQpL22r519OjhyrVvblr8l0lDdl5bkedfz02u9fddvWPP7Llqz+YiyYt+Pi2KbWYxbnV+bXk3OzS+cjdo11yj+5PhOQRMTOiNjVZx3Hnv5+T7dtN8+/hwHMM9W+i3iqcf7PRVv+haT3/OTsXVGt7Jstroob/frbhbe61b+u/AcgO/93d7z+r+c/mTTP1y6vvY4Lf37R9Z6m3+t/PHmnHo/n6z6eX1k5NRcxnhxuNLp5/f7VY4tysX+W//Tezv1/e6y+ErsjIruIH46IRyLi0bztj0XE4xGxtz2x0mr4y6tPvN9//hsry39xTed/NRiP9jWdg9Lxn39oqXTyhvyv9T7/B+vRdL7mVt7/bqVd/V3NAAAA8P+TRsTWSNKZ63Gazsw0vi+/IyKtLi2vPHNk6aOTi43tk1FOiyddE03PQ+fy2/pG+XxENL5aUGw/8GHjW4bflDbXyzMLS9XFIecOo25Ll/6f+as07NYBG87vtWB06f8wuvR/GF36P4yuDv1/c8cQuON0+vz/dAjtAP57bf3ftB+MEPf/MLq69v87+X/+Aep8/sNIWt4cN/+RfM+g+Jf6PDwPimcOfTfjtguifFs0Y/1BLel4ciMddsMqp9J1XnWC7sHw3pMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6d8AAAD//3Wy3Gc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) sendfile(r0, r1, 0x0, 0x8001) 59.764414136s ago: executing program 0 (id=1456): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2010000, &(0x7f0000006a80)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x4}) 57.673721973s ago: executing program 0 (id=1468): r0 = syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000072414060005001524120004a317a88b045e4f01a607c0ffcb7e392a08241c0200bed49f090581030002f800000904010000020d00000904010113020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 41.538382976s ago: executing program 32 (id=1468): r0 = syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000072414060005001524120004a317a88b045e4f01a607c0ffcb7e392a08241c0200bed49f090581030002f800000904010000020d00000904010113020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 6.273337158s ago: executing program 1 (id=1680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000340)={0x88ab1b249e3104b3, 0x0, {[0x2, 0x12ad, 0x7611, 0xa, 0xed, 0xa, 0x7, 0x9]}}) 5.882330258s ago: executing program 4 (id=1681): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="ae", 0x1}], 0x1) 5.570971114s ago: executing program 4 (id=1684): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xf250, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0x80000000, 0x0, {0x1, 0x0, 0xbdd6, 0x4, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x22) 5.422825278s ago: executing program 2 (id=1685): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setuid(0xee01) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 5.234485012s ago: executing program 2 (id=1686): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000000)={0x47, 0xffffffffffffffff, 0x4, 0x9}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0xf, 0xfffffffffffffffd, 0x5, 0x8ba28}) 5.126013544s ago: executing program 1 (id=1687): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") close_range(r0, 0xffffffffffffffff, 0x0) 4.954883128s ago: executing program 2 (id=1688): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) 4.635923775s ago: executing program 2 (id=1690): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000280)=""/159, 0x9f}, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x48, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 4.458861699s ago: executing program 4 (id=1691): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x4}) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001640)={{r1}, "388bbb18c183d7ad318820471a569ef6ae69af29a20d2de79fa38f401984056ab23d3f41207ee23e128a224670914dc39a8f96a7bc07e629e7800d888c3fe5fa7088471236dd5e4af6be38650087290956a4a1854859ed03db06014324c4d7e3faf2724554b5456fc87365d791824472ba6d658a50a0a4b99eb6db6e2b468e1b364dbd99877ce0f3f1f4b1fea1b0235c0f7b813be61ee3ac1c56b987375e7decb6638babfc4cc3d4bdec444c845ad309b04dc7dc6ac70418cec40e646e80f370da0255992ad6d2c66a01f95e21bf43c329d08e2a81c12382e29debffedeff3e66a536d6c6d8a6459dda706610c86433d20b0994fdde4ebad112e2318106195b3b4a0f714e9ddae161905994de36ebb8b17cabeafca94cb6f50d56f8048b83b1866d07ecc4b3700e6b4b9cf49448c42eafe4cba3a94b90d0c1b8b51f78268e2ebad3610e4ae0d4688115d09cda683ef1217e709ac1440b2182b328d51f2097891b46f415797514beef12cde9912fc5e790217fdc009468e25a1a49d31c9cb88418852f73e25e9a312747b0810f174f1bd9d67734bc4b93f3ad2dc29056227a19d477b3dbbfa7a349d64936ee6e1318186c42209478b26be9c7502f90d2d8bc9065ba12d5bb3f5ac2a1977fa10b6e4741c6aa053f78b09c50e0ae5e6df75e97017c55128c23ed6c8d279c42577e8fa62ff84c435d1c9a5ee5ef8a02dfedb971a41559296036e9da176dc265311de2a27bfc580303b73ef3c66e2770be01fe9238ae623a20971730c19e480f3d94047a1253f0c577a08660ded6d93177c401445aea225bf1b3a6b88dfa8c618623a96f7c77327d89303753b9c66215bd94b95be289dd300cb2fecede3a14b79a7a7910026fa6399e464c538ea91806df71d186610b642581d3eeb84a1afc4eb0dc3168e23d11ef9b3460c128a938204944fd76e6246e479a929230336f90b412a8d8c31f742e9018615e77d10a465d792abb8147c7837675efcd0968710dad98a8f72fe8473c12c7efc58ae4ae0f5e6265745ffaa6a273adb746bfcb602bce4878f99467f93478d0ee02283e529324b5dd565e719620f6f321e8d7aac4a3cecb258afa0cb8e1d6e00cb72b56f3aea8bc192d19b01c21a195b1246b6a667dcd62da063ad4d5a744d24cb94f5eeb7d07fe1c8332d0c78ac78c5056cc0eb9474f523028451655e3b759c0025189a0ecbde28c3cf49ab686b3bc270b28b54a2006e3e480721d5f25c82cb5ffa5b3db910ccc25fe3aa67f7792fe41b65abeca461cab1846003655d717dedd74bf89f2c00bc6e75a5023c5ae103a8c18c9424e79c4fab183fe986494f908ee9db3b2e69865d3434051de567834198d760d66e3c82fee98e0a31179375f771a48af6382bad0ca35517b486d66b005167a06a23c6e806d89a48039d12dd73ff94b4a6cf922bc247af31368dfbd102878814bfe77897192c8f57ecac3b6c56fa59dc29efaf44491a3e22b5fc6dbc7822f5779dcfe735fb42a506ee05a21512a464d754c18b4dbb4c17107b729e82368cfb93676eb2dd4768dc2b33b2d0ae7e426bf4cbb88bc273d1bb1dc5a7f8f53fe339a19bf4c061ddbd53ea8e0e2b98a7afb1ac186eccade08e286b9107f89565f43e6c1440bdade90c0a0108e9744ff4384b29521880bbde0ac5ca0ea58b1c8db7585f2aa0664462f6046d6d75633274071efd29fb4543769b40d6678759491ac07ad6bfdd7ae22d05c5352c18490067a65d104b68efaa7a1c02f51ae85aec93365d292ba5fd16bacfb9e43a85a5d01f465e7a2afda6ca7d55b008aa4a818b879c2297ea9fdad4564fd3e1297977fc57186f0624634c5029c5e5a4d364e3a3ca53cbf0633aca88cfd98c3ca729be993a757ba4c27ec5ce5b5288a5b1582ddcf08710608e567d70d54be55d8f0eb92b9117ae7e7890a1fe3a1dcdc34495c13fe19ccfe5a016f57875cb805ce854c466f60a56ef10d6df4b236f8feeec502945f4b9f56853804aa2db80f2d5b9ec7c46b93088335acc103d8eb240370d8095ed14faa50b14e78d75dfe18e17306ce100b98ddd70f9396c456d26c64d18d6e19ff4e5baaa51cbfbb382bea361ac5ae3dc147abad61478ed46a58de86f9c249279e5830b09fdf0c9b95cfe7c055b785ad7d96a8156c858a6b9853075bb219467a979e1d2f29e129af67596959a8ff499121a70775ec6532637088a55f1c791fdb8952f79457561e64b3ab8cf17bb66dadb146fdec1298fe8d72b25f040c37d94beeba115e5c78967cba7f59b8b42c336a0dc853bb730208240b7857c1ceb8be0bcb31a2b6e65f128bb2bca74ba6f7f01183a3a79f9d5505a3e92b3ee365956103c89ec82f4bef80bdb8ec9767ef48e663bea58914a29dfce05eff2906d47576fb3d3b4c4f0a20daa58a56add73eade2f132f80ee70c3a0aa00479afe54be286221e4f22f7865ba9b4902c010545c446f884ea692d3181e79db41aa2a3469a4ef49d053e7cf17d225d753af8ef059117386b130ac5d217daca8c322c98aabe795e88e31caacf72f9d08b0899de33184c7dbb098defbeee3561091b66dfc21e93eb4d29447363b4136543ccebf810a1091655ef23fc4ae640c60673caeea0015526d1271980a6626a6a3a7e5092bc5684eb305491b40e36e54e42157fe46d5c44fbd3cff1c25570af5d98f8b66a595628737d4222050d2b2425181106e471e5323cc6c052bdd33a0d829181ff0955f17ef4bb10490457284c6672d166e28d7216b56c3fab920a1a74fa351d44f207c008300ca81323d81440be475732d2208ac1d10b0fe658f86b8181fccc7f6e7a9828f582b3be2404e4506beb892affda586896342440ee55362c1545c337fe321e5eba97a5986419b2710b48a93e79c71eefe8881573cc144aef38b895239f9f68de84e756ba2c4e663740b2e76d7b6ba1224bbc16a4230c7e997d9ce3418195705c5532f8d6b5caf2987dbe1253e5ca69c8977e869fb3cb4781d685fe3410a625bed2cd893c861620cdf2bd31da12abf2c11c894d73cba527d64c97bb7f18e3a6fd7692eb45de3797d42fd63e47c2d36921a1c664d6895b2b9fd7c0a502829aef92e373c4ac6546c1b78044e085fb313f4d6daecc6ea58ced94f6d5cc9a1b1eb0dc248dcfeb2e94124e70628cdf13aac5cbd361af6f0982fa90036afea2e9da20ac4584b29f83bdfe1f7abd2bafe503dbabf1944ad2fa1385a2094882f10a38c0bc173bbd48e37c52268b046eda1c73b9099be5e3e4a294f4580b61e6806d17aa0022e086fc7ff61eeaf3a2688a7f72158aecc41a5e4077e81ac77cb3fcb34fa299b7361533d5b4e40c5d883f96982be464e96a6165c822fd501db8a7015976d19233ba795c61dba6020e18a296dedf1f8437b5da240bf91001590b57100d3af8708c26073d32a9da98ef680e8b313777924a9fe75ea9924afd17fcb2266873ec8f7780fa61216fabe1965b8b83a283f016741a9d5542d7a12be1fea5833251c62a8db240806cdc622bd71c55b0f77753bcafe47f82409f436fd76918f73869c339492593a46c24a71fb81471d314df0c5d7305d76062bdcb80a10cac3505d672d05701dd4f3a125fec14eaaf657e7c4f762856e75f430de14c5b985960e1dc8be906340907ccb6e5b2af62a4c8a0f7d98b0b32d6eff4eb8790d7b021c705179b1b1d90823e5334c8440650a7a3c70ba848dddb76f3991bd0f94210c03dc8a67a9efc8ef2d58f7aa3f898b6e720c86866ca1a592e3560accaeecaa34c422647ad946b9e7ff662622050b44068d28bbe6d342ca2da2a39a1334825c2b99010b183dcc53376ad29ac3ac8bb3a40a7f0c24c840e0e10be3c78e18277949fac29d832c2d3fd47137b73a5a3e923c8b83f3522d2a3db360c2594b2aec3828b7ea4ae74da4f8b3a4dc9e873733605b0ebdaa19b750fbe0c2d0f97b48ed05d16f47e0461ffd137a24cb734754bd59182a7663523e08f237082dc17a746c1e174ca843f487403e83205e3554c51aee8776d0ba7a85f5aa593129ab756e91d9e058ea2d1942f0fbdc25a9df2fb025e035006cae0b39caf58737c41d8d6c19c8951a1dc97c7cf748b246a7feb326c0db0fadca181a01684d073957a73d2af6a8f375438627899aa9155ae3b7f97be81232dcbb44bd28a6885ecc07e5a7cf7dd684d1c122e48147a41d6afdf2dbd90d0656941bbf5167d3726993ec016fc4871623baa1ec264803e775a8299d28aff9b2a2b6e7b496c6a88be21530c8b74febf4043d5f327a5bf08ab0878a6003d9206d21dcca62c30bf7a36e9e3e004d58b6ff83c296fb73112f60a1f2d8cab895aea6be0c9786e1ad60a6e8cf5246860674a7b24c4f92c5fa1a2cfb3ed6f3e438e6317a26c41e7ebf868737a82a536b513cac7efafd6dee0e174ee5a0f3741d70f0d8f612a5daf2f0724e72e35085973ac0efa3855ed4db11a9e7ca7ad8e91c4fbac4bfec02e2c1df0166bda676851279e046711dcb92d6ab64a9de8305c502682021f57e84c11fd73cc81714a99c3106f7eb2fa22d35f56e02aeab4300546ae8358751c1427ca7715ffe1357fcbb0170fa1a09321f8369412fc3a0c28b9641f94ff68830412859c7ed96cbccb3f64c14592e76c51b628edc7f908b483b53cdc294f1812cf84506bd251d2d53229e9586364b0622e7e39f8f5f2e0d403801acd90c5b0902cebac3b3f2116c84ba67e2df0ff7a181aa1bb30eed35181f868ca1c499b1333540a1c0ef37ce8cbe98211ed0710ee96471ac6b23b7392b1346b18a9fb297bb3ba517243e09f710b69a6fbc0a76c2483df2ecfaef04ed733e5698da5594d9191ae9b013e404e1f0f73c535e896dd211672ff769011d85861cdbca4b2d6867bd41d74518cb56beda082f7a3494410079dfab9e030fd318edc1f4d84d56e62ceb9c50396fbf648ae670618ec084b0caa16f8abff89eba1145ba55afe2c24b09c8d44b3a84d28f36fcf769c9c138a2436bcbb768b1f37102f1af83ac7134278b0a3209d98b3464de5d922ee3234b9918c3434fddc64d6143882b45fe77a38c8ce022e2394a7302c9c1fa42a8c534ef2f15abeff503c79b67b99522e217dc91b2ae893540e25b9acf4a49e73ddc8cb89dee9268bbfdb17ae756171e9cfb3e3e92ebb4c634b862c726d76a13940a409e355a51361829549eabeae98152056ab135cfdfc4d3995a96ecbdc584dc9f4efd462669acafab2e100020c6ea208c45bbe7f9d586aeb6ef88552db16f471c87dae662baafc5532f1a3b5fce7c4ceb246d38121fba9e8f765e45fc3e478b130e458ab24a712c4b18a72e05bf5a7ddd7b4870b7a4524b9efa0578b7bc406829c208bd27946722e5e97b6eba02bc6c31e15997c2f08dd63fedbb89179a4cb4b26820562e3868ff478de310215de699cc58d2ead906bff64f254c759a84e6476e72bd96bf00a54c7a7a36a28b4d9184a2152a785f56d348bdf05e67336c8b6ef7700b0777c9ebc31d61ec2518869cb5ff707e3ac9e7d76e7922cea73b78b5b322328a44b5d29866c41791d4670f6bc06d169ca838290bf9cc1b650a30a4516331156252b779fb77e2868faf0c435125a138ff317b660b6d9fe2fc9dbeb8e808f1fd54a44c6a81f1d16e29b4687462f9e6ce1f952108d2d3045d272af2f93e395762e6b576050bb48e9363d18352d621e1a7e75fa49cfb841050fa97254113b9064b4e59d7e79bbb4cbc7f8c9593868b96912ac5ffffd97fee3ca85576e97cf10072e2d3776e8f90e61306a94b0b73990a99"}) ioctl$FITRIM(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 3.429515472s ago: executing program 3 (id=1694): pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.238865837s ago: executing program 3 (id=1695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) 3.155989979s ago: executing program 3 (id=1696): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="22003300d0000800ffffffffffff"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c0001007060796c6f6164002400028008ec02400000002f080005400000000f0800024000000002080004400000008709"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.837452606s ago: executing program 3 (id=1697): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000280)=""/159, 0x9f}, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x48, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2.809995496s ago: executing program 1 (id=1698): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x4, 0x74, 0x8, 0x0, 0x5, 0x1, 0x34, 0x7, 0x8, 0x87, 0x6, 0x0, 0x8}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xfc, 0x0, 0xfff, 0x2, r1}, 0x10) 2.722365129s ago: executing program 2 (id=1699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000280)=""/159, 0x9f}, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x48, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2.63498449s ago: executing program 1 (id=1700): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40080d4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000ff0700000000000000000000000000000000640101020000000000000000000000000000000500000003020020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0xffffff0e}, 0x1c) 1.714750251s ago: executing program 4 (id=1701): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000003c0)="942789bb", 0x4}, {0x0}], 0x2) 1.569378924s ago: executing program 3 (id=1702): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000019}) poll(&(0x7f00000000c0)=[{r0, 0x2400}], 0x1, 0x50c00000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 1.385755508s ago: executing program 1 (id=1703): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x71ac, 0x100, 0x0, 0x158}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @sliced={0x4, [0x7, 0x9f4, 0x0, 0x4, 0x812f, 0x47, 0x6c, 0x4, 0xd21, 0x1ff, 0x6, 0x6, 0x5, 0x6, 0x7, 0x5, 0x80, 0x8d04, 0x9, 0x89ea, 0x1, 0x800, 0x4, 0x6b, 0x1000, 0x2, 0x2, 0xf, 0x3, 0x80, 0x5, 0x8, 0xfff9, 0xfffc, 0x7, 0xb, 0x700, 0xc8, 0x1, 0x7f, 0x1, 0xfff, 0xac3, 0x9, 0x5, 0x5, 0x1, 0x2], 0x9}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 434.8814ms ago: executing program 4 (id=1704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 256.629054ms ago: executing program 3 (id=1705): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) setrlimit(0xf, &(0x7f0000000000)={0x400, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x38, 0x10, 0xd13, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x51191, 0x160}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004814}, 0x0) 230.180074ms ago: executing program 4 (id=1706): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="002212000000", @ANYRES64=r0], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f0000000880)=[{0x3, 0xe000, 0x1f, &(0x7f0000000100)="8af402f20a772e265a1d8b7f28f186a053ea03607afbb6cd650606420939e4"}, {0x2, 0x8000, 0x0, &(0x7f0000000500)}, {0x7, 0x1000, 0x0, 0x0}], 0x3}) 38.662659ms ago: executing program 1 (id=1707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000280)=""/159, 0x9f}, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x48, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 0s ago: executing program 2 (id=1708): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x1, 0x1) r2 = eventfd2(0xc77f, 0x801) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): renamed from eth2 [ 81.442328][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.450138][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.509932][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.521398][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.573200][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.580561][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.611297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.618459][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.635353][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.657858][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.665028][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.678355][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.685478][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.823504][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.835367][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.846341][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.879910][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.921115][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.955122][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.973221][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.980528][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.045270][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.052500][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.084774][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.092050][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.141780][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.149063][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.380261][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.420733][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.527898][ T5788] Bluetooth: hci3: command tx timeout [ 82.528211][ T5786] Bluetooth: hci1: command tx timeout [ 82.533556][ T5783] Bluetooth: hci0: command tx timeout [ 82.602745][ T5773] veth0_vlan: entered promiscuous mode [ 82.608786][ T5783] Bluetooth: hci2: command tx timeout [ 82.646213][ T5773] veth1_vlan: entered promiscuous mode [ 82.683221][ T5772] veth0_vlan: entered promiscuous mode [ 82.735498][ T5772] veth1_vlan: entered promiscuous mode [ 82.802184][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.829423][ T5773] veth0_macvtap: entered promiscuous mode [ 82.844987][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.870664][ T5773] veth1_macvtap: entered promiscuous mode [ 82.888811][ T5772] veth0_macvtap: entered promiscuous mode [ 82.924267][ T5772] veth1_macvtap: entered promiscuous mode [ 82.954610][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.985370][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.010029][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.020868][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.033589][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.056278][ T5775] veth0_vlan: entered promiscuous mode [ 83.066228][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.077324][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.086142][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.096161][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.114150][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.124833][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.137381][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.145100][ T5774] veth0_vlan: entered promiscuous mode [ 83.172257][ T5774] veth1_vlan: entered promiscuous mode [ 83.189311][ T5775] veth1_vlan: entered promiscuous mode [ 83.211142][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.223417][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.232881][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242051][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395188][ T5775] veth0_macvtap: entered promiscuous mode [ 83.412565][ T5774] veth0_macvtap: entered promiscuous mode [ 83.435031][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.444791][ T5775] veth1_macvtap: entered promiscuous mode [ 83.451646][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.468086][ T5774] veth1_macvtap: entered promiscuous mode [ 83.526427][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.545689][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.562928][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.576164][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.588717][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.599442][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.611342][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.623132][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.633891][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.643911][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.655688][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.667733][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.681143][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.692986][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.703367][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.715093][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.725687][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.736617][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.748909][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.764454][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.775298][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.788498][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.799068][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.812401][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.824004][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.836422][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.857659][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.871689][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.891550][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.901708][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.910735][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.919586][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.932622][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.941643][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950743][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.959785][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.985431][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.014239][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.173345][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.186515][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.307309][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.315208][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.374686][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.395670][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.636054][ T5783] Bluetooth: hci1: command tx timeout [ 84.641731][ T5783] Bluetooth: hci0: command tx timeout [ 84.647716][ T5783] Bluetooth: hci3: command tx timeout [ 84.689160][ T5786] Bluetooth: hci2: command tx timeout [ 85.415931][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.493151][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.757626][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 85.952945][ T5855] Zero length message leads to an empty skb [ 86.087850][ T5868] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.453950][ T5875] syz.3.11[5875]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.517986][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.547085][ T5875] loop3: detected capacity change from 0 to 2048 [ 86.639468][ T5875] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 86.683791][ T5875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.694854][ T5786] Bluetooth: hci3: command tx timeout [ 86.700388][ T5786] Bluetooth: hci0: command tx timeout [ 86.701510][ T5783] Bluetooth: hci1: command tx timeout [ 86.768041][ T5783] Bluetooth: hci2: command tx timeout [ 86.814527][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 90.818800][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 90.917366][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 93.211969][ T970] cfg80211: failed to load regulatory.db [ 95.100179][ T5920] UHID_CREATE from different security context by process 21 (syz.0.25), this is not allowed. [ 98.165101][ T5954] loop1: detected capacity change from 0 to 512 [ 98.211397][ T5954] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.240262][ T5954] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.295149][ T5954] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.34: invalid indirect mapped block 4294967295 (level 0) [ 98.327590][ T5954] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.34: invalid indirect mapped block 4294967295 (level 1) [ 98.423463][ T5954] EXT4-fs (loop1): 1 orphan inode deleted [ 98.436155][ T5954] EXT4-fs (loop1): 1 truncate cleaned up [ 98.459561][ T5954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.099417][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.387985][ T5978] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 102.643302][ T6002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 102.881067][ T6000] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 103.122753][ T6004] loop1: detected capacity change from 0 to 128 [ 103.159824][ T6004] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 103.525202][ T6007] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 103.553816][ T6007] veth3: entered allmulticast mode [ 103.672606][ T6009] sysv_free_block: trying to free block not in datazone [ 103.897301][ T5772] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.441173][ T6011] loop2: detected capacity change from 0 to 2048 [ 104.747617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.157182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.382782][ T6011] loop2: p1 < > p4 [ 105.467822][ T6011] loop2: p4 size 8388608 extends beyond EOD, truncated [ 105.567020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 106.241907][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 106.261058][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 106.475032][ T6023] pim6reg: entered allmulticast mode [ 106.558553][ T6023] warning: `syz.1.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.137090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.648614][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.657972][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.337715][ T6092] loop2: detected capacity change from 0 to 1024 [ 120.643892][ T1097] hfsplus: request for non-existent node 33554434 in B*Tree [ 120.658787][ T1097] hfsplus: request for non-existent node 33554434 in B*Tree [ 121.011313][ T6107] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.401502][ T6126] Invalid option length (1045252) for dns_resolver key [ 127.987323][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 129.396901][ C0] sched: RT throttling activated [ 130.346942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.252212][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.261352][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.604774][ T6175] loop3: detected capacity change from 0 to 512 [ 133.636280][ T6175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.057116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 136.318341][ T6175] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.92: invalid indirect mapped block 9 (level 0) [ 136.358577][ T6175] EXT4-fs (loop3): 1 truncate cleaned up [ 136.567806][ T6175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.736515][ T6191] loop0: detected capacity change from 0 to 1024 [ 138.009328][ T6194] tipc: Failed to remove unknown binding: 66,0,0/0:3337279092/3337279094 [ 138.024174][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.037104][ T6194] tipc: Failed to remove unknown binding: 66,0,0/0:3337279092/3337279093 [ 138.070866][ T6194] tipc: Failed to remove unknown binding: 66,0,0/0:3337279092/3337279094 [ 138.087198][ T6194] tipc: Failed to remove unknown binding: 66,0,0/0:3337279092/3337279093 [ 138.352325][ T6199] netlink: 'syz.0.105': attribute type 1 has an invalid length. [ 138.414387][ T6199] bond1: entered promiscuous mode [ 138.420430][ T6199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.562538][ T6199] veth3: entered allmulticast mode [ 138.581871][ T6199] bond1: (slave veth3): making interface the new active one [ 138.610752][ T6199] veth3: entered promiscuous mode [ 138.617889][ T6205] loop3: detected capacity change from 0 to 1024 [ 138.637218][ T6199] bond1: (slave veth3): Enslaving as an active interface with an up link [ 138.715866][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.796928][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.856244][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.867235][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.882338][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.893010][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.908405][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.923368][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.944041][ T6201] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.959442][ T6201] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 140.318170][ T6234] loop0: detected capacity change from 0 to 512 [ 141.434736][ T6234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.465729][ T6234] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.122282][ T6249] process 'syz.3.115' launched './file2' with NULL argv: empty string added [ 143.131743][ T5783] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 143.142840][ T5783] CPU: 0 PID: 5783 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 143.150637][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 143.160927][ T5783] Workqueue: hci0 hci_rx_work [ 143.165676][ T5783] Call Trace: [ 143.169009][ T5783] [ 143.172060][ T5783] dump_stack_lvl+0x18c/0x250 [ 143.176799][ T5783] ? show_regs_print_info+0x20/0x20 [ 143.182055][ T5783] ? load_image+0x420/0x420 [ 143.186628][ T5783] sysfs_create_dir_ns+0x26e/0x2a0 [ 143.191775][ T5783] ? __lock_acquire+0x7d80/0x7d80 [ 143.196931][ T5783] ? sysfs_warn_dup+0xa0/0xa0 [ 143.201748][ T5783] ? do_raw_spin_unlock+0x121/0x230 [ 143.207089][ T5783] kobject_add_internal+0x617/0xc90 [ 143.212321][ T5783] kobject_add+0x164/0x240 [ 143.216798][ T5783] ? kobject_init+0x1d0/0x1d0 [ 143.221529][ T5783] ? get_device_parent+0x366/0x390 [ 143.226682][ T5783] device_add+0x3fa/0xc40 [ 143.231485][ T5783] hci_conn_add_sysfs+0xd5/0x1e0 [ 143.236476][ T5783] le_conn_complete_evt+0xe9f/0x1480 [ 143.242094][ T5783] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 143.248508][ T5783] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 143.254263][ T5783] ? mutex_unlock+0x10/0x10 [ 143.258876][ T5783] ? skb_pull_data+0xf0/0x1f0 [ 143.263601][ T5783] hci_le_enh_conn_complete_evt+0x189/0x460 [ 143.269689][ T5783] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 143.276120][ T5783] ? hci_remote_host_features_evt+0x150/0x150 [ 143.282290][ T5783] hci_event_packet+0x7b4/0x1280 [ 143.287347][ T5783] ? __lock_acquire+0x7d80/0x7d80 [ 143.292387][ T5783] ? lock_chain_count+0x20/0x20 [ 143.297364][ T5783] ? bis_list+0x290/0x290 [ 143.301747][ T5783] ? lockdep_hardirqs_on+0x98/0x150 [ 143.306990][ T5783] ? hci_send_to_monitor+0xd7/0x4f0 [ 143.312210][ T5783] hci_rx_work+0x43a/0xd60 [ 143.316751][ T5783] ? process_scheduled_works+0x975/0x1600 [ 143.322529][ T5783] process_scheduled_works+0xa60/0x1600 [ 143.328395][ T5783] ? worker_attach_to_pool+0x370/0x370 [ 143.334004][ T5783] ? assign_work+0x3cc/0x5d0 [ 143.338648][ T5783] worker_thread+0xa5e/0xfe0 [ 143.343308][ T5783] kthread+0x2fa/0x390 [ 143.347402][ T5783] ? pr_cont_work+0x550/0x550 [ 143.352285][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 143.357242][ T5783] ret_from_fork+0x48/0x80 [ 143.361685][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 143.366296][ T5783] ret_from_fork_asm+0x11/0x20 [ 143.371100][ T5783] [ 143.378841][ T5783] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.393128][ T5783] Bluetooth: hci0: failed to register connection device [ 143.590495][ T6254] loop3: detected capacity change from 0 to 512 [ 143.612192][ T6234] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.112: Invalid inode table block 34 in block_group 0 [ 143.637105][ T6254] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 143.645928][ T6254] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 143.647365][ T990] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 15: comm kworker/u4:5: lblock 2 mapped to illegal pblock 15 (length 1) [ 143.661810][ T6254] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 143.683803][ T990] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 143.683810][ T6234] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 143.701891][ T990] EXT4-fs error (device loop0): ext4_write_dquot:6933: comm kworker/u4:5: Failed to commit dquot type 0 [ 143.719345][ T990] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 143.731173][ T6234] EXT4-fs error (device loop0): ext4_setattr:5513: inode #15: comm syz.0.112: mark_inode_dirty error [ 143.733168][ T990] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 13: comm kworker/u4:5: lblock 0 mapped to illegal pblock 13 (length 1) [ 143.780787][ T990] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 143.796597][ T6254] EXT4-fs (loop3): 1 truncate cleaned up [ 143.807089][ T990] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 143.821354][ T6254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.846525][ T990] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #4: block 19: comm kworker/u4:5: lblock 2 mapped to illegal pblock 19 (length 1) [ 143.897200][ T990] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 143.905386][ T990] EXT4-fs error (device loop0): ext4_write_dquot:6933: comm kworker/u4:5: Failed to commit dquot type 1 [ 143.934644][ T49] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm kworker/u4:3: Invalid inode table block 34 in block_group 0 [ 143.977512][ T990] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 144.051643][ T990] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 144.109605][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.186859][ T60] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 144.217213][ T60] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 144.257064][ T60] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 145.289629][ T60] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 145.325512][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.896078][ T6273] loop1: detected capacity change from 0 to 2048 [ 147.668624][ T6273] loop1: p1 < > p4 [ 147.673744][ T6273] loop1: p4 size 8388608 extends beyond EOD, truncated [ 147.888946][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 147.899009][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 148.662431][ T6286] loop3: detected capacity change from 0 to 512 [ 148.714202][ T6286] EXT4-fs: Ignoring removed i_version option [ 148.810490][ T6286] EXT4-fs: Ignoring removed oldalloc option [ 149.869010][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.969990][ T6296] loop0: detected capacity change from 0 to 1024 [ 150.256403][ T6299] syz.0.128: attempt to access beyond end of device [ 150.256403][ T6299] loop0: rw=0, sector=1024, nr_sectors = 4 limit=1024 [ 150.295152][ T6299] Buffer I/O error on dev loop0, logical block 256, async page read [ 150.316499][ T6299] syz.0.128: attempt to access beyond end of device [ 150.316499][ T6299] loop0: rw=0, sector=1028, nr_sectors = 4 limit=1024 [ 150.345181][ T6299] Buffer I/O error on dev loop0, logical block 257, async page read [ 152.977065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 153.667400][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.817125][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.173861][ T9] IPVS: starting estimator thread 0... [ 154.320381][ T6319] IPVS: using max 17 ests per chain, 40800 per kthread [ 156.342489][ T6340] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 156.360652][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.369047][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.456005][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.463539][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.472120][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.479614][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.526340][ T6340] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.637478][ T6352] syzkaller0: entered promiscuous mode [ 157.644126][ T6352] syzkaller0: entered allmulticast mode [ 157.672944][ T6356] tipc: Started in network mode [ 157.685862][ T6356] tipc: Node identity ee6e31f43ee, cluster identity 4711 [ 157.699216][ T6356] tipc: Enabled bearer , priority 0 [ 157.810506][ T6345] syzkaller0: entered promiscuous mode [ 157.826468][ T6345] syzkaller0: entered allmulticast mode [ 157.876359][ T6336] tipc: Resetting bearer [ 157.988947][ T6336] tipc: Disabling bearer [ 159.448578][ T5838] IPVS: starting estimator thread 0... [ 159.547096][ T6377] IPVS: using max 17 ests per chain, 40800 per kthread [ 159.731112][ T6385] IPVS: sh: FWM 3 0x00000003 - no destination available [ 159.795549][ T6385] IPVS: sh: FWM 3 0x00000003 - no destination available [ 167.618183][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 168.074154][ T6463] loop3: detected capacity change from 0 to 256 [ 176.548033][ T6524] binder: 6523:6524 unknown command 0 [ 176.553587][ T6524] binder: 6523:6524 ioctl c0306201 2000000001c0 returned -22 [ 176.671507][ T6526] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 176.764560][ T6526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.861203][ T6529] veth3: entered allmulticast mode [ 176.880973][ T6529] bond1: (slave veth3): Enslaving as an active interface with a down link [ 177.017487][ T6531] bond1: entered promiscuous mode [ 177.022637][ T6531] bond1: entered allmulticast mode [ 177.133501][ T6526] macvlan2: entered promiscuous mode [ 177.198399][ T6526] macvlan2: entered allmulticast mode [ 177.367587][ T6526] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.841915][ T6530] syzkaller0: entered promiscuous mode [ 177.852013][ T6530] syzkaller0: entered allmulticast mode [ 178.051821][ T6542] overlayfs: missing 'lowerdir' [ 180.969528][ T6555] syzkaller0: entered promiscuous mode [ 180.975170][ T6555] syzkaller0: entered allmulticast mode [ 182.002233][ T6570] tipc: Enabling of bearer rejected, failed to enable media [ 182.094562][ T6572] netlink: 44 bytes leftover after parsing attributes in process `syz.2.182'. [ 182.287756][ T5818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.457314][ T6573] sctp: [Deprecated]: syz.1.168 (pid 6573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.457314][ T6573] Use struct sctp_sack_info instead [ 183.697292][ T5818] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 183.705999][ T5818] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 183.923265][ T5818] usb 1-1: config 220 has no interface number 2 [ 183.954851][ T5818] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 183.977836][ T6587] fuse: Bad value for 'fd' [ 184.104256][ T5818] usb 1-1: config 220 interface 0 has no altsetting 0 [ 184.173455][ T6591] overlayfs: missing 'lowerdir' [ 186.044085][ T5818] usb 1-1: config 220 interface 76 has no altsetting 0 [ 186.072271][ T5818] usb 1-1: config 220 interface 1 has no altsetting 0 [ 186.110612][ T5818] usb 1-1: string descriptor 0 read error: -71 [ 186.127200][ T5818] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 186.147429][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.277045][ T5818] usb 1-1: can't set config #220, error -71 [ 186.334734][ T5818] usb 1-1: USB disconnect, device number 2 [ 189.569780][ T6615] ISOFS: Unable to identify CD-ROM format. [ 190.462537][ T6618] syzkaller0: entered promiscuous mode [ 190.507087][ T6618] syzkaller0: entered allmulticast mode [ 192.042503][ T6630] ceph: No mds server is up or the cluster is laggy [ 192.910944][ T6625] loop0: detected capacity change from 0 to 8192 [ 192.974208][ T6625] ======================================================= [ 192.974208][ T6625] WARNING: The mand mount option has been deprecated and [ 192.974208][ T6625] and is ignored by this kernel. Remove the mand [ 192.974208][ T6625] option from the mount to silence this warning. [ 192.974208][ T6625] ======================================================= [ 194.751719][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.833239][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.407650][ T6659] sctp: failed to load transform for md5: -4 [ 199.038049][ T6669] capability: warning: `syz.1.207' uses deprecated v2 capabilities in a way that may be insecure [ 200.169549][ T6672] Bluetooth: MGMT ver 1.22 [ 202.912867][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 202.919231][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 202.925467][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 202.932645][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 202.950806][ T6678] loop0: detected capacity change from 0 to 8192 [ 203.041308][ T6678] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 203.098603][ T6678] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 203.134626][ T6678] REISERFS (device loop0): using ordered data mode [ 203.157167][ T6678] reiserfs: using flush barriers [ 203.169367][ T6678] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.218079][ T6678] REISERFS (device loop0): checking transaction log (loop0) [ 203.278174][ T6678] REISERFS (device loop0): Using r5 hash to sort names [ 203.318000][ T6678] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 204.129107][ T6690] syz.0.213: attempt to access beyond end of device [ 204.129107][ T6690] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 204.142672][ T6690] hfsplus: unable to find HFS+ superblock [ 207.496251][ T6702] Illegal XDP return value 4294967283 on prog (id 16) dev N/A, expect packet loss! [ 207.901832][ T6708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.215'. [ 209.340157][ T6714] loop3: detected capacity change from 0 to 128 [ 211.839901][ T6725] syzkaller0: entered promiscuous mode [ 211.845454][ T6725] syzkaller0: entered allmulticast mode [ 218.327750][ T6757] syzkaller0: entered promiscuous mode [ 218.333333][ T6757] syzkaller0: entered allmulticast mode [ 218.361775][ T6757] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.234'. [ 226.682683][ T6787] loop3: detected capacity change from 0 to 512 [ 226.760684][ T6787] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 226.799693][ T6787] System zones: 0-2, 18-18, 34-34 [ 226.863675][ T6787] EXT4-fs (loop3): 1 orphan inode deleted [ 226.913849][ T6787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.960021][ T6787] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.122796][ T6787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.833279][ T6799] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 232.941602][ T6833] syzkaller0: entered promiscuous mode [ 232.966916][ T6833] syzkaller0: entered allmulticast mode [ 235.627863][ T6850] syzkaller0: entered promiscuous mode [ 235.627887][ T6850] syzkaller0: entered allmulticast mode [ 257.136665][ T6974] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 258.058351][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.064676][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.790831][ T6982] loop1: detected capacity change from 0 to 2048 [ 261.345982][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 261.356372][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 261.365630][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 261.375045][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 262.815929][ T7009] syzkaller0: entered promiscuous mode [ 262.836986][ T7009] syzkaller0: entered allmulticast mode [ 264.625273][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 264.662114][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 264.750054][ T7014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.778633][ T7014] bond1: (slave bond0): making interface the new active one [ 264.792098][ T7014] bond1: (slave bond0): Enslaving as an active interface with an up link [ 265.667246][ T7023] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 265.680745][ T7023] Error parsing options; rc = [-22] [ 265.797770][ T7021] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 265.805491][ T7021] netlink: 152 bytes leftover after parsing attributes in process `syz.3.299'. [ 267.389815][ T7014] syz.3.299 (7014) used greatest stack depth: 19720 bytes left [ 267.441443][ T7021] .`: renamed from bond0 (while UP) [ 272.203769][ T7043] cgroup: No subsys list or none specified [ 273.588049][ T7047] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 280.473925][ T7084] syzkaller0: entered promiscuous mode [ 280.503061][ T7084] syzkaller0: entered allmulticast mode [ 282.962673][ T7101] bond1: option mode: unable to set because the bond device has slaves [ 283.075110][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 286.429352][ T7129] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.438800][ T7129] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.447823][ T7129] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.457182][ T7129] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.509327][ T7129] .`: (slave vxlan0): Enslaving as an active interface with an up link [ 287.349993][ T7148] loop0: detected capacity change from 0 to 4096 [ 288.767997][ T7158] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 288.781181][ T7158] Error parsing options; rc = [-22] [ 292.014919][ T7187] loop1: detected capacity change from 0 to 4096 [ 297.130502][ T7223] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 299.330202][ T7229] syz.2.360 uses obsolete (PF_INET,SOCK_PACKET) [ 305.382148][ T7274] syz.0.369 (7274) used greatest stack depth: 19656 bytes left [ 305.748781][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 305.784487][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 305.828139][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.867653][ T7279] bond2: (slave bond0): making interface the new active one [ 305.903665][ T7279] bond2: (slave bond0): Enslaving as an active interface with an up link [ 305.965602][ T7286] netlink: 'syz.0.372': attribute type 4 has an invalid length. [ 305.985884][ T7286] netlink: 152 bytes leftover after parsing attributes in process `syz.0.372'. [ 306.041392][ T7286] .`: renamed from bond0 (while UP) [ 311.708063][ T7320] netlink: 'syz.3.384': attribute type 5 has an invalid length. [ 311.718648][ T7320] netlink: 'syz.3.384': attribute type 5 has an invalid length. [ 312.483509][ T7326] loop0: detected capacity change from 0 to 8192 [ 312.527236][ T7326] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 312.540749][ T7326] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 312.551348][ T7326] REISERFS (device loop0): using ordered data mode [ 312.558240][ T7326] reiserfs: using flush barriers [ 312.567198][ T7326] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 312.584035][ T7326] REISERFS (device loop0): checking transaction log (loop0) [ 312.600901][ T7326] REISERFS (device loop0): Using r5 hash to sort names [ 312.609309][ T7326] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 312.734512][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 312.767068][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 312.821774][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.896054][ T7328] bond1: (slave bond0): making interface the new active one [ 312.935242][ T7328] bond1: (slave bond0): Enslaving as an active interface with an up link [ 312.987018][ T7332] netlink: 'syz.1.387': attribute type 4 has an invalid length. [ 313.008226][ T7332] netlink: 152 bytes leftover after parsing attributes in process `syz.1.387'. [ 313.043496][ T7332] .`: renamed from bond0 (while UP) [ 317.779233][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.785715][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.428882][ T7367] loop0: detected capacity change from 0 to 1024 [ 318.614216][ T7367] hfsplus: unable to parse mount options [ 318.864980][ T7156] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 319.747620][ T7367] loop0: detected capacity change from 0 to 2048 [ 319.874941][ T7367] Alternate GPT is invalid, using primary GPT. [ 319.882378][ T7367] loop0: p2 p3 p7 [ 320.627417][ T7156] udevd[7156]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 320.649993][ T7074] udevd[7074]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 320.658376][ T7395] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 322.006001][ T7395] bond2: (slave bridge1): making interface the new active one [ 322.037826][ T7395] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 322.155809][ T7405] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 323.043624][ T7395] gretap2: entered promiscuous mode [ 323.069921][ T7395] gretap2: entered allmulticast mode [ 323.094031][ T7403] loop0: detected capacity change from 0 to 4096 [ 323.112995][ T7395] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 325.562101][ T7403] ntfs3: loop0: Failed to read $AttrDef (-4). [ 325.629864][ T7417] autofs4:pid:7417:autofs_fill_super: called with bogus options [ 325.855567][ T7421] binder_alloc: 7420: pid 7420 spamming oneway? 2 buffers allocated for a total size of 5120 [ 335.951834][ T7464] overlayfs: failed to clone upperpath [ 336.610600][ T7459] loop1: detected capacity change from 0 to 4096 [ 338.295560][ T7459] ntfs3: loop1: Failed to read $UpCase (-4). [ 341.525695][ T7497] loop1: detected capacity change from 0 to 4096 [ 348.442540][ T7541] netlink: 'syz.0.444': attribute type 13 has an invalid length. [ 348.587695][ T7541] netlink: 'syz.0.444': attribute type 17 has an invalid length. [ 348.894441][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.901752][ T7541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.909572][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.916821][ T7541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.877733][ T7541] 8021q: adding VLAN 0 to HW filter on device .` [ 349.925114][ T7541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.244112][ T7555] trusted_key: syz.2.448 sent an empty control message without MSG_MORE. [ 357.575116][ T7575] loop1: detected capacity change from 0 to 4096 [ 371.702996][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 375.040372][ T7665] overlayfs: failed to clone lowerpath [ 375.094644][ T7666] overlayfs: failed to clone lowerpath [ 377.938909][ T7678] netlink: 52 bytes leftover after parsing attributes in process `syz.2.479'. [ 379.052377][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.060198][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.319658][ T7707] binder: 7704:7707 ioctl c0306201 0 returned -14 [ 382.831941][ T7712] binder: 7704:7712 ioctl c0306201 0 returned -14 [ 390.103886][ T7735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.420993][ T7750] syz.2.497: attempt to access beyond end of device [ 393.420993][ T7750] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 393.434386][ T7750] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 394.090682][ T7755] loop0: detected capacity change from 0 to 4096 [ 400.847873][ T7782] xt_l2tp: unknown flags: 17 [ 408.297383][ T7832] loop0: detected capacity change from 0 to 4096 [ 410.426627][ T7846] netlink: 'syz.1.523': attribute type 13 has an invalid length. [ 410.467159][ T7846] netlink: 'syz.1.523': attribute type 17 has an invalid length. [ 411.909986][ T7846] 8021q: adding VLAN 0 to HW filter on device .` [ 412.080069][ T7846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.975061][ T7875] loop1: detected capacity change from 0 to 512 [ 415.998350][ T7875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.074282][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.115732][ T7875] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.294956][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.463568][ T7887] loop1: detected capacity change from 0 to 512 [ 416.473155][ T7887] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 416.494877][ T7887] EXT4-fs (loop1): 1 truncate cleaned up [ 416.507488][ T7887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.144201][ T7895] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.530: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 420.232963][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.083873][ T7926] loop1: detected capacity change from 0 to 256 [ 425.223320][ T7926] exfat: Deprecated parameter 'namecase' [ 425.297761][ T7926] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x62ca6c44, utbl_chksum : 0xe619d30d) [ 429.597058][ T7945] ceph: No mds server is up or the cluster is laggy [ 438.842047][ T5788] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 438.983657][ T7995] bridge0: port 3(macvlan0) entered blocking state [ 439.026152][ T7995] bridge0: port 3(macvlan0) entered disabled state [ 439.071230][ T7995] macvlan0: entered allmulticast mode [ 439.082884][ T7995] veth1_vlan: entered allmulticast mode [ 440.639158][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.645545][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.704224][ T8005] x_tables: duplicate underflow at hook 1 [ 440.738953][ T7995] macvlan0: entered promiscuous mode [ 440.821192][ T7995] bridge0: port 3(macvlan0) entered blocking state [ 440.828555][ T7995] bridge0: port 3(macvlan0) entered forwarding state [ 441.097454][ T8008] NILFS (nullb0): couldn't find nilfs on the device [ 444.352873][ T8018] random: crng reseeded on system resumption [ 444.460267][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 444.460281][ T28] audit: type=1326 audit(1784225501.601:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.1.563" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70e9d9de59 code=0x0 [ 445.262772][ T8034] loop0: detected capacity change from 0 to 16 [ 445.296577][ T8034] erofs: (device loop0): mounted with root inode @ nid 36. [ 448.116908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 450.222751][ T8055] syz.1.567 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 454.545516][ T8076] netem: change failed [ 457.440892][ T8099] loop1: detected capacity change from 0 to 4096 [ 459.272334][ T8099] ntfs3: loop1: Failed to read $AttrDef (-4). [ 459.404506][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 462.072477][ T8119] loop1: detected capacity change from 0 to 1024 [ 462.135723][ T8119] EXT4-fs: Ignoring removed bh option [ 462.167138][ T8119] EXT4-fs: Ignoring removed bh option [ 462.198223][ T8119] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 462.237921][ T8119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.922500][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.683762][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 470.035026][ T8152] loop1: detected capacity change from 0 to 4096 [ 471.972368][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.598'. [ 475.229544][ T8187] loop0: detected capacity change from 0 to 128 [ 475.316177][ T8187] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 475.349990][ T8187] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 476.927113][ T8193] loop1: detected capacity change from 0 to 32768 [ 477.555503][ T8187] fscrypt: Error allocating hmac(sha512): -2 [ 478.706935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 478.745074][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.908040][ T8016] udevd[8016]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 478.985464][ T8016] udevd[8016]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 484.509072][ T8243] block nbd0: NBD_DISCONNECT [ 484.841422][ T8244] overlayfs: failed to clone upperpath [ 489.416502][ T8269] loop1: detected capacity change from 0 to 16 [ 489.700427][ T5786] Bluetooth: hci2: hcon ffff88803076a000 sent 1 < count 257 [ 489.736994][ T8269] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 493.066179][ T8285] xt_TPROXY: Can be used only with -p tcp or -p udp [ 493.414918][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 496.998963][ T8314] mmap: syz.1.623 (8314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 497.016797][ T8314] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 497.946718][ T8319] loop1: detected capacity change from 0 to 2048 [ 497.965208][ T8319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.158818][ T8322] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 500.677668][ T8334] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 500.766373][ T8334] team0: Port device dummy0 added [ 503.094798][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.101189][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.257891][ T8347] fuse: Bad value for 'fd' [ 505.532617][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 506.204488][ T8361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 507.698651][ T8373] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8373] [ 514.243075][ T8410] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 514.257425][ T28] audit: type=1326 audit(1784225570.028:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 514.439369][ T8410] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 514.480771][ T28] audit: type=1326 audit(1784225570.028:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 515.327412][ T28] audit: type=1326 audit(1784225570.028:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 515.395121][ T28] audit: type=1326 audit(1784225570.028:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 516.345056][ T28] audit: type=1326 audit(1784225570.028:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 516.409105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 516.507771][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 517.830287][ T28] audit: type=1326 audit(1784225570.028:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 517.854275][ T28] audit: type=1326 audit(1784225570.028:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 517.878301][ T28] audit: type=1326 audit(1784225570.028:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 517.935770][ T28] audit: type=1326 audit(1784225570.028:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 518.040574][ T28] audit: type=1326 audit(1784225570.028:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.1.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e9d9de59 code=0x7ffc0000 [ 522.460733][ T8448] tty tty4: ldisc open failed (-12), clearing slot 3 [ 531.924698][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 534.997555][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.008632][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.019103][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.030660][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.325656][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.395246][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.492821][ T8507] xt_hashlimit: size too large, truncated to 1048576 [ 535.498559][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.520198][ T8507] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 535.543958][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.606185][ T8517] ipvlan2: entered allmulticast mode [ 535.613972][ T8517] batadv_slave_1: entered allmulticast mode [ 535.637698][ T8517] batman_adv: batadv0: Adding interface: ipvlan2 [ 535.666107][ T8517] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.759270][ T8517] batman_adv: batadv0: Interface activated: ipvlan2 [ 537.552515][ T8534] loop1: detected capacity change from 0 to 4096 [ 541.234133][ T8565] fuse: Unknown parameter 'group_i00000000000000000000¿pÁ0ˆ~ù”:' [ 543.453354][ T8583] netlink: 'syz.3.696': attribute type 2 has an invalid length. [ 543.480254][ T8583] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 543.801883][ T8571] Process accounting resumed [ 544.866101][ T8594] syz.0.700: attempt to access beyond end of device [ 544.866101][ T8594] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 544.879993][ T8594] SQUASHFS error: Failed to read block 0x0: -5 [ 544.886341][ T8594] unable to read squashfs_super_block [ 546.119591][ T8595] syz.2.701: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 546.251920][ T8595] CPU: 0 PID: 8595 Comm: syz.2.701 Not tainted syzkaller #0 [ 546.259305][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 546.269415][ T8595] Call Trace: [ 546.273092][ T8595] [ 546.276069][ T8595] dump_stack_lvl+0x18c/0x250 [ 546.280925][ T8595] ? show_regs_print_info+0x20/0x20 [ 546.286143][ T8595] ? load_image+0x420/0x420 [ 546.290683][ T8595] ? __rcu_read_unlock+0x7c/0xd0 [ 546.295673][ T8595] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 546.302116][ T8595] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 546.308637][ T8595] warn_alloc+0x246/0x340 [ 546.313010][ T8595] ? stack_trace_save+0xaa/0x100 [ 546.317959][ T8595] ? zone_watermark_ok_safe+0x230/0x230 [ 546.323600][ T8595] ? kasan_set_track+0x5f/0x70 [ 546.328511][ T8595] ? kasan_set_track+0x4e/0x70 [ 546.333363][ T8595] ? __kasan_kmalloc+0x8f/0xa0 [ 546.338179][ T8595] ? xsk_init_queue+0xad/0x100 [ 546.343081][ T8595] ? xsk_setsockopt+0x413/0x750 [ 546.347996][ T8595] ? do_sock_setsockopt+0x175/0x1a0 [ 546.353458][ T8595] ? __x64_sys_setsockopt+0x182/0x200 [ 546.359005][ T8595] __vmalloc_node_range+0x129/0x1320 [ 546.364329][ T8595] ? free_vm_area+0x50/0x50 [ 546.368851][ T8595] vmalloc_user+0x74/0x80 [ 546.373193][ T8595] ? xskq_create+0xbf/0x170 [ 546.377791][ T8595] xskq_create+0xbf/0x170 [ 546.382138][ T8595] xsk_init_queue+0xad/0x100 [ 546.386754][ T8595] xsk_setsockopt+0x413/0x750 [ 546.391543][ T8595] ? xsk_poll+0x670/0x670 [ 546.395892][ T8595] ? __fget_files+0x28/0x460 [ 546.400536][ T8595] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 546.406133][ T8595] ? security_socket_setsockopt+0x7e/0xa0 [ 546.411953][ T8595] ? xsk_poll+0x670/0x670 [ 546.416322][ T8595] do_sock_setsockopt+0x175/0x1a0 [ 546.421358][ T8595] ? __fdget+0x180/0x210 [ 546.425708][ T8595] __x64_sys_setsockopt+0x182/0x200 [ 546.430939][ T8595] do_syscall_64+0x55/0xb0 [ 546.435376][ T8595] ? clear_bhb_loop+0x40/0x90 [ 546.440168][ T8595] ? clear_bhb_loop+0x40/0x90 [ 546.444873][ T8595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.450814][ T8595] RIP: 0033:0x7f65a699de59 [ 546.455238][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.474959][ T8595] RSP: 002b:00007f65a78e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 546.483378][ T8595] RAX: ffffffffffffffda RBX: 00007f65a6c25fa0 RCX: 00007f65a699de59 [ 546.491353][ T8595] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 546.499324][ T8595] RBP: 00007f65a6a33e6f R08: 0000000000000004 R09: 0000000000000000 [ 546.507299][ T8595] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.515287][ T8595] R13: 00007f65a6c26038 R14: 00007f65a6c25fa0 R15: 00007ffca52bea78 [ 546.523289][ T8595] [ 546.537399][ T8595] Mem-Info: [ 546.540571][ T8595] active_anon:7518 inactive_anon:87 isolated_anon:0 [ 546.540571][ T8595] active_file:18104 inactive_file:40609 isolated_file:0 [ 546.540571][ T8595] unevictable:0 dirty:20 writeback:0 [ 546.540571][ T8595] slab_reclaimable:11071 slab_unreclaimable:124374 [ 546.540571][ T8595] mapped:24359 shmem:1876 pagetables:642 [ 546.540571][ T8595] sec_pagetables:0 bounce:0 [ 546.540571][ T8595] kernel_misc_reclaimable:0 [ 546.540571][ T8595] free:1306078 free_pcp:14045 free_cma:0 [ 546.598076][ T8595] Node 0 active_anon:28536kB inactive_anon:348kB active_file:72416kB inactive_file:162236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97436kB dirty:80kB writeback:0kB shmem:5968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10492kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no [ 546.655906][ T8595] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 546.690294][ T8597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.698980][ T8595] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.885988][ T8595] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 546.891940][ T8595] Node 0 DMA32 free:1311160kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:39096kB inactive_anon:348kB active_file:72416kB inactive_file:161412kB unevictable:0kB writepending:192kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:27432kB local_pcp:21432kB free_cma:0kB [ 546.923781][ T8595] lowmem_reserve[]: 0 0 0 0 0 [ 546.929039][ T8595] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.967864][ T8595] lowmem_reserve[]: 0 0 0 0 0 [ 548.094472][ T8595] Node 1 Normal free:3895736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18932kB local_pcp:9040kB free_cma:0kB [ 548.134903][ T8595] lowmem_reserve[]: 0 0 0 0 0 [ 548.142164][ T8595] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 548.165558][ T8595] Node 0 DMA32: 1447*4kB (ME) 904*8kB (ME) 590*16kB (UME) 560*32kB (ME) 434*64kB (UME) 219*128kB (UME) 96*256kB (UME) 58*512kB (UM) 33*1024kB (UME) 23*2048kB (UME) 268*4096kB (UM) = 1329084kB [ 548.187881][ T8595] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 548.214818][ T8595] Node 1 Normal: 250*4kB (UM) 54*8kB (UME) 48*16kB (UME) 79*32kB (UME) 35*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UE) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3895736kB [ 548.254845][ T8595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.295776][ T8595] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 548.349831][ T8595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.390272][ T8610] lo speed is unknown, defaulting to 1000 [ 548.396835][ T8610] lo speed is unknown, defaulting to 1000 [ 548.416132][ T8610] lo speed is unknown, defaulting to 1000 [ 548.434635][ T8595] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 548.458221][ T8610] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 548.507700][ T8595] 60661 total pagecache pages [ 548.513124][ T8610] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 548.542808][ T8595] 87 pages in swap cache [ 548.576329][ T8595] Free swap = 123944kB [ 548.604067][ T8595] Total swap = 124996kB [ 548.635924][ T8595] 2097051 pages RAM [ 548.642454][ T8610] lo speed is unknown, defaulting to 1000 [ 548.659501][ T8610] lo speed is unknown, defaulting to 1000 [ 548.675171][ T8595] 0 pages HighMem/MovableOnly [ 548.682027][ T8610] lo speed is unknown, defaulting to 1000 [ 548.694655][ T8610] lo speed is unknown, defaulting to 1000 [ 548.727139][ T8595] 416953 pages reserved [ 548.770834][ T8595] 0 pages cma reserved [ 550.799643][ T5788] Bluetooth: hci3: unexpected event for opcode 0x200b [ 552.932044][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'. [ 557.909351][ T8658] netlink: 23 bytes leftover after parsing attributes in process `syz.3.718'. [ 560.306089][ T8686] loop1: detected capacity change from 0 to 4096 [ 568.299482][ T8729] tipc: Started in network mode [ 568.305384][ T8729] tipc: Node identity 4, cluster identity 4711 [ 568.311701][ T8729] tipc: Node number set to 4 [ 569.067880][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.075176][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.056345][ T8745] 8021q: adding VLAN 0 to HW filter on device .` [ 572.144106][ T8745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.683173][ T5835] IPVS: starting estimator thread 0... [ 572.885101][ T8755] IPVS: using max 17 ests per chain, 40800 per kthread [ 573.359754][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 573.659667][ T8762] hsr_slave_0: left promiscuous mode [ 573.882188][ T8762] hsr_slave_1: left promiscuous mode [ 576.654810][ T8777] hub 8-0:1.0: USB hub found [ 576.661172][ T8777] hub 8-0:1.0: 1 port detected [ 581.220961][ T8799] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 581.231641][ T8798] IPVS: stopping backup sync thread 8799 ... [ 582.962804][ T8813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.008497][ T8877] netlink: 68 bytes leftover after parsing attributes in process `syz.2.773'. [ 594.285339][ T8885] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 595.303213][ T5818] Process accounting resumed [ 595.387623][ T8892] netlink: 'syz.1.775': attribute type 2 has an invalid length. [ 595.395501][ T8892] netlink: 'syz.1.775': attribute type 1 has an invalid length. [ 601.364700][ T8941] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 603.325579][ T8960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.516056][ T8960] pimreg: entered allmulticast mode [ 607.718578][ T8957] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 614.067293][ T9032] tmpfs: Unknown parameter 'grpquota2' [ 618.520544][ T9048] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 618.527909][ T9048] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 618.547033][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 618.593530][ T9048] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.610593][ T9048] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 618.629959][ T9048] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 621.022927][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 621.029049][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 621.035072][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 621.089677][ T9048] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 621.362649][ T9073] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 621.410412][ T9073] overlayfs: failed to clone upperpath [ 623.248261][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 623.259816][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 623.912289][ T9079] syz.2.815 (9079) used greatest stack depth: 17896 bytes left [ 624.182930][ T9092] lo speed is unknown, defaulting to 1000 [ 624.313373][ T9094] NILFS (nullb0): couldn't find nilfs on the device [ 625.140733][ T9101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.820'. [ 625.823757][ T9113] block device autoloading is deprecated and will be removed. [ 628.494717][ T9087] Bluetooth: hci3: command 0x0406 tx timeout [ 629.032176][ T9135] bridge0: port 3(erspan0) entered blocking state [ 629.038822][ T9135] bridge0: port 3(erspan0) entered disabled state [ 629.045664][ T9135] erspan0: entered allmulticast mode [ 629.055092][ T9135] erspan0: left allmulticast mode [ 631.081572][ T9087] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 631.262721][ T5782] IPVS: starting estimator thread 0... [ 631.529880][ T9152] IPVS: using max 33 ests per chain, 79200 per kthread [ 631.582645][ T9155] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 631.590911][ T9155] netlink: 244 bytes leftover after parsing attributes in process `syz.1.832'. [ 631.600087][ T9155] NCSI netlink: No device for ifindex 0 [ 632.510871][ T9161] batman_adv: batadv0: Adding interface: dummy0 [ 632.522374][ T9161] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.547843][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.601819][ T9161] batman_adv: batadv0: Interface activated: dummy0 [ 634.170068][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.177529][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.874306][ T9164] batadv0: mtu less than device minimum [ 635.007192][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.020629][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.033481][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.046401][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.059257][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.072056][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.084850][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.096741][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.108340][ T9164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.750691][ T9087] Bluetooth: hci3: unexpected subevent 0x0e length: 32 > 15 [ 643.916013][ T9215] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 646.233751][ T9223] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 646.498444][ T9221] bridge0: port 3(erspan0) entered blocking state [ 646.505226][ T9221] bridge0: port 3(erspan0) entered disabled state [ 646.512131][ T9221] erspan0: entered allmulticast mode [ 646.521402][ T9221] erspan0: entered promiscuous mode [ 646.527394][ T9221] bridge0: port 3(erspan0) entered blocking state [ 646.535127][ T9221] bridge0: port 3(erspan0) entered forwarding state [ 646.548785][ T9221] erspan0: left allmulticast mode [ 646.553922][ T9221] erspan0: left promiscuous mode [ 646.561331][ T9221] bridge0: port 3(erspan0) entered disabled state [ 647.953277][ T9087] Bluetooth: hci2: unexpected event for opcode 0x203b [ 647.982939][ T9231] team0: Device wg0 is of different type [ 648.037760][ T9231] net_ratelimit: 10 callbacks suppressed [ 648.037775][ T9231] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 648.183580][ T9237] dvmrp8: entered allmulticast mode [ 648.186483][ T9239] xt_HMARK: spi-set and port-set can't be combined [ 649.861294][ T9255] loop1: detected capacity change from 0 to 8 [ 650.415181][ T9264] tipc: Cannot configure node identity twice [ 651.123288][ T9087] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 653.412027][ T9273] loop1: detected capacity change from 0 to 512 [ 653.425549][ T56] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 653.496357][ T9273] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (71000000) [ 653.652087][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.675633][ T56] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.698927][ T56] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 653.718260][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.737716][ T56] usb 1-1: Product: syz [ 653.749056][ T56] usb 1-1: Manufacturer: syz [ 653.759380][ T56] usb 1-1: SerialNumber: syz [ 654.005901][ T56] usb 1-1: 0:1 : does not exist [ 654.034732][ T56] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 654.063385][ T56] usb 1-1: unit 0 not found! [ 654.113818][ T56] usb 1-1: USB disconnect, device number 3 [ 654.278014][ T9272] udevd[9272]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.837327][ T9087] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 656.470625][ T9087] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 657.561138][ T5838] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 660.093730][ T9316] orangefs_mount: mount request failed with -4 [ 660.119644][ T9087] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 660.130227][ T9087] Bluetooth: hci2: Injecting HCI hardware error event [ 660.139553][ T9087] Bluetooth: hci2: hardware error 0x00 [ 660.149508][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 660.971658][ T5838] usb 1-1: unable to get BOS descriptor or descriptor too short [ 661.805084][ T5838] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 661.812736][ T5838] usb 1-1: can't read configurations, error -71 [ 662.359018][ T9087] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 663.556182][ T9087] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 667.322865][ T9383] tmpfs: Unknown parameter 'grpquota2' [ 671.371261][ T9087] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 672.283078][ T9431] tmpfs: Unknown parameter 'grpquota2' [ 674.149345][ T9443] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 674.158587][ T9443] netlink: 244 bytes leftover after parsing attributes in process `syz.0.912'. [ 674.167670][ T9443] NCSI netlink: No device for ifindex 0 [ 674.256307][ T9446] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 674.416913][ T9432] ERROR: device name not specified. [ 674.428491][ T9432] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 674.621293][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.631071][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.640810][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.650075][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.659326][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.668654][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.678003][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.687479][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.696826][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 674.706255][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 675.128934][ T9087] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 675.174273][ T9087] Bluetooth: hci3: unexpected event for opcode 0x080f [ 677.862711][ T9477] netlink: 76 bytes leftover after parsing attributes in process `syz.1.927'. [ 677.904217][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 678.316653][ T9479] veth0_macvtap: left promiscuous mode [ 679.499756][ T9087] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 679.510395][ T9087] Bluetooth: hci3: Injecting HCI hardware error event [ 679.521878][ T5788] Bluetooth: hci3: hardware error 0x00 [ 680.259078][ T9493] loop1: detected capacity change from 0 to 32768 [ 681.352956][ T9493] JBD2: Ignoring recovery information on journal [ 681.618706][ T9493] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 681.722576][ T5788] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 682.112401][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 682.893324][ T9560] loop1: detected capacity change from 0 to 64 [ 683.016532][ T9560] Unable to read inode block [ 683.021542][ T9560] MINIX-fs: get root inode failed [ 689.345936][ T9677] loop1: detected capacity change from 0 to 512 [ 689.451851][ T9677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.466969][ T9677] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.610722][ T9677] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 689.695164][ T9677] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 689.920896][ T9677] EXT4-fs: Cannot change journaled quota options when quota turned on [ 690.905694][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.859567][ T9695] loop1: detected capacity change from 0 to 32768 [ 694.143545][ T9695] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 694.385195][ T9695] XFS (loop1): Ending clean mount [ 694.653349][ T5772] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 695.407204][ T9734] loop1: detected capacity change from 0 to 4096 [ 695.464314][ T9734] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 695.611647][ T9734] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 695.655657][ T9734] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 695.810163][ T9734] ntfs3: loop1: ino=1e, "file1" failed to parse mft record [ 695.859702][ T9734] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 695.867590][ C1] net_ratelimit: 32 callbacks suppressed [ 695.867607][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 697.223814][ T9755] loop1: detected capacity change from 0 to 1024 [ 697.346507][ T9755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.684233][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.731048][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 699.169882][ T9773] loop1: detected capacity change from 0 to 32768 [ 699.233483][ T9773] (syz.1.1023,9773,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 699.290082][ T9773] (syz.1.1023,9773,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 699.416706][ T9773] JBD2: Ignoring recovery information on journal [ 699.506721][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.513540][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.611609][ T9773] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 701.116853][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 701.520829][ T9820] loop1: detected capacity change from 0 to 256 [ 701.610384][ T9820] FAT-fs (loop1): Directory bread(block 64) failed [ 701.628611][ T9820] FAT-fs (loop1): Directory bread(block 65) failed [ 701.647139][ T9820] FAT-fs (loop1): Directory bread(block 66) failed [ 701.661954][ T9820] FAT-fs (loop1): Directory bread(block 67) failed [ 701.673103][ T9820] FAT-fs (loop1): Directory bread(block 68) failed [ 701.682664][ T9820] FAT-fs (loop1): Directory bread(block 69) failed [ 701.694418][ T9820] FAT-fs (loop1): Directory bread(block 70) failed [ 701.703039][ T9820] FAT-fs (loop1): Directory bread(block 71) failed [ 701.710906][ T9820] FAT-fs (loop1): Directory bread(block 72) failed [ 701.717736][ T9820] FAT-fs (loop1): Directory bread(block 73) failed [ 702.082381][ T9832] loop1: detected capacity change from 0 to 256 [ 703.785408][ T9855] loop1: detected capacity change from 0 to 512 [ 703.811140][ T9855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 703.863645][ T9855] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1050: bad orphan inode 131083 [ 703.907874][ T9855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.980314][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.151561][ T9861] loop1: detected capacity change from 0 to 512 [ 704.171075][ T9861] EXT4-fs: Ignoring removed oldalloc option [ 704.192424][ T9861] EXT4-fs (loop1): Test dummy encryption mode enabled [ 704.258750][ T9861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.364478][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 704.364496][ T28] audit: type=1800 audit(1784225747.933:79): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1052" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 704.542184][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.569682][ T9848] overlayfs: failed to resolve './file0': -2 [ 708.630338][ T9902] loop1: detected capacity change from 0 to 40427 [ 708.671033][ T9902] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 708.681845][ T9902] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 708.698545][ T9902] F2FS-fs (loop1): invalid crc value [ 708.750277][ T9902] F2FS-fs (loop1): Found nat_bits in checkpoint [ 708.836894][ T9902] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 709.209324][ T9902] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 709.424389][ T9902] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 709.508502][ T9902] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0 [ 712.753308][ T9983] loop1: detected capacity change from 0 to 2048 [ 712.904063][ T9983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.269485][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.849608][ T56] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 715.070524][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.151122][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.205466][ T56] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 715.254970][ T56] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 715.354612][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.440949][ T56] usb 2-1: config 0 descriptor?? [ 715.930569][ T56] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 716.081251][ T56] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 716.220383][ T56] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 716.362690][ T56] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 716.518448][ T56] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 716.575669][ T56] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 716.763153][ T56] playstation 0003:054C:09CC.0001: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 716.980098][ T56] playstation 0003:054C:09CC.0001: Invalid byte count transferred, expected 16 got 0 [ 717.068759][ T56] playstation 0003:054C:09CC.0001: Failed to retrieve DualShock4 pairing info: -22 [ 717.144355][ T56] playstation 0003:054C:09CC.0001: Failed to get MAC address from DualShock4 [ 717.209456][ T56] playstation 0003:054C:09CC.0001: Failed to create dualshock4. [ 717.284087][ T56] playstation: probe of 0003:054C:09CC.0001 failed with error -22 [ 717.469979][ T56] usb 2-1: USB disconnect, device number 2 [ 719.657652][ T5788] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 722.767171][ T172] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 723.041462][ T172] usb 2-1: Using ep0 maxpacket: 8 [ 723.071485][ T172] usb 2-1: config 0 has no interfaces? [ 723.188109][ T172] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 723.216388][ T172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.258646][ T172] usb 2-1: Product: syz [ 723.263273][ T172] usb 2-1: Manufacturer: syz [ 723.312614][ T172] usb 2-1: SerialNumber: syz [ 723.356104][ T172] usb 2-1: config 0 descriptor?? [ 723.583140][ T56] usb 2-1: USB disconnect, device number 3 [ 724.879586][T10087] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 724.931057][T10087] batadv0: entered promiscuous mode [ 724.984253][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.008754][T10087] Cannot create hsr debugfs directory [ 725.534825][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 725.578329][T10095] pimreg: tun_chr_ioctl cmd 1074812118 [ 725.769911][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 725.781986][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.793302][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.803680][ T56] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 725.816754][ T56] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 725.825986][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.853922][ T56] usb 2-1: config 0 descriptor?? [ 726.356739][ T56] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 726.379541][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.387132][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.395100][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.402977][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.410602][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.429012][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.453944][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.461248][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.490476][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.502922][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.510505][T10116] tap0: tun_chr_ioctl cmd 1074025677 [ 726.516485][T10116] tap0: linktype set to 769 [ 726.521978][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.530246][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.537622][ T56] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 726.582635][ T56] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 726.625735][ T56] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 726.668029][ T56] microsoft 0003:045E:07DA.0002: no inputs found [ 726.699709][ T56] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 727.020177][ T56] usb 2-1: USB disconnect, device number 4 [ 727.137321][ T28] audit: type=1326 audit(1784225769.241:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.0.1151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27f859de59 code=0x0 [ 728.329008][T10149] loop1: detected capacity change from 0 to 32768 [ 728.349070][T10149] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1158 (10149) [ 728.561777][ T8] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 729.023922][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 729.077135][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.126416][ T8] usb 1-1: Product: syz [ 729.163087][ T8] usb 1-1: Manufacturer: syz [ 729.167802][ T8] usb 1-1: SerialNumber: syz [ 729.243416][T10149] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 729.268399][ T8] usb 1-1: config 0 descriptor?? [ 729.300917][T10149] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 729.321984][T10149] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 729.353709][T10149] BTRFS info (device loop1): use zstd compression, level 3 [ 729.381858][T10149] BTRFS info (device loop1): using free space tree [ 729.549847][ T8] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 729.572304][T10149] BTRFS info (device loop1): enabling ssd optimizations [ 729.593439][T10149] BTRFS info (device loop1): auto enabling async discard [ 729.701545][ T28] audit: type=1800 audit(1784225771.636:81): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1158" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 730.018041][ T5772] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 730.201666][ T8] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 730.240690][ T8] usb 1-1: USB disconnect, device number 6 [ 730.672232][T10198] loop1: detected capacity change from 0 to 4096 [ 731.404528][T10208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1173'. [ 731.757354][T10198] ntfs3: loop1: failed to convert "0080" to cp864 [ 734.567906][T10225] loop1: detected capacity change from 0 to 32768 [ 734.633259][T10225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1180 (10225) [ 734.730529][T10225] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 734.770425][T10225] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 734.799709][T10225] BTRFS info (device loop1): using free space tree [ 736.007310][T10225] BTRFS info (device loop1): enabling ssd optimizations [ 736.014353][T10225] BTRFS info (device loop1): auto enabling async discard [ 736.349621][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 740.403159][T10291] Set syz1 is full, maxelem 1029 reached [ 740.891500][T10302] loop1: detected capacity change from 0 to 8 [ 740.966705][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 740.987920][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.997132][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 741.016249][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 741.025501][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 741.035795][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 741.045026][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 741.054804][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 741.064020][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 741.082220][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 741.091409][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 741.225674][T10130] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 741.275538][T10130] Buffer I/O error on dev loop1, logical block 0, async page read [ 741.561196][T10311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.992011][T10322] pimreg: tun_chr_ioctl cmd 1074025677 [ 741.997681][T10322] pimreg: linktype set to 780 [ 745.044985][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 745.255072][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 745.272300][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 745.292255][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.309639][ T8] usb 2-1: config 0 descriptor?? [ 745.322265][T10396] overlayfs: failed to clone upperpath [ 746.577321][ T8] logitech 0003:046D:C211.0003: unknown main item tag 0x2 [ 746.584541][ T8] logitech 0003:046D:C211.0003: unknown main item tag 0x6 [ 746.607709][ T8] logitech 0003:046D:C211.0003: ignoring exceeding usage max [ 746.641451][ T8] logitech 0003:046D:C211.0003: hidraw0: USB HID v0.81 Device [HID 046d:c211] on usb-dummy_hcd.1-1/input0 [ 746.671806][ T8] logitech 0003:046D:C211.0003: no inputs found [ 746.714585][ T8] usb 2-1: USB disconnect, device number 5 [ 746.807526][T10409] fido_id[10409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 750.025106][T10459] netlink: 'syz.0.1259': attribute type 21 has an invalid length. [ 750.041299][T10459] netlink: 'syz.0.1259': attribute type 6 has an invalid length. [ 750.052788][T10459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1259'. [ 751.844027][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 752.079280][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 752.111946][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.143127][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.163908][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 752.207217][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.226504][ T8] usb 2-1: config 0 descriptor?? [ 752.721495][ T8] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 753.017886][ T8561] usb 2-1: USB disconnect, device number 6 [ 754.964315][T10504] loop1: detected capacity change from 0 to 40427 [ 754.996032][T10504] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 755.029845][T10504] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 755.058056][T10504] F2FS-fs (loop1): invalid crc value [ 755.343271][T10504] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 755.358878][T10504] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 755.541331][ T5772] syz-executor: attempt to access beyond end of device [ 755.541331][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 755.591112][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 755.765949][ T8561] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 755.974943][ T8561] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 755.995362][ T8561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.022173][ T8561] usb 1-1: Product: syz [ 756.026424][ T8561] usb 1-1: Manufacturer: syz [ 756.042426][ T8561] usb 1-1: SerialNumber: syz [ 756.044923][T10506] overlayfs: failed to clone upperpath [ 756.064588][ T8561] usb 1-1: config 0 descriptor?? [ 756.331039][ T5838] usb 1-1: USB disconnect, device number 7 [ 757.603721][ T5838] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 757.699829][ T5782] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 757.795986][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 757.803054][ T5838] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.814299][ T5838] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.824330][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 757.831430][ T5838] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 757.840607][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.851969][ T5838] usb 2-1: config 0 descriptor?? [ 757.892578][ T5782] usb 1-1: Using ep0 maxpacket: 32 [ 757.906699][ T5782] usb 1-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 213, changing to 11 [ 757.919731][ T5782] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.926467][ T5782] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 757.935668][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.946062][ T5782] usb 1-1: config 0 descriptor?? [ 758.181166][ T5782] usbhid 1-1:0.0: can't add hid device: -71 [ 758.195169][ T5782] usbhid: probe of 1-1:0.0 failed with error -71 [ 758.216736][ T5782] usb 1-1: USB disconnect, device number 8 [ 758.441930][ T5838] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 758.450991][ T5838] mcp2221 0003:04D8:00DD.0005: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 758.619065][ T5838] usb 2-1: USB disconnect, device number 7 [ 758.864694][ T5782] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 759.057225][ T5782] usb 1-1: Using ep0 maxpacket: 32 [ 759.197338][ T5782] usb 1-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 213, changing to 11 [ 759.211339][ T5782] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.218365][ T5782] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 759.228210][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.240172][ T5782] usb 1-1: config 0 descriptor?? [ 759.692132][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.709329][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.727650][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.752380][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.759764][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.775576][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.782607][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.810705][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.828878][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.836398][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.855798][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.864583][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.877130][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.884465][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.896849][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.916973][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.925149][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.932258][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.943472][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.965502][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.972556][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 759.997273][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.004317][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.019714][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.028613][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.037555][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.054639][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.072352][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.083006][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.090123][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.123862][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.131376][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.147221][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.154245][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.177318][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.185521][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.193464][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.201496][ T5782] elecom 0003:056E:00FD.0006: unknown main item tag 0x0 [ 760.221945][ T5782] elecom 0003:056E:00FD.0006: hidraw0: USB HID v0.18 Device [HID 056e:00fd] on usb-dummy_hcd.0-1/input0 [ 760.254118][ T5782] usb 1-1: USB disconnect, device number 9 [ 760.325821][T10580] fido_id[10580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 760.536694][T10585] sctp: [Deprecated]: syz.3.1306 (pid 10585) Use of int in max_burst socket option deprecated. [ 760.536694][T10585] Use struct sctp_assoc_value instead [ 760.883624][T10579] loop1: detected capacity change from 0 to 32768 [ 760.942553][T10579] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 761.086211][T10579] XFS (loop1): Ending clean mount [ 761.147489][T10579] XFS (loop1): Quotacheck needed: Please wait. [ 761.319715][T10579] XFS (loop1): Quotacheck: Done. [ 761.704776][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 761.881569][T10611] veth1_vlan: left allmulticast mode [ 761.990153][T10611] bridge0: port 3(macvlan0) entered disabled state [ 762.069606][T10611] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 762.091787][T10611] netlink: 'syz.3.1313': attribute type 2 has an invalid length. [ 764.546202][T10652] tipc: Started in network mode [ 764.569035][T10652] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 764.603493][T10652] tipc: Enabling of bearer rejected, failed to enable media [ 765.172999][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.179404][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 766.519707][T10675] capability: warning: `syz.1.1333' uses 32-bit capabilities (legacy support in use) [ 766.726100][ T5788] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 766.971933][T10690] kernel profiling enabled (shift: 3) [ 767.797862][T10688] loop1: detected capacity change from 0 to 40427 [ 767.814481][T10688] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 768.006552][T10688] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 768.095602][T10688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 768.969024][T10688] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 768.992262][T10688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 771.068114][ T5788] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 771.078293][ T5788] Bluetooth: hci1: Injecting HCI hardware error event [ 771.090001][ T5788] Bluetooth: hci1: hardware error 0x00 [ 771.434893][T10730] sg_read: process 985 (syz.1.1349) changed security contexts after opening file descriptor, this is not allowed. [ 771.986843][T10739] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 773.280427][ T5788] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 773.865421][T10777] loop1: detected capacity change from 0 to 32768 [ 773.883386][T10783] gretap0: entered promiscuous mode [ 773.920191][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 773.949698][T10777] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 773.961413][T10783] gretap0: left promiscuous mode [ 774.122747][T10777] XFS (loop1): Ending clean mount [ 775.244156][T10805] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 775.252770][ T8862] Bluetooth: hci4: Frame reassembly failed (-84) [ 775.405955][ T5772] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 777.384336][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 777.391083][ T9087] Bluetooth: hci0: command tx timeout [ 782.372916][T10943] lo speed is unknown, defaulting to 1000 [ 782.710102][T10950] loop1: detected capacity change from 0 to 1024 [ 783.218220][ T28] audit: type=1326 audit(1784225821.720:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.2.1425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65a699de59 code=0x0 [ 784.208714][T10976] loop1: detected capacity change from 0 to 512 [ 784.257164][T10976] EXT4-fs (loop1): Test dummy encryption mode enabled [ 784.404414][T10976] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1436: inode has both inline data and extents flags [ 784.513138][T10976] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1436: couldn't read orphan inode 15 (err -117) [ 784.561062][T10976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.667568][T10976] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 784.848290][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.162207][T10990] loop1: detected capacity change from 0 to 1024 [ 785.191199][T10992] overlayfs: failed to clone lowerpath [ 785.235147][T10990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 785.312970][T10990] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.504455][T10990] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1442: bg 0: block 112: padding at end of block bitmap is not set [ 785.801551][ T1129] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:7: lblock 0 mapped to illegal pblock 0 (length 6) [ 785.885527][ T1129] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 785.941672][ T1129] EXT4-fs (loop1): This should not happen!! Data will be lost [ 785.941672][ T1129] [ 785.981393][ T1129] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 5) [ 786.026945][ T1129] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 786.062488][ T1129] EXT4-fs (loop1): This should not happen!! Data will be lost [ 786.062488][ T1129] [ 786.106702][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 786.348807][T11003] loop1: detected capacity change from 0 to 128 [ 786.407604][T11003] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 786.421020][T11003] hpfs: filesystem error: improperly stopped [ 786.441270][T11003] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 786.449755][T11003] hpfs: You really don't want any checks? You are crazy... [ 786.457801][T11003] hpfs: Code page index out of array [ 786.464495][T11003] hpfs: code page support is disabled [ 786.475454][T11003] hpfs: hpfs_map_4sectors(): unaligned read [ 786.484559][T11003] hpfs: hpfs_map_4sectors(): unaligned read [ 786.498736][T11003] hpfs: filesystem error: unable to find root dir [ 787.641787][ T28] audit: type=1326 audit(1784225825.857:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.3.1458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ade99de59 code=0x0 [ 789.042294][ T8561] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 789.276567][ T8561] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 789.317931][ T8561] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 789.340631][ T8561] usb 2-1: config 150 has no interface number 0 [ 789.370695][ T8561] usb 2-1: config 150 interface 204 has no altsetting 0 [ 789.394881][ T8561] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 789.419660][ T8561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.444289][ T8561] usb 2-1: Product: syz [ 789.453437][ T8561] usb 2-1: Manufacturer: syz [ 789.472948][ T8561] usb 2-1: SerialNumber: syz [ 789.987397][ T8561] xr_serial 2-1:150.204: skipping garbage [ 790.010085][ T8561] xr_serial 2-1:150.204: xr_serial converter detected [ 790.844097][ T8561] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 791.103729][ T8] usb 2-1: USB disconnect, device number 8 [ 791.137332][ T8] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 791.164548][ T8] xr_serial 2-1:150.204: device disconnected [ 793.200285][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 793.406802][ T8] usb 2-1: config 0 has no interfaces? [ 793.412392][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 793.469592][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.497756][ T8] usb 2-1: config 0 descriptor?? [ 793.752343][ T8] usb 2-1: USB disconnect, device number 9 [ 794.213468][T11110] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 794.274509][T11110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.303469][T11112] bond0: (slave geneve2): making interface the new active one [ 794.319368][T11112] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 798.575362][T11151] input: syz0 as /devices/virtual/input/input7 [ 800.523777][T11169] loop1: detected capacity change from 0 to 512 [ 800.562647][T11169] EXT4-fs: Ignoring removed oldalloc option [ 800.584416][T11169] EXT4-fs (loop1): Test dummy encryption mode enabled [ 800.655127][T11169] EXT4-fs (loop1): 1 truncate cleaned up [ 800.713337][T11169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.824582][T11169] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.1507: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 800.962673][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.507412][T11179] loop1: detected capacity change from 0 to 128 [ 801.578258][T11179] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 801.635469][T11179] hpfs: filesystem error: improperly stopped [ 801.654246][T11179] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 801.689210][T11179] hpfs: You really don't want any checks? You are crazy... [ 801.706918][T11179] hpfs: Code page index out of array [ 801.723179][T11179] hpfs: code page support is disabled [ 801.740730][T11179] hpfs: hpfs_map_4sectors(): unaligned read [ 801.764144][T11179] hpfs: hpfs_map_4sectors(): unaligned read [ 801.779807][T11179] hpfs: filesystem error: unable to find root dir [ 802.716241][T11204] loop1: detected capacity change from 0 to 1024 [ 802.775687][T11204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.090733][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.337601][T11219] 9pnet_fd: Insufficient options for proto=fd [ 805.246865][T11237] loop1: detected capacity change from 0 to 1024 [ 805.311756][T11237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 805.337786][T11237] System zones: 0-1, 3-12 [ 805.417197][T11237] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.617739][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 806.534966][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 806.560559][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 806.590457][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 806.613831][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 806.631666][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 806.639194][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 806.848102][T11255] lo speed is unknown, defaulting to 1000 [ 807.254732][T11255] chnl_net:caif_netlink_parms(): no params data found [ 807.388108][T11255] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.402619][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.409907][T11255] bridge_slave_0: entered allmulticast mode [ 807.421185][T11255] bridge_slave_0: entered promiscuous mode [ 807.437494][T11255] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.451560][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.462761][T11255] bridge_slave_1: entered allmulticast mode [ 807.473382][T11255] bridge_slave_1: entered promiscuous mode [ 807.526948][T11255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.540072][T11255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.580938][T11255] team0: Port device team_slave_0 added [ 807.591974][T11255] team0: Port device team_slave_1 added [ 807.615408][T11255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.622411][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.650681][T11255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.663611][T11255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.670727][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.696933][T11255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.741205][T11255] hsr_slave_0: entered promiscuous mode [ 807.747724][T11255] hsr_slave_1: entered promiscuous mode [ 807.754583][T11255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.762231][T11255] Cannot create hsr debugfs directory [ 808.078514][T11255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 808.118004][T11255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 808.157486][T11255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 808.191965][T11255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 808.423483][T11255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.446928][T11255] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.482201][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.489402][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.498448][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1553'. [ 808.547101][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.554317][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.627616][T11312] netlink: 'syz.2.1554': attribute type 1 has an invalid length. [ 808.636495][T11312] netlink: 'syz.2.1554': attribute type 2 has an invalid length. [ 809.530344][ T5786] Bluetooth: hci1: command tx timeout [ 809.616753][T11255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 809.627474][T11255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.002127][T11255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.816106][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 812.042086][ T5786] Bluetooth: hci1: command tx timeout [ 812.264466][T11255] veth0_vlan: entered promiscuous mode [ 812.287166][T11255] veth1_vlan: entered promiscuous mode [ 812.377609][T11255] veth0_macvtap: entered promiscuous mode [ 812.426775][T11255] veth1_macvtap: entered promiscuous mode [ 812.476196][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.508901][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.518809][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.551263][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.561174][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.595206][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.615658][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.636682][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.661334][T11255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.702569][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.733096][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.742992][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.776398][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.800511][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.830426][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.850714][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.871852][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.881844][T11255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 812.916727][T11255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.937651][T11255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.979529][T11255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.988309][T11255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.028916][T11255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.053510][T11255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.298948][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.332345][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.463750][T11366] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 813.472738][T11366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1565'. [ 813.486724][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.505953][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.240478][ T5786] Bluetooth: hci1: command tx timeout [ 814.833359][T11376] Set syz1 is full, maxelem 6117 reached [ 815.212556][T11392] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 815.837890][T11407] lo speed is unknown, defaulting to 1000 [ 816.452006][ T5786] Bluetooth: hci1: command tx timeout [ 821.026714][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1603'. [ 822.430890][T11511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 822.756740][T11522] "syz.4.1613" (11522) uses obsolete ecb(arc4) skcipher [ 824.018216][T11554] loop4: detected capacity change from 0 to 512 [ 824.042265][T11554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 824.093799][T11554] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 824.116873][T11554] EXT4-fs (loop4): Remounting filesystem read-only [ 824.124415][T11554] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 824.137572][T11554] EXT4-fs (loop4): 1 truncate cleaned up [ 824.144780][T11554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.902836][T11255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.083775][T11579] loop4: detected capacity change from 0 to 2048 [ 826.115666][T11579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.226899][T11622] loop1: detected capacity change from 0 to 16 [ 830.268044][T11622] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 25144) [ 830.830219][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 830.836717][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 830.952784][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 831.190874][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 831.209086][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.252596][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.267921][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 831.304411][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 831.316130][ T8] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 831.324276][ T8] usb 2-1: Manufacturer: syz [ 831.357035][ T8] usb 2-1: config 0 descriptor?? [ 831.827234][ T8] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 831.858026][ T8] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 831.898708][ T8] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 834.282965][ T8561] usb 2-1: USB disconnect, device number 10 [ 834.900859][T11684] loop1: detected capacity change from 0 to 2048 [ 835.102347][T11684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.331569][T11688] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.1660: corrupted inode contents [ 835.457493][T11688] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.1660: corrupted inode contents [ 835.562598][T11688] EXT4-fs error (device loop1): ext4_try_add_inline_entry:1344: inode #12: comm syz.1.1660: mark_inode_dirty error [ 835.812870][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.678061][T11698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 839.422577][T11732] bridge0: port 4(syz_tun) entered blocking state [ 839.444063][T11732] bridge0: port 4(syz_tun) entered disabled state [ 839.461037][T11732] syz_tun: entered allmulticast mode [ 839.488123][T11732] syz_tun: entered promiscuous mode [ 839.510320][T11732] bridge0: port 4(syz_tun) entered blocking state [ 839.516994][T11732] bridge0: port 4(syz_tun) entered forwarding state [ 839.563044][T11734] netlink: 'syz.3.1676': attribute type 8 has an invalid length. [ 839.828183][T11741] overlayfs: failed to clone upperpath [ 840.018268][T11725] loop1: detected capacity change from 0 to 40427 [ 840.081797][T11725] F2FS-fs (loop1): invalid crc value [ 840.115003][T11725] F2FS-fs (loop1): Found nat_bits in checkpoint [ 840.314960][T11725] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 840.500213][T11725] syz.1.1674: attempt to access beyond end of device [ 840.500213][T11725] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 840.603562][ T5772] syz-executor: attempt to access beyond end of device [ 840.603562][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 840.680729][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 841.527197][T11766] overlayfs: failed to clone upperpath [ 842.151617][ T5817] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 842.367213][ T5817] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 842.381027][ T5817] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 842.408003][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 842.417070][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 842.461456][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 842.485612][ T5817] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 842.501858][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 842.536402][ T5817] usb 2-1: Product: syz [ 842.540746][ T5817] usb 2-1: Manufacturer: syz [ 842.562181][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 842.567514][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 842.592935][ T5817] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 842.599549][ T5817] cdc_wdm 2-1:1.0: Unknown control protocol [ 843.021050][T11783] loop4: detected capacity change from 0 to 32768 [ 843.060908][T11783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1691 (11783) [ 843.096585][T11783] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 843.109364][T11783] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 843.119351][T11783] BTRFS info (device loop4): using free space tree [ 843.132117][ T56] usb 2-1: USB disconnect, device number 11 [ 843.285722][T11783] BTRFS info (device loop4): enabling ssd optimizations [ 843.303687][T11783] BTRFS info (device loop4): auto enabling async discard [ 843.680121][ T5817] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 843.811162][T11815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 843.845367][T11815] netlink: 'syz.3.1696': attribute type 12 has an invalid length. [ 843.861346][T11815] netlink: 'syz.3.1696': attribute type 29 has an invalid length. [ 843.880361][T11815] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1696'. [ 843.900509][ T5817] usb 5-1: config 0 has no interfaces? [ 843.902083][T11815] netlink: 'syz.3.1696': attribute type 1 has an invalid length. [ 843.910745][ T5817] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 843.925930][T11815] netlink: 'syz.3.1696': attribute type 2 has an invalid length. [ 843.933721][T11815] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1696'. [ 843.937477][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.975666][ T5817] usb 5-1: config 0 descriptor?? [ 844.346740][ T8] usb 5-1: USB disconnect, device number 2 [ 845.646055][T11255] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 846.591940][T11876] loop1: detected capacity change from 0 to 32768 [ 846.725234][T11876] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 846.752026][T11876] VFS: Lookup of '' in ocfs2 loop1 would have caused loop [ 846.777715][T11883] sit1: entered promiscuous mode [ 846.885100][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 846.911187][ T5772] VFS: Busy inodes after unmount of loop1 (ocfs2) [ 846.911393][ T5772] ------------[ cut here ]------------ [ 846.923404][ T5772] kernel BUG at fs/super.c:697! [ 846.958714][ T5772] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 846.964956][ T5772] CPU: 0 PID: 5772 Comm: syz-executor Not tainted syzkaller #0 [ 846.972621][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 846.982720][ T5772] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 846.988924][ T5772] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 1c 50 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 e0 b0 d7 8a 48 89 de e8 33 36 91 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 847.009015][ T5772] RSP: 0018:ffffc90002e47d30 EFLAGS: 00010246 [ 847.015126][ T5772] RAX: 000000000000002f RBX: ffff88805b9d4660 RCX: 5bac0a7773f3a800 [ 847.023140][ T5772] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 847.031149][ T5772] RBP: 1ffff1100b73a8f2 R08: ffffc90002e47927 R09: 1ffff920005c8f24 [ 847.039247][ T5772] R10: dffffc0000000000 R11: fffff520005c8f25 R12: 0000000000000000 [ 847.047299][ T5772] R13: dffffc0000000000 R14: ffffffff8d64b4a0 R15: ffff88805b9d4790 [ 847.055303][ T5772] FS: 00005555949e9500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 847.064269][ T5772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.070989][ T5772] CR2: 00007f6adebed2f8 CR3: 00000000627c9000 CR4: 00000000003506f0 [ 847.079010][ T5772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 847.087019][ T5772] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 847.095028][ T5772] Call Trace: [ 847.098342][ T5772] [ 847.101306][ T5772] kill_block_super+0x44/0x90 [ 847.103546][T11895] overlayfs: failed to clone upperpath [ 847.106032][ T5772] deactivate_locked_super+0x97/0x100 [ 847.116977][ T5772] cleanup_mnt+0x3d7/0x460 [ 847.121440][ T5772] task_work_run+0x1d4/0x260 [ 847.126094][ T5772] ? task_work_cancel+0x220/0x220 [ 847.131170][ T5772] ? exit_to_user_mode_loop+0x3b/0x110 [ 847.136681][ T5772] exit_to_user_mode_loop+0xe6/0x110 [ 847.142016][ T5772] exit_to_user_mode_prepare+0xee/0x180 [ 847.147605][ T5772] syscall_exit_to_user_mode+0x1a/0x50 [ 847.153116][ T5772] do_syscall_64+0x61/0xb0 [ 847.157587][ T5772] ? clear_bhb_loop+0x40/0x90 [ 847.162302][ T5772] ? clear_bhb_loop+0x40/0x90 [ 847.167024][ T5772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.172963][ T5772] RIP: 0033:0x7f70e9d9f097 [ 847.175367][ T5817] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 847.177424][ T5772] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 847.204616][ T5772] RSP: 002b:00007ffee63885c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 847.213078][ T5772] RAX: 0000000000000000 RBX: 00007f70e9e332ca RCX: 00007f70e9d9f097 [ 847.221087][ T5772] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee6388680 [ 847.229093][ T5772] RBP: 00007ffee6388680 R08: 00007ffee6389680 R09: 00000000ffffffff [ 847.237282][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6389710 [ 847.245287][ T5772] R13: 00007f70e9e332ca R14: 00000000000c92a6 R15: 00007ffee6389750 [ 847.253308][ T5772] [ 847.256352][ T5772] Modules linked in: [ 847.265551][ T5772] ---[ end trace 0000000000000000 ]--- [ 847.271097][ T5772] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 847.277359][ T5772] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 1c 50 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 e0 b0 d7 8a 48 89 de e8 33 36 91 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 847.297799][ T5772] RSP: 0018:ffffc90002e47d30 EFLAGS: 00010246 [ 847.304456][ T5772] RAX: 000000000000002f RBX: ffff88805b9d4660 RCX: 5bac0a7773f3a800 [ 847.312713][ T5772] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 847.320895][ T5772] RBP: 1ffff1100b73a8f2 R08: ffffc90002e47927 R09: 1ffff920005c8f24 [ 847.329040][ T5772] R10: dffffc0000000000 R11: fffff520005c8f25 R12: 0000000000000000 [ 847.349817][ T5772] R13: dffffc0000000000 R14: ffffffff8d64b4a0 R15: ffff88805b9d4790 [ 847.358018][ T5772] FS: 00005555949e9500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 847.367070][ T5772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.373740][ T5772] CR2: 00007f6adf8b7ff8 CR3: 00000000627c9000 CR4: 00000000003506f0 [ 847.381987][ T5772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 847.391925][ T5772] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 847.400428][ T5772] Kernel panic - not syncing: Fatal exception [ 847.400466][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 847.401995][ T5817] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.402020][ T5817] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.402041][ T5817] usb 5-1: config 0 interface 0 has no altsetting 0 [ 847.402079][ T5817] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 847.402099][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.403747][ T5817] usb 5-1: config 0 descriptor?? [ 847.461300][ T5772] Kernel Offset: disabled [ 847.465633][ T5772] Rebooting in 86400 seconds..