last executing test programs: 21.205770078s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5c, 0x64}, {0x16}]}) r3 = signalfd(r2, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x10, &(0x7f00000006c0)="005c2000a0ffffff", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) poll(&(0x7f00000000c0)=[{r3, 0x40}, {r2, 0xc061}, {r2, 0x8000}, {r5, 0xa0}, {r2, 0x161}], 0x5, 0x7c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r6, &(0x7f0000000040), 0xfea0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000300)={0x0, r7, 0x0, 0x2}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r7, 0x3, 0x4, 0xa3f7}) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x2880008, r6, 0x0, 0x7, 0xa}) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b"], 0x6, 0x2a7, &(0x7f00000011c0)="$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") bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r8 = creat(0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) ftruncate(r8, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001cc0)={0xffffffffffffffff, 0x20, &(0x7f0000001c80)={&(0x7f0000000b80)=""/228, 0xe4, 0x0, &(0x7f0000000c80)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x9, 0x1b, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000500000000000000260600004d24f4ff0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000000000b7020000000000009500"/64], &(0x7f0000000380)='GPL\x00', 0x0, 0xf6, &(0x7f0000000a00)=""/246, 0x41100, 0x4, '\x00', 0x0, 0x1, r7, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0xb, 0x7, 0xde3}, 0x10, r9, 0xffffffffffffffff, 0x4, &(0x7f0000001d00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001d40)=[{0x2, 0x5, 0x10, 0x3}, {0x4, 0x5, 0x6}, {0x3, 0x1, 0xc, 0x1}, {0x0, 0x1, 0xf}], 0x10, 0x400}, 0x90) 19.906476399s ago: executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES8, @ANYBLOB="101500000000", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x6f8, &(0x7f0000000300)="$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") syz_open_dev$evdev(&(0x7f0000000040), 0x491782ce, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 18.740584229s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) poll(0x0, 0x0, 0x9) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r2 = dup(r1) write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x0) close(r2) openat$full(0xffffffffffffff9c, &(0x7f0000003640), 0xa2182, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x77359400}, {r4, r5+60000000}}, 0x0) recvmmsg(r3, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18.429210148s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5c, 0x64}, {0x16}]}) r3 = signalfd(r2, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x10, &(0x7f00000006c0)="005c2000a0ffffff", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) poll(&(0x7f00000000c0)=[{r3, 0x40}, {r2, 0xc061}, {r2, 0x8000}, {r5, 0xa0}, {r2, 0x161}], 0x5, 0x7c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r6, &(0x7f0000000040), 0xfea0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000300)={0x0, r7, 0x0, 0x2}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r7, 0x3, 0x4, 0xa3f7}) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x2880008, r6, 0x0, 0x7, 0xa}) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x6, 0x2a7, &(0x7f00000011c0)="$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") bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r8 = creat(0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) ftruncate(r8, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001cc0)={0xffffffffffffffff, 0x20, &(0x7f0000001c80)={&(0x7f0000000b80)=""/228, 0xe4, 0x0, &(0x7f0000000c80)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x9, 0x1b, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000500000000000000260600004d24f4ff0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000000000b7020000000000009500"/64], &(0x7f0000000380)='GPL\x00', 0x0, 0xf6, &(0x7f0000000a00)=""/246, 0x41100, 0x4, '\x00', 0x0, 0x1, r7, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0xb, 0x7, 0xde3}, 0x10, r9, 0xffffffffffffffff, 0x4, &(0x7f0000001d00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001d40)=[{0x2, 0x5, 0x10, 0x3}, {0x4, 0x5, 0x6}, {0x3, 0x1, 0xc, 0x1}, {0x0, 0x1, 0xf}], 0x10, 0x400}, 0x90) 17.204784357s ago: executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000080)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = eventfd(0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 16.627527766s ago: executing program 3: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r0 = eventfd2(0x0, 0x0) r1 = dup2(r0, r0) write$char_usb(r1, &(0x7f0000000200)="838a141c7a91eae2", 0x8) write$char_usb(r1, &(0x7f0000000180)="e060b207f5d720", 0x7) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") r2 = eventfd(0x7) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) 11.587696646s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r1, 0x501c4814, 0x0) 10.776298762s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) io_setup(0x0, &(0x7f0000000280)) r8 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x0, 0x0) finit_module(r8, 0x0, 0x0) 9.17116904s ago: executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f0040101109050b362f"], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x107409, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000700)=[{0x0, 0x0, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x1}}], 0x20) 8.800567338s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000000000070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.933142622s ago: executing program 4: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x40004580, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000040000000e200000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 7.811068701s ago: executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000001200), 0x19) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) 7.807806221s ago: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, r1, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}, 0x90) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200001000000006"], 0x24}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c0000000800", @ANYRES32], 0x24}}, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f00000000c0)={0x1, @time={0xffffffff, 0x4}, 0x0, {0xfd}, 0x0, 0x2}) tkill(r5, 0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0x80045300, &(0x7f0000000100)) write(r0, &(0x7f0000000080)="18000300010000", 0x7) 7.36576456s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffff15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB="140004006e7363766630000000000000000000000800050006000000180017"], 0x50}}, 0x0) 5.737381612s ago: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") open(0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)) fsopen(0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0xfffffffc, 0x0, 0x0, 0x0, 0x4, "0062ba7d82000000000000000000f7ffffff00"}) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003300)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) r6 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0x3) 4.97126304s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r1, 0x501c4814, 0x0) 4.044678854s ago: executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) iopl(0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000080)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = eventfd(0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.958690677s ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7422000000004c19a180002005aa32528f06f4c2ff73701605bff6ed63418dae97234c9dd53f1691b63ce06630fbdbe3386fd418654a1126969ffe01569907e68adb48a4d830c317514966b4fa1eaefc485e79e7fb4bb023c3f30df6b64dde84566e99a1ade295f04e60de64a5f434b71ab500d9958eac4d2f1f32a5be84dd73359d38", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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", @ANYRESOCT, @ANYRES64]) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.769135667s ago: executing program 1: r0 = syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000009ec0)='./file0\x00', 0x8808, &(0x7f0000009e80)=ANY=[], 0xfd, 0x9df0, &(0x7f0000000000)="$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") socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) write$binfmt_script(r0, &(0x7f000000a180)={'#! ', './file0', [{0x20, 'e\xa9B\xd1\x9d\xe1V\xc22A\x8a\x1c\xbb\xb0\x9c\xc4\x19pXU\xb8\x052\xfc\xb4\x02+V\x00\x00\xbe\x02Z\xe6#?\x8c\x9b\x0f=h\x88Jc\x03\x95\b\x06\x84w\x14\x06\xa4\x12\x0e#Dd\xab\xfe\x8e;\xa1\x86Y\xb6\x9f\x85\x13\xff3$\x98\f\x95U\x81\x9cj\xb0I\xce\x92\xd7\xea1\xaf\xf42\xa6A\xec\xd2a{\xa8\x8d\xaf\x03\xdc\x14,\x02\xa4v\xecn(U\xe6\xe3&\xa7L#\x9dj\xb0\x99[\x06\xba4jS<\xd5\xac\xe2WOF\xff\xbfYJ\x9c1\xe0\x88F \x83\x9c\x99N\xc4\x9f\xc0t\xd2\x13l\xa2\n\xd1\xc6{\x8d\x99I\xa7!\xfe\x8b\xd8\x18x50p\xf27\v\x9e\xff\xe3:\xd0\xc4\x06!\xd13\x13\x9b\xa8\xfdBxU:\xe1\xa3} \x1d\xb7at\xf8\v\xde\x04\xb0\x18b`\xbf8M>\xe7\xfb\xbf\\\xe4\xdc\xdc\xb0\x13\xc6\xbb\xdc\xe2\x8e\x9d\xf7\xed\x00^\f\x8aL\\\x1a\xa7\xc6\x11\xb6w\xce\xb2\xc7\x83vC\xb2\x8d~\x02\xa3\xcb\x15\x1b\xaay\x97\xf5\x92I\xd9-\xfe\xc0\x15czTR\xa5*\x9f\xfa\xa9\xa8\xf4J\x10\xa6m\x8d\xb5\xb0\xd1\xb0\x9dcs\xbbWR\xefS\x7f=\xd2\x8b\x9eR\xda\xbd\x13\xad(r\xdf`\xc83hb\xa3\x0f\\\xc9\xf4\xd9\x85\xb6?\x1c\xb9s\xa9\xe4g\x84\x8aQ\xe9\x06\x9d$(N+\xce\xd5\xd8\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\xca\xa5+L\xab^\xc4\x0f\x15IX\xd5\x86\xa96\xbc\x9b\xe7\xf79\x03Y\x97nv\xd1\x17\x8d\xec\xf6?\xd4x\xd5$\xa9\xa9.\xefn\x86\xc1\x03\t\x158\xaeG>\x91\xed\xe2+=\x12\x17\x8b\x8c\xc2z\xfe@\x94F\xba\xcb\xe29\xbby!\xdb\xbf-\x9d\x9b\xf1!\xbb\x03\xf8ZY\x8d>\x19\x85g\xb6\xd7\x05U\xde\x89f\x03.\x8f\xd3\x0e\xf8\xd2\xe5\xed\xe5q9P!\xa2\xb9{\xe3\xf2\xbd\xacx\x7f\x0f\xeenF/\xb0L\a\xff\xf6D\t[\xc9:\xc8-Wm\xaac&$\xc8*\x1f\x14\x0f\xfd}tP\xfc\x01\xfc\xf7\xeeJsM\xa5W\x81\f\x1bY\x14\x82:E\xca~\x8a\x94zp:\xedoO\xb8\xc33\x13\xcc\xb2[\xca^\xbfl-\xcd_#\xda\xfc\xc4B\xdb+\xf7\xdc2/\xcb\x88 Z\xf0\x8a\x148.\xf2>\xdd\xf8\x1d\\\x12]v,p\xb7U%\xb0B\x17\xbe\xc9h\x92=T'}]}, 0x25b) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000140)={0x8}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x90) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x24000, 0x80) getdents(r3, &(0x7f0000009fc0)=""/171, 0xab) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.078329673s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$alg(0x26, 0x5, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2.237606273s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000000000070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.986076172s ago: executing program 4: unshare(0x2000400) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 1.769509436s ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(0xffffffffffffffff, 0x0, 0x0) 1.765936036s ago: executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000180)={[{@force}, {@nls={'nls', 0x3d, 'cp852'}}, {@barrier}, {@type={'type', 0x3d, "883b7f38"}}, {@umask={'umask', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x9}}, {@force}, {@nodecompose}, {@gid}]}, 0x2, 0x6da, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.41744425s ago: executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001080)={0x0, 0x1, 'P'}, &(0x7f00000002c0)=0x9) 1.324830385s ago: executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f0040101109050b362f"], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x107409, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) socket$can_bcm(0x1d, 0x2, 0x2) 1.302277728s ago: executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") open(0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)) fsopen(0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0xfffffffc, 0x0, 0x0, 0x0, 0x4, "0062ba7d82000000000000000000f7ffffff00"}) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003300)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) r6 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0x3) 1.29092771s ago: executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) iopl(0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000080)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = eventfd(0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.066013635s ago: executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ptrace$getregset(0x4204, r1, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)=""/95, 0x5f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000002df, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000200)="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", 0x383}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x693, &(0x7f00000000c0)="$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") r6 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="90030ee7ff072d2200000e210806000108000604"], 0x120) connect$inet6(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 0s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000003a840"], 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r1, 0x501c4814, 0x0) kernel console output (not intermixed with test programs): d capacity change from 0 to 64 [ 73.091820][ T3684] EXT4-fs: Ignoring removed bh option [ 73.097835][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.109060][ T3672] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (3672) [ 73.135753][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.180542][ T3684] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.225064][ T3684] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 73.309033][ T3672] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.322919][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.332007][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.347771][ T3684] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 8 (level 2) [ 73.381549][ T3672] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 73.396099][ T27] usb 2-1: Product: syz [ 73.400341][ T27] usb 2-1: Manufacturer: syz [ 73.402601][ T3684] EXT4-fs (loop0): Remounting filesystem read-only [ 73.436237][ T3684] EXT4-fs (loop0): 1 truncate cleaned up [ 73.439062][ T3672] BTRFS info (device loop3): use zlib compression, level 3 [ 73.450480][ T27] usb 2-1: SerialNumber: syz [ 73.463134][ T3684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.466673][ T3690] loop2: detected capacity change from 0 to 2048 [ 73.508340][ T3672] BTRFS info (device loop3): using free space tree [ 73.646702][ T3690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.819061][ T3690] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.835669][ T3672] BTRFS info (device loop3): enabling ssd optimizations [ 73.844413][ T27] usb 2-1: 0:2 : does not exist [ 73.918265][ T3690] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.965551][ T27] usb 2-1: USB disconnect, device number 2 [ 74.009789][ T3690] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.009789][ T3690] [ 74.042000][ T3690] EXT4-fs (loop2): Total free blocks count 0 [ 74.072847][ T3690] EXT4-fs (loop2): Free/Dirty block details [ 74.098726][ T3690] EXT4-fs (loop2): free_blocks=2415919104 [ 74.107348][ T3690] EXT4-fs (loop2): dirty_blocks=16 [ 74.115245][ T3690] EXT4-fs (loop2): Block reservation details [ 74.129128][ T3690] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 74.173663][ T3578] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.198684][ T3585] EXT4-fs (loop2): unmounting filesystem. [ 74.834587][ T3746] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.385533][ T3589] EXT4-fs (loop0): unmounting filesystem. [ 75.629799][ T3747] loop3: detected capacity change from 0 to 32768 [ 75.658491][ T3747] ======================================================= [ 75.658491][ T3747] WARNING: The mand mount option has been deprecated and [ 75.658491][ T3747] and is ignored by this kernel. Remove the mand [ 75.658491][ T3747] option from the mount to silence this warning. [ 75.658491][ T3747] ======================================================= [ 75.806622][ T3733] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.807215][ T3774] loop4: detected capacity change from 0 to 256 [ 75.834973][ T3747] [ 75.834973][ T3747] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.834973][ T3747] [ 76.030266][ T3754] loop1: detected capacity change from 0 to 32768 [ 76.043830][ T33] read_mapping_page failed! [ 76.049294][ T33] ERROR: (device loop3): txCommit: [ 76.049294][ T33] [ 76.099912][ T3754] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (3754) [ 76.115462][ T33] ERROR: (device loop3): remounting filesystem as read-only [ 76.136200][ T33] jfs_write_inode: jfs_commit_inode failed! [ 76.152905][ T3578] [ 76.152905][ T3578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.152905][ T3578] [ 76.173831][ T3578] [ 76.173831][ T3578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.173831][ T3578] [ 76.193323][ T3733] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 76.209190][ T3754] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.242609][ T3733] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.252866][ T3754] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 76.261616][ T3754] BTRFS info (device loop1): use zlib compression, level 3 [ 76.299678][ T3733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.317328][ T26] audit: type=1800 audit(1718310304.619:2): pid=3786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".pending_reads" dev="sda1" ino=1963 res=0 errno=0 [ 76.348976][ T3754] BTRFS info (device loop1): using free space tree [ 76.353141][ T3785] loop2: detected capacity change from 0 to 512 [ 76.371326][ T3733] usb 1-1: config 0 descriptor?? [ 76.430751][ T3785] EXT4-fs: Ignoring removed bh option [ 76.472118][ T3785] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.491070][ T3785] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 76.507970][ T3733] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 76.536696][ T3785] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 8 (level 2) [ 76.603653][ T3785] EXT4-fs (loop2): Remounting filesystem read-only [ 76.610727][ T3785] EXT4-fs (loop2): 1 truncate cleaned up [ 76.619258][ T3785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.629371][ T3754] BTRFS info (device loop1): enabling ssd optimizations [ 76.757980][ T3574] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.026690][ T3825] random: crng reseeded on system resumption [ 77.877301][ T3852] loop1: detected capacity change from 0 to 16 [ 77.934796][ T3852] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.432361][ T3585] EXT4-fs (loop2): unmounting filesystem. [ 78.517153][ T3827] usb 1-1: USB disconnect, device number 2 [ 78.806444][ T3866] loop2: detected capacity change from 0 to 256 [ 79.146072][ T3874] loop0: detected capacity change from 0 to 128 [ 79.182329][ T3874] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 79.224564][ T3876] random: crng reseeded on system resumption [ 79.548104][ T3858] loop3: detected capacity change from 0 to 32768 [ 79.623303][ T3884] loop2: detected capacity change from 0 to 512 [ 79.682188][ T3858] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (3858) [ 79.744069][ T3884] EXT4-fs: Ignoring removed bh option [ 79.757408][ T3858] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.802357][ T3858] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 79.861724][ T3858] BTRFS info (device loop3): use zlib compression, level 3 [ 79.892708][ T3858] BTRFS info (device loop3): using free space tree [ 80.056637][ T3884] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.086671][ T3882] loop0: detected capacity change from 0 to 1024 [ 80.117894][ T3884] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 80.173104][ T3884] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 8 (level 2) [ 80.223832][ T3884] EXT4-fs (loop2): Remounting filesystem read-only [ 80.244277][ T3884] EXT4-fs (loop2): 1 truncate cleaned up [ 80.250007][ T3884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.315015][ T3858] BTRFS info (device loop3): enabling ssd optimizations [ 80.390488][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.474525][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.493207][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.524072][ T3578] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.117693][ T3921] loop4: detected capacity change from 0 to 256 [ 81.537836][ T3933] loop3: detected capacity change from 0 to 16 [ 81.592222][ T3933] erofs: (device loop3): mounted with root inode @ nid 36. [ 81.606417][ T152] cfg80211: failed to load regulatory.db [ 81.761816][ T3933] syz-executor.3: attempt to access beyond end of device [ 81.761816][ T3933] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 81.979903][ T3942] syz-executor.3: attempt to access beyond end of device [ 81.979903][ T3942] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 82.033210][ T3942] syz-executor.3: attempt to access beyond end of device [ 82.033210][ T3942] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 82.120631][ T3942] syz-executor.3: attempt to access beyond end of device [ 82.120631][ T3942] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 82.195490][ T26] audit: type=1326 audit(1718310310.499:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6fe7cea9 code=0x7ffc0000 [ 82.263005][ T26] audit: type=1326 audit(1718310310.499:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6fe7cea9 code=0x7ffc0000 [ 82.295925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.307067][ T26] audit: type=1326 audit(1718310310.519:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b6fe7cea9 code=0x7ffc0000 [ 82.336755][ T26] audit: type=1326 audit(1718310310.529:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6fe7cea9 code=0x7ffc0000 [ 82.360666][ T26] audit: type=1326 audit(1718310310.529:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6fe7cea9 code=0x7ffc0000 [ 82.471366][ T26] audit: type=1326 audit(1718310310.529:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b6fe7cea9 code=0x7ffc0000 [ 82.521578][ T3950] random: crng reseeded on system resumption [ 82.527817][ T26] audit: type=1326 audit(1718310310.529:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6fe7cea9 code=0x7ffc0000 [ 82.611960][ T26] audit: type=1326 audit(1718310310.529:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b6fe7a627 code=0x7ffc0000 [ 82.682653][ T26] audit: type=1326 audit(1718310310.529:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b6fe40309 code=0x7ffc0000 [ 82.719112][ T3953] loop1: detected capacity change from 0 to 2048 [ 82.746872][ T26] audit: type=1326 audit(1718310310.529:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3930 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6fe7cea9 code=0x7ffc0000 [ 82.827786][ T3953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.877485][ T3953] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.980227][ T3953] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 83.033192][ T3953] EXT4-fs (loop1): This should not happen!! Data will be lost [ 83.033192][ T3953] [ 83.075305][ T3953] EXT4-fs (loop1): Total free blocks count 0 [ 83.081531][ T3953] EXT4-fs (loop1): Free/Dirty block details [ 83.090151][ T3953] EXT4-fs (loop1): free_blocks=2415919104 [ 83.096284][ T3953] EXT4-fs (loop1): dirty_blocks=16 [ 83.101765][ T3953] EXT4-fs (loop1): Block reservation details [ 83.108035][ T3953] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 83.194876][ T3574] EXT4-fs (loop1): unmounting filesystem. [ 83.688757][ T3970] loop0: detected capacity change from 0 to 256 [ 83.739606][ T3585] EXT4-fs (loop2): unmounting filesystem. [ 84.102842][ T3992] loop2: detected capacity change from 0 to 16 [ 84.126658][ T3992] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.165820][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 84.212004][ T3999] random: crng reseeded on system resumption [ 84.339572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.348221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.749605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.272357][ T4009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.499135][ T4014] loop1: detected capacity change from 0 to 256 [ 86.132891][ T4029] tipc: Started in network mode [ 86.138118][ T4029] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 86.156063][ T4029] tipc: Enabled bearer , priority 10 [ 86.981544][ T4040] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.137696][ T4050] loop1: detected capacity change from 0 to 256 [ 87.147340][ T4054] random: crng reseeded on system resumption [ 87.160456][ T3632] tipc: Node number set to 4269801491 [ 87.498649][ T4073] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.535727][ T4137] random: crng reseeded on system resumption [ 91.058661][ T3586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.068715][ T3586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.078502][ T3586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.091791][ T3586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.100293][ T3586] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.107937][ T3586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.306823][ T4110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.431028][ T4110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.512324][ T4110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.633410][ T4110] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.981106][ T4154] chnl_net:caif_netlink_parms(): no params data found [ 92.055431][ T4170] loop0: detected capacity change from 0 to 40427 [ 92.066806][ T4158] loop4: detected capacity change from 0 to 32768 [ 92.080959][ T4158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4158) [ 92.105513][ T4170] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 92.113991][ T4170] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 92.144307][ T4158] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.172368][ T4158] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 92.194083][ T4170] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.203794][ T4158] BTRFS info (device loop4): using free space tree [ 92.375596][ T4158] BTRFS info (device loop4): enabling ssd optimizations [ 92.393123][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.400274][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.492868][ T4154] device bridge_slave_0 entered promiscuous mode [ 92.525411][ T4170] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 92.536274][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.545771][ T4170] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.575971][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.610482][ T4154] device bridge_slave_1 entered promiscuous mode [ 92.769228][ T4154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.798474][ T4154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.838882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.852574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.860929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.902990][ T3582] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.205640][ T3586] Bluetooth: hci1: command tx timeout [ 93.210245][ T4154] team0: Port device team_slave_0 added [ 93.265541][ T4154] team0: Port device team_slave_1 added [ 93.421541][ T4154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.432284][ T4154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.500426][ T4154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.638628][ T4154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.650321][ T4154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.698898][ T4154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.913347][ T4154] device hsr_slave_0 entered promiscuous mode [ 93.953326][ T4154] device hsr_slave_1 entered promiscuous mode [ 93.968338][ T4225] loop1: detected capacity change from 0 to 16 [ 93.985804][ T4154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.000265][ T4225] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.018578][ T4154] Cannot create hsr debugfs directory [ 94.040477][ T4225] syz-executor.1: attempt to access beyond end of device [ 94.040477][ T4225] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 94.082503][ T4110] device hsr_slave_0 left promiscuous mode [ 94.123051][ T4110] device hsr_slave_1 left promiscuous mode [ 94.201175][ T4110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.392172][ T4110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.678517][ T4110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.730606][ T4110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.740687][ T4110] device bridge_slave_1 left promiscuous mode [ 94.750999][ T4110] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.804055][ T4110] device bridge_slave_0 left promiscuous mode [ 94.820883][ T4110] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.850310][ T4232] syz-executor.1: attempt to access beyond end of device [ 94.850310][ T4232] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 94.866630][ T4110] device veth1_macvtap left promiscuous mode [ 94.883101][ T4110] device veth0_macvtap left promiscuous mode [ 94.900710][ T4236] syz-executor.1: attempt to access beyond end of device [ 94.900710][ T4236] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 94.920533][ T4110] device veth1_vlan left promiscuous mode [ 94.948458][ T4110] device veth0_vlan left promiscuous mode [ 94.963732][ T4232] syz-executor.1: attempt to access beyond end of device [ 94.963732][ T4232] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 94.988455][ T4225] syz-executor.1: attempt to access beyond end of device [ 94.988455][ T4225] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 94.989789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.020352][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 95.020368][ T26] audit: type=1326 audit(1718310323.319:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 95.085557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 95.093936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 95.162103][ T26] audit: type=1326 audit(1718310323.319:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 95.224614][ T26] audit: type=1326 audit(1718310323.319:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 95.270847][ T26] audit: type=1326 audit(1718310323.319:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 95.294888][ T3586] Bluetooth: hci1: command tx timeout [ 95.324345][ T4241] loop2: detected capacity change from 0 to 32768 [ 95.332453][ T26] audit: type=1326 audit(1718310323.319:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 95.355642][ T4241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4241) [ 95.371072][ T26] audit: type=1326 audit(1718310323.389:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 95.397608][ T4241] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.413607][ T26] audit: type=1326 audit(1718310323.399:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 95.441685][ T4241] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 95.455789][ T4241] BTRFS info (device loop2): using free space tree [ 95.463861][ T26] audit: type=1326 audit(1718310323.409:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c1887a627 code=0x7ffc0000 [ 95.493859][ T26] audit: type=1326 audit(1718310323.409:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c18840309 code=0x7ffc0000 [ 95.511212][ T4241] BTRFS info (device loop2): enabling ssd optimizations [ 95.523134][ T26] audit: type=1326 audit(1718310323.409:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 95.625882][ T4110] team0 (unregistering): Port device team_slave_1 removed [ 95.643657][ T4110] team0 (unregistering): Port device team_slave_0 removed [ 95.689472][ T4110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.731655][ T4110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.859373][ T4110] bond0 (unregistering): Released all slaves [ 95.897530][ T4283] loop1: detected capacity change from 0 to 512 [ 95.922919][ T4283] EXT4-fs: Ignoring removed bh option [ 96.019548][ T3585] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.039247][ T4283] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.048502][ T4283] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 96.087480][ T4283] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 8 (level 2) [ 96.122321][ T4283] EXT4-fs (loop1): Remounting filesystem read-only [ 96.151003][ T4283] EXT4-fs (loop1): 1 truncate cleaned up [ 96.159416][ T4283] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.074099][ T4306] loop2: detected capacity change from 0 to 16 [ 97.093262][ T4303] tipc: Started in network mode [ 97.098288][ T4303] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 97.110712][ T4303] tipc: Enabled bearer , priority 10 [ 97.306152][ T4306] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.349231][ T4306] syz-executor.2: attempt to access beyond end of device [ 97.349231][ T4306] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 97.398577][ T3586] Bluetooth: hci1: command tx timeout [ 98.155780][ T3632] tipc: Node number set to 4269801491 [ 98.288518][ T4313] syz-executor.2: attempt to access beyond end of device [ 98.288518][ T4313] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 98.336444][ T4154] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.388584][ T4154] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.396946][ T4306] syz-executor.2: attempt to access beyond end of device [ 98.396946][ T4306] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 98.422319][ T4154] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.447354][ T4154] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.484167][ T4306] syz-executor.2: attempt to access beyond end of device [ 98.484167][ T4306] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 98.503102][ T4306] syz-executor.2: attempt to access beyond end of device [ 98.503102][ T4306] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 98.741087][ T4154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.785575][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.798926][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.831085][ T4154] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.864234][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.878350][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.921666][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.928942][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.983158][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.003423][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.023457][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.043363][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.050516][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.090728][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.132190][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.149494][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.180989][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.240535][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.257113][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.311800][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.338654][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.366737][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.395897][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.423795][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.443192][ T3586] Bluetooth: hci1: command tx timeout [ 99.468728][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.523686][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.554795][ T4325] loop4: detected capacity change from 0 to 32768 [ 99.598928][ T4325] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4325) [ 99.673031][ T4325] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.702862][ T4325] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 99.711649][ T4325] BTRFS info (device loop4): using free space tree [ 99.740896][ T3574] EXT4-fs (loop1): unmounting filesystem. [ 99.983492][ T4325] BTRFS info (device loop4): enabling ssd optimizations [ 100.015982][ T4345] loop0: detected capacity change from 0 to 256 [ 100.118308][ T4345] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 100.184090][ T4345] FAT-fs (loop0): Filesystem has been set read-only [ 100.239324][ T4154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.247353][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.258684][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.348631][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.362010][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.394259][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.404095][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.417701][ T4154] device veth0_vlan entered promiscuous mode [ 100.440082][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.532242][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.539910][ T3582] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.568591][ T4154] device veth1_vlan entered promiscuous mode [ 100.657371][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.674908][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.692503][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.771031][ T4374] loop1: detected capacity change from 0 to 16 [ 100.778381][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.793886][ T4374] erofs: (device loop1): mounted with root inode @ nid 36. [ 100.810126][ T4374] syz-executor.1: attempt to access beyond end of device [ 100.810126][ T4374] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 100.824335][ T4154] device veth0_macvtap entered promiscuous mode [ 100.846466][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.871468][ T4154] device veth1_macvtap entered promiscuous mode [ 101.027554][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.274988][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.517966][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.529699][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.552903][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.583362][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.612585][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.631823][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.642190][ T4376] syz-executor.1: attempt to access beyond end of device [ 101.642190][ T4376] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 101.681068][ T4154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.700519][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.710354][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.722965][ T4376] syz-executor.1: attempt to access beyond end of device [ 101.722965][ T4376] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 101.750138][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.775202][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.806019][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.832449][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.852978][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.874798][ T4389] loop4: detected capacity change from 0 to 512 [ 101.881257][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.892484][ T4389] EXT4-fs: Ignoring removed bh option [ 101.898589][ T4154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.911387][ T4154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.924867][ T4389] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.931970][ T4389] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 101.942240][ T4154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.952021][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.961870][ T4390] syz-executor.1: attempt to access beyond end of device [ 101.961870][ T4390] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 101.975498][ T4389] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 8 (level 2) [ 101.976279][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.004164][ T4374] syz-executor.1: attempt to access beyond end of device [ 102.004164][ T4374] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 102.021711][ T4154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.030775][ T4389] EXT4-fs (loop4): Remounting filesystem read-only [ 102.038785][ T4389] EXT4-fs (loop4): 1 truncate cleaned up [ 102.044844][ T4154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.053768][ T4389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.063596][ T4154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.085883][ T4154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.127290][ T26] kauditd_printk_skb: 124 callbacks suppressed [ 102.127306][ T26] audit: type=1326 audit(1718310330.429:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 102.198649][ T26] audit: type=1326 audit(1718310330.429:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 102.250711][ T26] audit: type=1326 audit(1718310330.469:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 102.299546][ T26] audit: type=1326 audit(1718310330.469:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 102.382706][ T26] audit: type=1326 audit(1718310330.469:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 102.452687][ T26] audit: type=1326 audit(1718310330.469:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 102.476354][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.476420][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.479066][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.532741][ T26] audit: type=1326 audit(1718310330.469:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 102.563415][ T26] audit: type=1326 audit(1718310330.469:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c1887a627 code=0x7ffc0000 [ 102.595141][ T26] audit: type=1326 audit(1718310330.469:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c18840309 code=0x7ffc0000 [ 102.659102][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.678426][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.692712][ T26] audit: type=1326 audit(1718310330.469:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 102.697475][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.126778][ T3582] EXT4-fs (loop4): unmounting filesystem. [ 105.421087][ T4440] loop3: detected capacity change from 0 to 16 [ 105.463015][ T4430] tipc: Enabling of bearer rejected, already enabled [ 105.504415][ T4440] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.526283][ T4440] syz-executor.3: attempt to access beyond end of device [ 105.526283][ T4440] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 105.858806][ T4451] loop0: detected capacity change from 0 to 512 [ 105.873628][ T4448] syz-executor.3: attempt to access beyond end of device [ 105.873628][ T4448] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 105.905449][ T4451] EXT4-fs: Ignoring removed bh option [ 105.913171][ T4448] syz-executor.3: attempt to access beyond end of device [ 105.913171][ T4448] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 105.988968][ T4440] syz-executor.3: attempt to access beyond end of device [ 105.988968][ T4440] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 106.008621][ T4451] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.132708][ T4451] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 106.171155][ T4451] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 8 (level 2) [ 106.198931][ T4451] EXT4-fs (loop0): Remounting filesystem read-only [ 106.223079][ T4451] EXT4-fs (loop0): 1 truncate cleaned up [ 106.228823][ T4451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 106.646284][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.339794][ T4483] loop1: detected capacity change from 0 to 16 [ 107.388489][ T4483] erofs: (device loop1): mounted with root inode @ nid 36. [ 107.431790][ T4483] syz-executor.1: attempt to access beyond end of device [ 107.431790][ T4483] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 108.687852][ T4494] tipc: Started in network mode [ 108.692978][ T4494] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 108.707216][ T4494] tipc: Enabled bearer , priority 10 [ 109.261335][ T4485] syz-executor.1: attempt to access beyond end of device [ 109.261335][ T4485] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 109.323083][ T4485] syz-executor.1: attempt to access beyond end of device [ 109.323083][ T4485] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 109.392363][ T4483] syz-executor.1: attempt to access beyond end of device [ 109.392363][ T4483] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 109.408113][ T26] kauditd_printk_skb: 377 callbacks suppressed [ 109.408129][ T26] audit: type=1326 audit(1718310337.719:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 109.573325][ T26] audit: type=1326 audit(1718310337.719:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 109.639297][ T26] audit: type=1326 audit(1718310337.749:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 109.708594][ T4211] tipc: Node number set to 4269801491 [ 109.733586][ T3589] EXT4-fs (loop0): unmounting filesystem. [ 109.737664][ T26] audit: type=1326 audit(1718310337.759:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 109.810836][ T26] audit: type=1326 audit(1718310337.759:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 109.888455][ T26] audit: type=1326 audit(1718310337.759:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 109.917420][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.977832][ T26] audit: type=1326 audit(1718310337.759:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 110.069408][ T26] audit: type=1326 audit(1718310337.759:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c1887a627 code=0x7ffc0000 [ 110.142679][ T26] audit: type=1326 audit(1718310337.759:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c18840309 code=0x7ffc0000 [ 110.198952][ T26] audit: type=1326 audit(1718310337.769:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f5c1887cea9 code=0x7ffc0000 [ 110.276710][ T4512] device wg2 entered promiscuous mode [ 110.554303][ T4519] loop0: detected capacity change from 0 to 512 [ 110.572018][ T4519] ext4: Unknown parameter 'nouser_xattr' [ 110.745445][ T4522] loop4: detected capacity change from 0 to 512 [ 110.779774][ T4522] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 110.839030][ T4522] ecryptfs_parse_options: eCryptfs: unrecognized option [l] [ 110.857159][ T4522] ecryptfs_parse_options: eCryptfs: unrecognized option [io%bfq.io_serviced_recursiƋ}ʼ(zmbE1Ƭqd1 K/dev/nullb0] [ 110.897226][ T4522] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 110.917852][ T4522] Error parsing options; rc = [-22] [ 110.960660][ T4528] loop0: detected capacity change from 0 to 512 [ 110.977705][ T4528] EXT4-fs: Ignoring removed bh option [ 110.989145][ T4528] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.005842][ T4528] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 111.023618][ T4528] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 8 (level 2) [ 111.049286][ T4528] EXT4-fs (loop0): Remounting filesystem read-only [ 111.062967][ T4528] EXT4-fs (loop0): 1 truncate cleaned up [ 111.069617][ T4528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.077402][ T4534] loop4: detected capacity change from 0 to 1024 [ 111.093850][ T4534] EXT4-fs: Ignoring removed nobh option [ 111.120751][ T4534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.237734][ T4537] loop2: detected capacity change from 0 to 512 [ 111.262845][ T4534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.442628][ T4537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.482749][ T4537] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 111.683898][ T4546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.236022][ T4537] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 112.525682][ T4537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 112.564437][ T4537] EXT4-fs (loop2): get root inode failed [ 112.570136][ T4537] EXT4-fs (loop2): mount failed [ 112.855117][ T4557] loop2: detected capacity change from 0 to 512 [ 112.866884][ T4557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.942240][ T4557] EXT4-fs (loop2): 1 truncate cleaned up [ 112.951604][ T4557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.245474][ T3585] EXT4-fs (loop2): unmounting filesystem. [ 113.583055][ T4564] loop2: detected capacity change from 0 to 40427 [ 113.598824][ T4564] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 113.607547][ T4564] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.623566][ T4564] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.666299][ T4564] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 113.673440][ T4564] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.835016][ T4571] syz-executor.2: attempt to access beyond end of device [ 113.835016][ T4571] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.869106][ T4562] loop1: detected capacity change from 0 to 8192 [ 114.380902][ T3582] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor.4: path /root/syzkaller-testdir3054795438/syzkaller.22IK1p/60/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 114.419536][ T3582] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 114.499660][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 114.533169][ T3582] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor.4: path /root/syzkaller-testdir3054795438/syzkaller.22IK1p/60/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 114.638237][ T3582] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 114.693736][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 114.716522][ T3582] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor.4: path /root/syzkaller-testdir3054795438/syzkaller.22IK1p/60/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 114.806828][ T3582] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 114.847588][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 114.876462][ T3582] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor.4: path /root/syzkaller-testdir3054795438/syzkaller.22IK1p/60/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 114.934232][ T3582] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 114.959082][ T3589] EXT4-fs (loop0): unmounting filesystem. [ 114.996008][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 115.010437][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 115.010454][ T26] audit: type=1326 audit(1718310343.319:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fa4a7cea9 code=0x0 [ 115.011360][ T3582] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor.4: path /root/syzkaller-testdir3054795438/syzkaller.22IK1p/60/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.077165][ T3582] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.077643][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 115.079019][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 115.080299][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 115.146605][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 115.147864][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 115.149059][ T3582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor.4: directory missing '.' [ 115.308455][ T4582] loop2: detected capacity change from 0 to 256 [ 115.333245][ T4582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 115.333303][ T4582] FAT-fs (loop2): Filesystem has been set read-only [ 115.706030][ T3582] EXT4-fs (loop4): unmounting filesystem. [ 115.748842][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.212093][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.295982][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.389121][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.659814][ T4588] loop0: detected capacity change from 0 to 512 [ 116.683645][ T9] tipc: Disabling bearer [ 116.704396][ T4588] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 116.705806][ T9] tipc: Left network mode [ 116.730808][ T4588] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 116.735789][ T4598] loop3: detected capacity change from 0 to 512 [ 116.755143][ T4598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.777146][ T4588] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 116.818625][ T4588] EXT4-fs (loop0): get root inode failed [ 116.824534][ T4598] EXT4-fs (loop3): 1 truncate cleaned up [ 116.830257][ T4598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.839452][ T4588] EXT4-fs (loop0): mount failed [ 116.870820][ T3579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.881668][ T3579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.890507][ T3579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.900157][ T3579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.911474][ T3579] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.919073][ T3579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.950127][ T4607] loop2: detected capacity change from 0 to 1024 [ 117.204210][ T4030] hfsplus: b-tree write err: -5, ino 4 [ 117.352037][ T4154] EXT4-fs (loop3): unmounting filesystem. [ 117.420311][ T26] audit: type=1804 audit(1718310345.719:655): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1955105445/syzkaller.9sOncb/48/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 117.579276][ T4603] chnl_net:caif_netlink_parms(): no params data found [ 118.180877][ T4617] loop3: detected capacity change from 0 to 32768 [ 118.995933][ T4625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.030438][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.050635][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.067229][ T4603] device bridge_slave_0 entered promiscuous mode [ 119.142738][ T9] device hsr_slave_0 left promiscuous mode [ 119.160167][ T9] device hsr_slave_1 left promiscuous mode [ 119.180704][ T3579] Bluetooth: hci2: command tx timeout [ 119.217366][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.225099][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.243571][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.244931][ T4617] XFS (loop3): Mounting V5 Filesystem [ 119.251185][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.259880][ T4630] loop1: detected capacity change from 0 to 2048 [ 119.273591][ T9] device bridge_slave_1 left promiscuous mode [ 119.285105][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.317288][ T9] device bridge_slave_0 left promiscuous mode [ 119.333446][ T4630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.349621][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.464899][ T9] device veth1_macvtap left promiscuous mode [ 119.471123][ T9] device veth0_macvtap left promiscuous mode [ 119.500901][ T9] device veth1_vlan left promiscuous mode [ 119.518463][ T26] audit: type=1326 audit(1718310347.819:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fa4a7cea9 code=0x0 [ 119.556105][ T9] device veth0_vlan left promiscuous mode [ 119.569072][ T4617] XFS (loop3): Ending clean mount [ 119.744947][ T4643] loop2: detected capacity change from 0 to 256 [ 119.775016][ T4643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 119.796007][ T4643] FAT-fs (loop2): Filesystem has been set read-only [ 120.126371][ T9] team0 (unregistering): Port device team_slave_1 removed [ 120.129926][ T4030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:7: bg 0: block 234: padding at end of block bitmap is not set [ 120.156915][ T9] team0 (unregistering): Port device team_slave_0 removed [ 120.160893][ T4030] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 117 [ 120.187243][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.189171][ T4030] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.189171][ T4030] [ 120.217320][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.292329][ T4030] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1117 with error 28 [ 120.312167][ T4030] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.312167][ T4030] [ 120.325681][ T4030] EXT4-fs (loop1): Total free blocks count 0 [ 120.331809][ T4030] EXT4-fs (loop1): Free/Dirty block details [ 120.337830][ T4030] EXT4-fs (loop1): free_blocks=0 [ 120.341198][ T9] bond0 (unregistering): Released all slaves [ 120.343052][ T4030] EXT4-fs (loop1): dirty_blocks=1120 [ 120.343072][ T4030] EXT4-fs (loop1): Block reservation details [ 120.447821][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.455289][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.472055][ T4603] device bridge_slave_1 entered promiscuous mode [ 120.517093][ T4154] XFS (loop3): Unmounting Filesystem [ 120.547215][ T4603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.560634][ T4603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.689131][ T4603] team0: Port device team_slave_0 added [ 120.709841][ T4603] team0: Port device team_slave_1 added [ 120.734040][ T4658] loop2: detected capacity change from 0 to 512 [ 120.752390][ T4658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.855561][ T4658] EXT4-fs (loop2): 1 truncate cleaned up [ 120.861268][ T4658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.881932][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.923951][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.958561][ T4653] loop1: detected capacity change from 0 to 512 [ 120.966141][ T4665] random: crng reseeded on system resumption [ 120.972582][ T4653] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 120.982492][ T4653] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 121.014596][ T4603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.057769][ T4653] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 121.088737][ T4653] EXT4-fs (loop1): get root inode failed [ 121.092641][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.094633][ T4653] EXT4-fs (loop1): mount failed [ 121.161259][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.202910][ T3579] Bluetooth: hci2: command tx timeout [ 121.211356][ T4603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.444316][ T3585] EXT4-fs (loop2): unmounting filesystem. [ 121.801086][ T4603] device hsr_slave_0 entered promiscuous mode [ 121.843486][ T4603] device hsr_slave_1 entered promiscuous mode [ 121.891257][ T4603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.918999][ T4603] Cannot create hsr debugfs directory [ 122.368746][ T4678] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 122.867595][ T4690] tipc: Started in network mode [ 122.872705][ T4690] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 122.883256][ T4690] tipc: Enabled bearer , priority 10 [ 123.282725][ T3579] Bluetooth: hci2: command tx timeout [ 123.434348][ T26] audit: type=1326 audit(1718310351.739:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c4b07cea9 code=0x0 [ 123.501365][ T4695] loop0: detected capacity change from 0 to 8 [ 123.703203][ T4696] loop1: detected capacity change from 0 to 32768 [ 123.711878][ T4696] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4696) [ 123.729655][ T4696] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 123.740215][ T4696] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 123.749722][ T4696] BTRFS info (device loop1): using free space tree [ 123.786025][ T4696] BTRFS info (device loop1): enabling ssd optimizations [ 123.811087][ T4695] SQUASHFS error: Failed to read block 0x4e8: -5 [ 123.857317][ T26] audit: type=1800 audit(1718310352.159:658): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 123.925510][ T4717] loop2: detected capacity change from 0 to 1024 [ 123.933702][ T4696] loop1: detected capacity change from 32768 to 11 [ 123.944534][ T4719] syz-executor.1: attempt to access beyond end of device [ 123.944534][ T4719] loop1: rw=6145, sector=10440, nr_sectors = 8 limit=11 [ 123.958766][ T4697] loop3: detected capacity change from 0 to 256 [ 123.977455][ T4695] syz-executor.0 (4695) used greatest stack depth: 20240 bytes left [ 124.012702][ T3826] tipc: Node number set to 4269801491 [ 124.019152][ T4719] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 124.093169][ T4697] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 124.123360][ T4719] BTRFS: error (device loop1: state AL) in free_log_tree:3253: errno=-5 IO failure [ 124.153325][ T4697] FAT-fs (loop3): Filesystem has been set read-only [ 124.177618][ T4719] BTRFS info (device loop1: state EAL): forced readonly [ 124.211732][ T4603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.231158][ T4719] BTRFS warning (device loop1: state EAL): Skipping commit of aborted transaction. [ 124.253092][ T4719] BTRFS: error (device loop1: state EAL) in cleanup_transaction:1991: errno=-5 IO failure [ 124.618075][ T4603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.748502][ T4721] loop0: detected capacity change from 0 to 512 [ 124.774025][ T4603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.870756][ T4721] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 124.910616][ T4721] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 124.954408][ T4603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.989253][ T3574] BTRFS info (device loop1: state EAL): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 125.018969][ T4721] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 125.127329][ T4721] EXT4-fs (loop0): get root inode failed [ 125.158825][ T4721] EXT4-fs (loop0): mount failed [ 125.362863][ T3579] Bluetooth: hci2: command tx timeout [ 125.510287][ T4603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.580652][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.608459][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.657378][ T4603] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.995261][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.013524][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.022645][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.029933][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.046730][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.055177][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.064099][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.073017][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.080150][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.089316][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.437844][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.623358][ T4738] loop3: detected capacity change from 0 to 32768 [ 126.633417][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.644634][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.694602][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.289596][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.308022][ T4603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.322404][ T4603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.363334][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.393687][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.461062][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.477300][ T4744] Cannot find add_set index 0 as target [ 127.504681][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.531390][ T4746] random: crng reseeded on system resumption [ 127.549367][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.585845][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.018536][ T3585] syz-executor.2 (3585) used greatest stack depth: 20152 bytes left [ 128.194496][ T4761] tipc: Started in network mode [ 128.199556][ T4761] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 128.210229][ T4761] tipc: Enabled bearer , priority 10 [ 128.867125][ T26] audit: type=1326 audit(1718310357.169:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x0 [ 128.925228][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.029489][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.135711][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.165627][ T4765] loop1: detected capacity change from 0 to 256 [ 129.182705][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.190290][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.223861][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.238922][ T4292] tipc: Node number set to 4269801491 [ 129.260559][ T4765] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 129.263312][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.302666][ T4765] FAT-fs (loop1): Filesystem has been set read-only [ 129.528469][ T3586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.539239][ T3586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.558504][ T3586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.569112][ T9] tipc: Disabling bearer [ 129.574635][ T3586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.585343][ T3586] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.592802][ T9] tipc: Left network mode [ 129.597497][ T3586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.325785][ T4773] chnl_net:caif_netlink_parms(): no params data found [ 130.592892][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.615521][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.720223][ T3586] Bluetooth: hci3: command tx timeout [ 132.807118][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.814182][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.003925][ T4603] device veth0_vlan entered promiscuous mode [ 133.032797][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.072067][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.074899][ T4805] loop1: detected capacity change from 0 to 4096 [ 133.126174][ T9] device hsr_slave_0 left promiscuous mode [ 133.143445][ T9] device hsr_slave_1 left promiscuous mode [ 133.171204][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.180759][ T4805] NILFS (loop1): invalid segment: Checksum error in segment payload [ 133.183874][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.190040][ T4805] NILFS (loop1): trying rollback from an earlier position [ 133.237893][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.246165][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.246331][ T4805] NILFS (loop1): recovery complete [ 133.276825][ T9] device bridge_slave_1 left promiscuous mode [ 133.285398][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.297421][ T4808] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.325306][ T9] device bridge_slave_0 left promiscuous mode [ 133.332836][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.383116][ T9] device veth1_macvtap left promiscuous mode [ 133.401083][ T9] device veth0_macvtap left promiscuous mode [ 133.407995][ T9] device veth1_vlan left promiscuous mode [ 133.418575][ T9] device veth0_vlan left promiscuous mode [ 133.935284][ T4814] syz-executor.1 (4814): drop_caches: 2 [ 134.503962][ T4823] random: crng reseeded on system resumption [ 134.607052][ T26] audit: type=1326 audit(1718310362.909:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c4b07cea9 code=0x0 [ 134.690263][ T9] team0 (unregistering): Port device team_slave_1 removed [ 134.707799][ T9] team0 (unregistering): Port device team_slave_0 removed [ 134.734974][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.765265][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.805139][ T3586] Bluetooth: hci3: command tx timeout [ 134.825295][ T4827] loop3: detected capacity change from 0 to 256 [ 134.848951][ T4827] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 134.862650][ T4827] FAT-fs (loop3): Filesystem has been set read-only [ 134.927357][ T9] bond0 (unregistering): Released all slaves [ 134.979077][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.986444][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.995150][ T4773] device bridge_slave_0 entered promiscuous mode [ 135.012693][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.021685][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.032915][ T4821] tipc: Enabling of bearer rejected, already enabled [ 135.043138][ T4603] device veth1_vlan entered promiscuous mode [ 135.052761][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.059975][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.069355][ T4773] device bridge_slave_1 entered promiscuous mode [ 135.154323][ T4773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.181474][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.186132][ T4829] Bluetooth: MGMT ver 1.22 [ 135.191264][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.205909][ T4773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.216607][ T4603] device veth0_macvtap entered promiscuous mode [ 135.244956][ T4603] device veth1_macvtap entered promiscuous mode [ 135.293715][ T4773] team0: Port device team_slave_0 added [ 135.303573][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.315018][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.325026][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.336223][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.347136][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.358449][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.371287][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.380996][ T4773] team0: Port device team_slave_1 added [ 135.390041][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.399807][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.422742][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.434663][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.460753][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.479158][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.490414][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.534112][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.563891][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.574978][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.601720][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.693691][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.719731][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.746792][ T4603] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.757773][ T4603] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.770965][ T4603] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.781657][ T4832] loop0: detected capacity change from 0 to 8192 [ 135.781796][ T4603] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.963287][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.970276][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.222236][ T4838] loop3: detected capacity change from 0 to 4096 [ 136.835875][ T4832] REISERFS warning (device loop0): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 136.835875][ T4832] [ 136.881748][ T4838] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 136.883083][ T3586] Bluetooth: hci3: command tx timeout [ 136.902277][ T4844] loop1: detected capacity change from 0 to 128 [ 136.915919][ T4844] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 136.940442][ T4773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.068313][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.088034][ T4838] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.092829][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.138010][ T4845] loop1: detected capacity change from 0 to 1024 [ 137.146311][ T4773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.219487][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.250678][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.302251][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.370248][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.388771][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.436919][ T4773] device hsr_slave_0 entered promiscuous mode [ 137.461032][ T4773] device hsr_slave_1 entered promiscuous mode [ 137.502359][ T4773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.551573][ T4773] Cannot create hsr debugfs directory [ 137.587898][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.668687][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.706063][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.806049][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.136037][ T4854] loop4: detected capacity change from 0 to 32768 [ 138.424518][ T1027] block nbd3: Attempted send on invalid socket [ 138.431288][ T1027] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.442939][ T4859] hpfs: hpfs_map_sector(): read error [ 138.448668][ T4857] loop1: detected capacity change from 0 to 4096 [ 138.489614][ T4857] NILFS (loop1): invalid segment: Checksum error in segment payload [ 138.554924][ T4857] NILFS (loop1): trying rollback from an earlier position [ 138.609958][ T4863] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.637239][ T4857] NILFS (loop1): recovery complete [ 138.684584][ T4866] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.708791][ T4867] random: crng reseeded on system resumption [ 138.797978][ T26] audit: type=1326 audit(1718310367.099:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c3907cea9 code=0x0 [ 138.933646][ T4773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.950208][ T4773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.084194][ T3586] Bluetooth: hci3: command tx timeout [ 139.117474][ T4773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.322252][ T4875] loop0: detected capacity change from 0 to 256 [ 139.436465][ T4875] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 139.532600][ T4875] FAT-fs (loop0): Filesystem has been set read-only [ 140.294610][ T4773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.561884][ T4885] loop4: detected capacity change from 0 to 128 [ 140.578548][ T4885] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 140.808773][ T4773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.824617][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.834455][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.915281][ T4894] loop0: detected capacity change from 0 to 2048 [ 142.504001][ T4773] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.526143][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.540919][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.550852][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.553479][ T4894] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.558006][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.572063][ T4894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.635497][ T4892] loop4: detected capacity change from 0 to 1024 [ 142.665971][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.679667][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.700100][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.721864][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.729105][ T3826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.759631][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.866606][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.888222][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.915349][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.943702][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.961396][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.995845][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.016171][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.032389][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.062782][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.081757][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.133375][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.160983][ T4773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.196073][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.233620][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.253081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.289851][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.434694][ T4910] loop1: detected capacity change from 0 to 4096 [ 143.517109][ T4910] NILFS (loop1): invalid segment: Checksum error in segment payload [ 143.690561][ T4910] NILFS (loop1): trying rollback from an earlier position [ 144.585873][ T4910] NILFS (loop1): recovery complete [ 144.594371][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 144.643261][ T4926] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.217572][ T4940] loop3: detected capacity change from 0 to 2048 [ 145.257645][ T4940] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 145.279243][ T4940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.737956][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.748999][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.779218][ T4773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.902074][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.923594][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.962752][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.981732][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.011753][ T4773] device veth0_vlan entered promiscuous mode [ 146.029827][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.055763][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.080764][ T4773] device veth1_vlan entered promiscuous mode [ 146.130242][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.148781][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.165133][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.185646][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.187810][ T4932] loop0: detected capacity change from 0 to 32768 [ 146.206296][ T4773] device veth0_macvtap entered promiscuous mode [ 146.211076][ T4932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4932) [ 146.226557][ T4773] device veth1_macvtap entered promiscuous mode [ 146.242229][ T4932] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.256996][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.259406][ T4932] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 146.267776][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.286563][ T4932] BTRFS info (device loop0): using free space tree [ 146.287237][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.305004][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.320916][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.331571][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.351616][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.370588][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.382430][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.403807][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.413013][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.423008][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.431967][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.443661][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.456219][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.466888][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.478459][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.488549][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.500373][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.510531][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.521325][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.606766][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.617286][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.640396][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.679236][ T4932] BTRFS info (device loop0): enabling ssd optimizations [ 146.706730][ T4773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.765892][ T4773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.926038][ T4773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.952031][ T4773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.612599][ T3589] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.895146][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.918074][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.983616][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.045762][ T4977] loop3: detected capacity change from 0 to 8192 [ 148.060672][ T4997] loop1: detected capacity change from 0 to 4096 [ 148.089669][ T3701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.098226][ T4977] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 148.098226][ T4977] [ 148.139963][ T3701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.157634][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.259360][ T4997] NILFS (loop1): invalid segment: Checksum error in segment payload [ 148.269172][ T4997] NILFS (loop1): trying rollback from an earlier position [ 148.304795][ T4997] NILFS (loop1): recovery complete [ 148.338509][ T5000] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.959195][ T5017] loop4: detected capacity change from 0 to 2048 [ 149.213680][ T5017] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 149.233367][ T5017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.090360][ T5049] loop3: detected capacity change from 0 to 512 [ 150.130844][ T5049] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 150.157032][ T5049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800e01c, mo2=0002] [ 150.209104][ T5049] System zones: 1-12 [ 150.229010][ T5049] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.240416][ T5049] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz-executor.3: Inode bitmap for bg 0 marked uninitialized [ 150.326789][ T5049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 150.405289][ T5050] loop0: detected capacity change from 0 to 8192 [ 150.418436][ T5050] REISERFS warning (device loop0): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 150.418436][ T5050] [ 151.001483][ T5064] loop4: detected capacity change from 0 to 256 [ 151.025453][ T5064] exfat: Unknown parameter '01777777777777777777777gj>/mb'Uw]N/>%ڣ' [ 151.114939][ T4154] EXT4-fs (loop3): unmounting filesystem. [ 151.611080][ T5060] loop1: detected capacity change from 0 to 32768 [ 151.640522][ T5060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5060) [ 151.692881][ T5060] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.730335][ T5060] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 151.761859][ T5060] BTRFS info (device loop1): using free space tree [ 151.913266][ T5060] BTRFS info (device loop1): enabling ssd optimizations [ 152.003236][ T5060] loop1: detected capacity change from 32768 to 0 [ 152.283259][ T11] loop: Write error at byte offset 9223372036860121087, length 4096. [ 152.291767][ C1] I/O error, dev loop1, sector 10440 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 2 [ 152.301623][ C1] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 152.317494][ T3574] BTRFS: error (device loop1: state A) in __btrfs_run_delayed_items:1158: errno=-5 IO failure [ 152.373989][ T3574] BTRFS info (device loop1: state EA): forced readonly [ 152.402069][ T3574] BTRFS warning (device loop1: state EA): Skipping commit of aborted transaction. [ 152.442448][ T3574] BTRFS: error (device loop1: state EA) in cleanup_transaction:1991: errno=-5 IO failure [ 152.446002][ T5108] loop3: detected capacity change from 0 to 64 [ 152.473686][ T3574] BTRFS info (device loop1: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.110038][ T5118] loop2: detected capacity change from 0 to 128 [ 153.141132][ T5118] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 153.356222][ T5123] loop2: detected capacity change from 0 to 1024 [ 153.388664][ T5111] loop3: detected capacity change from 0 to 8192 [ 153.428862][ T5111] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 153.428862][ T5111] [ 153.497289][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.544361][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.569759][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.240496][ T5142] loop4: detected capacity change from 0 to 64 [ 154.420564][ T5122] loop1: detected capacity change from 0 to 40427 [ 154.478838][ T5122] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 154.651781][ T5122] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.665804][ T5144] loop2: detected capacity change from 0 to 8192 [ 154.772939][ T5122] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.050280][ T5122] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 155.092679][ T5122] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.210280][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.231364][ T5137] loop3: detected capacity change from 0 to 32768 [ 155.269412][ T5137] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5137) [ 155.467321][ T5137] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.509166][ T5137] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 155.532630][ T5137] BTRFS info (device loop3): using free space tree [ 155.723325][ T5177] loop2: detected capacity change from 0 to 128 [ 155.780159][ T5177] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 155.796178][ T5137] BTRFS info (device loop3): enabling ssd optimizations [ 156.035195][ T5137] loop3: detected capacity change from 32768 to 0 [ 156.090494][ T5185] loop2: detected capacity change from 0 to 1024 [ 156.204727][ T4216] loop: Write error at byte offset 9223372036860121087, length 4096. [ 156.217194][ C1] I/O error, dev loop3, sector 10440 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 2 [ 156.227156][ C1] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 156.241911][ T4154] BTRFS: error (device loop3: state A) in __btrfs_run_delayed_items:1158: errno=-5 IO failure [ 156.273045][ T4154] BTRFS info (device loop3: state EA): forced readonly [ 156.279980][ T4154] BTRFS warning (device loop3: state EA): Skipping commit of aborted transaction. [ 156.348479][ T5185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.364232][ T4154] BTRFS: error (device loop3: state EA) in cleanup_transaction:1991: errno=-5 IO failure [ 156.384709][ T4154] BTRFS info (device loop3: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.567998][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.577561][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.770256][ T5191] loop1: detected capacity change from 0 to 2048 [ 157.120597][ T5191] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 157.137213][ T5191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.430622][ T5218] loop3: detected capacity change from 0 to 32768 [ 158.440084][ T5218] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5218) [ 158.457200][ T5218] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 158.467448][ T5218] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 158.477748][ T5218] BTRFS info (device loop3): using free space tree [ 158.523398][ T5195] loop4: detected capacity change from 0 to 8192 [ 158.538749][ T5208] loop1: detected capacity change from 0 to 512 [ 158.550984][ T5208] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 158.559685][ T5195] REISERFS warning (device loop4): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 158.559685][ T5195] [ 158.587780][ T5208] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 158.603573][ T5208] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 158.635787][ T5208] EXT4-fs (loop1): get root inode failed [ 158.642326][ T5208] EXT4-fs (loop1): mount failed [ 158.710325][ T5218] BTRFS info (device loop3): enabling ssd optimizations [ 158.910146][ T4154] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 159.013694][ T5243] loop1: detected capacity change from 0 to 4096 [ 159.108249][ T5245] loop0: detected capacity change from 0 to 16 [ 159.129798][ T5243] NILFS (loop1): invalid segment: Checksum error in segment payload [ 159.158460][ T5243] NILFS (loop1): trying rollback from an earlier position [ 159.159649][ T5245] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.199394][ T5243] NILFS (loop1): recovery complete [ 159.236979][ T5246] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.248823][ T5207] loop2: detected capacity change from 0 to 40427 [ 159.257148][ T5207] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 159.273153][ T5207] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 159.372313][ T5253] loop4: detected capacity change from 0 to 128 [ 159.394382][ T5207] F2FS-fs (loop2): Found nat_bits in checkpoint [ 159.432039][ T5253] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 159.641555][ T5207] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 159.656364][ T5207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 159.764876][ T5259] loop4: detected capacity change from 0 to 1024 [ 159.919890][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.969889][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.996999][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.467575][ T26] audit: type=1326 audit(1718310388.769:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f140a87cea9 code=0x0 [ 160.855533][ T5279] loop2: detected capacity change from 0 to 512 [ 160.880800][ T5280] loop4: detected capacity change from 0 to 256 [ 160.890614][ T5279] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 160.908616][ T5279] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 160.932675][ T5279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.941427][ T5273] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 160.952807][ T5273] FAT-fs (loop4): Filesystem has been set read-only [ 161.409434][ T4773] EXT4-fs (loop2): unmounting filesystem. [ 161.817139][ T5287] loop2: detected capacity change from 0 to 512 [ 161.905473][ T5287] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 161.950855][ T5300] loop1: detected capacity change from 0 to 512 [ 161.985006][ T5287] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 162.066531][ T5287] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 162.095057][ T5287] EXT4-fs (loop2): get root inode failed [ 162.101015][ T5287] EXT4-fs (loop2): mount failed [ 162.182641][ T5300] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 162.359896][ T5300] EXT4-fs (loop1): invalid journal inode [ 162.390526][ T5300] EXT4-fs (loop1): can't get journal size [ 162.438084][ T5298] loop4: detected capacity change from 0 to 8192 [ 162.455389][ T5300] EXT4-fs (loop1): 1 truncate cleaned up [ 162.461105][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.469943][ T5298] REISERFS warning (device loop4): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 162.469943][ T5298] [ 162.581940][ T3574] EXT4-fs (loop1): unmounting filesystem. [ 162.615435][ T5311] loop2: detected capacity change from 0 to 128 [ 162.665738][ T5311] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 162.831026][ T5313] loop2: detected capacity change from 0 to 1024 [ 163.018741][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.184686][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.073617][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.183925][ T26] audit: type=1326 audit(1718310392.489:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f140a87cea9 code=0x0 [ 164.397187][ T5309] loop3: detected capacity change from 0 to 40427 [ 164.405375][ T5331] loop4: detected capacity change from 0 to 256 [ 164.420242][ T5309] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 164.429898][ T5309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 164.449686][ T5331] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 164.464063][ T5331] FAT-fs (loop4): Filesystem has been set read-only [ 164.478503][ T5309] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.611579][ T5309] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.620166][ T5309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.602928][ T5355] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 166.581480][ T5370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 166.617633][ T5371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 166.843472][ T5367] loop0: detected capacity change from 0 to 4096 [ 167.711493][ T5367] NILFS (loop0): invalid segment: Checksum error in segment payload [ 167.730062][ T5367] NILFS (loop0): trying rollback from an earlier position [ 167.730437][ T5370] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 167.744286][ T5370] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.769505][ T5371] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 167.776169][ T5371] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 167.799319][ T5367] NILFS (loop0): recovery complete [ 167.825271][ T5389] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.888956][ T5370] vhci_hcd vhci_hcd.0: Device attached [ 167.899791][ T5371] vhci_hcd vhci_hcd.0: Device attached [ 167.930434][ T5370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 167.974305][ T5370] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 167.981308][ T5370] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.024367][ T5370] vhci_hcd vhci_hcd.0: Device attached [ 168.039845][ T5391] vhci_hcd: connection closed [ 168.041289][ T5387] vhci_hcd: connection closed [ 168.046052][ T5379] vhci_hcd: connection closed [ 168.059833][ T9] vhci_hcd: stop threads [ 168.124494][ T9] vhci_hcd: release socket [ 168.152641][ T4213] usb 17-3: new high-speed USB device number 2 using vhci_hcd [ 168.161653][ T9] vhci_hcd: disconnect device [ 168.168900][ T5380] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 168.188451][ T9] vhci_hcd: stop threads [ 168.206872][ T9] vhci_hcd: release socket [ 168.219625][ T9] vhci_hcd: disconnect device [ 168.238708][ T9] vhci_hcd: stop threads [ 168.250052][ T9] vhci_hcd: release socket [ 168.267446][ T9] vhci_hcd: disconnect device [ 168.566083][ T5399] loop0: detected capacity change from 0 to 512 [ 168.628622][ T5399] EXT4-fs: Ignoring removed bh option [ 168.712372][ T5399] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.803992][ T5399] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 168.824673][ T5399] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 8 (level 2) [ 168.849062][ T5399] EXT4-fs (loop0): Remounting filesystem read-only [ 168.860580][ T5399] EXT4-fs (loop0): 1 truncate cleaned up [ 168.868952][ T5399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.282677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.888972][ T5384] loop1: detected capacity change from 0 to 40427 [ 169.952444][ T5384] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 169.960486][ T5384] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 170.038616][ T5384] F2FS-fs (loop1): Found nat_bits in checkpoint [ 170.196751][ T5384] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 170.212719][ T5384] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 170.396454][ T5429] loop4: detected capacity change from 0 to 8192 [ 170.715116][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.703734][ T3589] EXT4-fs (loop0): unmounting filesystem. [ 173.282666][ T4213] vhci_hcd: vhci_device speed not set [ 173.767111][ T26] audit: type=1326 audit(1718310402.069:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5488 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1887cea9 code=0x0 [ 173.808563][ T5491] loop0: detected capacity change from 0 to 1024 [ 174.139740][ T5492] loop1: detected capacity change from 0 to 256 [ 174.197400][ T5492] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 174.223835][ T5492] FAT-fs (loop1): Filesystem has been set read-only [ 174.501326][ T46] hfsplus: b-tree write err: -5, ino 4 [ 174.653654][ T3826] usb usb18-port1: attempt power cycle [ 175.125153][ T5534] loop1: detected capacity change from 0 to 4096 [ 175.200966][ T5534] NILFS (loop1): invalid segment: Checksum error in segment payload [ 175.222620][ T5534] NILFS (loop1): trying rollback from an earlier position [ 175.286624][ T5534] NILFS (loop1): recovery complete [ 175.313476][ T3826] usb usb18-port1: unable to enumerate USB device [ 175.369918][ T5542] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.448081][ T5544] loop2: detected capacity change from 0 to 1024 [ 175.453634][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 175.976753][ T4030] hfsplus: b-tree write err: -5, ino 4 [ 176.370175][ T26] audit: type=1326 audit(1718310404.669:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c4b07cea9 code=0x0 [ 176.759642][ T5570] loop3: detected capacity change from 0 to 256 [ 176.859427][ T5570] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 176.869195][ T5570] FAT-fs (loop3): Filesystem has been set read-only [ 177.144186][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 177.548292][ T5588] loop0: detected capacity change from 0 to 2048 [ 177.655345][ T5588] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 177.676108][ T5588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.115286][ T5594] loop3: detected capacity change from 0 to 1024 [ 178.520686][ T5610] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.545369][ T3701] hfsplus: b-tree write err: -5, ino 4 [ 178.673983][ T5615] loop0: detected capacity change from 0 to 16 [ 178.698794][ T5615] erofs: (device loop0): mounted with root inode @ nid 36. [ 178.718636][ T5615] syz-executor.0: attempt to access beyond end of device [ 178.718636][ T5615] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 179.058937][ T26] audit: type=1326 audit(1718310407.359:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c4b07cea9 code=0x0 [ 179.357571][ T5625] syz-executor.0: attempt to access beyond end of device [ 179.357571][ T5625] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 179.404779][ T5615] syz-executor.0: attempt to access beyond end of device [ 179.404779][ T5615] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 179.439114][ T5615] syz-executor.0: attempt to access beyond end of device [ 179.439114][ T5615] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 179.502705][ T5615] syz-executor.0: attempt to access beyond end of device [ 179.502705][ T5615] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 179.727940][ T5626] loop3: detected capacity change from 0 to 256 [ 179.758863][ T5626] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 179.788870][ T5626] FAT-fs (loop3): Filesystem has been set read-only [ 179.959522][ T152] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 180.108528][ T5636] loop2: detected capacity change from 0 to 128 [ 180.151002][ T5636] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 180.369200][ T5641] loop2: detected capacity change from 0 to 1024 [ 180.376012][ T152] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 180.396135][ T152] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.430391][ T152] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.457115][ T152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.491050][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.522988][ T5630] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.540797][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.554011][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.258444][ T5654] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.308577][ T5656] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.329742][ T5656] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.367063][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057c84400: rx timeout, send abort [ 182.377912][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888057c84400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 182.500813][ T5659] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 182.507497][ T5659] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.543405][ T5659] vhci_hcd vhci_hcd.0: Device attached [ 182.552766][ T5656] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 182.559445][ T5656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 182.586750][ T5656] vhci_hcd vhci_hcd.0: Device attached [ 182.595913][ T5656] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13) [ 182.602563][ T5656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.610587][ T5656] vhci_hcd vhci_hcd.0: Device attached [ 182.644043][ T5665] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 182.650793][ T5665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.661394][ T5665] vhci_hcd vhci_hcd.0: Device attached [ 182.685553][ T3579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.696988][ T3579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.705521][ T3579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.713771][ T3579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.721589][ T3579] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 182.729389][ T3579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.788357][ T5670] vhci_hcd: connection closed [ 182.789717][ T5666] vhci_hcd: connection closed [ 182.789757][ T5662] vhci_hcd: connection closed [ 182.799722][ T5660] vhci_hcd: connection closed [ 182.811078][ T4106] vhci_hcd: stop threads [ 183.643756][ T4106] vhci_hcd: release socket [ 183.672840][ T4106] vhci_hcd: disconnect device [ 183.682299][ T4106] vhci_hcd: stop threads [ 183.692295][ T4106] vhci_hcd: release socket [ 183.702862][ T4106] vhci_hcd: disconnect device [ 183.722619][ T152] usb 18-1: SetAddress Request (6) to port 0 [ 183.729952][ T152] usb 18-1: new SuperSpeed USB device number 6 using vhci_hcd [ 183.778488][ T152] usb 18-1: enqueue for inactive port 0 [ 183.810898][ T4106] vhci_hcd: stop threads [ 183.827726][ T4106] vhci_hcd: release socket [ 183.828370][ T3821] usb 1-1: USB disconnect, device number 3 [ 183.853942][ T4106] vhci_hcd: disconnect device [ 183.873026][ T4106] vhci_hcd: stop threads [ 183.877368][ T4106] vhci_hcd: release socket [ 183.899768][ T4106] vhci_hcd: disconnect device [ 183.959606][ T26] audit: type=1326 audit(1718310412.259:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5681 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf5ac7cea9 code=0x0 [ 183.967938][ T3641] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.998613][ T4731] vhci_hcd: vhci_device speed not set [ 184.121463][ T3641] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.234244][ T3641] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.303688][ T5686] loop2: detected capacity change from 0 to 256 [ 184.341530][ T5686] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 184.358313][ T5686] FAT-fs (loop2): Filesystem has been set read-only [ 184.385811][ T3641] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.499199][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 184.667742][ T3641] tipc: Disabling bearer [ 184.673293][ T3641] tipc: Left network mode [ 184.802750][ T3586] Bluetooth: hci1: command tx timeout [ 184.841634][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.850064][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.861363][ T5668] device bridge_slave_0 entered promiscuous mode [ 184.871983][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.879211][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.904145][ T5668] device bridge_slave_1 entered promiscuous mode [ 185.009657][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.028911][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.043637][ T152] usb usb18-port1: attempt power cycle [ 185.095061][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.240411][ T5668] team0: Port device team_slave_0 added [ 185.276807][ T5668] team0: Port device team_slave_1 added [ 185.392129][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.418047][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.509808][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.559793][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.601669][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.699749][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.713450][ T152] usb usb18-port1: unable to enumerate USB device [ 185.810829][ T5718] loop4: detected capacity change from 0 to 1024 [ 185.950430][ T5668] device hsr_slave_0 entered promiscuous mode [ 186.011885][ T5668] device hsr_slave_1 entered promiscuous mode [ 186.027950][ T4732] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.059099][ T5668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.069345][ T5668] Cannot create hsr debugfs directory [ 186.092707][ T3586] Bluetooth: hci0: command 0x0406 tx timeout [ 186.394907][ T4732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.416047][ T4732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.448066][ T4732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.521297][ T4732] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.571264][ T4732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.588656][ T4732] usb 2-1: config 0 descriptor?? [ 186.710068][ T3641] device hsr_slave_0 left promiscuous mode [ 186.913528][ T3586] Bluetooth: hci1: command tx timeout [ 187.221612][ T4030] hfsplus: b-tree write err: -5, ino 4 [ 187.541805][ T3641] device hsr_slave_1 left promiscuous mode [ 187.559921][ T3641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.580297][ T3641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.602769][ T4732] usbhid 2-1:0.0: can't add hid device: -71 [ 187.609043][ T4732] usbhid: probe of 2-1:0.0 failed with error -71 [ 187.617839][ T3641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.629621][ T4732] usb 2-1: USB disconnect, device number 3 [ 187.637646][ T3641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.650195][ T3641] device bridge_slave_1 left promiscuous mode [ 187.688652][ T3641] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.728125][ T3641] device bridge_slave_0 left promiscuous mode [ 187.744481][ T3641] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.790252][ T3641] device veth1_macvtap left promiscuous mode [ 187.807931][ T3641] device veth0_macvtap left promiscuous mode [ 187.821361][ T3641] device veth1_vlan left promiscuous mode [ 187.839254][ T3641] device veth0_vlan left promiscuous mode [ 188.442680][ T3826] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.515769][ T3641] team0 (unregistering): Port device team_slave_1 removed [ 188.696402][ T3641] team0 (unregistering): Port device team_slave_0 removed [ 188.806268][ T3641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.958232][ T3641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.967420][ T3586] Bluetooth: hci1: command tx timeout [ 189.223052][ T3641] bond0 (unregistering): Released all slaves [ 189.405865][ T5742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.652860][ T3826] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 189.693952][ T3826] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.698263][ T5756] tmpfs: Unknown parameter 'usrquota' [ 189.736164][ T3826] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.745873][ T3826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.783027][ T5736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.232343][ T5761] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.313251][ T3579] Bluetooth: hci1: command tx timeout [ 191.318786][ T3579] Bluetooth: hci4: command 0x0406 tx timeout [ 191.494506][ T5762] sched: RT throttling activated [ 192.262185][ T5668] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.277147][ T5767] loop0: detected capacity change from 0 to 256 [ 192.335569][ T5668] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.369596][ T5668] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.407833][ T5668] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.512636][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880247d7800: rx timeout, send abort [ 192.522653][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880247d7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 192.669131][ T3821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.089407][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.139207][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.234301][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.245786][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.252971][ T3568] usb 2-1: USB disconnect, device number 4 [ 193.303041][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.312366][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.323690][ T3821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.343080][ T3821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.364830][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.371940][ T3826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.389492][ T3821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.453526][ T3821] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.475471][ T3821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.499760][ T3821] usb 3-1: config 0 descriptor?? [ 193.531939][ T5668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.562591][ T5668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.592213][ T5777] loop1: detected capacity change from 0 to 128 [ 193.634471][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.657955][ T5777] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 193.675366][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.690339][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.702202][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.709347][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.721856][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.731143][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.747063][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.777269][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.788788][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.831141][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.864180][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.884642][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.906228][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.951732][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.990894][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.017119][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.072711][ T3821] usbhid 3-1:0.0: can't add hid device: -71 [ 194.139167][ T3821] usbhid: probe of 3-1:0.0 failed with error -71 [ 194.254991][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.261403][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.287598][ T5781] loop1: detected capacity change from 0 to 1024 [ 194.302104][ T3821] usb 3-1: USB disconnect, device number 2 [ 195.376980][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.423048][ T5790] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.454112][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.502995][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.807267][ T5796] loop2: detected capacity change from 0 to 1024 [ 195.891670][ T5796] hfsplus: bad catalog entry type [ 195.974490][ T9] hfsplus: b-tree write err: -5, ino 4 [ 196.081598][ T5804] loop2: detected capacity change from 0 to 256 [ 196.134250][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.155647][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.447259][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.602769][ T3568] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 196.957534][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.042708][ T3568] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 197.267027][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.285465][ T3568] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.314425][ T5812] loop1: detected capacity change from 0 to 1024 [ 197.326195][ T5812] hfsplus: invalid extent btree flag [ 197.332327][ T5812] hfsplus: failed to load extents file [ 197.354251][ T5811] ================================================================== [ 197.362372][ T5811] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x1f1/0x230 [ 197.370297][ T5811] Read of size 2 at addr ffff88807d6d5540 by task syz-executor.1/5811 [ 197.378560][ T5811] [ 197.380918][ T5811] CPU: 0 PID: 5811 Comm: syz-executor.1 Not tainted 6.1.93-syzkaller #0 [ 197.389257][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.399343][ T5811] Call Trace: [ 197.402638][ T5811] [ 197.405656][ T5811] dump_stack_lvl+0x1e3/0x2cb [ 197.410350][ T5811] ? nf_tcp_handle_invalid+0x642/0x642 [ 197.415828][ T5811] ? panic+0x764/0x764 [ 197.419909][ T5811] ? _printk+0xd1/0x111 [ 197.424070][ T5811] ? __virt_addr_valid+0x17f/0x520 [ 197.429191][ T5811] ? __virt_addr_valid+0x17f/0x520 [ 197.434313][ T5811] print_report+0x15f/0x4f0 [ 197.438828][ T5811] ? __virt_addr_valid+0x17f/0x520 [ 197.443976][ T5811] ? __virt_addr_valid+0x17f/0x520 [ 197.449100][ T5811] ? __virt_addr_valid+0x44a/0x520 [ 197.454223][ T5811] ? __phys_addr+0xb6/0x170 [ 197.458732][ T5811] ? cfg80211_wext_freq+0x1f1/0x230 [ 197.463950][ T5811] kasan_report+0x136/0x160 [ 197.468463][ T5811] ? cfg80211_wext_freq+0x1f1/0x230 [ 197.473687][ T5811] cfg80211_wext_freq+0x1f1/0x230 [ 197.478742][ T5811] cfg80211_wext_siwscan+0x4ee/0x10c0 [ 197.484130][ T5811] ioctl_standard_iw_point+0x780/0xca0 [ 197.489599][ T5811] ? cmp_bss+0xde0/0xde0 [ 197.493841][ T5811] ? iw_handler_get_iwstats+0x240/0x240 [ 197.499485][ T5811] ? wext_ioctl_dispatch+0xb9/0x460 [ 197.504690][ T5811] ? mutex_lock_nested+0x10/0x10 [ 197.509633][ T5811] ? apparmor_capable+0x12e/0x190 [ 197.514660][ T5811] ? full_name_hash+0x8f/0xe0 [ 197.519341][ T5811] ioctl_standard_call+0xc3/0x280 [ 197.524374][ T5811] ? cmp_bss+0xde0/0xde0 [ 197.528702][ T5811] ? cmp_bss+0xde0/0xde0 [ 197.532944][ T5811] wext_ioctl_dispatch+0x16f/0x460 [ 197.538088][ T5811] ? wext_ioctl_dispatch+0x460/0x460 [ 197.543375][ T5811] ? iw_handler_get_private+0x1e0/0x1e0 [ 197.548940][ T5811] wext_handle_ioctl+0x15b/0x260 [ 197.553884][ T5811] ? call_commit_handler+0xf0/0xf0 [ 197.559010][ T5811] sock_ioctl+0x13b/0x770 [ 197.563343][ T5811] ? sock_poll+0x410/0x410 [ 197.567768][ T5811] ? __fget_files+0x28/0x4a0 [ 197.572360][ T5811] ? __fget_files+0x435/0x4a0 [ 197.577039][ T5811] ? __fget_files+0x28/0x4a0 [ 197.581639][ T5811] ? bpf_lsm_file_ioctl+0x5/0x10 [ 197.586578][ T5811] ? security_file_ioctl+0x7d/0xa0 [ 197.591780][ T5811] ? sock_poll+0x410/0x410 [ 197.596206][ T5811] __se_sys_ioctl+0xf1/0x160 [ 197.600812][ T5811] do_syscall_64+0x3b/0xb0 [ 197.605238][ T5811] ? clear_bhb_loop+0x45/0xa0 [ 197.609928][ T5811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.615828][ T5811] RIP: 0033:0x7f5c1887cea9 [ 197.620253][ T5811] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 197.639867][ T5811] RSP: 002b:00007f5c196670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.648290][ T5811] RAX: ffffffffffffffda RBX: 00007f5c189b4050 RCX: 00007f5c1887cea9 [ 197.656266][ T5811] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000007 [ 197.664236][ T5811] RBP: 00007f5c188ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 197.672205][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.680174][ T5811] R13: 000000000000006e R14: 00007f5c189b4050 R15: 00007ffc961148f8 [ 197.688157][ T5811] [ 197.691171][ T5811] [ 197.693488][ T5811] Allocated by task 5811: [ 197.697809][ T5811] kasan_set_track+0x4b/0x70 [ 197.702411][ T5811] __kasan_kmalloc+0x97/0xb0 [ 197.707000][ T5811] __kmalloc+0xb2/0x230 [ 197.711157][ T5811] ioctl_standard_iw_point+0x4aa/0xca0 [ 197.716619][ T5811] ioctl_standard_call+0xc3/0x280 [ 197.721640][ T5811] wext_ioctl_dispatch+0x16f/0x460 [ 197.726751][ T5811] wext_handle_ioctl+0x15b/0x260 [ 197.731688][ T5811] sock_ioctl+0x13b/0x770 [ 197.736014][ T5811] __se_sys_ioctl+0xf1/0x160 [ 197.740613][ T5811] do_syscall_64+0x3b/0xb0 [ 197.745040][ T5811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.750957][ T5811] [ 197.753281][ T5811] The buggy address belongs to the object at ffff88807d6d5400 [ 197.753281][ T5811] which belongs to the cache kmalloc-512 of size 512 [ 197.767353][ T5811] The buggy address is located 320 bytes inside of [ 197.767353][ T5811] 512-byte region [ffff88807d6d5400, ffff88807d6d5600) [ 197.780624][ T5811] [ 197.782952][ T5811] The buggy address belongs to the physical page: [ 197.789369][ T5811] page:ffffea0001f5b500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d6d4 [ 197.799520][ T5811] head:ffffea0001f5b500 order:2 compound_mapcount:0 compound_pincount:0 [ 197.807847][ T5811] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 197.815838][ T5811] raw: 00fff00000010200 ffffea00015b3c00 dead000000000002 ffff888012441c80 [ 197.824421][ T5811] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 197.833000][ T5811] page dumped because: kasan: bad access detected [ 197.839413][ T5811] page_owner tracks the page as allocated [ 197.845129][ T5811] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3632, tgid 3632 (kworker/0:5), ts 72544489632, free_ts 72479166207 [ 197.867200][ T5811] post_alloc_hook+0x18d/0x1b0 [ 197.871971][ T5811] get_page_from_freelist+0x31a1/0x3320 [ 197.877515][ T5811] __alloc_pages+0x28d/0x770 [ 197.882104][ T5811] alloc_slab_page+0x6a/0x150 [ 197.886786][ T5811] new_slab+0x84/0x2d0 [ 197.890857][ T5811] ___slab_alloc+0xc20/0x1270 [ 197.895534][ T5811] __kmem_cache_alloc_node+0x19f/0x260 [ 197.900994][ T5811] __kmalloc_node_track_caller+0xa0/0x220 [ 197.906737][ T5811] __alloc_skb+0x135/0x670 [ 197.911160][ T5811] __ipv6_ifa_notify+0x2db/0x11d0 [ 197.916183][ T5811] addrconf_dad_completed+0x17d/0xcb0 [ 197.921552][ T5811] addrconf_dad_work+0xd8e/0x16b0 [ 197.926593][ T5811] process_one_work+0x8a9/0x11d0 [ 197.931536][ T5811] worker_thread+0xa47/0x1200 [ 197.936218][ T5811] kthread+0x28d/0x320 [ 197.940301][ T5811] ret_from_fork+0x1f/0x30 [ 197.944728][ T5811] page last free stack trace: [ 197.949395][ T5811] free_unref_page_prepare+0xf63/0x1120 [ 197.954939][ T5811] free_unref_page+0x33/0x3e0 [ 197.959700][ T5811] qlist_free_all+0x76/0xe0 [ 197.964209][ T5811] kasan_quarantine_reduce+0x156/0x170 [ 197.969670][ T5811] __kasan_slab_alloc+0x1f/0x70 [ 197.974518][ T5811] slab_post_alloc_hook+0x52/0x3a0 [ 197.979640][ T5811] __kmem_cache_alloc_node+0x137/0x260 [ 197.985102][ T5811] kmalloc_trace+0x26/0xe0 [ 197.989526][ T5811] __ipv6_dev_mc_inc+0x426/0xa80 [ 197.994472][ T5811] addrconf_dad_work+0x420/0x16b0 [ 197.999496][ T5811] process_one_work+0x8a9/0x11d0 [ 198.004473][ T5811] worker_thread+0xa47/0x1200 [ 198.009169][ T5811] kthread+0x28d/0x320 [ 198.013241][ T5811] ret_from_fork+0x1f/0x30 [ 198.017665][ T5811] [ 198.019988][ T5811] Memory state around the buggy address: [ 198.025614][ T5811] ffff88807d6d5400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 198.033674][ T5811] ffff88807d6d5480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 198.041816][ T5811] >ffff88807d6d5500: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 198.049869][ T5811] ^ [ 198.056016][ T5811] ffff88807d6d5580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 198.064072][ T5811] ffff88807d6d5600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 198.072122][ T5811] ================================================================== [ 198.082118][ T5811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 198.089359][ T5811] CPU: 0 PID: 5811 Comm: syz-executor.1 Not tainted 6.1.93-syzkaller #0 [ 198.097706][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 198.107767][ T5811] Call Trace: [ 198.111039][ T5811] [ 198.113964][ T5811] dump_stack_lvl+0x1e3/0x2cb [ 198.118649][ T5811] ? nf_tcp_handle_invalid+0x642/0x642 [ 198.124112][ T5811] ? panic+0x764/0x764 [ 198.128176][ T5811] ? vscnprintf+0x59/0x80 [ 198.132507][ T5811] panic+0x318/0x764 [ 198.136416][ T5811] ? check_panic_on_warn+0x1d/0xa0 [ 198.141526][ T5811] ? memcpy_page_flushcache+0xfc/0xfc [ 198.146897][ T5811] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 198.152791][ T5811] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 198.158684][ T5811] ? _raw_spin_unlock+0x40/0x40 [ 198.163551][ T5811] ? print_report+0x4a3/0x4f0 [ 198.168370][ T5811] check_panic_on_warn+0x7e/0xa0 [ 198.173327][ T5811] ? cfg80211_wext_freq+0x1f1/0x230 [ 198.178539][ T5811] end_report+0x66/0x110 [ 198.182789][ T5811] kasan_report+0x143/0x160 [ 198.187399][ T5811] ? cfg80211_wext_freq+0x1f1/0x230 [ 198.192694][ T5811] cfg80211_wext_freq+0x1f1/0x230 [ 198.197727][ T5811] cfg80211_wext_siwscan+0x4ee/0x10c0 [ 198.203109][ T5811] ioctl_standard_iw_point+0x780/0xca0 [ 198.208621][ T5811] ? cmp_bss+0xde0/0xde0 [ 198.212910][ T5811] ? iw_handler_get_iwstats+0x240/0x240 [ 198.218462][ T5811] ? wext_ioctl_dispatch+0xb9/0x460 [ 198.223673][ T5811] ? mutex_lock_nested+0x10/0x10 [ 198.228638][ T5811] ? apparmor_capable+0x12e/0x190 [ 198.233664][ T5811] ? full_name_hash+0x8f/0xe0 [ 198.238347][ T5811] ioctl_standard_call+0xc3/0x280 [ 198.243380][ T5811] ? cmp_bss+0xde0/0xde0 [ 198.247622][ T5811] ? cmp_bss+0xde0/0xde0 [ 198.251882][ T5811] wext_ioctl_dispatch+0x16f/0x460 [ 198.256994][ T5811] ? wext_ioctl_dispatch+0x460/0x460 [ 198.262275][ T5811] ? iw_handler_get_private+0x1e0/0x1e0 [ 198.267822][ T5811] wext_handle_ioctl+0x15b/0x260 [ 198.272767][ T5811] ? call_commit_handler+0xf0/0xf0 [ 198.277981][ T5811] sock_ioctl+0x13b/0x770 [ 198.282321][ T5811] ? sock_poll+0x410/0x410 [ 198.286740][ T5811] ? __fget_files+0x28/0x4a0 [ 198.291332][ T5811] ? __fget_files+0x435/0x4a0 [ 198.296005][ T5811] ? __fget_files+0x28/0x4a0 [ 198.300610][ T5811] ? bpf_lsm_file_ioctl+0x5/0x10 [ 198.305544][ T5811] ? security_file_ioctl+0x7d/0xa0 [ 198.310663][ T5811] ? sock_poll+0x410/0x410 [ 198.315105][ T5811] __se_sys_ioctl+0xf1/0x160 [ 198.319706][ T5811] do_syscall_64+0x3b/0xb0 [ 198.324145][ T5811] ? clear_bhb_loop+0x45/0xa0 [ 198.328829][ T5811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.334813][ T5811] RIP: 0033:0x7f5c1887cea9 [ 198.339250][ T5811] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 198.358864][ T5811] RSP: 002b:00007f5c196670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.367280][ T5811] RAX: ffffffffffffffda RBX: 00007f5c189b4050 RCX: 00007f5c1887cea9 [ 198.375256][ T5811] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000007 [ 198.383224][ T5811] RBP: 00007f5c188ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 198.391197][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.399178][ T5811] R13: 000000000000006e R14: 00007f5c189b4050 R15: 00007ffc961148f8 [ 198.407156][ T5811] [ 198.410498][ T5811] Kernel Offset: disabled [ 198.414823][ T5811] Rebooting in 86400 seconds..